Media security reports

M

musica viva - Die Konzertreihe des BR für zeitgenössische Musik

br-musica-viva.de

70

musica viva is a prestigious concert series organized by Bayerischer Rundfunk, focusing on contemporary music in Munich. It is recognized as one of the world's leading forums for contemporary music, collaborating closely with the Bavarian Radio Symphony Orchestra and Choir. The website effectively promotes upcoming concerts, ticket sales, and related cultural content, targeting music enthusiasts and concertgoers primarily in Germany. Technically, the site is built on WordPress with modern plugins like Yoast SEO and Usercentrics CMP for privacy compliance. It uses trusted ticketing partners and integrates analytics responsibly with user consent. Security posture is strong with HTTPS and consent management, though explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates a mature digital presence with excellent content quality and user experience.

K

Kanopy

kanopy.com

61

Kanopy is a specialized streaming platform that provides access to classic cinema, independent films, and documentaries primarily targeting educational institutions and public libraries. The service operates on a subscription and institutional licensing model, positioning itself as a niche player in the media streaming industry with a focus on educational and curated film content. The website is professionally designed, mobile-optimized, and accessible, reflecting a mature digital presence. Technically, Kanopy leverages modern JavaScript frameworks such as Vue.js and video playback technologies like Video.js, ensuring a smooth user experience across web and mobile platforms. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks publicly available detailed security policies or incident response information. The absence of WHOIS data for the domain is a notable gap in transparency, though the overall site presentation and privacy compliance suggest legitimacy. Strategic recommendations include enhancing transparency around security and incident response, publishing vulnerability disclosure information, and improving domain registration visibility to strengthen trust.

openPR.de is a well-established German press release portal operated by Einbock GmbH, offering free and premium press release publishing and distribution services. The platform serves a broad audience including businesses, PR professionals, journalists, and agencies primarily in Germany and the DACH region. With over 1 million press releases and 20+ years of operation, it holds a strong market position in the German media sector. The website features a professional design, clear navigation, and multilingual support, enhancing user experience and accessibility. Technically, it employs modern web technologies such as Bootstrap, Matomo analytics for privacy-conscious tracking, and a robust cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced and no evident vulnerabilities, though some security headers could be improved. The WHOIS data aligns with the business claims, showing no suspicious patterns. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

R

RiffReporter

riffreporter.de

65

RiffReporter is a German cooperative media platform dedicated to independent journalism, focusing on topics such as climate, environment, science, society, and technology. The website presents itself as a professional and well-branded journalistic outlet with a clear target audience of general readers interested in in-depth analyses and reports. The business model revolves around cooperative journalism, providing direct reporting and analysis without intermediary publishers. Technically, the site is built on modern web technologies including React and Next.js, hosted with Cloudflare DNS and CDN services, and uses Matomo for analytics, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS, employs standard security headers, and shows no signs of vulnerabilities or exposed sensitive data. However, it lacks explicit privacy and cookie policies and does not provide clear contact information or security incident response details, which are areas for improvement. Overall, the site is trustworthy and professional but could enhance its compliance and transparency aspects.

M

multimaps360

multimaps360.de

45

multimaps360 is a specialized service provider offering interactive 360° panorama tours, virtual walkthroughs, and drone aerial photography primarily targeting municipalities, tourism organizations, cultural sites, and businesses. The company leverages modern digital marketing tools to enhance visibility and engagement for its clients. The website is built on WordPress using the Divi theme and incorporates LiteSpeed caching and Matomo analytics, reflecting a moderate level of technical maturity and privacy awareness. Security posture is solid with HTTPS enabled, though improvements are recommended in security headers and cookie consent implementation. Overall, the site is professional, content-rich, and accessible, supporting a small-sized business with a clear niche in digital media and marketing.

S

Steve Zeidler

froodmat.com

42

The website froodmat.com serves as the professional portfolio for photographer Steve Zeidler, showcasing his photography work primarily in Germany and Switzerland. The site targets photography enthusiasts and potential clients seeking commercial and personal photography services. The business model is focused on portfolio presentation and commissions, positioning itself as a niche professional photographer with a small business footprint. The website is built on the Koken CMS platform and employs modern web technologies including jQuery, Google Analytics, and Matomo for visitor tracking. The design is professional and mobile optimized, providing a good user experience with clear navigation and relevant content. However, the site lacks critical privacy and cookie policies, as well as contact information, which impacts its compliance and trustworthiness.

C

Chor des Bayerischen Rundfunks

br-chor.de

68

The website www.br-chor.de represents the official online presence of the Chor des Bayerischen Rundfunks, a prestigious choral institution affiliated with Bayerischer Rundfunk in Germany. It offers detailed information about concerts, ticketing, media content including livestreams and recordings, and educational initiatives. The site targets classical music enthusiasts and cultural audiences primarily in Bavaria and Germany. The business model centers on cultural promotion and audience engagement through performances and media distribution. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Usercentrics CMP for privacy compliance. It employs jQuery and other libraries for enhanced user experience and responsiveness. Security posture is strong with HTTPS enforced and consent management implemented, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is professional, trustworthy, and compliant with GDPR regulations, reflecting a mature digital infrastructure suitable for a cultural institution.

S

Symphonieorchester des Bayerischen Rundfunks

br-so.de

70

The Symphonieorchester des Bayerischen Rundfunks (BRSO) operates a professional and comprehensive website focused on classical music concerts, ticket sales, educational outreach, and media content distribution. The orchestra enjoys a strong market position in Germany and internationally, supported by a reputable parent company, Bayerischer Rundfunk. The website targets classical music enthusiasts, families, students, and the general public interested in orchestral music. Technically, the site is built on WordPress with modern plugins and technologies, ensuring good performance, mobile optimization, and SEO compliance. Security posture is solid with HTTPS, consent management, and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, professional, and compliant with GDPR, providing a positive user experience and clear business credibility.

M

Münchner Rundfunkorchester

rundfunkorchester.de

70

The Münchner Rundfunkorchester website serves as a comprehensive digital platform for the Munich-based classical orchestra, providing detailed information on concerts, ticketing, educational initiatives, and media releases such as CDs and DVDs. The organization positions itself as a key cultural institution within the Bavarian region, targeting classical music enthusiasts, families, and educational groups. The website reflects a professional and consistent brand image aligned with the Bayerischer Rundfunk network. Technically, the site is built on WordPress with modern plugins like Yoast SEO and Usercentrics for consent management, ensuring GDPR compliance and good SEO practices. The site is mobile-optimized and accessible, with moderate performance and use of contemporary JavaScript libraries such as Swiper.js for interactive elements. Hosting details suggest a stable and professional infrastructure. From a security perspective, the site uses HTTPS and implements a consent management platform with captcha protection on forms, indicating a good baseline security posture. However, the absence of explicit security headers and published privacy or terms of service documents suggests areas for improvement. No vulnerabilities or suspicious content were detected. Overall, the website is trustworthy, professionally maintained, and compliant with key privacy regulations, though it would benefit from enhanced transparency through published policies and improved security headers. The risk level is low, and the site effectively supports the orchestra's business and cultural objectives.

B

Buchjournal

buchjournal.de

57

Buchjournal is a well-established media publication serving the German book trade sector, offering a leading customer magazine with a large readership. The website provides book reviews, bestseller lists, and literature news, targeting literature enthusiasts and book retailers. The business model revolves around subscription and advertising revenue, positioning Buchjournal as a key player in its niche market. Technically, the site is built on Drupal 10, leveraging modern analytics (Matomo) and advertising tools (Revive Adserver), hosted by Anexia. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security-wise, the site enforces HTTPS, includes cookie consent mechanisms, and respects Do Not Track signals, though it lacks explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and compliant with GDPR, with room for improvement in security transparency and policy disclosures.

podcast.de is a German-language podcast directory and media portal established since 2004, offering a comprehensive platform for podcast discovery, news, tips, and related services. The website targets podcast listeners and creators primarily in Germany, providing millions of free audio and video downloads along with editorial content. Technically, the site uses modern web technologies such as Vue.js and Matomo analytics, hosted on Schlundtech servers, ensuring a stable and moderately performant user experience with good mobile optimization. Security posture is solid with HTTPS and CSRF protections, though lacking explicit security headers and published security policies. Privacy compliance is limited due to missing visible privacy and cookie policies. Overall, the site is professional, trustworthy, and well-positioned in the German podcast media market.

PolyPublisher Marketplace is a specialized platform associated with RiffReporter, targeting media publishers who require access to marketplace services. The website primarily serves as a login portal and access application point for publishers. The business operates within the media sector in Germany and appears to be a small-sized entity founded in 2020. Technically, the site uses modern JavaScript modules, Material-UI for UI components, and Matomo for analytics, hosted with Cloudflare DNS services. The website is mobile optimized with basic accessibility and SEO features but lacks comprehensive privacy and cookie policies. Security posture is moderate with clientTransferProhibited domain status but lacks DNSSEC and explicit security headers, which are recommended for improvement. Overall, the site is professional but minimalistic, focusing on core login functionality without extensive content or marketing features.

M

Munzinger-Archiv GmbH

munzinger.de

64

Munzinger-Archiv GmbH is a well-established German information service provider specializing in curated databases for media, libraries, institutions, and companies. Their offerings include biographies, country profiles, literature, film, music, and press information accessible via Munzinger Online. The company leverages a WordPress-based website with modern plugins for contact forms and cookie consent, ensuring GDPR compliance and a professional digital presence. The website is well-structured, mobile-optimized, and provides clear navigation to its services and corporate information. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and accessible platform.

F

Homepage - filmfriend

filmfriend.de

59

filmfriend.de is a German-based media streaming platform offering feature films, documentaries, and kids movies accessible via library card authentication. The service targets general audiences including families and film enthusiasts, positioning itself as a niche streaming provider with curated content and ad-free viewing. The website is built using Angular framework and hosted on Azure DNS infrastructure, indicating a modern technical foundation. While the site demonstrates good content quality, design, and navigation, it lacks explicit privacy, cookie, and security policies, which impacts its compliance posture. Security headers and incident response contacts are not evident, suggesting room for improvement in security maturity. Overall, the domain appears legitimate with professional hosting but limited public registrant data. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and providing clear contact information to improve trust and compliance.

P

PressReader.com - Digital Newspaper & Magazine Subscriptions

pressreader.com

58

PressReader.com is a digital newsstand platform offering subscriptions to over 7000 newspapers and magazines worldwide, enabling users to read content on multiple devices with a free trial period. The website presents a professional and consistent brand image with a focus on media content delivery. Technically, the site uses modern JavaScript libraries and a custom CDN infrastructure, with resources loaded over HTTPS, indicating a baseline of secure content delivery. However, the absence of WHOIS registration data raises concerns about domain transparency and trustworthiness. Security posture is moderate with HTTPS enforced but lacks visible security headers and formal privacy or cookie policies. Contact and incident response information are not present in the analyzed content, limiting user trust and compliance visibility. Overall, the site is functional and professionally designed but would benefit from enhanced transparency and compliance documentation.

B

Bamberger Rundfunk GmbH & Co. Studiobetriebs KG

radio-bamberg.de

59

Radio Bamberg is a regional media company operating a local radio station focused on hits music for the Bamberg area in Germany. The website provides streaming and podcasting services, targeting local listeners. The technical infrastructure is modern, utilizing HTML5, CSS3, JavaScript libraries such as Video.js and Swiper.js, and Matomo analytics for user tracking. The site is mobile optimized and has good SEO practices, though accessibility features are basic. Security posture is adequate with HTTPS enabled but lacks important security headers and explicit privacy and cookie policies, which impacts compliance and user trust. No WAF or blocking mechanisms were detected, indicating full accessibility. Overall, the site is professional but could improve in privacy compliance and security best practices.

C

Colourbox

colourbox.dk

57

Colourbox is a Danish-based stock media platform offering millions of stock images, videos, and vectors with simple licensing and pricing models. The website targets businesses and individuals seeking creative digital assets for online and offline communication. The company maintains a professional market position with exclusive and editorial content, supported by active social media channels on Facebook, LinkedIn, and Pinterest. Technically, the website leverages modern web technologies including React, Font Awesome Pro icons, Google Tag Manager, and Amazon Cloudfront CDN to deliver a performant and responsive user experience. However, the absence of explicit privacy and cookie policies and missing WHOIS data represent gaps in compliance and transparency. Security posture is generally good with HTTPS enforced but could be improved by adding security headers and incident response contact information. Overall, the site is safe for general audiences and demonstrates a solid business and technical foundation.

B

Bayerischer Rundfunk

br-klassik.de

62

BR-KLASSIK is a digital platform operated by Bayerischer Rundfunk, a major German public broadcaster, focusing on classical music, jazz, and cultural content. The website offers rich multimedia content including radio, television, podcasts, concert videos, and cultural news, targeting classical music enthusiasts and culturally interested audiences primarily in Germany. The site is professionally designed with consistent branding and clear navigation, supporting a high-quality user experience across devices. Technically, the site uses modern JavaScript libraries and analytics tools, with good mobile optimization and accessibility features. Security posture is strong with HTTPS and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is good, linking to comprehensive parent company policies, but lacks an explicit cookie consent mechanism. WHOIS data confirms the domain's legitimacy and consistency with the broadcaster's identity. Overall, the site is trustworthy, professional, and well-positioned in the media sector.

K

Klassik Radio

klassikradio.de

57

Klassik Radio operates as a German-based classical music streaming and radio broadcasting service, offering curated music channels, live concert events, and premium ad-free subscriptions. The website is professionally designed with excellent content quality and user experience, targeting classical music enthusiasts and general audiences interested in cultural music content. Technically, the site leverages modern frameworks such as Next.js and React, with mobile optimization and SEO best practices well implemented. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response details are absent. Overall, the domain and website present a trustworthy and mature digital presence in the media sector.

P

Promiseo s.r.o.

promiseo.sk

62

Promiseo s.r.o. is a Slovak marketing and event agency based in Košice, specializing in digital marketing, event organization, video production, and strategic marketing services. The company targets businesses seeking comprehensive marketing solutions in Slovakia and the surrounding region. Their website reflects a professional and consistent brand image with a strong portfolio of clients and certifications, positioning them as a reputable regional player in the media sector. Technically, the website is built on WordPress with WooCommerce integration, leveraging modern JavaScript libraries and plugins such as jQuery, Slick Carousel, and Google Tag Manager. The site is mobile-optimized, SEO-friendly, and incorporates a robust cookie consent mechanism compliant with GDPR. Performance is moderate with room for optimization. From a security perspective, the site uses HTTPS with good SSL configuration and employs cookie consent tools. However, explicit security headers are not clearly detected, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, Promiseo's website demonstrates a high level of professionalism, compliance, and trustworthiness, with minor technical and security improvements recommended to enhance protection and user experience.

E

Espresso News

espressonews.bg

40

Espresso News is a small regional online news media outlet focused on delivering news and event coverage for the western region of Sofia and surrounding municipalities in Bulgaria. The website provides categorized news content, community information, and reporter workshops, targeting local residents and Bulgarian-speaking audiences interested in regional developments. The business model is primarily advertising-supported, leveraging Google Adsense and Google Analytics for monetization and user tracking. Technically, the website uses a modern but basic technology stack including jQuery, Bootstrap, Font Awesome, and Google services. The site is mobile optimized with good navigation and content structure, though it lacks advanced CMS indicators and some accessibility features. Performance is moderate with standard web technologies. From a security perspective, the site uses HTTPS but lacks visible security headers and formal security policies. No privacy or cookie policies are present, indicating gaps in GDPR compliance. No vulnerability disclosure or incident response contacts are provided. The site does not expose sensitive data and uses common third-party scripts responsibly, but improvements in security headers and privacy transparency are recommended. Overall, the website is functional and professional for its regional news purpose but should enhance privacy compliance and security posture to improve trust and regulatory adherence.

W

Westdeutscher Rundfunk

wdr5.de

56

The website www1.wdr.de/radio/wdr5/index.html represents Westdeutscher Rundfunk (WDR), a large and established public broadcasting media entity in Germany. It offers a comprehensive range of radio programming, podcasts, news, and cultural content targeted primarily at German-speaking audiences interested in politics, culture, and regional news in North Rhine-Westphalia (NRW). The site is professionally designed with consistent branding and excellent content quality, reflecting WDR's strong market position in the media industry. Technically, the site uses modern web technologies including JavaScript, CSS, and ARD's proprietary player scripts, with responsive design optimized for mobile devices. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. Privacy compliance is weak due to missing privacy and cookie policies and lack of consent mechanisms. Contact information is limited to a phone hotline and a contact form, with no direct emails or incident response contacts visible. Overall, the site is trustworthy and safe for general audiences, with no adult or explicit content detected.

R

Rausgegangen GmbH

zentrale.events

61

Rausgegangen GmbH operates the website zentrale.events as a centralized platform for event organizers, venues, and artists primarily in Germany. The platform offers integrated services including event publishing, ticketing, and targeted marketing, positioning itself as one of the largest event recommendation platforms in Germany. The business model leverages a freemium approach with additional marketing services, targeting cultural professionals and event goers. Technically, the site is built using modern web technologies such as React and Next.js, with privacy-conscious analytics via Matomo and a comprehensive cookie consent mechanism provided by Iubenda. The website is mobile-optimized and well-structured, providing a good user experience.

C

Colourbox

colourbox.de

58

Colourbox is a large German-based stock media agency offering over 26 million royalty-free images, videos, and vectors for purchase. The company targets businesses and individuals requiring licensed digital media for web, print, and social media use. The website demonstrates a mature technical infrastructure leveraging modern JavaScript frameworks, CDN hosting via AWS Cloudfront, and integration with Google Tag Manager for analytics and marketing. While the site is well-designed and content-rich, it lacks explicit privacy, cookie, and terms of service policies, which are critical for GDPR compliance and user trust. Security posture is adequate with HTTPS enabled but could be improved by implementing security headers and publishing incident response policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security transparency.

T

TV Oberfranken

tvo.de

57

TV Oberfranken operates as a regional media broadcaster serving the Oberfranken region in Germany, providing news and television content to approximately one million residents. The website functions as a digital platform for news dissemination, livestreaming, and media library access, targeting local audiences in cities such as Bamberg, Bayreuth, and Coburg. The business model centers on regional broadcasting and news reporting, positioning TV Oberfranken as a key local media outlet.

V

Volksverpetzer

volksverpetzer.de

68

Volksverpetzer is an independent German media blog founded in 2017, dedicated to combating fake news through critical, honest, and ethical reporting. The site operates on a donation-funded business model and maintains a strong presence on multiple social media platforms. Technically, the website is built on WordPress using the Divi theme, enhanced with SEO and media embedding plugins, and is hosted with Cloudflare DNS services ensuring good performance and security. The security posture is solid with HTTPS enforced and no visible vulnerabilities, although security headers and formal policies are absent. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a visible privacy policy or terms of service. Overall, the site is professional, trustworthy, and safe for general audiences.

M

Markt & Mittelstand – News, Analysen für den Mittelstand

marktundmittelstand.de

51

Markt & Mittelstand is a German media platform delivering current economic news, analyses, and strategies tailored for the German Mittelstand, i.e., medium-sized enterprises. The website positions itself as a niche media outlet focusing on business insights relevant to this audience. Technically, the site is built on TYPO3 CMS and integrates a comprehensive advertising ecosystem including Google Ad Manager, Amazon Ads, and multiple header bidding partners. GDPR compliance is addressed via a consent management platform, although explicit privacy and terms of service pages were not found in the analyzed content. Security posture is moderate with HTTPS enabled but lacking visible security headers and formal security policies. Overall, the site is professionally designed, mobile-optimized, and content-rich, targeting business professionals in Germany.

R

Rausgegangen GmbH

rausgegangen.de

64

Rausgegangen GmbH operates a professional event discovery platform primarily targeting German cities, offering users curated event tips, ticketing, and lotteries. The website is well-branded and provides a mobile-optimized experience with a modern tech stack including React, Alpine.js, and Matomo analytics. Privacy compliance is supported by an Iubenda cookie consent mechanism, although an explicit privacy policy URL was not found in the provided content. Security posture is solid with HTTPS and error monitoring via Sentry, but lacks published security policies or incident response contacts. Overall, the platform is credible and trustworthy with a focus on media and entertainment.

R

Romeofilms

sidliskovysen.sk

41

The website sidliskovysen.sk serves as the official online presence for the documentary film 'RYTMUS sídliskový sen,' focusing on the life and culture surrounding Slovak hip-hop artist Rytmus. The site provides film-related content, including cast, crew, galleries, and related social projects. It targets a general audience interested in music, social issues, and documentary films. The business model revolves around media production and promotion, supported by partnerships with educational and governmental organizations in Slovakia and the EU. Technically, the site uses a traditional web stack with HTML5, CSS, JavaScript, and jQuery, supported by the Nette PHP framework and hosted on Websupport infrastructure. It integrates Google Analytics for tracking and Livechatoo for user engagement. However, the site lacks HTTPS, which is a critical security shortfall. Security posture is moderate with DNSSEC enabled but missing key security headers and policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is functional and professionally designed but requires improvements in security and compliance to enhance trust and user safety.

E

eSlovensko

ktojedalsi.sk

52

The website www.ktojedalsi.sk represents a Slovak educational and social awareness film project titled 'Kto je ďalší?'. It is produced by the organization eSlovensko and focuses on real-life inspired stories addressing online threats and cyberbullying. The site serves as a platform for film distribution, educational trainings, and a help line for schools. It enjoys support from EU programs and Slovak government bodies, indicating a credible and socially responsible initiative. Technically, the site is built on WordPress with modern plugins and themes, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and basic security headers, though explicit privacy and cookie policies are missing, which impacts compliance scores. Overall, the site is professional, trustworthy, and well-positioned within its niche, but could improve privacy transparency and security policy disclosures.

U

uniten GmbH

uniten.io

67

uniten GmbH is a German-based company specializing in content performance analytics tailored for digital newsrooms of regional media houses. Their platform leverages AI to provide actionable insights that help optimize content, improve editorial efficiency, and enhance digital subscription retention. The company positions itself as a niche provider in the media analytics sector with a focus on data-driven audience development and content optimization. Technically, the website is built on the Webflow CMS platform, utilizing modern web fonts and hosted via a CDN for fast performance. The site is well-structured, mobile-optimized, and provides a professional user experience. However, some technical improvements could be made in security headers and cookie consent mechanisms to enhance compliance and security posture. From a security perspective, the site uses HTTPS and claims GDPR compliance with data stored on European servers and no personal data collection. There is no evidence of security incident response policies or vulnerability disclosure mechanisms, which could be areas for improvement. The WHOIS data is incomplete and malformed, limiting trust verification, but the website content and contact information appear legitimate and consistent with a small professional business. Overall, uniten.io presents a credible and professional digital presence with good technical implementation and privacy compliance, though improvements in security policy transparency and WHOIS data clarity would strengthen trust and security posture.

P

Pixelcowboys Werbeagentur

pixelcowboys.de

55

Pixelcowboys Werbeagentur is a well-established full-service advertising agency based in Alsdorf, Germany, operating since 1997. The company offers a broad range of services including web design, print media, layout and prepress, and video production, catering to a diverse clientele such as unions, social organizations, municipalities, cultural institutions, and commercial enterprises. Their emphasis on environmental responsibility, including CO2-neutral energy and hosting, positions them as a conscientious player in the media sector. Technically, the website employs modern frontend technologies like Bootstrap, AOS, and FontAwesome, with hosting provided by reputable German providers known for green IT practices. Security posture is adequate with HTTPS enabled, though improvements in security headers and explicit privacy mechanisms are recommended. Overall, the website is professional, user-friendly, and trustworthy, reflecting the company's credibility and market position.

S

Save Social – Soziale Netzwerke als demokratische Kraft retten

savesocial.eu

45

Save Social is a German non-profit initiative dedicated to preserving social networks as democratic forces. The website showcases a broad coalition of cultural, academic, and media figures supporting this mission. The platform operates on WordPress with modern plugins and maintains a professional and consistent brand presence. Technically, the site is well-implemented with HTTPS and common security practices, though it lacks explicit privacy and cookie policies. No contact emails or phone numbers are directly available, which may affect user trust and compliance. The security posture is solid with no detected vulnerabilities or blocking mechanisms. Overall, the site is safe, accessible, and serves its advocacy purpose effectively.

B

BotTalk

bottalk.io

60

BotTalk is a specialized AI voice solution provider targeting news publishers and media companies. Their platform aggregates multiple leading text-to-speech providers into a single audio hub, enabling easy integration, paywall support, and audio monetization through advertising partnerships. The company positions itself as a niche leader with a clear focus on enhancing user engagement and subscription value through audio content. Technically, the website is built on modern frameworks like Next.js and React, hosted with Cloudflare DNS, and integrates analytics and form services for marketing and support. Security posture is good with HTTPS and domain transfer protections, though improvements in DNSSEC and security headers are recommended. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

H

Hamburger Morgenpost

werbelokal.de

50

MOPO Media is the B2B brand of Hamburger Morgenpost, offering access to Northern Germany's largest news portal with a focus on local advertising starting at 50 Euros. The website is professionally designed using WordPress with modern plugins such as Yoast SEO and Elementor, providing a good user experience and mobile optimization. The platform integrates advertising services and marketplace content, targeting businesses and advertisers in the region. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not publicly available. Overall, the site is trustworthy and compliant with GDPR, supporting a strong market position in the media sector.

H

Hamburger Morgenpost

mopop.de

53

MOPOP.de is a well-established regional online portal dedicated to music and pop culture in Hamburg, operated under the Hamburger Morgenpost media brand. The site offers a comprehensive range of content including news, concert and festival information, artist interviews, reviews, and music charts, targeting music enthusiasts primarily in the Hamburg region. The business model is content-driven, supported by advertising and partnerships, positioning MOPOP.de as a key player in local cultural media.

L

Literatur Rheinland

literatur-rheinland.de

49

Literatur Rheinland is a cultural network platform dedicated to connecting literary institutions, initiatives, and actors within the Rheinland region of Germany. It promotes literary events, publishes a magazine, and offers a literature map highlighting regional literary figures and institutions. The website is built on Drupal 10, featuring modern web technologies and responsive design, ensuring good user experience and accessibility. Social media integration with Facebook, Instagram, and YouTube supports community engagement. Privacy compliance is addressed with a cookie consent banner and a privacy policy in German. Security posture is adequate with HTTPS and cookie management, though some security headers and explicit policies could be improved. Overall, the site serves as a trusted regional literary hub with good content quality and professional presentation.

W

Westfälisches Literaturbüro in Unna e.V.

liton.nrw

47

The website liton.nrw is a cultural non-profit platform operated by Westfälisches Literaturbüro in Unna e.V., providing a comprehensive online literature database focused on contemporary literary actors, institutions, and projects in North Rhine-Westphalia, Germany. It serves literary professionals, institutions, and the general public interested in the NRW literary scene. The platform is supported by the Ministry of Culture NRW and affiliated literary networks, positioning it as a key resource in the regional cultural landscape. Technically, the site is built on TYPO3 CMS with modern frontend technologies including jQuery, Bootstrap, and Owl Carousel. It features multiple search and filter forms enabling users to explore authors, institutions, and projects. The site demonstrates good mobile optimization, SEO practices, and a consistent branding approach. Hosting details are not explicitly identified, but the site uses HTTPS with a good SSL configuration. From a security perspective, the site enforces HTTPS and uses secure form submissions. However, it lacks several recommended security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by a clear privacy policy and cookie consent mechanism, though explicit security and incident response policies are not publicly available. Overall, the website presents a trustworthy, professional, and well-maintained platform with a strong cultural mission. Strategic improvements could include enhancing security headers, publishing detailed security policies, and expanding transparency around data protection and incident response.

R

RADIO NRW

radionrw.de

44

RADIO NRW operates as Germany's largest local radio network, connecting 45 local radio stations across North Rhine-Westphalia. The company offers a comprehensive media and advertising platform, combining local proximity with broad reach, targeting advertisers and radio listeners in the region. The website is professionally designed, content-rich, and optimized for mobile devices, reflecting a mature digital presence. Technically, the site is built on WordPress with UIkit and jQuery, hosted likely by Deutsche Telekom, and uses Matomo analytics and Usercentrics for cookie consent. Security posture is adequate with HTTPS and consent mechanisms but lacks visible security headers and formal security policies. Privacy compliance is partial due to missing explicit privacy and terms of service pages. Overall, the site is trustworthy and well-positioned in the media sector with room for improvement in security and compliance documentation.

Life Radio GmbH & Co.KG operates a professional media website focused on radio broadcasting, podcasts, news, and events primarily serving the Austrian market. The website offers multiple streaming channels, podcast episodes, and promotional campaigns targeting a general audience interested in music and regional news. The company maintains a consistent brand presence across social media and digital platforms, supporting its market position as a regional media broadcaster. Technically, the website employs modern JavaScript frameworks and integrates third-party services such as Usercentrics for consent management and AdsWizz for advertising. The site is mobile-optimized with good SEO practices and a moderate performance profile. However, some technical improvements are recommended, including the implementation of security headers and enhanced accessibility features. From a security perspective, the site enforces HTTPS and uses a consent management platform, indicating GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies, incident response contacts, and WHOIS domain registration data introduces some trust concerns. The website does not appear to be blocked or protected by a WAF, allowing full content access. Overall, the website presents a professional and trustworthy media platform with room for improvement in security transparency and domain registration verification. Strategic recommendations include enhancing security headers, publishing incident response information, and verifying domain registration details to strengthen trust and compliance.

C

Citizen Journal

citizenjournal.net

60

Citizen Journal is a small media and blog website launched in early 2024, providing well-researched long-form content across diverse topics such as health, business, tech, travel, and lifestyle. The site operates on WordPress with performance optimizations via WP Rocket and uses affiliate marketing through the Amazon Associates program. The technical infrastructure is modern but basic, with Cloudflare DNS and no detected WAF challenges. Security posture is moderate with HTTPS enabled but lacking DNSSEC and security headers. Privacy compliance is basic with presence of privacy and cookie policies but no explicit GDPR statements. Overall, the site is professional and trustworthy for general audiences.

RDN Agentur für Public Relations GmbH und RDN Verlags GmbH is a small German media and public relations company specializing in creative, multimedia services including website development, press work, social media management, and publishing. Their market position is that of a regional niche agency and publisher serving business clients seeking professional media and PR solutions. The website reflects a professional and consistent brand image with clear contact information and social media presence, supporting business credibility. Technically, the website uses modern Bootstrap 5.3.2 for responsive design and includes JavaScript for interactivity. The site is moderately performant and mobile-optimized but lacks advanced accessibility features and SEO optimization. No CMS or hosting provider details are evident. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site is accessible over HTTPS (assumed from URL), but no security headers were detected, and no explicit security policies or incident response contacts are provided. The site lacks a cookie consent mechanism despite having a GDPR-compliant privacy policy. No forms or data collection points were found on the homepage, reducing attack surface. WHOIS data is consistent with the business claims, showing no privacy protection and legitimate DNS configuration. Overall, the website presents a moderate security posture with room for improvement in security headers, cookie consent, and incident response transparency. The business credibility is strong, but technical and privacy compliance aspects could be enhanced to improve trust and compliance.

H

Hubert Burda Media

deutschlandtest.de

60

DEUTSCHLAND TEST is a German media brand under Hubert Burda Media specializing in scientific studies, product tests, and consumer recommendations. The website offers extensive rankings and editorial content aimed at general consumers seeking trustworthy information on brands, products, and services. It has a strong market position supported by a large volume of published studies and a consistent brand presence since 2013. Technically, the site employs modern JavaScript frameworks, integrates consent management for GDPR compliance, and uses Amazon AWS for hosting, ensuring good performance and mobile optimization. Security measures include HTTPS enforcement and a content security policy, although additional headers and explicit security policies could enhance posture. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-maintained.

S

Sparkasse Vest Recklinghausen

vesterleben.de

55

Vesterleben is a regional digital magazine and information portal serving the Vest region in Germany. It provides local news, event listings, and community engagement content, supported by reputable local institutions including Sparkasse Vest Recklinghausen, Diakonie Recklinghausen, Hertener Stadtwerke, and RDN-Verlag. The website targets residents and visitors interested in regional culture, social events, and local initiatives. The business model is based on regional media publication with digital content and downloadable print editions, positioning itself as a trusted local information source.

V

Vest Erleben

vest-erleben.de

55

Vest Erleben is a regional media platform serving the Vest Recklinghausen area in Germany, providing local news, event information, and community engagement. The website is supported by a consortium of local institutions including Sparkasse Vest Recklinghausen, Diakonie Recklinghausen, Hertener Stadtwerke, and RDN-Verlag, positioning it as a trusted source for regional content. The platform targets residents and visitors interested in cultural, social, and economic developments within the region. Technically, the website is built on WordPress with modern enhancements such as ElasticPress for search, Matomo for analytics, and responsive design elements ensuring good mobile usability. The site uses HTTPS and includes basic security practices like CSRF tokens, but lacks some advanced security headers and explicit cookie consent mechanisms. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site demonstrates a reasonable posture with encrypted connections and no visible vulnerabilities or exposed sensitive data. However, it could improve by implementing security headers, publishing incident response contacts, and adding a vulnerability disclosure policy. Privacy compliance is partially addressed with a privacy policy present, but cookie consent mechanisms are missing despite tracking usage. Overall, Vest Erleben is a credible and professionally maintained regional media website with solid business credibility and technical infrastructure. Strategic improvements in privacy compliance and security transparency would enhance trust and regulatory adherence.

A

audiowest media GmbH

audiowest.de

43

audiowest media GmbH is a modern audio marketing company based in Germany, specializing in radio and online audio advertising across multiple regional radio stations in Nordrhein-Westfalen. The company targets advertisers seeking to reach over one million daily listeners through classical radio, online audio, podcasts, and cross-media campaigns. The website is built on WordPress with Elementor and uses modern plugins and SEO techniques to present a professional and user-friendly experience. The technical infrastructure includes lazy loading, Google Analytics, Google Tag Manager, and a Usercentrics cookie consent mechanism, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved and broken image lazy loading issues fixed. Privacy compliance is basic with cookie consent but no visible privacy or terms policies. Overall, the site is trustworthy and professional, serving a medium-sized media business with a clear market position in regional audio advertising.

R

rbb Rundfunk Berlin-Brandenburg

rbb24.de

52

rbb24 is the multimedia news portal operated by rbb Rundfunk Berlin-Brandenburg, serving the Berlin and Brandenburg regions. It provides comprehensive news coverage including politics, economy, culture, sports, and panorama, supported by video and audio content. The website is well-positioned as a regional public broadcaster with a strong digital presence and official social media channels. Technically, the site uses modern web technologies including JavaScript frameworks, video players, and is likely powered by a professional CMS such as Adobe Experience Manager. Hosting is provided by reputable providers Cogent and Vodafone IP, ensuring stable infrastructure. Security posture is strong with HTTPS, CSRF protection, and likely security headers, although explicit security policies and cookie consent mechanisms could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, serving a general audience with safe content.

P

Par drošību!

pardrosibu.lv

47

Par drošību! is a Latvian media outlet specializing in security news covering areas such as physical security, fire safety, cybersecurity, data protection, environmental and labor safety, and national security topics. The website serves a Latvian-speaking audience interested in up-to-date security information and government-related security news. The business operates as a niche media publication with a small organizational size and was founded in 2020. It maintains a consistent brand presence with active social media channels and structured data for SEO. Technically, the website is built on WordPress CMS using common plugins like WPBakery Page Builder and Rank Math SEO. It integrates Google Analytics and Google Tag Manager for analytics and uses HTTPS with a good SSL configuration. The site is moderately performant and mobile-optimized, though some minor PHP warnings indicate areas for technical improvement. From a security perspective, the site enforces HTTPS and uses some security best practices such as rel='noopener noreferrer' on external links. However, it lacks a Content-Security-Policy header and a security.txt file for vulnerability disclosure. The visible PHP warning from a plugin suggests a need for code maintenance to avoid potential information leakage. Privacy compliance is weak, with no visible privacy or cookie policies, which is a significant gap given GDPR requirements. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening. Strategic improvements in these areas would strengthen its security posture and user trust.

R

Radio Vest

radiovest.de

58

Radio Vest is a regional local radio station serving the Kreis Recklinghausen area in Germany, providing local news, live radio streaming, podcasts, and community engagement activities. The website is well-branded and consistent with its business focus, targeting local residents interested in regional news and entertainment. The business model centers on local broadcasting with advertising and promotional events. Technically, the site uses a modern stack including Angular, jQuery, and a CMS (CONTENS), with integration of consent management and analytics tools. The site is mobile-optimized and SEO-friendly, offering a good user experience. Security posture is solid with HTTPS enforced and no critical vulnerabilities detected, though security headers could be improved and incident response information is lacking. Privacy compliance is well-managed with a clear privacy policy and cookie consent mechanism. Overall, the site is trustworthy and professional, with moderate user tracking and transparent advertising practices.

W

Where Beagles Dare

wewbd.com

57

Where Beagles Dare (WBD) is a small, story-forward digital agency specializing in helping independent makers and brands build authentic connections through storytelling and e-commerce solutions. The company appears newly founded in 2024, with a clear focus on digital media and brand engagement. Their website reflects a professional and modern design, hosted on the Cargo platform, with responsive features and a cookie consent mechanism to comply with privacy regulations. Technical infrastructure is standard for a small agency, leveraging Cargo CMS and third-party cookie management scripts. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and DNSSEC. No explicit security or incident response policies are published, and contact is limited to email only. Overall, the website is trustworthy and professionally presented, suitable for its niche audience.