Real Estate security reports

W

Webgate Installer

thespot.sk

50

The Spot cowork is a Slovak-based serviced office and coworking space provider located in the Sky Park area of Bratislava. The company offers modern coworking spaces, serviced offices, and stylish event venues targeting freelancers, small businesses, and event organizers. The website is professionally designed using WordPress and Elementor, with good SEO optimization and mobile responsiveness. The technical infrastructure includes modern plugins such as Rank Math SEO and Google reCAPTCHA for security. Security posture is moderate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is basic with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the website presents a trustworthy and professional business presence with room for improvement in privacy and security transparency.

W

Webgate Installer

thespotcowork.com

50

The Spot cowork is a Slovak-based coworking and serviced office provider located in Bratislava's Sky Park. The business offers modern coworking spaces, serviced offices, and stylish event venues targeting freelancers, small businesses, and event organizers. Founded in 2022, the company operates a professionally designed website built on WordPress with Elementor, featuring good SEO and mobile optimization. The technical infrastructure includes modern plugins and Google reCAPTCHA for bot protection, hosted likely by Gransy, s.r.o. The website uses HTTPS but lacks DNSSEC and security headers, indicating room for security improvements. Privacy compliance is basic with a cookie consent mechanism but no explicit privacy or terms policies found. Contact information is not clearly presented in the analyzed content. Overall, the website is professional and trustworthy but could enhance transparency and security documentation.

H

HubHub

hubhub.com

65

HubHub operates as a flexible workspace provider offering memberships, meeting rooms, and event spaces primarily in London. The company targets professionals, startups, and SMEs seeking coworking and event facilities. The website is built on WordPress and integrates multiple marketing and analytics tools such as Google Tag Manager, HubSpot, and Hotjar, reflecting a moderate level of digital maturity. Security measures include HTTPS enforcement and use of Google reCAPTCHA on forms, but lack explicit security headers and visible incident response policies. The absence of WHOIS domain registration data raises concerns about domain legitimacy and transparency. Overall, the website is professional and user-friendly but would benefit from enhanced security practices and clearer compliance documentation.

N

NCC

ncc.no

51

NCC is a large Norwegian company specializing in infrastructure, building, and real estate development. Their website reflects a professional corporate presence with a focus on sustainable construction solutions and societal development. The company targets customers and partners in the Norwegian construction and real estate sectors. Technically, the website uses modern web technologies including Google Fonts, Microsoft Application Insights for telemetry, and Cookiebot for cookie consent management. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and no exposed sensitive data, but lacks visible security headers and explicit privacy or security policies. Overall, the domain appears legitimate despite the absence of WHOIS data, which is common for Norwegian domains. The site integrates multiple third-party services for analytics and marketing, maintaining good advertising transparency. Recommendations include publishing clear privacy and security policies, adding contact information, and enhancing security headers to improve trust and compliance.

Červený Marek Drobil - Dřevostavby is a small Czech construction company specializing in the design, manufacture, and installation of atypical wooden buildings and structures, including roubenka style houses and wooden claddings. They also engage in real estate development activities such as land servicing and sale of building plots. The company appears to be newly established in 2023, consistent with the domain registration date. Their website presents a professional portfolio of projects and clear contact information, targeting local customers interested in wooden construction and real estate development. Technically, the website uses standard web technologies including jQuery and Google Fonts, with basic mobile optimization and moderate performance. Security measures include Google reCAPTCHA for form protection, but lack advanced security headers and privacy policies, indicating room for improvement in compliance and security posture. Overall, the website is functional and credible for a small business but would benefit from enhanced security and privacy compliance to build greater trust.

J

JIROUT REKLAMNÍ AGENTURA s.r.o.

rezidencetrnova.cz

60

Rezidence Nová Trnová is a Czech Republic-based real estate development project focused on providing modern, comfortable housing for approximately 200 families in Pardubice. The project emphasizes proximity to nature, accessibility to city centers, and full civic amenities including parking facilities. The website is professionally designed with clear navigation and contact options, targeting home buyers and families. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, Google Fonts, and YouTube API for video content. While the site is mobile optimized and includes cookie consent mechanisms, it lacks visible security headers and explicit SSL configuration details. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency. Overall, the website presents a moderate security posture with good privacy compliance but would benefit from enhanced security practices and domain registration verification.

P

PPD stav s.r.o.

ppdstav.cz

47

PPD stav s.r.o. is a professional construction company based in the Czech Republic, specializing in residential, civic, and industrial building projects. Founded in 2017, the company leverages over 20 years of employee experience to deliver tailored construction services primarily in Plzeň, the Plzeň region, and Prague. Their key services include bytová výstavba (residential construction), občanská výstavba (civic construction), průmyslová výstavba (industrial construction), and truhlářství (carpentry). The company positions itself as a reliable regional player with a focus on quality and customer-specific solutions.

C

CZ STAVEBNÍ HOLDING, a.s.

czstavhold.cz

61

CZ STAVEBNÍ HOLDING, a.s. is a Czech real estate development company specializing in residential housing projects including houses and apartments across multiple Czech localities. The company has been active for approximately 7 years and presents itself as a medium-sized player in the real estate market with a portfolio of ongoing and completed projects. Their website provides detailed project information, contact options, and updates, targeting home buyers and investors in the Czech Republic. Technically, the website employs modern web technologies such as Google Fonts, YouTube API, and Google reCAPTCHA for form protection, and it is served over HTTPS ensuring secure communications. The site is mobile optimized and provides a cookie consent mechanism compliant with GDPR requirements. Security posture is generally good with HTTPS and spam protection, but lacks explicit security headers and formal security policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact details appear professional and legitimate. Overall, the site is functional, secure, and user-friendly with room for improvement in security transparency and domain registration clarity.

S

Stavitelství Drobil s.r.o.

drobil.com

40

Stavitelství Drobil s.r.o. is a well-established construction and development company based in the Czech Republic, with over 25 years of experience. The company specializes in project management, construction of technically demanding buildings including smart homes, and real estate development. Their market position is solid within the regional European construction sector, serving both domestic and foreign investors. The website reflects a professional business model focused on comprehensive construction services and developer activities. Technically, the website uses modern frontend technologies such as jQuery, Bootstrap, and Swiper.js, and is built on the K-CMS 3.0 platform. The site is mobile optimized and provides clear navigation and relevant content, though performance is moderate. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

G

Grand Paris Aménagement

grandparisamenagement.fr

57

Grand Paris Aménagement is a public urban development agency serving the Île-de-France region and the Grand Paris metropolitan area. It specializes in land and real estate engineering, urban planning, and public construction projects, positioning itself as a key public sector actor in regional development. The website reflects a professional and modern digital presence, leveraging Next.js and React technologies, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS data is consistent with privacy protection often used by public entities. Overall, the site is trustworthy, well-branded, and serves its target audience effectively.

E

EPFIF

epfif.fr

57

EPF Ile-de-France (EPFIF) is a public land operator dedicated to supporting the development of housing and economic projects in the Ile-de-France region. It plays a key role in mobilizing land, combating substandard housing, and requalifying degraded properties. The organization is positioned as a major public entity with a medium-sized operational scale, serving local authorities and the public sector. The website reflects a professional and comprehensive digital presence, leveraging WordPress CMS with modern plugins and SEO tools to provide rich content and user-friendly navigation. Social media integration and official publications enhance its credibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data limits domain trust verification but does not detract significantly from the overall legitimacy given the official nature of the content and presence. Overall, the site is well-structured, compliant with privacy regulations, and serves its public sector mission effectively.

T

To pravé bydlení

topravebydleni.cz

40

To pravé bydlení is a Czech language online magazine focused on home living, providing articles and practical advice on interior design, construction, gardening, hobbies, and finance related to housing. The website uses WordPress CMS with popular plugins such as Yoast SEO and Elementor, indicating a modern and maintainable technical infrastructure. HTTPS is properly configured, and Google Analytics is used for visitor tracking. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are important for compliance and security posture. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trustworthiness but is common for content publishing sites. Overall, the website presents a professional and content-rich platform for its target audience of homeowners and individuals interested in home improvement.

C

CEDAR HOME

cedarhome.cz

48

CEDAR HOME is a Czech Republic based company specializing in the manufacturing and construction of modern and classic cedar wooden houses (roubenky). The company has a strong market presence with over 500 completed projects and multiple awards, positioning itself as a reputable player in the wooden house construction sector. Their website offers detailed information about their services, showcases realizations, and provides contact options including social media links and consultation forms. Technically, the website is built on Joomla CMS using Helix Ultimate framework and includes modern libraries such as jQuery, Bootstrap, and LayerSlider. The site is mobile optimized and has good SEO practices. Security posture is decent with HTTPS and CSRF protections, but lacks some security headers and explicit privacy policies. The absence of WHOIS data reduces domain trust slightly, but overall the business credibility and professionalism are high. Cookie consent is implemented, indicating some privacy compliance. No adult or questionable content is present, making the site safe for general audiences.

L

Les Ateliers de maîtrise d’œuvre urbaine de Cergy Pontoise

ateliers.org

52

Les Ateliers de maîtrise d’œuvre urbaine de Cergy Pontoise is a well-established non-profit organization based in France, specializing in organizing international workshops focused on urban planning and design. With over 30 years of experience, they engage students, young professionals, and local stakeholders to collaboratively address urban challenges. Their website reflects a professional and content-rich platform that supports their mission and outreach. Technically, the website uses modern web technologies including Google Analytics and Tag Manager for tracking, hosted by OVH sas. The site is mobile-optimized and has a moderate performance profile. However, there are gaps in security best practices such as missing DNSSEC, lack of security headers, and absence of published privacy and cookie policies, which impact compliance and security posture. From a security perspective, the site uses HTTPS and includes CSRF protection in forms, but lacks explicit incident response and vulnerability disclosure information. The WHOIS data confirms a long-standing domain registration consistent with the organization's history, enhancing trustworthiness. Overall, the site is credible but would benefit from improved security and privacy compliance measures.

J

Jakub Cigler Architekti, a.s.

jakubcigler.archi

50

Jakub Cigler Architekti, a.s. is a well-established Czech architectural firm founded in 2001, specializing in progressive and sustainable architecture. The company holds a strong market position in the Czech Republic with multiple awards and is a founding member of the Czech Green Building Council. Their website reflects a professional portfolio showcasing projects and news relevant to their industry. Technically, the site is built on Drupal 7 with legacy jQuery libraries and uses modern UI components like Slick Carousel and FitVids for media responsiveness. Security posture is moderate but could be improved by implementing security headers and updating legacy libraries. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the website is trustworthy and professional, supporting the company's credibility in the real estate and architectural sector.

A

Alte Brennerei Oelde

alte-brennerei-oelde.de

38

Alte Brennerei Oelde operates a coworking space in Oelde, Germany, providing flexible workspaces, meeting rooms, virtual office services, and event spaces tailored to freelancers, startups, and entrepreneurs. The business emphasizes a creative and productive environment with amenities such as lounge areas, kitchens, and a rooftop terrace. Their market position is that of a local coworking and office space provider targeting small businesses and independent professionals. Technically, the website is built on WordPress using the Elementor page builder, hosted on kasserver.com. The site is moderately performant, mobile-optimized, and uses HTTPS, but lacks advanced security headers and cookie consent mechanisms. The site collects minimal user data via a newsletter signup form and does not appear to use analytics or tracking services, indicating a privacy-conscious approach. From a security perspective, the site benefits from HTTPS and no visible sensitive data exposure. However, it lacks published security policies, incident response contacts, and security headers, which are recommended for improved security posture. There are no detected vulnerabilities or malware indicators. Overall, the website is professional, trustworthy, and suitable for its business purpose. Strategic improvements in security headers, privacy compliance (cookie consent), and transparency around security policies would enhance trust and compliance.

V

Vierte Orte GmbH

zuseworks.de

37

zuseworks.de is a professionally operated coworking space located in Hünfeld, Germany, managed by Vierte Orte GmbH. The company offers a variety of flexible workspace solutions including flex desks, private offices, meeting rooms, virtual office services, event spaces, and coaching rooms. The business targets creatives, entrepreneurs, and self-employed professionals seeking a modern and community-driven work environment. The website is well-structured, visually appealing, and provides clear contact information and social media links, supporting a positive user experience. Technically, the website is built on WordPress using the Elementor page builder, leveraging modern web technologies such as jQuery and Google Tag Manager for analytics. The site is hosted on servers associated with kasserver.com, with HTTPS enabled and cookie consent managed via Usercentrics, indicating a good level of digital maturity and privacy compliance. Performance and mobile optimization are adequate, though accessibility could be improved. From a security perspective, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain WHOIS data is consistent with the business information, enhancing trustworthiness. Overall, zuseworks.de presents a low-risk profile with a solid business presence and good technical implementation. Strategic improvements in security headers, incident response transparency, and accessibility would further strengthen its posture.

Vierte Orte GmbH is a German company specializing in the development and operation of multifunctional real estate spaces primarily in rural and suburban areas. Their offerings combine coworking, cultural activities, accommodation, and community engagement with a strong focus on social and ecological value. The company operates under the parent entity Gründerschiff Holding and targets local communities and businesses seeking innovative shared spaces. Technically, the website is built on WordPress using Elementor, with modern tracking and cookie consent mechanisms implemented. Security posture is adequate with HTTPS and cookie consent but lacks explicit security policies or vulnerability disclosure. Overall, the site is professional, accessible, and compliant with GDPR requirements, reflecting a trustworthy business presence.

V

Vierte Orte GmbH

office-friends-olpe.de

36

Office & Friends Olpe, operated by Vierte Orte GmbH, is a coworking space provider located in Olpe, Germany. The company offers flexible workspace solutions including flex desks, private offices, meeting rooms, virtual offices, and event spaces tailored for freelancers, startups, and entrepreneurs. Their market position is regional with a focus on fostering community and productivity in a modern environment. The website is professionally designed using WordPress and Elementor, featuring clear navigation, mobile optimization, and integrated cookie consent mechanisms. Technically, the site uses modern web technologies and is hosted on kasserver.com with proper HTTPS configuration. Security posture is solid with no visible vulnerabilities, though security headers could be improved. Privacy compliance is addressed with a GDPR-compliant privacy and cookie policy. Contact information is clearly presented, enhancing business credibility. Overall, the website reflects a trustworthy and professional business presence.

V

Vonovia SE

vonovia-sozialstiftung.de

69

Vonovia Sozialstiftung is a social foundation affiliated with Vonovia SE, a leading real estate company in Germany. The foundation focuses on providing social support and assistance to tenants, fostering community engagement and social welfare. The website is professionally designed with consistent branding aligned to Vonovia, targeting tenants and social stakeholders. The technical infrastructure leverages Microsoft Azure DNS and Cookiebot for GDPR-compliant cookie management, indicating a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit privacy policy visibility. Overall, the website is trustworthy, safe, and compliant with basic privacy regulations, serving its non-profit social mission effectively.

V

Vonovia SE

wohnen-und-gesellschaft.de

64

Vonovia SE operates the website wohnen-und-gesellschaft.de, focusing on housing and societal topics related to the concept of 'Heimat' (home). The site serves as a platform to engage residents and stakeholders in the real estate sector, reflecting Vonovia's position as a leading real estate enterprise in Germany. The website content is professionally presented with consistent branding and targets a general audience interested in housing and community issues. Technically, the site leverages Azure DNS infrastructure and integrates Cookiebot for GDPR-compliant cookie consent management, indicating a moderate level of digital maturity. However, explicit privacy policies and terms of service pages are not clearly found, which could be improved for transparency. Security posture is moderate with no visible security headers or incident response contacts, but the use of HTTPS is assumed given the domain and cookie consent implementation. Overall, the site is trustworthy and professionally managed but would benefit from enhanced security and compliance disclosures.

V

Vonovia SE

vonovia.com

70

Vonovia SE is a large enterprise operating in the real estate sector primarily in Germany. The company manages residential properties and offers related services to tenants and partners. The website serves as a corporate portal providing information about the company, its subsidiaries, and services. The site is professionally designed with consistent branding and targets a broad audience including tenants, investors, and partners. Technically, the website employs modern web technologies including JavaScript, CSS3, and uses Cookiebot for GDPR-compliant cookie consent management. Analytics tools such as econda and Google services are used for traffic analysis and marketing optimization. The site is mobile-optimized and has good SEO practices, although accessibility features are basic. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data reduces domain trust slightly, but the overall security posture is good. Overall, the website is a professional and trustworthy corporate site with moderate technical maturity and good privacy compliance. Strategic improvements include publishing privacy and security policies, enhancing security headers, and establishing a vulnerability disclosure program to further strengthen trust and compliance.

6

6th River

6thriver.cz

61

6th River operates as a science and technology park based in Plzeň, Czech Republic, offering rental spaces, consulting services, and facilities to support innovation and business development. The organization positions itself as a regional hub for scientific and technological advancement, supported by European Union co-financing for multiple projects. The website is professionally designed, bilingual (Czech and English), and targets businesses and organizations seeking development support in the Plzeň region. Technically, the website is built on WordPress with modern frontend technologies such as Swiper.js and LazyLoad.js, and it uses Yoast SEO for optimization. The site is served over HTTPS with a valid SSL certificate, ensuring secure communications. Mobile optimization and SEO practices are good, though accessibility features are basic. No major performance issues were detected. From a security perspective, the site enforces HTTPS but lacks important security headers and visible security or privacy policies, which are compliance gaps. No forms or data collection mechanisms were found on the homepage, reducing immediate risk exposure. The absence of WHOIS data for the domain is a concern, as it reduces trust and transparency regarding domain ownership and legitimacy. Overall, the website is safe, professional, and trustworthy in content and presentation but would benefit from improved privacy compliance and domain registration transparency to enhance its security posture and business credibility.

A

Architectural Tribune

architectural-tribune.com

49

Architectural Tribune is a specialized media platform focused on architecture education, news, events, and profiles. It targets architects, designers, and industry professionals by providing curated content including news articles, webinars, and event listings. The platform operates on WordPress with a modern tech stack including Bootstrap, jQuery, and several plugins for social sharing and forms. The website demonstrates good design quality, clear navigation, and mobile optimization, supporting a positive user experience. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and cookie consent mechanisms. Privacy policies and terms are present and comprehensive, indicating awareness of compliance requirements. However, the absence of WHOIS data and direct company contact emails reduces business credibility and trustworthiness. Overall, the site is functional and professional but would benefit from enhanced security practices and transparency.

A

Apleona GmbH

apleona.com

62

Apleona GmbH is a leading European facility management company operating in 32 countries across the EMEA region. The company specializes in managing, decarbonizing, and modernizing real estate and technical installations, offering a broad portfolio of services including facility management, real estate management, building technology, interior construction, and digital green real estate solutions. With over 40,000 employees, Apleona positions itself as a market leader with a strong commitment to sustainability and innovation. Technically, the website is built on TYPO3 CMS and uses modern JavaScript libraries such as Swiper.js for interactive elements. The site is served over HTTPS with gzip compression, indicating a moderate to good performance and mobile optimization. However, some security best practices like DNSSEC and security headers are not implemented, which could be improved to enhance security posture. From a security perspective, the website uses HTTPS and has domain transfer protection enabled, but lacks explicit security policies, incident response contacts, and cookie consent mechanisms, which are important for GDPR compliance and user trust. No critical vulnerabilities or suspicious patterns were detected. The WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website is professional, content-rich, and trustworthy, but could benefit from enhanced security headers, explicit privacy and security policies, and cookie consent implementation to improve compliance and security posture.

C

Charlottenburger Baugenossenschaft eG

charlottenburger-baugenossenschaft.de

46

Charlottenburger Baugenossenschaft eG is a well-established housing cooperative based in Berlin, Germany, founded in 1907. The organization manages approximately 6,700 residential units across multiple Berlin districts, offering affordable housing and fostering community engagement through various social and cultural events. Their website serves as a comprehensive portal for tenants and prospective members, providing detailed information on housing offers, community activities, and tenant services. The cooperative maintains a strong local presence and brand consistency, supported by active social media engagement and a tenant login portal.

V

Vonovia SE

vonovia.de

73

Vonovia SE is a leading real estate company in Germany, providing housing solutions nationwide with a focus on fair pricing and social responsibility. The company operates multiple subsidiary domains and maintains a strong market position in the German real estate sector. The website is professionally designed, mobile-optimized, and provides comprehensive information about the business and its services. Technically, the site uses modern technologies including Cookiebot for GDPR-compliant cookie management and Azure DNS for hosting, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not publicly detailed. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

O

OFFICE & FRIENDS

office-and-friends.de

10

OFFICE & FRIENDS is a regional coworking space provider based in Germany, offering a variety of services including workspaces, meeting rooms, event spaces, and podcast studios. The company targets freelancers, startups, and entrepreneurs primarily in the Südwestfalen region. They maintain a partnership with CoWorkLand to support coworking initiatives in rural areas. The website is built on WordPress using Elementor and includes modern cookie consent mechanisms compliant with GDPR. Social media presence is active on Instagram and Facebook. The company appears well-established since 2017 with a clear regional focus. Technically, the website uses a standard WordPress CMS with Borlabs Cookie for privacy compliance and WP Statistics for analytics. Hosting is provided by agenturserver, indicated by the nameservers. The site is mobile optimized and performs moderately well. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy policies and cookie consent are comprehensive and transparent. Overall, the security posture is solid with no critical vulnerabilities detected. The site lacks explicit security or incident response policies but maintains good privacy compliance. The domain WHOIS data is consistent with the website content and business claims, indicating legitimacy. No WAF or blocking mechanisms interfere with content access. Strategically, OFFICE & FRIENDS should consider publishing explicit security policies and incident response contacts to enhance trust. Improving security headers and ongoing plugin updates will further strengthen security. The company’s regional niche and partnership ecosystem position it well for growth in the coworking market.

C

CREE GmbH

creebuildings.com

51

CREE GmbH operates as an international construction collective specializing in regenerative building solutions. Their website presents a professional image with a clear focus on sustainable construction methodologies and a global network of partners. The company targets construction professionals and clients interested in sustainable building practices. The business model revolves around providing proven systems and methodologies to facilitate regenerative construction projects internationally. Technically, the website is built on WordPress using Elementor and Astra theme, supported by modern tools such as Google Tag Manager, HubSpot, and CookieHub for analytics and privacy compliance. The site is well-optimized for performance and mobile devices, with good SEO practices and structured data enhancing search visibility. Security-wise, the site benefits from HTTPS encryption and Cloudflare protection, with a comprehensive cookie consent mechanism categorizing cookies by purpose. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent, which could be improved to enhance trust and compliance. The WHOIS data for the domain is missing, indicating either a recent registration or privacy protection, which slightly reduces the domain trustworthiness despite the professional website content. Overall, the site is secure, professional, and compliant with privacy regulations, but could benefit from enhanced transparency in security and legal policies.

S

SYNER, s.r.o.

posunoutsedal.cz

54

SYNER, s.r.o. is a well-established construction engineering company based in the Czech Republic with over 33 years of market presence. The website 'Posunout se dál' serves as a recruitment campaign platform highlighting the company's stability, certifications, and attractive employee benefits. The company targets professionals and students in the construction and engineering sectors, offering various job positions and emphasizing a family-like corporate culture. Technically, the website is built on WordPress with modern technologies such as Contact Form 7, Google Analytics, and reCAPTCHA integration, ensuring a secure and user-friendly experience. Security posture is solid with HTTPS enforcement, partial security headers, and GDPR-compliant privacy and cookie policies. No critical vulnerabilities or suspicious content were detected, and the domain registration data aligns with the company's profile, although the domain is relatively new, likely dedicated to recruitment efforts. Overall, the website reflects a professional and trustworthy digital presence supporting SYNER's business objectives.

I

ImmoGarten GmbH

immogarten.de

63

ImmoGarten GmbH operates as a specialized garden nursery and plant provider based in Frankfurt am Main, Germany. The company offers a broad range of plants including garden trees, shrubs, hedges, and garden accessories, complemented by services such as garden consultation, delivery, and planting. Their market position is that of a regional specialist with a strong presence in the Rhein-Main area, supported by partnerships with related brands and an online shop for magnolias. The website is built on Silverstripe CMS and employs modern web technologies, providing a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of a privacy policy and terms of service pages indicates compliance gaps. Contact information is clearly presented, enhancing business credibility. Overall, the website is professional, trustworthy, and well-structured, serving its target audience effectively.

I

Immo Herbst GmbH

karriere-immo-herbst.de

55

Immo Herbst GmbH operates a career portal focused on recruitment for gardening and landscaping roles in Frankfurt am Main, Germany. The website provides job listings and information about employee benefits, targeting job seekers in the landscaping sector. The company appears to be a small regional player in the real estate and landscaping industry. Technically, the website uses a proprietary or site builder framework (OneKit), integrates Facebook Pixel for marketing and tracking, and is hosted on servers associated with kasserver.com. The site is mobile-optimized and has good SEO practices but lacks some advanced accessibility features. Security-wise, HTTPS is enabled and cookie consent mechanisms are in place; however, the absence of security headers and explicit privacy and terms of service pages indicates room for improvement. No blocking or WAF mechanisms were detected, and the content is safe for general audiences. WHOIS data is limited but consistent with the business profile. Overall, the website is functional and professional but would benefit from enhanced privacy, security, and contact transparency.

R

Raumagentur

raumagentur.de

49

Raumagentur is a German-based company specializing in modern workspace consulting, planning, construction, furnishing, and rental services. With over 25 years of experience, it serves a medium-sized market segment, targeting businesses seeking efficient and flexible office environments. The website is professionally designed, featuring comprehensive service descriptions, client testimonials, and a consistent brand image. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, including Google Tag Manager and LinkedIn Insight Tag. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms in place. No critical vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the business claims, indicating legitimacy.

P

PRIMUS developments

primus-developments.de

44

PRIMUS developments is a German real estate development company specializing in sustainable construction using wood as a primary building material. Their projects focus on environmental sustainability by storing CO2 in buildings and promoting renewable resources. The website showcases various projects primarily located in Germany, targeting environmentally conscious investors and public sector clients. Technically, the website is built on WordPress with modern frontend frameworks such as UIkit and jQuery, and it employs performance optimizations like lazy loading. Security posture is moderate with HTTPS enabled and Wordfence security plugin usage, but lacks advanced security headers and visible incident response policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

M

Michel Bau

michel-bau.de

47

Michel Bau is a German family-owned construction company specializing in high-rise, civil engineering, and environmental construction projects. The company positions itself as a specialist with experience, engagement, and modern technology, targeting clients across Germany. The website reflects a medium-sized business with a professional online presence, showcasing project stories and career opportunities. Technically, the site is built on WordPress using Elementor and Yoast SEO, with a cookie consent mechanism implemented via Borlabs Cookie and Google Tag Manager integration. Security posture is good with HTTPS enforced, but lacks some advanced security headers and explicit security policies. Privacy compliance is partial due to missing privacy and terms of service pages. Overall, the site is professional, trustworthy, and safe for general audiences.

L

LUNCKE LAW

lunckelaw.de

57

LUNCKE LAW is a specialized legal and notarial services provider based in Offenbach am Main and Frankfurt am Main, Germany. The firm focuses on construction law, real estate law, and administrative law, led by Notarin and Rechtsanwältin Leona Luncke LL.M., who brings extensive experience and professional expertise. The website presents a professional image with clear service offerings targeted at clients in the Rhein-Main region seeking legal and notarial assistance. Technically, the site is built on WordPress with modern themes and SEO plugins, offering good mobile optimization and moderate performance. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though improvements are recommended in security headers and privacy compliance, particularly cookie consent. Overall, the site is trustworthy and well-positioned in its niche, but could enhance compliance and security transparency.

K

Kluge Sanierung GmbH

kluge-sanierung.de

51

Kluge Sanierung GmbH is a reputable German company specializing in the remediation of hazardous substances such as asbestos, mineral fibers, PCB, PAK, and mold in various building types including industrial, commercial, public, residential, and heritage sites. The company positions itself as a market leader with comprehensive service offerings tailored to complex remediation needs. Their website is built on WordPress using Elementor and includes modern accessibility features and cookie consent mechanisms, reflecting a mature digital presence. Security posture is solid with HTTPS and privacy compliance, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and well-structured, supporting the company's credibility in its sector.

I

Immo Herbst GmbH

immo-herbst.de

64

Immo Herbst GmbH is a large, well-established garden and landscape construction company based in Frankfurt, Germany, serving the Rhein-Main region. It operates multiple subsidiaries covering a broad range of services including garden design, tree care, demolition, environmental services, and more. The company positions itself as the largest in its sector within the region, targeting both private and commercial clients. The website reflects a professional and comprehensive digital presence with clear service offerings and active social media engagement. Technically, the site is built on WordPress using the Divi theme and several plugins for enhanced functionality and compliance, including GDPR cookie consent. Security posture is good with HTTPS enforced and privacy mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy, well-maintained, and compliant with relevant privacy regulations.

GERHARD HÖFLING GMBH is a well-established German company specializing in earthworks, demolition, raw materials supply, and recycling services. With over 70 years of experience, it serves a diverse clientele including builders, architects, contractors, and project developers. The company operates under the parent group Foca Gruppe, indicating a stable business structure and regional market presence. The website reflects a professional image with clear service offerings and contact information, targeting both B2B and B2C segments in the construction and real estate sectors. Technically, the website employs common web technologies such as jQuery and Owl Carousel, and integrates Google Analytics and Tag Manager for user tracking. It is hosted behind Cloudflare, providing performance and security benefits. The site is mobile-optimized with good SEO practices but lacks some advanced accessibility features. No CMS is explicitly detected. From a security perspective, the site uses HTTPS with good SSL configuration and anonymizes IPs in analytics, but lacks important security headers and a cookie consent mechanism, which are critical for GDPR compliance. There are no published security policies or incident response contacts, which limits transparency and preparedness. No vulnerabilities or exposed sensitive data were detected, but improvements are recommended to enhance security posture and privacy compliance. Overall, the website is professional and trustworthy with moderate technical maturity and security posture. Strategic improvements in privacy compliance and security policy publication would strengthen its risk profile and user trust.

I

ISOTEC GmbH

isotec.de

64

ISOTEC GmbH operates a professional website focused on building protection services including moisture damage remediation, mold removal, and balcony renovation. The company positions itself as a specialist with over 150 locations, TÜV-Rheinland certification, and a strong emphasis on quality and customer trust. The website is well-structured, professionally designed, and targets homeowners, tenants, and business customers primarily in Germany. Technically, the site is built on TYPO3 CMS and integrates modern analytics and marketing tools such as Google Analytics, Hotjar, and Cookiebot for GDPR-compliant cookie management. Security posture is solid with HTTPS and consent mechanisms, though explicit security policies and headers could enhance trust further. WHOIS data is minimal but consistent with the hosting provider, showing no suspicious patterns. Overall, the website demonstrates a mature digital presence with good compliance and user experience.

G

GW-Immobilienverwaltungs GmbH

gwi-sw.de

58

GW-Immobilienverwaltungs GmbH is a small regional real estate management company based in Schweinfurt, Germany, specializing in residential property management, rental property management, facility management, and rental services. The website is professionally designed using Joomla! CMS with modern front-end libraries such as jQuery, Bootstrap, and UIkit, providing a good user experience and mobile optimization. The company targets property owners, homeowners associations, and tenants within the local market. Security posture is moderate with HTTPS implied but no explicit security headers detected; cookie consent is implemented indicating GDPR awareness. No advanced security or incident response policies are published, and no analytics or advertising scripts are present, reducing privacy risks. Overall, the website is trustworthy and business credible with clear contact information and consistent branding.

U

Unternehmensgruppe Glöckle

gloeckle-bau.de

63

Unternehmensgruppe Glöckle is a well-established German construction and real estate company founded in 1908, offering comprehensive services from project development to turnkey construction and sales. The company targets both residential and commercial clients, positioning itself as a full-service provider in the construction sector with a strong regional presence. The website reflects a professional and consistent brand image, with good content quality and clear navigation tailored to its audience. Technically, the site is built on WordPress with modern plugins for SEO, forms, and GDPR compliance, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. Overall, the site is trustworthy and business credible, though improvements in privacy policy visibility and security disclosures are recommended.

3

360 Services GmbH

360materials.de

53

360 Services GmbH operates the website 360° Materials, providing comprehensive full-service solutions for construction projects including material supply, waste disposal, and recycling. The company targets construction professionals and project managers, offering regional to international services with a focus on sustainability and efficiency. The website is professionally designed, mobile-optimized, and provides clear navigation and contact options. Technically, the site uses modern Webflow CMS, Cloudflare services including Turnstile captcha for form security, and delivers fast performance with good SEO and accessibility features. Security posture is strong with HTTPS and captcha protections, though lacks explicit security policy and incident response information. Privacy compliance is robust with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is trustworthy and well-positioned in its market niche.

S

SYNER, s.r.o.

syner.cz

50

SYNER, s.r.o. is a prominent Czech construction and engineering company with nearly 35 years of market presence, ranking among the top 10 in the Czech Republic. The company specializes in a broad range of construction projects including administrative, residential, industrial, and infrastructure developments, with a strong focus on sustainability and innovative technologies such as BIM. Their business model integrates multiple divisions and resources to deliver tailored, high-quality solutions to investors and clients. Technically, the website employs modern JavaScript libraries and analytics tools, indicating a moderate to advanced digital maturity. Security posture is solid with HTTPS and CSRF protections, though improvements in security headers and incident response disclosures are recommended. Overall, the website is professional, trustworthy, and compliant with GDPR, though cookie consent mechanisms could be enhanced.

A

ARCHEKTA, s.r.o.

archekta.com

47

Archekta is a small Slovak architecture studio founded in 1991, specializing in architectural design and construction consulting with a focus on balancing art and architecture. The company has a strong regional presence with award-winning projects and a professional team. The website showcases their portfolio and team but lacks privacy and cookie policies, which are important for compliance. Technically, the site uses modern frameworks like Nuxt.js and Tailwind CSS, hosted on Websupport.cz, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks DNSSEC and security headers. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional and trustworthy but could improve compliance and security practices.

F

Fidurock

fidurock.com

61

Fidurock is a Czech real estate investment group specializing in residential and commercial property investments. The company positions itself as a trustworthy and transparent investment partner focusing on long-term growth and sustainability. The website reflects a professional and modern digital presence, utilizing contemporary web technologies such as Nuxt.js and Tailwind CSS, and integrates analytics tools like Google Analytics and Google Tag Manager for performance and user behavior tracking. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks explicit security policies, incident response contacts, and advanced security headers. Privacy compliance is partially addressed through a cookie consent mechanism, but no dedicated privacy policy or terms of service pages were found. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

L

Livimi

livimi.com

66

Livimi is a Czech Republic-based real estate rental platform offering modern apartments in prime urban locations with a focus on digitalized rental processes. The company is part of the Fidurock investment group, leveraging over a decade of experience in property management. Their business model emphasizes direct rentals without commission, digital contract signing, and online housing management, targeting individuals seeking convenient and transparent urban living solutions. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, hosted on DigitalOcean infrastructure, and optimized for performance and mobile responsiveness. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is strong with clear GDPR and cookie policies. Overall, the website presents a professional, trustworthy, and user-friendly experience with moderate tracking for analytics and marketing purposes.

F

Fidurock

nearliving.cz

44

NEAR living is a modern residential real estate development project located in the rapidly evolving Prague district of Palmovka. The project offers a range of apartments from 1+kk to 3+kk, combining urban lifestyle with tranquility and high-quality architectural design. The website is professionally designed using modern technologies such as Nuxt.js and Vue.js, with strong mobile optimization and good SEO practices. The security posture is solid with HTTPS and secure forms, though explicit security headers and a published security policy are missing. Privacy compliance is well addressed with a GDPR-compliant privacy policy and cookie consent mechanism. The WHOIS data shows inconsistencies with a future domain creation date, which slightly impacts trust but does not undermine the overall legitimacy of the business. Strategic recommendations include improving security headers, publishing a security policy, and verifying WHOIS data accuracy.

G

GINKGO - natürlich bauen

ginkgo-ing.de

61

GINKGO - natürlich bauen is a small German company specializing in natural and sustainable architectural building services. Their website presents a professional image with a focus on private and international clients interested in natural building and architectural design. The company leverages WordPress CMS with the Avada theme and integrates SEO and analytics tools such as Yoast SEO and Google Analytics, indicating a moderate level of digital maturity. Hosting is provided via Microsoft Online, ensuring reliable infrastructure. Security posture is solid with HTTPS enforcement, standard security headers, and GDPR-compliant cookie consent mechanisms. However, the site lacks explicit security policies and incident response information, which could be improved to enhance trust and compliance. Overall, the website is well-designed, mobile-optimized, and trustworthy, with no signs of malicious content or vulnerabilities.

M

Messe München GmbH

bau-muenchen.com

63

BAU München is a globally recognized trade fair organizer specializing in architecture, building materials, and systems. The website serves as a comprehensive platform for event information, exhibitor registration, and industry insights, targeting architects, planners, investors, and craftsmen. The site is professionally designed, mobile-optimized, and uses modern web technologies including web components and elastic search for enhanced user experience. Privacy compliance is robust, leveraging Usercentrics CMP and providing a comprehensive privacy policy in German. Security posture is strong with HTTPS, security headers, and domain transfer protections, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, the website reflects a mature, trustworthy, and well-managed digital presence aligned with Messe München GmbH's brand and business objectives.