High-risk security reports
36,503 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
5,151–5,200 of 36,503
sensum · Graphikbürosensum.de
Other · Germany
49High
NIS2 17 · GDPR 60
NIS2 17 · GDPR 60
sensum · Graphikbüro is a small German-based graphic and web design service provider offering print design, web development, and educational seminars. The company targets nonprofit and other clients seeking creative design solutions and training. Their market position is niche with a focus on quality and client collaboration. The website is built on WordPress using the Divi theme, enhanced with SEO and privacy plugins, reflecting a moderate to good level of digital maturity. The technical infrastructure is modern and mobile-optimized, with good SEO practices and basic accessibility features. Security posture is solid with HTTPS and privacy compliance, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.
- HHug, Vallendar
originalshrine.org
Other
39High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The website originalshrine.org serves as an informational platform dedicated to the Original Shrine of the international Schoenstatt Movement, focusing on religious and cultural content. It provides visitors with historical information, event details, a live webcam feed, and media resources such as sermons. The site targets a broad audience interested in religious and cultural heritage, operating primarily as a non-commercial informational resource. The domain is well-established since 2012, registered with a reputable registrar, and shows consistency between WHOIS data and website content. Technically, the website employs basic web technologies including HTML, CSS, JavaScript with jQuery and Superfish for navigation menus, and Google Web Fonts. The hosting provider is Vautron Rechenzentrum AG. While the site uses HTTPS, it lacks advanced security headers and uses an outdated JavaScript library version, which could pose security risks. Mobile optimization and accessibility are basic, and SEO practices are minimal but functional. From a security perspective, the site benefits from HTTPS but misses DNSSEC and security headers, and no cookie consent mechanism is present. No forms or user data collection points were detected, reducing exposure to input-based vulnerabilities. The WHOIS data indicates a legitimate and stable domain registration with no privacy protection, aligning with the website's purpose. No signs of malware, phishing, or adult content were found, indicating a safe browsing experience. Overall, the website is moderately secure and credible but would benefit from updates to its technical stack, enhanced security practices, and improved privacy compliance. Strategic improvements in these areas would strengthen trust and user experience.
Webite, s.r.o.webite.cz
Technology · Czech Republic
49High
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Webite, s.r.o. is a small web design studio based in Brno, Czech Republic, specializing in comprehensive web services including UX design, SEO optimization, and web and mobile application development. The company positions itself as a professional and client-focused service provider with a portfolio of notable clients and positive testimonials. The website is well-structured, professionally designed, and targets businesses seeking quality web solutions. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and Google services, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and Google reCAPTCHA protecting contact forms, though the absence of certain security headers suggests room for improvement. Privacy compliance is strong, featuring a detailed privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the website reflects a trustworthy and credible business with a good balance of technical and business maturity.
- Fidurock
nearliving.cz
Real Estate · Czech Republic
45High
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
NEAR living is a modern residential real estate development project located in the rapidly evolving Prague district of Palmovka. The project offers a range of apartments from 1+kk to 3+kk, combining urban lifestyle with tranquility and high-quality architectural design. The website is professionally designed using modern technologies such as Nuxt.js and Vue.js, with strong mobile optimization and good SEO practices. The security posture is solid with HTTPS and secure forms, though explicit security headers and a published security policy are missing. Privacy compliance is well addressed with a GDPR-compliant privacy policy and cookie consent mechanism. The WHOIS data shows inconsistencies with a future domain creation date, which slightly impacts trust but does not undermine the overall legitimacy of the business. Strategic recommendations include improving security headers, publishing a security policy, and verifying WHOIS data accuracy.
- B2C, s.r.o.
dezeta.cz
Retail · Czech Republic
48High
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Papírnictví DEZETA is an e-commerce and physical retail business operated by B2C, s.r.o., specializing in office, school, and paper products. The company has a local market presence in the Czech Republic, with a physical store located at Thákurova 7, Prague 6, and an online shop offering a wide range of stationery and related products. The website is built using modern JavaScript frameworks, specifically Vue.js, providing a responsive and user-friendly shopping experience. However, the site lacks some advanced security and privacy features such as cookie consent mechanisms and security headers. The WHOIS data confirms the legitimacy and consistency of the domain registration with the business information provided on the site.
- Office Pro s.r.o.
mujnavrh.cz
Retail · Czech Republic
44High
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Office Pro s.r.o. operates a professional e-commerce platform specializing in office furniture and accessories, primarily serving the Czech market. The website offers a unique 3D office design tool enabling customers to create and customize office layouts online, enhancing user engagement and service differentiation. The company maintains a consistent brand presence with active social media channels and a comprehensive privacy and cookie policy aligned with GDPR requirements. Technically, the site leverages modern JavaScript libraries including Babylon.js for 3D rendering, and integrates multiple analytics and advertising pixels for marketing optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies could enhance trust. The absence of WHOIS data limits domain transparency, but the website's professional content and business indicators suggest legitimate operations. Overall, the site is well-positioned in its niche with moderate technical maturity and good compliance practices.
- Office Pro s.r.o.
officepro.cz
Retail · Czech Republic
43High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Office Pro s.r.o. is a Czech company specializing in office furniture and accessories, offering recognized brands such as OFFICE PRO and HOBIS. The company targets business customers seeking quality office chairs, desks, and custom furniture solutions. Their website provides detailed product information, a 3D office design tool, and a blog with relevant content. Technically, the website employs modern analytics and marketing technologies including Google Tag Manager, Facebook Pixel, TikTok Pixel, and Microsoft Clarity, with HTTPS enabled ensuring secure connections. However, the absence of WHOIS data and lack of visible privacy and terms of service pages indicate areas for improvement in transparency and compliance. Security posture is generally good but could benefit from enhanced HTTP security headers and clearer incident response contacts. Overall, the site is professional, content-rich, and safe for general audiences, supporting a medium-sized business with a solid market position in the Czech Republic.
- Office Pro s.r.o.
hobis.cz
Retail · Czech Republic
43High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Office Pro s.r.o. operates a professional website focused on the sale and custom manufacturing of ergonomic office furniture under the HOBIS brand. The company leverages a long tradition associated with the HON manufacturer, emphasizing quality, ergonomics, and functionality to enhance workplace productivity. The website targets businesses and office environments seeking modern, ergonomic furniture solutions. Technically, the website employs modern analytics and marketing technologies including Google Analytics, Facebook Pixel, TikTok Pixel, and Microsoft Clarity, alongside a cookie consent mechanism to comply with privacy regulations. The site is served over HTTPS with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks explicit security headers and visible security policies. The absence of WHOIS data limits domain registration trust analysis, but the website content and certifications provide strong trust signals. Overall, the site is professional, content-rich, and trustworthy from a business perspective.
- Internetagentur dd-media.de
werratal-news.de
Media · Germany
49High
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
werratal-news.de is a regional news portal operated by Internetagentur dd-media.de, serving the Mittleres Werratal and Waldhessen regions in Germany. The site provides local news, event calendars, weather updates, and cultural information, positioning itself as a trusted source for residents and regional stakeholders. The business model focuses on digital regional news dissemination and community engagement through a well-structured website with categorized content and social media integration. Technically, the website employs a moderate technology stack including jQuery, Bootstrap, FontAwesome, and Matomo analytics, combined with a cookie consent manager compliant with GDPR. The site is mobile-optimized with good navigation and SEO practices, although some outdated libraries like jQuery 1.11.2 present potential security risks. Hosting details are not explicitly identified, but HTTPS is enforced with a good SSL configuration. From a security perspective, the site demonstrates good practices such as HTTPS, privacy-respecting analytics, and cookie consent mechanisms. However, it lacks advanced security headers like Content-Security-Policy and does not provide a security policy or vulnerability disclosure page. No critical vulnerabilities or exposed sensitive data were detected, but updating outdated libraries and enhancing security headers is recommended. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its regional audience effectively. Strategic improvements in security posture and transparency would further enhance its credibility and resilience.
- unimess GmbH
anwaltskanzlei-marketing.de
Other · Germany
43High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The website represents unimess GmbH, a specialized marketing agency focused on legal professionals such as lawyers and tax advisors in Germany. Their services include internet presence creation, marketing consulting, print media, and office equipment for law firms. The company positions itself as an experienced niche player with a nationwide clientele. Technically, the website uses a modern frontend stack including Bootstrap, jQuery, and Matomo analytics configured for privacy by disabling cookies. The site is responsive and well-structured, providing a professional user experience. Security posture is moderate; while HTTPS is assumed, no explicit security headers or policies are visible, and no cookie consent mechanism is implemented despite analytics usage. WHOIS data aligns with the company branding, indicating legitimacy. Overall, the site is professional and trustworthy but could improve in security and privacy compliance aspects.
- Uunimess GmbH
werbeagentur-juwelier.de
Media · Germany
43High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The website www.werbeagentur-juwelier.de represents unimess GmbH, a small specialized advertising agency focused on jewelers and jewelry manufacturers. The company offers services including internet agency solutions, marketing, and advertising tailored to this niche market. The website content is professional and consistent with the business focus, targeting German-speaking jewelers and related manufacturers. The technical infrastructure employs modern front-end libraries such as jQuery, Bootstrap, and Font Awesome, with Matomo analytics integrated for user tracking without cookies. The site is mobile optimized and provides a good user experience with clear navigation and design consistency. However, contact information is not explicitly visible on the main page, and no forms or social media links are present in the analyzed content.
unimess GmbHjobs-ueberall.de
Other · Germany
43High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Jobs-ueberall.de is a German job listing portal operated by unimess GmbH, providing job offers from various clients across Germany. The site targets a broad audience seeking employment opportunities in multiple sectors. The platform offers a job finder search form and links to employer websites for detailed job information. The business model centers on aggregating and displaying client job offers to job seekers. Technically, the site uses a modern frontend stack including Bootstrap, jQuery, and Slick Carousel, with Matomo analytics configured to disable cookies, reflecting some privacy awareness. However, no cookie consent mechanism is present. Security posture is moderate with no detected security headers and unknown SSL configuration from provided data. WHOIS data aligns with the company branding and domain ownership, supporting legitimacy. Overall, the site is functional, professionally designed, and mobile optimized but could improve in privacy compliance and security best practices.
Industrie- und Handelskammer Bonn/Rhein-Siegihk-bonn.de
Government · Germany
44High
NIS2 52 · GDPR 40
NIS2 52 · GDPR 40
The Industrie- und Handelskammer Bonn/Rhein-Sieg (IHK Bonn/Rhein-Sieg) is a regional chamber of commerce serving the Bonn and Rhein-Sieg economic region in Germany. It acts as a key institution supporting local businesses through consultation, training, certification, and advocacy services. The website reflects a well-established organization with a clear focus on business development, vocational training, and regional economic growth. The target audience includes companies, apprentices, founders, and members of the chamber. The business model is that of a public law institution representing commercial interests in the region.
Cookies lišta, s.r.o.cookieslista.cz
Technology · Czech Republic
49High
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Cookies lišta, s.r.o. is a Czech-based small technology company specializing in providing comprehensive cookie consent and GDPR compliance solutions tailored for websites. Their offerings include a cookie consent bar, privacy policy generator, and ongoing legislative and technological updates, positioning them as a niche player in the compliance software market. The company collaborates with legal experts and web design studios to ensure both legal accuracy and technical quality. Their market focus is primarily on Czech businesses needing to comply with evolving cookie legislation effective from 2022 and beyond. Technically, the website is built on WordPress and leverages modern JavaScript libraries and third-party services such as Google Analytics, Google Tag Manager, Facebook Pixel, Hotjar, and Smartsupp live chat. The site demonstrates good SEO practices, mobile optimization, and a user-friendly interface with clear navigation and professional design. Consent management is robust, with scripts loaded conditionally based on user consent, reflecting a mature digital compliance posture. From a security perspective, the site enforces HTTPS and implements consent-based script loading to protect user privacy. However, no explicit security headers were detected, suggesting room for improvement in hardening the site against common web threats. The absence of WHOIS data due to privacy protection is typical for small businesses and does not raise immediate concerns given the professional presentation and clear contact information. Overall, the website presents a low-risk profile with strong compliance focus, good technical implementation, and transparent business operations. Strategic recommendations include enhancing security headers, maintaining up-to-date third-party script audits, and possibly publishing a formal security policy to further build trust.
Other
37High
NIS2 17 · GDPR 15
NIS2 17 · GDPR 15
The website www.freischaltportal.de currently serves only a 404 Not Found error page, indicating that the requested content is unavailable or the site is misconfigured. There is no accessible business information, metadata, or structured data to analyze. The lack of content prevents any meaningful assessment of the company's market position, services, or target audience. Technically, the site does not provide any detectable technologies, scripts, or security headers, and no HTTPS or SSL details are available from the provided data. Security posture is minimal due to the absence of content and security best practices. Overall, the site appears inactive or improperly maintained, resulting in a very low trust and credibility score.
- Hoffnungsvoll leben
hoffnungsvoll-leben.de
Non-profit · Germany
44High
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Hoffnungsvoll leben is a small non-profit Christian website dedicated to personal development, psychological well-being, and spiritual growth. It provides a broad range of articles, meditations, and materials authored by professionals and active members of the Schönstatt Movement. The website targets individuals seeking faith-based guidance and psychological support. Technically, the site is built on the SilverStripe CMS platform, uses common JavaScript libraries such as jQuery and Revolution Slider, and is hosted behind Cloudflare for DNS and security. The site is mobile-optimized with a moderate performance profile. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. No direct contact emails or phone numbers are provided, only a contact form. The WHOIS data is consistent with the website's origin and business type, showing no suspicious patterns. Overall, the site is trustworthy and professionally maintained but could improve privacy compliance and security best practices.
Other · Germany
46High
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
The website pilgerwege-schoenstatt.de serves as an informational platform focused on pilgrimage routes associated with the Schönstatt movement and its centers in Germany. It targets pilgrims and religious visitors interested in these routes. The site uses WordPress CMS with the Divi theme and integrates OpenStreetMap for mapping functionalities. The technical infrastructure is moderate, with basic mobile optimization and SEO practices. Security posture is weak due to lack of HTTPS verification in the provided data, absence of security headers, and missing privacy and cookie policies. No contact or incident response information is available, which limits user trust and compliance with data protection regulations. Overall, the site is functional but lacks advanced security and privacy features, which should be addressed to improve trust and compliance.
- SschoenstattTV: Live Streams from Schoenstatt
schoenstatt-tv.de
Media · Germany
35High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
schoenstattTV is a small non-profit media platform dedicated to streaming and archiving religious events related to the Schoenstatt spirituality and community. It offers multilingual content and live streams, targeting followers and families interested in Schoenstatt. The website is hosted on servers associated with kasserver.com and uses HTTPS with embedded YouTube videos for media delivery. The technical infrastructure is basic but functional, with moderate performance and limited mobile optimization. Security posture is adequate with HTTPS but lacks advanced security headers and visible privacy or cookie policies. No contact information or social media presence is evident, which limits direct user engagement and trust signals. Overall, the site serves a niche religious community with a focus on media content delivery rather than commercial business operations.
- Pater Kentenich Sekretariat
pater-kentenich.org
Non-profit · Germany
43High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The Pater Kentenich Sekretariat website serves as an informational and spiritual resource dedicated to Father Joseph Kentenich, founder of the International Schoenstatt Movement. It supports the beatification process by providing prayer inspirations, written materials, and testimonies in multiple languages, targeting a global religious audience. The website is positioned as a niche non-profit entity focused on religious education and spiritual guidance. Technically, the site is built on the concrete5 CMS platform (version 5.6.4.0) and employs common web technologies such as jQuery and Bootstrap. The site is mobile-optimized and offers a multilingual experience, although some technical aspects like security headers are missing. Security posture is moderate with HTTPS enforced but lacking advanced headers and incident response information. The absence of WHOIS data limits domain registration trust verification, but the website content and structure indicate legitimacy. Overall, the site is professionally presented with good content quality and user experience but could improve in privacy compliance and security best practices.
CURIA (formerly Femtec.Alumnae)curia-netzwerk.de
Technology · Germany
48High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
CURIA is a well-established non-profit network dedicated to supporting women in STEM fields in Germany. With over 1,000 members and partnerships with reputable companies, it offers career development, networking, and annual conferences. The website is professionally designed, mobile-optimized, and content-rich, reflecting a mature digital presence. Technically, it runs on WordPress with modern front-end technologies and uses plugins for analytics and contact forms. Security posture is good with HTTPS enforced, but lacks some security headers and explicit incident response contacts. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and serves its target audience effectively.
Sozialverband Deutschland e.V.diebessererente.de
Non-profit · Germany
49High
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Sozialverband Deutschland e.V. (SoVD) is a well-established German non-profit organization dedicated to social justice and strengthening the statutory pension system. The website focuses on educating the public about the benefits of the statutory pension, advocating for policy improvements, and providing social counseling services. It targets German residents, pensioners, and socially vulnerable groups. The organization positions itself as a trusted voice in social policy with a strong digital presence and comprehensive content offerings. Technically, the website is built on TYPO3 CMS, uses modern JavaScript libraries like jQuery, and integrates privacy-respecting tools such as Klaro for cookie consent and Matomo for analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses privacy-friendly embedded content, and implements cookie consent mechanisms. However, explicit security headers like Content-Security-Policy are not detected and could be improved. No critical vulnerabilities or exposed sensitive data were found. Overall, the website presents a low-risk profile with strong privacy compliance and professional content. Strategic improvements in security headers and explicit incident response policies could further enhance trust and resilience.
Government · Germany
49High
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
The Verband für Sicherheit in der Wirtschaft Hessen (VSW) is a professional association serving as a key interface between government security agencies and the private sector in Germany, particularly in Hessen. It provides a platform for information exchange, networking, and professional development through seminars, events, and an expert pool. The organization collaborates closely with federal and state security bodies, enhancing its credibility and influence in the security domain. The website reflects a mature digital presence built on TYPO3 CMS, featuring modern web technologies and a responsive design that caters well to its professional audience. Security-wise, the site enforces HTTPS, uses GDPR-compliant cookie consent mechanisms, and integrates Google reCAPTCHA to protect forms. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the site is trustworthy, well-maintained, and aligned with its business mission.
- Projekt Pilgerheiligtum
pilgerheiligtum.de
Non-profit · Germany
49High
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Projekt Pilgerheiligtum is a well-established non-profit religious initiative based in Germany, focused on promoting the pilgrimage of the Mater Ter Admirabilis image within Christian communities. With over 25 years of history and a network of thousands of pilgrimage images, it serves as a spiritual and community-building platform. The website offers rich content, multilingual support, and various services including newsletters, online prayer sessions, and a shop for religious materials. Technically, the site is built on WordPress using Elementor and WooCommerce, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Privacy compliance is strong, reflecting GDPR adherence. Overall, the site is professional, trustworthy, and well-positioned within its niche.
Non-profit · Germany
43High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The Schönstattbewegung Frauen und Mütter website represents a small non-profit religious community focused on women and mothers within the Catholic Church in Germany. The organization provides spiritual support, events, publications, and community engagement. The website is well-structured, content-rich, and clearly targeted to its niche audience. The technical infrastructure is based on the concrete5 CMS platform, with standard web technologies such as jQuery and Bootstrap grid. The site is mobile-optimized and performs moderately well, though some modernization could improve performance and security. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and an outdated CMS version present potential risks. Privacy compliance is partially met with a privacy policy present but lacking cookie consent mechanisms. Contact is primarily via a web form, with no direct emails or phone numbers publicly listed. Overall, the site is trustworthy and professional but could benefit from enhanced security and privacy features.
- SSchönstatt Familienbewegung Deutschland
familienbewegung.de
Non-profit · Germany
49High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The Schönstatt Familienbewegung Deutschland is a German non-profit organization focused on supporting families and couples through community events, spiritual engagement, and educational materials. Their website reflects a well-structured platform offering event information, media resources, and networking opportunities tailored to their target audience of families and young couples. Technically, the site is built on the Contao CMS platform, utilizing modern JavaScript libraries and a compliant cookie consent mechanism, hosted by a reputable German provider. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and active consent management. Overall, the website presents a trustworthy and professional image consistent with its mission and audience.
Startseite - Hoffschmidt Lichtwerbunghoffschmidt.de
—
41High
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Magistrat der Stadt Hanaudemokratie-leben-hanau.de
Government · Germany
48High
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The website www.demokratie-leben-hanau.de represents a government-affiliated non-profit partnership focused on promoting democracy, diversity, and tolerance in Hanau, Germany. It serves as a platform to coordinate local civil society actors, government bodies, and political stakeholders to foster community engagement and support projects aligned with these values. The site provides comprehensive information on funding opportunities, ongoing projects, events, and contact details, reflecting a well-structured and community-oriented business model. Technically, the website is built on Joomla CMS with modern frontend technologies such as Bootstrap 5 and jQuery, ensuring responsive design and moderate performance. Hosting is provided by SchlundTech, a reputable German hosting provider. The site employs HTTPS with a valid SSL configuration and includes CSRF tokens in forms, indicating attention to security best practices. However, some HTTP security headers appear to be missing, which could be improved. From a security and compliance perspective, the site demonstrates good GDPR compliance with clear privacy and cookie policies and consent mechanisms. Contact information is transparent and professional, but there is no explicit security policy or incident response information available. No vulnerabilities or suspicious content were detected, and the site maintains a safe content rating suitable for general audiences. Overall, the website is trustworthy, professionally maintained, and fulfills its role as a local government and civil society communication platform. Strategic recommendations include enhancing security headers, adding explicit security policies, and maintaining up-to-date software to further strengthen its security posture.
INTERVISTA AGintervista-ag.de
Technology · Germany
49High
NIS2 17 · GDPR 45
NIS2 17 · GDPR 45
INTERVISTA AG operates as a specialized provider of sales automation and digitalization software solutions primarily targeting the insurance and finance sectors in Germany. Their offerings include consulting, software development, and operational services designed to enhance sales efficiency and digital transformation for their clients. The company positions itself as a partner for businesses seeking to outperform competitors through innovative technology solutions. Technically, the website is built on WordPress with modern plugins and frameworks such as Beaver Builder and Yoast SEO, indicating a mature digital infrastructure. The presence of tracking and analytics tools like Matomo and Leadinfo suggests an active approach to user engagement and lead generation, although privacy compliance mechanisms are lacking. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and explicit policies. Overall, the website is professional and content-rich but would benefit from enhanced privacy and security disclosures to improve trust and compliance.
B-TA Softbtasoft.hu
Technology · Hungary
45High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
B-TA Soft is a Hungarian small technology company specializing in cloud-based services aimed at improving business workflows, communication, and efficiency. Their key offerings include business process support software (aMetszet), a sports career tracking application (MobilisSport), and comprehensive hosting services. The company targets local businesses and sports professionals, positioning itself as a niche provider of integrated cloud solutions. The website reflects a professional and consistent brand image with good design and mobile optimization, though it lacks comprehensive privacy and security disclosures. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and SumoMe for marketing and analytics, but does not employ advanced security headers or provide incident response contacts. The domain is well-established since 2015, consistent with the business profile, and no suspicious elements were detected. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.
- Tourismuszentrale Fränkische Schweiz
fraenkische-schweiz.com
Hospitality · Germany
49High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The website www.fraenkische-schweiz.com serves as the official tourism portal for the Fränkische Schweiz region in Bavaria, Germany. It provides comprehensive information on activities, accommodations, gastronomy, and events, targeting tourists and vacationers interested in this historic and scenic area. The site is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, it is built on the TYPO3 CMS platform and integrates modern JavaScript libraries and Google Analytics for tracking. Security measures include HTTPS and a cookie consent mechanism, though explicit security headers and detailed security policies are not evident. The absence of WHOIS registration data raises concerns about domain legitimacy, which should be verified to ensure full trust. Overall, the site is a reliable resource for regional tourism but would benefit from enhanced transparency in domain registration and security disclosures.
Das Fichtelgebirge: Fichtelgebirgefichtelgebirge.bayern
Hospitality · Germany
49High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The website www.fichtelgebirge.bayern serves as a regional tourism portal dedicated to the Fichtelgebirge region in Germany. It provides comprehensive information about accommodations, cultural events, outdoor activities, and regional specialties, targeting tourists and visitors interested in exploring the area. The site is multilingual, offering translations via Google Translate, enhancing accessibility for international visitors. Technically, the site is built on TYPO3 CMS, utilizing modern frontend libraries such as jQuery UI and Slick Carousel, and integrates Google Analytics for visitor tracking alongside a CookieFirst consent management system. Security-wise, the site enforces HTTPS and implements cookie consent, but lacks explicit security headers and vulnerability disclosure mechanisms. The WHOIS data is privacy protected, which is common for such regional tourism sites, and no suspicious patterns were detected. Overall, the site presents a professional and trustworthy digital presence for regional tourism promotion.
Other
41High
NIS2 2 · GDPR 15
NIS2 2 · GDPR 15
The website yeu-data.de is currently inaccessible, returning a 403 Forbidden error page indicating restricted access or misconfiguration. Due to the lack of accessible content, no business description, services, or contact information can be extracted. The domain is registered with multiple name servers but lacks detailed WHOIS registrant information, limiting trust assessment. Technically, the site does not expose metadata, scripts, or security headers, and no privacy or cookie policies are present. This severely limits the ability to evaluate the website's digital maturity or security posture. The absence of content and security best practices suggests the site is either under maintenance or improperly configured, posing a risk to user trust and engagement.
unimess GmbHunimess.de
Technology · Germany
48High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
unimess GmbH is a small, established internet and advertising agency based in Ulm, Germany, with over 25 years of experience. The company specializes in internet presence creation, web design, CMS implementation, SEO, SEA, programming, online shops, app development, cloud solutions, and business consulting. Their market position is regional with a focus on delivering tailored digital marketing and technology solutions. Technically, the website employs modern front-end frameworks such as Bootstrap and jQuery, with additional libraries for animations and user experience enhancements. The use of Matomo analytics reflects a privacy-conscious approach. Security posture is moderate with no visible critical vulnerabilities, but lacks explicit security headers and published security policies. Privacy compliance is good with a comprehensive privacy policy but missing cookie consent mechanisms. Overall, the website is professional, well-branded, and trustworthy, though improvements in security transparency and compliance could enhance their posture.
Other
49High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website at arctic-council.org is currently inaccessible, returning a 403 Forbidden error page that blocks access to any substantive content. This prevents extraction of business, security, or compliance information from the site itself. The domain is long-established, created in 1999, and registered with Tucows Domains Inc. without privacy protection, indicating a legitimate registration history. Hosting is provided by SiteGround as indicated by the nameservers. No privacy, cookie, or terms of service policies are present in the accessible content, nor are there any contact details or forms. The site lacks security headers and DNSSEC is not enabled, which are areas for improvement. Overall, the site’s digital presence is minimal or restricted, limiting the ability to assess its business operations or security posture fully.
Bundesforum Lernort Bauernhofforum-lernort-bauernhof.de
Education · Germany
49High
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
The Bundesforum Lernort Bauernhof is a German nationwide non-profit network established in 2006 that coordinates organizations, associations, ministries, and individuals dedicated to farm-based educational initiatives. The website serves as an information hub promoting the farm as an experiential learning environment, emphasizing sustainable development education for children and youth. The organization focuses on networking, material development, certification, and advocacy to integrate farm education into school curricula across Germany. Technically, the website is built on WordPress with the Divi theme and uses modern web technologies including jQuery and Font Awesome. It features a cookie consent mechanism but lacks a dedicated privacy policy page and explicit contact information. Security posture is generally good with HTTPS enabled, but security headers are not evident and no vulnerability disclosure or incident response information is provided. WHOIS data for the domain is missing, which raises concerns about domain registration transparency and trustworthiness. Overall, the site is professional and content-rich but would benefit from improved privacy and security disclosures.
i.m.a - information.medien.agrar e.V.landwirtschaftmachtschule.de
Education · Germany
47High
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
The website 'Landwirtschaft macht Schule' is an initiative by i.m.a - information.medien.agrar e.V. aimed at integrating agriculture into school education in Germany. It connects farmers with schools to provide practical and sustainable learning experiences, promoting awareness of regional food production and agricultural practices. The platform offers resources, training, and a network for teachers, farmers, and associations, positioning itself as a niche educational non-profit with a strong focus on sustainability and hands-on learning. Technically, the website is built on the MYOB CMS platform using modern frameworks such as UIkit and jQuery. It features responsive design, good navigation, and moderate performance. The site employs HTTPS with a cookie consent mechanism, ensuring GDPR compliance. However, it lacks some advanced security headers and explicit incident response or vulnerability disclosure information. From a security perspective, the site demonstrates good practices with no detected vulnerabilities or exposed sensitive data. The absence of tracking scripts and minimal user data collection aligns with privacy best practices. The WHOIS data is limited but consistent with the site's professional and educational nature, showing no suspicious patterns. Overall, the website is trustworthy, well-structured, and serves its educational mission effectively. Strategic improvements in security headers, accessibility, and transparency regarding security policies could further enhance its posture and user trust.
- NNordisk KulturlandskabsForbund
kulturlandskap.org
Other · Denmark
45High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Nordisk KulturlandskabsForbund is a Nordic non-profit organization dedicated to promoting interest and sustainable use of the Nordic countries' cultural landscapes. The organization operates primarily through membership activities including seminars, excursions, publications, and an active website with forums and resources. The website is built on WordPress with a moderate technical infrastructure and uses common plugins for community engagement and email subscriptions. The site is well designed with good navigation and relevant content for its target audience of Nordic cultural and environmental professionals and enthusiasts. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and professionally maintained, serving a niche non-profit community effectively.
- AAmt für Gemeindedienst
ehrenamt-evangelisch-engagiert.de
Non-profit · Germany
49High
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
The website 'Ehrenamt Evangelisch Engagiert' serves as an informational and community platform supporting voluntary engagement within the Evangelical Lutheran Church in Bavaria. It provides news, resources, and coordination services for volunteers and church members, positioning itself as a niche non-profit entity focused on church-related volunteerism. The site is professionally designed with consistent branding and clear navigation, targeting German-speaking church volunteers and coordinators. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries such as Leaflet for maps and Matomo for privacy-conscious analytics. The site is mobile-optimized and performs moderately well, with basic accessibility features. Security posture is solid with HTTPS enforced and minimal cookies used, although security headers are not explicitly detected. Privacy compliance is good, with a clear cookie banner and privacy policy in German. No critical vulnerabilities or blocking mechanisms were detected. The WHOIS data aligns with the website's organizational claims, showing consistent domain registration and DNS management. Contact information is transparent and professional, including official church email and phone numbers. Social media presence is limited to Facebook. Overall, the website demonstrates a mature digital presence for a small non-profit church entity, with good security and privacy practices but room for improvement in security headers and incident response disclosures.
- VVogel Software GmbH
vogel-software.de
Technology · Germany
43High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Vogel Software GmbH is a small, established German software company specializing in custom software development, particularly in Warenwirtschaft (inventory management) and Produktionsplanung (production planning) systems using Visual FoxPro and .NET technologies. Founded in 1989, the company offers tailored software solutions, coaching, and porting services, targeting SMEs in various sectors including trade, industry, and engineering firms. Their flagship products include vmAuftrag and the StarLib C# framework. The website reflects a professional and consistent brand image with detailed business and contact information, supporting their market credibility. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google reCAPTCHA for form security. Hosting is managed via nshost2.de name servers, and the site includes analytics via Piwik. While the site is mobile-optimized and SEO-friendly, some security best practices like security headers (CSP, HSTS) are missing, and no cookie consent mechanism is implemented despite cookie usage. From a security perspective, the site uses HTTPS and protects its contact form with reCAPTCHA, but lacks explicit security policies and incident response information. The WHOIS data confirms the domain's legitimacy and long-standing registration consistent with the company's history. Overall, the site is trustworthy, safe, and professionally maintained, though improvements in security headers and privacy compliance could enhance its posture. The risk level is low, with no signs of malicious content or blocking mechanisms. Strategic recommendations include implementing security headers, adding cookie consent, and publishing security policies to strengthen compliance and trust.
- MMESSER MEDICAL HOME CARE
messermedical.si
Healthcare · Slovenia
47High
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
MESSER MEDICAL HOME CARE is a small Slovenian healthcare provider specializing in home oxygen therapy and sleep apnea treatment devices. Their website offers basic informational content about their services, including medical oxygen supply and CPAP/BIPAP devices for sleep therapy. The business targets patients requiring home medical support and operates locally in Slovenia. Technically, the website is simple, built with basic HTML and CSS, hosted by OVH, and lacks modern CMS or frameworks. There is no evidence of advanced analytics or tracking, and no social media presence is linked. Security posture is minimal with no detected security headers or privacy policies, and the presence of HTTPS could not be confirmed from the data provided. The domain registration is consistent with the business profile and location, supporting legitimacy. Overall, the website serves as a basic online presence but lacks important compliance and security features.
- GGemeindewerke Kahl Versorgungsgesellschaft mbH
gemeindewerke-kahl.de
Energy · Germany
45High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Gemeindewerke Kahl Versorgungsgesellschaft mbH is a regional utility provider based in Kahl am Main, Germany, offering electricity, gas, and water supply services. The company emphasizes sustainable energy solutions, including 100% certified hydropower electricity and climate-neutral gas options. Their market position is that of a trusted local supplier with a focus on environmental responsibility and customer service. The website targets residential and commercial customers in the region, providing online contract management, energy-saving tips, and services related to electromobility and photovoltaics. Technically, the website is built using modern web technologies including Bootstrap 5 and jQuery, hosted on rzone.de servers. It is mobile-optimized with good accessibility and SEO practices. The site includes interactive elements such as a tariff calculator form and a well-structured navigation menu. However, no CMS or advanced platform is explicitly detected. From a security perspective, the site uses HTTPS and secure form inputs but lacks visible security headers and explicit incident response or vulnerability disclosure policies. No cookie consent mechanism was detected, which may pose GDPR compliance risks. The WHOIS data is consistent with the website content and business legitimacy, with no suspicious patterns. Overall, the website is professional, trustworthy, and well-suited for its business purpose. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance its security posture and regulatory adherence.
EZV Energie- und Service GmbH & Co. KG Untermainezv-energie.de
Energy · Germany
45High
NIS2 2 · GDPR 55
NIS2 2 · GDPR 55
EZV Energie- und Service GmbH & Co. KG Untermain is a regional energy and telecommunications provider based in Germany, specializing in supplying 100% green electricity, broadband internet, telephony, and e-mobility solutions. The company emphasizes local renewable energy generation including photovoltaic, wind, and hydropower, targeting private and business customers in the Untermain region. Their business model focuses on direct customer engagement supported by online services and regional partnerships. The website reflects a medium-sized enterprise with consistent branding and good content quality.
- EElektrizitätswerk Goldbach-Hösbach GmbH & Co. KG
ew-goldbach-hoesbach.de
Energy · Germany
47High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Elektrizitätswerk Goldbach-Hösbach GmbH & Co. KG is a regional utility and telecommunications provider serving the Goldbach and Hösbach areas in Germany. The company offers a range of services including electricity, natural gas, water supply, and telecommunications such as VDSL and Glasfaser internet. Their website reflects a medium-sized enterprise with a professional online presence, targeting both residential and business customers. The content is well-organized, informative, and tailored to the local market, emphasizing energy solutions, e-mobility, and building management services. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and Blueimp Gallery, ensuring good mobile optimization and accessibility. The site uses HTTPS and implements cookie consent mechanisms in line with GDPR requirements. Google Analytics is used for visitor tracking with an opt-out option, indicating moderate user tracking. However, no CMS or hosting provider information is explicitly identified. From a security perspective, the site shows basic best practices such as HTTPS and cookie consent but lacks visible security headers, a published security policy, or incident response contacts. No vulnerability disclosure or security.txt file is present. The WHOIS data is limited but does not raise immediate concerns. Overall, the security posture is moderate with room for improvement in transparency and technical security controls. The website is safe for general audiences, with no adult or questionable content detected. The business credibility is high given the clear contact information, professional design, and consistent branding. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and maintaining up-to-date third-party libraries to strengthen the security posture and compliance.
- Densys pv5
densys-pv5.de
Energy · Germany
47High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Densys pv5 operates as a specialized B2B photovoltaic wholesale supplier based in Germany, focusing on solar modules, inverters, energy storage, mounting systems, and e-mobility charging solutions. The company targets solar installers and businesses, offering a broad product portfolio with manufacturer partnerships and insurance backing from Munich RE, positioning itself as a reliable player in the German solar energy market. The website is professionally designed with good navigation and mobile optimization, leveraging ASP.NET WebForms technology and integrating modern tracking and consent tools such as Google Tag Manager and CookieFirst. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of explicit privacy and terms of service pages and missing security headers suggest areas for improvement. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and consistency. The site is free from adult or questionable content, making it safe for general audiences.
SHK Innung Aschaffenburg–Miltenbergshk-aschaffenburg.de
Other · Germany
49High
NIS2 17 · GDPR 60
NIS2 17 · GDPR 60
SHK Innung Aschaffenburg–Miltenberg operates as a regional professional guild specializing in sanitary, heating, and air conditioning services within the Aschaffenburg and Miltenberg regions of Germany. The website serves as an information portal and member resource, providing industry news, contact details, and regulatory compliance information. The business model focuses on supporting local professionals and companies in the sector, positioning itself as a trusted regional association. Technically, the website is built on WordPress, utilizing common plugins such as Real Cookie Banner for privacy compliance and Bold Page Builder for content management. The site is hosted via DomainControl (GoDaddy), employs HTTPS, and demonstrates moderate performance with good mobile optimization. SEO and accessibility are adequately addressed, though some improvements in security headers could enhance the technical posture. From a security perspective, the website enforces HTTPS and includes a cookie consent mechanism aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a dedicated security policy or incident response information suggests room for maturity in security governance. Overall, the site maintains a good security posture suitable for its business scope. The overall risk assessment indicates a low risk profile with strong compliance and trust indicators. Strategic recommendations include enhancing security headers, formalizing incident response procedures, and maintaining regular updates to WordPress and plugins to mitigate potential vulnerabilities.
- Indexa GmbH
pentatech.de
Technology · Germany
45High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Pentatech, operated by Indexa GmbH in Germany, specializes in affordable DIY security products including wireless alarm systems, video surveillance cameras, smoke and gas detectors, and door intercoms. The company targets consumers and small businesses seeking easy-to-install security solutions. The website is built on an outdated Joomla! 1.5 CMS platform, hosted on German servers, and presents content professionally with clear navigation and product information. However, the technical infrastructure shows moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks modern security headers and updated CMS software, which could expose the site to vulnerabilities. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or detailed data protection officer information. Contact options are limited to a web form without direct emails or phone numbers. Overall, the site is trustworthy but would benefit from technical and compliance improvements.
株式会社ZEエナジーze-energy.net
Energy · Japan
48High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
株式会社ZEエナジー is a Japanese company specializing in biomass energy solutions aimed at achieving a sustainable society. Their core business involves developing and operating biomass power generation systems that convert waste and thinning wood into energy through carbonization and gasification processes. The company positions itself as an environmental consulting group focused on renewable energy and waste management, targeting enterprises and government bodies concerned with environmental issues. Their product lineup includes various biomass gasification and carbonization devices, supported by consulting and service offerings. The website is professionally designed, bilingual (Japanese and English), and provides comprehensive company and contact information, reflecting a credible and established business presence since 2011. Technically, the website is built on WordPress CMS, utilizing modern libraries such as jQuery, Bootstrap 5, Slick Carousel, and Font Awesome 6. It employs Google Analytics for user tracking and is hosted under a registrar known for domain services in Japan. The site is mobile-optimized with good SEO practices but lacks some advanced accessibility features. Performance is moderate, with no critical technical debt observed. From a security perspective, the site uses HTTPS with a valid SSL certificate, ensuring encrypted communications. However, it lacks DNSSEC and security headers like Content-Security-Policy or X-Frame-Options, which are recommended for enhanced protection. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is partial; a privacy policy is present, but no cookie consent mechanism or GDPR-specific indicators were found. Incident response contacts and vulnerability disclosure policies are absent, representing areas for improvement. Overall, the website demonstrates a solid business credibility and technical foundation with room for security and privacy enhancements. The risk profile is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include implementing DNSSEC, adding security headers, deploying cookie consent tools, and publishing incident response information to strengthen trust and compliance.
ArtTermo | Kondensacyjne kotły pelletowe ÖkoFENkotlypellet.pl
Energy · Poland
36High
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website kotlypellet.pl represents a small Polish business specializing in the distribution of automatic condensing pellet boilers by ÖkoFEN. The company, ArtTermo, positions itself as a key distributor in Poland for biomass heating solutions, targeting customers interested in eco-friendly heating technologies. The site is built on a modern WordPress infrastructure using Astra theme and Elementor, integrating analytics and marketing tools such as Matomo, Google Tag Manager, and Facebook Pixel. Cookie consent is managed via Cookiebot, indicating some level of GDPR compliance, although no explicit privacy or terms of service pages were found. Security posture is moderate with HTTPS enabled but lacking DNSSEC and security headers, which are recommended for improvement. Overall, the website is professional and safe for general audiences but could enhance compliance and security transparency.
Пламком ООДplamcom.bg
Energy · Bulgaria
48High
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Пламком ООД is a Bulgarian company specializing in engineering solutions for heating, ventilation, air conditioning, and solar installations primarily serving the Burgas region. The company represents Austrian brands such as Easypell and ÖkoFEN, offering products like heat pumps and pellet boilers. Their business model focuses on providing tailored engineering solutions, product sales, and maintenance services. The website reflects a regional market position with a clear focus on energy efficiency and sustainable heating technologies. Technically, the website uses a mix of legacy and modern JavaScript libraries, hosted by a reputable Bulgarian hosting provider. The site is mobile optimized and includes standard analytics tools such as Google Analytics and Tag Manager, indicating moderate user tracking. Security posture is adequate with HTTPS enforced and secure form handling, though some improvements in security headers and library updates are recommended. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the domain registration is legitimate and consistent with the business profile, though WHOIS data is privacy protected as per GDPR. The website is professional, trustworthy, and safe for general audiences.
die profilschmiede GmbH & Co. KGprofilschmiede.de
Technology · Germany
49High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
die profilschmiede GmbH & Co. KG is a Cologne-based full-service agency specializing in web design, print production, hosting, social media, SEO, and consulting services. Established in 2000, the company targets businesses and associations seeking integrated digital and print solutions. Their market position is that of a trusted regional internet agency with over two decades of experience. Technically, the website employs a traditional tech stack including MooTools, Google Analytics, Hotjar, and eTracker, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS and reCAPTCHA integration, but lacks advanced security headers and explicit security policies. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. Overall, the website is professional, trustworthy, and business-focused with no signs of suspicious activity or adult content.