High-risk security reports
36,503 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
5,201–5,250 of 36,503
- HOME OF LOGISTICS
home-of-intralogistics.de
Transportation · Germany
46High
NIS2 2 · GDPR 55
NIS2 2 · GDPR 55
HOME OF LOGISTICS is a German-language industry portal focused on logistics, intralogistics, and autonomous transport. Operated by DVS Media, it provides news, event information, and advertising services targeted at logistics professionals and companies. The website demonstrates a solid market position as a niche media platform with consistent branding and a professional content offering. Technically, the site uses modern web technologies including JavaScript libraries, a consent management system, and Google Analytics 4 for tracking, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and CSRF protections, though security headers and explicit policies could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, with no signs of malicious or adult content.
- HOME OF STEEL
home-of-steel.de
Manufacturing · Germany
43High
NIS2 17 · GDPR 55
NIS2 17 · GDPR 55
HOME OF STEEL is a German-language online portal dedicated to the steel industry, providing free access to specialized information, news, product and company listings, and event details. The platform targets companies, professionals, and interested parties within the steel sector, positioning itself as a reputable media and information hub supported by DVS Media. The website demonstrates a professional design with consistent branding and a clear navigation structure, including integration with partner portals and social media presence on LinkedIn. Technically, the site uses modern web technologies including JavaScript libraries, a consent management system, and Google Analytics 4 for user tracking, ensuring GDPR compliance through explicit cookie consent mechanisms. Security-wise, the site enforces HTTPS, includes CSRF tokens, and uses a consent manager, but lacks explicit security headers and published security policies or incident response contacts. WHOIS data indicates a legitimate and consistent domain registration with no privacy protection, supporting the site's credibility. Overall, the website is well-maintained, secure, and compliant with privacy regulations, serving as a trusted resource for the steel industry.
- HOME OF WELDING
home-of-welding.com
Manufacturing · Germany
49High
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Home of Welding is a specialized media platform serving the welding and manufacturing industries, offering news, product information, and event coverage primarily targeting industry professionals in Germany and internationally. The website demonstrates a professional digital presence with a consistent brand and active social media channels. Technically, the site uses modern web technologies including JavaScript libraries and a consent management system, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and CSRF protections, though the absence of security headers and WHOIS transparency are areas for improvement. Overall, the site is trustworthy and well-positioned in its niche, but domain registration opacity slightly reduces confidence.
Newbienewbie-academy.eu
Other
40High
NIS2 25 · GDPR 10
NIS2 25 · GDPR 10
The NEWBIE website represents a European agriculture innovation network focused on supporting new entrants and successors in farming through business model development and knowledge dissemination. The platform connects various stakeholders including researchers, advisors, and regional actors to foster sustainable agricultural entrepreneurship. The site is professionally designed using WordPress with modern plugins and SEO optimizations, reflecting a moderate to good level of digital maturity. Security posture is adequate with HTTPS and secure forms, but lacks advanced security headers and explicit privacy and cookie policies, indicating room for compliance improvement. Overall, the site is trustworthy and serves a niche audience effectively, though enhancing privacy transparency and security policies would strengthen its risk profile.
- AAdmoderate
admoderate.de
Other · Germany
49High
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Admoderate is a specialized digital brand development agency based in Germany, focusing on medium-sized businesses and agencies. They offer services including brand creation, corporate website design, and digital media conception with over 10 years of experience. The company positions itself as a reliable partner for digital growth in the mid-market segment and is part of the queo Gruppe, enhancing its market credibility. Technically, the website is built on WordPress using Elementor and optimized with Yoast SEO and WP Rocket, ensuring fast performance and excellent mobile responsiveness. Security measures include HTTPS enforcement, content security policy monitoring, and cookie consent management, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates a strong professional presence with good SEO and privacy compliance, but could improve transparency on security and vulnerability disclosures.
Procunia GmbHprocunia-online.de
Finance · Germany
45High
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Procunia GmbH is a specialized financial consulting firm focused on providing professional financing solutions for medium-sized enterprises in Germany. Their services include comprehensive financial planning, rating optimization, and capital procurement, leveraging over 15 years of industry experience. The company positions itself as a trusted advisor to the SME sector, offering tailored financing strategies beyond traditional banking products. The website reflects a professional and consistent brand image with clear communication channels and detailed team profiles. Technically, the site is built on WordPress with Elementor and Yoast SEO, ensuring modern content management and SEO capabilities. Security posture is solid with HTTPS enforced and some privacy-conscious scripting, though security headers could be improved. No blocking or WAF challenges were detected, allowing full content accessibility. Overall, the site demonstrates good digital maturity and business credibility with minimal tracking and a strong focus on privacy compliance.
- Life Coach Certification Institute
lifecoachcertification.com
Education
49High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Life Coach Certification Institute operates a professional online platform offering life coach certification and recertification courses. The business targets individuals seeking convenient and affordable certification with benefits such as unlimited exam retakes, instant certification, and online study materials. The website is well-structured, with clear navigation and a consistent brand presence, supported by trust badges from Norton and TRUSTe. Technically, the site uses concrete5 CMS, jQuery, Google Tag Manager, and Google Analytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and trust seals, but lacks some security headers and cookie consent mechanisms. The absence of WHOIS registration data raises concerns about domain legitimacy, which impacts overall trust. Contact information is limited to email, with no phone or physical address provided. Overall, the site presents a professional educational service but would benefit from improved transparency and security practices.
ULMATEC GmbHulmatec.de
Manufacturing · Germany
48High
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
ULMATEC GmbH operates a professional website focused on modular extraction and filtration systems for industrial applications. The company positions itself as a specialized provider in the manufacturing sector, offering tailored solutions to business clients. The website is built on a modern WordPress CMS with Elementor page builder and includes multiple marketing and analytics integrations, indicating a mature digital presence. However, the WHOIS data for the domain www.ulmatec.com is missing or indicates the domain is not registered, which raises concerns about domain legitimacy despite the professional appearance of the site. Security posture is moderate with HTTPS enabled but lacks visible security headers and formal privacy or cookie policies. Overall, the website is safe and professional but would benefit from improved transparency and domain registration verification.
Menzel Metallchemie GmbHmenzel-metallchemie.de
Manufacturing · Germany
47High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Menzel Metallchemie GmbH is a German-based medium-sized company specializing in the development and manufacturing of minimum quantity cooling and lubrication technologies using biodegradable high-performance oils. Positioned as a pioneer and market leader, the company serves industrial manufacturers, particularly in metal and plastic processing sectors, offering products such as spray technology systems, cooling lubricants, safety cold bronzing systems, and technical cleaning solutions. The website reflects a professional and consistent brand image with comprehensive product information and multiple contact channels including GDPR-compliant forms. Technically, the website is built on Mae CMS and employs modern web technologies including HTML5, CSS, JavaScript, and jQuery, with Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized with good SEO practices, though some accessibility features are basic. Performance is moderate, with room for improvement in loading speed and security headers. From a security perspective, the site uses HTTPS with good SSL configuration and secure forms incorporating CSRF tokens and GDPR consent checkboxes. However, explicit security policies and incident response information are absent, and security headers are not detected. No vulnerabilities or suspicious content were found, indicating a generally sound security posture. Overall, the website is trustworthy and professional, with strong business credibility and compliance with privacy regulations. Recommendations include implementing cookie consent mechanisms, enhancing security headers, and publishing security and incident response policies to further strengthen trust and compliance.
Markgrafenkirchen im Markgraftum Ansbachmarkgrafenkirchen-ansbach.de
Government · Germany
45High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The website www.markgrafenkirchen-ansbach.de serves as an informational platform dedicated to the Markgrafenkirchen churches located in the Markgraftum Ansbach region of Germany. It provides visitors with historical, architectural, and cultural insights about these churches, supported by interactive maps, directories, and downloadable brochures. The site targets tourists, local community members, and cultural heritage enthusiasts. It is supported and financed by regional church organizations, reflecting a niche cultural heritage focus within the government/non-profit sector. Technically, the site is built on Drupal 10 CMS, employing modern web technologies including the Klaro consent manager for GDPR compliance and jQuery Colorbox for image galleries. Hosting is provided by kunde24.de, a typical hosting provider for small to medium German websites. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a clean and professional design. From a security perspective, the site uses HTTPS (assumed though not explicitly confirmed in headers), employs a cookie consent mechanism, and does not expose sensitive data or vulnerable libraries in the HTML content. However, explicit HTTP security headers are not detected, and no dedicated security or incident response policies are published. Privacy compliance is well addressed with a clear privacy policy and cookie consent. No analytics or tracking beyond consent management is observed, indicating a privacy-conscious approach. Overall, the website presents a low-risk profile with a good balance of content quality, technical implementation, and privacy compliance. It is suitable for its cultural heritage mission but could improve security posture by adding security headers and explicit policies. Contact information is limited to a contact form, which may impact direct communication channels.
Stiftung Gesundheitstiftung-gesundheit.de
Healthcare · Germany
43High
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Stiftung Gesundheit is a German healthcare-focused organization dedicated to disseminating health knowledge and education, as indicated by its website title and description. The website targets a general audience interested in health information and operates likely as a non-profit or educational entity. Technically, the site is built on WordPress using the Elementor page builder, with modern font integration via Typekit and emoji support. The site is accessible, mobile-optimized, and uses HTTPS, but lacks advanced security headers and privacy compliance documentation. No contact information or formal policies such as privacy or cookie policies are present, which limits user trust and compliance with GDPR. The WHOIS data is minimal and lacks detailed registrant information, which slightly reduces domain trustworthiness. Overall, the website is functional and professional but would benefit from enhanced security practices and privacy compliance to improve trust and legal adherence.
Messer Medicalmessermedical.hu
Healthcare · Hungary
44High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Messer Medical is a Hungarian healthcare service provider specializing in oxygen therapy and sleep therapy equipment and services. The company targets patients with chronic oxygen deficiency and medical professionals requiring high-quality therapeutic devices. The website reflects a medium-sized business with a national presence, supported by contracts with the National Health Insurance Fund of Hungary since 2004. The site uses WordPress with a professional theme and common plugins, providing a good user experience and mobile optimization. However, it lacks critical privacy and cookie policies, which impacts compliance and user trust. Security posture is moderate with HTTPS enabled but missing security headers and incident response contacts. Overall, the website is professional and trustworthy but requires improvements in privacy compliance and security best practices.
Kallinich Media GmbH & Co. KGchemie-azubi.de
Manufacturing · Germany
47High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Chemie-Azubi.de is a specialized educational blog operated by Kallinich Media GmbH & Co. KG, focusing on apprenticeships and dual study programs in the German chemical industry. The platform provides comprehensive career guidance, company profiles, and chemistry knowledge targeted at students, apprentices, parents, and educators. It holds a niche position supported by chemical industry employers and associations, emphasizing practical career information and industry insights. Technically, the website is built on TYPO3 CMS with modern web technologies including Bootstrap and jQuery, hosted on Schlundtech infrastructure. It integrates privacy-compliant analytics (Matomo) and user consent management (Usercentrics), reflecting a mature digital infrastructure. Security posture is strong with HTTPS and consent mechanisms, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for its audience and purpose.
Arbeitgeberverband im Bezirk Hildesheim e.V.agvhildesheim.de
Other · Germany
48High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The Arbeitgeberverband im Bezirk Hildesheim e.V. is a well-established regional employer association representing approximately 200 member companies and nearly 22,000 employees across the Hildesheim, Alfeld, Holzminden, and Peine regions in Germany. Founded in 1949, it serves as a voluntary association providing legal, social-political, and economic representation and support to its members. The website clearly communicates its mission, services, and organizational structure, targeting regional employers seeking advocacy, legal advice, training, and networking opportunities. Technically, the website is built on Joomla CMS with Bootstrap and jQuery frameworks, hosted on rzone.de servers. It features a professional design with responsive elements and basic SEO optimizations. The site includes a cookie consent mechanism compliant with GDPR and employs JavaScript-based email cloaking to reduce spam. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS with good SSL configuration but lacks advanced security headers and explicit incident response or vulnerability disclosure policies. No critical vulnerabilities or suspicious elements were found. The WHOIS data is minimal but consistent with the business claims, and no privacy protection is used, which is appropriate for this type of organization. Overall, the website presents a trustworthy, professional, and compliant digital presence for a regional employer association, with room for improvement in security headers and incident response transparency.
- UV Nord
uvnord.de
Other · Germany
44High
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
UV Nord is a regional employers' association in northern Germany, providing advocacy, information, and networking services to its member companies. The website is professionally designed using WordPress and Elementor, with a focus on labor law, social law, infrastructure, and economic topics relevant to the region. The technical infrastructure is modern and includes performance optimizations and a consent management platform for GDPR compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. Overall, the website is trustworthy and serves its target audience effectively.
- MEHRWERT:PFLEGE
mehrwert-pflege.com
Healthcare · Germany
43High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
MEHRWERT:PFLEGE is a healthcare-focused non-profit initiative affiliated with the Verband der Ersatzkassen e. V. (vdek), providing free and comprehensive process consulting to promote employee health in hospitals, stationary and ambulatory care facilities. The website presents a professional and well-structured digital presence with clear navigation, multimedia content, and strong branding consistency. Technically, it is built on WordPress with the Avada theme and employs modern web technologies and SEO best practices. Security posture is good with HTTPS and cookie consent mechanisms, though some advanced security headers and incident response information are missing. The domain WHOIS data is unavailable, which raises some concerns about registration transparency but does not detract from the overall legitimacy suggested by the content and affiliations. Strategic recommendations include enhancing security headers, publishing incident response contacts, and verifying domain registration details.
- vdek and Ersatzkassen
gesund-digital.info
Healthcare · Germany
49High
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Gesund digital is a German-language digital health education platform supported by major health insurers such as vdek and Ersatzkassen. It aims to empower users, particularly older adults and insured members, to effectively use digital health applications and understand digital health services. The website provides structured modules on finding, understanding, and trusting digital health offerings, including electronic patient records and telemedicine. Technically, the site uses modern frontend technologies like Alpine.js and serves content over HTTPS with a cookie consent mechanism, reflecting a moderate to good level of digital maturity. Security posture is solid with no evident vulnerabilities, though some HTTP security headers could be improved. Privacy compliance is strong, with a comprehensive privacy policy and GDPR-aligned cookie consent. The WHOIS data is privacy protected, which is justified given the healthcare context, and no suspicious patterns were detected. Overall, Gesund digital presents a trustworthy, professional, and user-friendly platform for digital health literacy.
Healthcare · Germany
47High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Makleraktiv.de operates as a specialized distribution partner portal focused on statutory health insurance in Germany. It targets insurance brokers and professionals by providing tools such as comparison calculators, online application processing without signature requirements, and a pooling service for membership applications. The platform emphasizes its 25 years of experience and offers a registration system for brokers to access these services. Technically, the website uses modern web technologies including Bootstrap and JavaScript ES modules, hosted on infrastructure associated with DomainControl. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, the site uses HTTPS and secure form submission but lacks visible advanced security headers and CSRF protections, which are recommended for improvement. Privacy compliance is partially addressed via a privacy policy hosted on a related domain, but no cookie consent mechanism is present on the login page. Overall, the website is legitimate and functional with moderate trustworthiness, suitable for its business purpose.
- SECURVITA
securvita.de
Healthcare · Germany
49High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
SECURVITA is a well-established German health insurance provider offering a broad range of statutory and private insurance products with a strong emphasis on natural healing methods and family services. The company is recognized as one of Germany's best health insurers, supported by awards and a comprehensive service portfolio including modular insurance options, bonus programs, and financial products. The website is professionally designed, content-rich, and targets German-speaking customers seeking health insurance solutions. Technically, the site is built on TYPO3 CMS, hosted on plusserver.com, and incorporates modern accessibility and cookie consent technologies. Security posture is solid with HTTPS and cookie consent mechanisms, though the absence of explicit security policies and incident response contacts suggests room for improvement. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact channels primarily via phone and contact forms.
Other
45High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website takealookatyour.site currently serves as a placeholder page with minimal content indicating that something will be constructed in the future. There is no business description, contact information, or policies provided, which limits the ability to assess the business operations or market positioning. The domain is newly registered in January 2024 via Namecheap and shows no privacy protection, which aligns with the early stage of the website. Technically, the site uses basic HTML5 and CSS3 with Google Fonts and is hosted on Namecheap infrastructure. It supports HTTPS but lacks advanced security headers and DNSSEC, indicating room for improvement in security posture. No analytics, tracking, or advertising technologies are present, and the site does not collect user data or provide forms. Overall, the website is in an initial development phase with low content and business credibility.
- STILLE erLEBEN
stilleerleben.de
Hospitality · Germany
45High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
STILLE erLEBEN is a small hospitality business operating evangelical guesthouses in Bavaria, Germany, focused on providing quiet and spiritual retreat experiences. The website is built on Drupal 10 with Bootstrap and jQuery, offering a moderate level of technical maturity with good mobile optimization and basic SEO features. The content is well-structured and relevant to its target audience seeking tranquility and spiritual rest. From a security perspective, the website uses HTTPS and has no visible vulnerabilities or exposed sensitive data. However, it lacks important security headers and does not provide a security policy or incident response contact information. Privacy compliance is partially met with a privacy policy page present, but no cookie consent mechanism is implemented. Business credibility is moderate due to the absence of explicit contact details and trust indicators. Overall, the website is functional and professional but could improve its security posture and privacy compliance to enhance trustworthiness and regulatory adherence.
- Evangelisch-Lutherische Kirche in Bayern (ELKB)
uebernachtungshaeuser-elkb.de
Non-profit · Germany
45High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The website www.uebernachtungshaeuser-elkb.de serves as an informational portal for the Evangelisch-Lutherische Kirche in Bayern's network of group accommodations. It targets church groups, youth groups, families, and seminar attendees seeking lodging in scenic Bavarian locations. The site offers detailed descriptions of various types of houses, including self-catering and fully serviced options, and promotes community and spiritual experiences. Technically, the site is built on Drupal 10, uses Bootstrap for responsive design, and integrates Matomo analytics with privacy-conscious settings. The Klaro consent manager ensures GDPR-compliant cookie handling. Security posture is solid with HTTPS enforced and privacy-respecting analytics, though explicit security headers and policies are absent. No contact emails or phone numbers are directly published, relying on a contact form instead. Overall, the site is professional, trustworthy, and well-suited for its non-profit church audience.
Mario Fehrmariofehr.ch
Government · Switzerland
49High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The website mariofehr.ch serves as the official online presence of Mario Fehr, a government official and Regierungsrat of the Canton of Zurich, Switzerland. It provides political information, updates, and personal engagement content targeted primarily at the citizens of Zurich. The site is built on Joomla CMS and incorporates modern web technologies including jQuery and Google Analytics for visitor tracking. The design is professional, mobile-optimized, and accessible, supporting a positive user experience. Security posture is solid with HTTPS enforced and CSRF tokens present, though it lacks some advanced security headers and explicit incident response information. Privacy compliance is partial, with a privacy policy page present but no visible cookie consent mechanism. Overall, the site is trustworthy and well-aligned with its governmental purpose.
- Pfaller & Söhne AG
pfaller.ch
Real Estate · Switzerland
42High
NIS2 — · GDPR —
NIS2 — · GDPR —
Pfaller & Söhne AG is a well-established Swiss company specializing in painting, wallpapering, flooring, plastering, and mold remediation services primarily serving the Zurich region since 1974. The company emphasizes craftsmanship, experience, and customer service, targeting residential and commercial property owners and managers. Their website reflects a professional local business with clear service offerings and contact information. Technically, the site is built on Joomla CMS with modern JavaScript libraries and integrates Google Analytics and Google Ads for marketing and tracking. The website is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism despite tracking scripts. Overall, the site is trustworthy and professional but could improve in privacy and security transparency.
- Verein Szene Kloten
szenekloten.ch
Non-profit · Switzerland
48High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Verein Szene Kloten is a local non-profit cultural association based in Kloten, Switzerland, organizing concerts, theater, art exhibitions, readings, multimedia shows, and managing the local museum. Supported by the city of Kloten, the Canton of Zurich's cultural office, sponsors, and members, it serves a community-oriented audience interested in cultural events. The website reflects a well-structured, content-rich platform with clear navigation and consistent branding, targeting local residents and culture enthusiasts. Technically, the site runs on Joomla CMS with modern libraries like jQuery and Google Tag Manager for analytics, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS and CSRF protections, but lacks explicit cookie consent and published security policies. Overall, the site is trustworthy and professionally maintained, though improvements in privacy compliance and security transparency are recommended.
- Riiterstübli Waldhof
riiterstuebli.ch
Hospitality · Switzerland
48High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Riiterstübli Waldhof is a small hospitality business located in Winkel, Switzerland, specializing in traditional home-style cuisine with a focus on fresh, bio ingredients. The restaurant offers daily lunch and dinner menus, room rental for private events, and seasonal outdoor grilling in a garden pergola. The website is built on Joomla CMS and integrates Google Analytics for visitor tracking. The design is professional and mobile-optimized, providing a good user experience with clear navigation and consistent branding. Contact information and legal disclaimers are clearly presented, enhancing business credibility. However, the site lacks a dedicated cookie consent mechanism and formal security or incident response policies, which are areas for improvement.
zur Mühlen Gruppezurmuehlengruppe.de
Manufacturing · Germany
38High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The zur Mühlen Gruppe is a large German manufacturing company specializing in the production and distribution of meat and sausage products. With approximately 4,000 employees across 12 locations, the company produces over 2 billion consumer packages annually and holds multiple prestigious awards such as 'Marke des Jahrhunderts' and 'Top Marke 2020'. Their business model focuses on high-quality food production, supported by rigorous quality assurance processes including 50,000 laboratory tests annually. The company also operates internationally through its subsidiary zur Mühlen International (ZMI), marketing products in over 40 countries. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries like jQuery and Swiper.js for interactive content. The site demonstrates good mobile optimization, clear navigation, and professional design, although some accessibility features are basic. Performance is moderate, with no critical errors or broken elements detected. However, there is no visible cookie consent mechanism, and security headers are not explicitly present in the provided data. From a security perspective, the site uses HTTPS as indicated by canonical URLs, but lacks explicit security headers and incident response information. No forms or contact emails are visible on the main page, limiting direct user communication channels. There is no security.txt or vulnerability disclosure policy found. Overall, the security posture is moderate but could be improved by implementing standard security headers, cookie consent, and incident response contacts. The overall risk assessment is low to moderate. The site is legitimate, professionally maintained, and focused on a well-established business sector. Strategic recommendations include enhancing privacy compliance with cookie consent, adding security headers, publishing incident response policies, and improving contact information visibility to strengthen trust and security culture.
Webdesign und Beratung Frankfurt Programmierungpixel-dusche.de
Technology · Germany
49High
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
The website www.pixel-dusche.de represents a small web design and consulting business based in Frankfurt, Germany. It offers services including responsive web design, programming, SEO optimized websites, landing pages, and online shops. The site is built using Bootstrap 5.1.3 and a custom CMS named Morpheus, hosted on servers associated with kasserver.com, a German hosting provider. The content is professional and targeted at businesses or individuals seeking web design services in the Frankfurt area. However, the website lacks critical compliance documents such as privacy and cookie policies, and no contact information is explicitly provided in the analyzed content. Technically, the site is moderately optimized for performance and mobile devices but lacks advanced security headers and visible analytics or tracking tools.
- Konzept fünf
konzept-fuenf.de
Media · Germany
38High
NIS2 17 · GDPR 33
NIS2 17 · GDPR 33
Konzept fünf is a creative full-service advertising agency based in Offenbach, Germany, specializing in consulting, design, concept development, and production for marketing campaigns. The website presents a professional image with good content quality and consistent branding, targeting businesses in the Rhein-Main region seeking creative marketing solutions. Technically, the site uses Bootstrap 4.3.1 and integrates Microsoft Clarity for analytics, hosted on servers associated with kasserver.com. The site is mobile optimized and SEO friendly with structured data enhancing search engine visibility. Security posture is moderate with HTTPS enabled but lacking security headers and explicit privacy or cookie policies. No incident response or vulnerability disclosure information is provided, indicating room for improvement in compliance and security transparency. Overall, the website is safe, professional, and trustworthy for its business domain.
- IIG Regionalbewegung Mittelfranken
regiokantine.de
Other · Germany
43High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The website 'Kantine sucht Region' operated by IG Regionalbewegung Mittelfranken serves as a regional platform to promote and facilitate the supply of regional food products to community catering services, particularly targeting canteen operators and regional producers in the Mittelfranken area of Germany. It provides an online directory for regional suppliers and encourages registration of producers and processors to strengthen local economic cycles. The platform positions itself as a niche regional service complementing other digital regional marketing initiatives. Technically, the website employs a simple but effective infrastructure using jQuery and FontAwesome for UI elements, hosted on resellerinterface.de nameservers. The site is mobile-optimized with a clear navigation structure and good content quality, though it lacks advanced SEO and accessibility features. No CMS or complex frameworks are detected, indicating a lightweight custom or static site. From a security perspective, the site uses HTTPS as indicated by the base URL, but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance. No forms with sensitive data are present on the homepage, reducing immediate risk exposure. The WHOIS data is minimal but not privacy protected, with no suspicious patterns detected. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk assessment is low to moderate. The site is trustworthy and professional but would benefit from enhanced privacy compliance, security headers, and clearer contact information to improve user trust and regulatory adherence. Strategic recommendations include implementing cookie consent, publishing security policies, and adding vulnerability disclosure mechanisms.
- HHuman Verification
defenceiq.com
Other
49High
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The analysed website content for defenceiq.com is currently inaccessible due to an AWS WAF CAPTCHA security challenge that blocks direct access to the actual site content. This challenge page only presents a human verification puzzle with no business, contact, or policy information visible. The domain is registered with Amazon Registrar, Inc. since 2002, indicating a mature and legitimate registration. However, without access to the main site content, no detailed business or security posture analysis can be performed. The technical infrastructure leverages AWS WAF for protection, which is a strong security measure but limits content visibility for external analysis. Overall, the site is protected but currently not analyzable beyond the WAF challenge.
- Arctic Portal
gtnpdatabase.org
Other
47High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The Global Terrestrial Network for Permafrost (GTN-P) Database website serves as a specialized scientific data repository providing metadata and quality-controlled data on permafrost temperatures and active layer thaw depths. The platform is co-hosted and developed by Arctic Portal and AWI, indicating a strong scientific backing and niche market positioning focused on environmental research and climate science. The website targets researchers, scientists, and policy makers interested in permafrost data and environmental monitoring. Technically, the site uses a stable but somewhat dated technology stack including AngularJS 1.3.15 and Bootstrap 3.3.x, hosted with Cloudflare DNS and registered via GoDaddy. The site is accessible without WAF or security challenges, but lacks modern security headers and DNSSEC, which are recommended for improved security posture. Privacy compliance is limited, with no cookie policy or consent mechanism detected, though a data policy is available on a partner domain. No direct contact information or incident response contacts are provided, which could hinder user trust and compliance. Overall, the site is functional and professional but would benefit from enhanced security and privacy features to improve trust and compliance.
Arctic Yearbook - Arctic Yearbookarcticyearbook.com
Government
49High
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The Arctic Yearbook website serves as an academic publication platform focused on Arctic geopolitics and security, produced in collaboration with the Northern Research Forum and the University of the Arctic. It offers annual yearbooks, scholarly papers, briefing notes, and commentaries targeting researchers, policymakers, and stakeholders interested in Arctic affairs. The site is positioned as a niche authoritative source with a small-scale, non-commercial business model. Technically, the site is built on Joomla CMS using standard libraries such as jQuery, Bootstrap, and Font Awesome, with integration of Twitter feeds and Google Analytics for social media and analytics. The site is moderately optimized for mobile and performance but lacks advanced accessibility features. Security posture is moderate with HTTPS enabled and domain registration protections in place, but lacks DNSSEC and security headers, and no privacy or cookie policies are present. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the site is trustworthy and professional but could improve privacy compliance and security hardening.
Textilfabrik 7.0t7-management.de
Manufacturing · Germany
41High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Textilfabrik 7.0 is a collaborative German textile industry project focused on developing sustainable, future-proof textile production technologies and infrastructure in Mönchengladbach. It is supported by research institutes and industry associations, aiming to create jobs and advance digital and sustainable manufacturing methods. The website is built on WordPress with a modern theme and standard libraries, showing moderate technical maturity and good content quality. Security posture is adequate with HTTPS but lacks advanced security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced compliance and security practices.
Education · Germany
49High
NIS2 25 · GDPR 60
NIS2 25 · GDPR 60
BWNRW - Bildungswerk der Nordrhein-Westfälischen Wirtschaft is a regional non-profit organization focused on vocational and corporate training in Nordrhein-Westfalen, Germany. The website presents a professional and comprehensive overview of their educational services, including seminars for professionals, Betriebsratsmitglieder, and youth representatives, as well as online and inhouse seminars. Their market position is that of a trusted regional leader in workforce development and training initiatives. The website targets professionals, companies, and educational stakeholders in the region. Technically, the website is built on WordPress using Elementor and Yoast SEO, with additional plugins for accessibility (OneTap) and cookie management (Borlabs Cookie). The site is hosted on servers associated with kasserver.com and demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with modern web technologies and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. GDPR compliance is evident through privacy and cookie policies. The WHOIS data is consistent with the website's claims, showing stable domain registration and authoritative nameservers. Overall, BWNRW's website is professional, secure, and compliant with privacy regulations, serving its educational mission effectively. Strategic improvements could include enhanced security headers, published security policies, and incident response information to further strengthen trust and security posture.
Education · Czech Republic
44High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Smíchovská střední průmyslová škola a gymnázium is a Czech secondary educational institution specializing in industrial and gymnasium education. The website presents the school’s vision of future-oriented education where students actively engage in learning. The site targets students and the educational community in the Czech Republic, positioning itself as a regional provider of secondary technical education. The business model is focused on delivering quality secondary education services. Technically, the website is built on WordPress with Elementor and uses modern SEO tools like Rank Math. It employs Facebook Pixel for user tracking and marketing purposes. The site is served over HTTPS, indicating a good baseline security posture, but lacks explicit security headers and privacy-related policies, which are areas for improvement. The absence of WHOIS data reduces transparency and trustworthiness, although the website content and structured data strongly indicate a legitimate educational entity. Overall, the site is professional, well-branded, and provides relevant content for its audience.
AI dětem, z.s.tiny.school
Education · Czech Republic
42High
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Tiny is a Czech non-profit educational AI application developed by AI dětem, z.s., designed to assist teachers with formative assessment and provide personalized mentoring to children. The platform offers individualized feedback and tailored educational content, primarily targeting primary and secondary school students and educators. Supported by academic institutions such as ČVUT and Univerzita Karlova, and funded in part by Google.org Impact Challenge, Tiny positions itself as an innovative AI-driven educational tool in the Czech and Slovak markets. The business model focuses on pilot school partnerships and content collaboration to expand its offerings. Technically, Tiny is built on a modern WordPress CMS with Elementor and integrates various JavaScript libraries and Google Analytics for tracking. The website is well-structured, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. However, some security best practices such as security headers and cookie consent mechanisms are missing, which could be improved to enhance user trust and compliance. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. The lack of visible security policies and incident response information suggests room for improvement in transparency and readiness. WHOIS data is unavailable due to TLD registry restrictions, but the website content and affiliations indicate legitimacy and trustworthiness. Overall, Tiny demonstrates a strong educational mission with solid technical implementation and good business credibility. Strategic enhancements in security policies, privacy compliance, and incident response transparency would further strengthen its position and user confidence.
Chatboti ve školechatveskole.cz
Education · Czech Republic
43High
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Chatboti ve škole is a Czech non-profit educational platform launched in 2024, providing a practical database of AI chatbot prompts and AI assistants tailored for educators and students. The website offers comprehensive guides, methodological materials, and a curated collection of AI assistants to support teaching and learning processes. It targets educators, school leadership, and students aged 13 and above, aiming to facilitate the integration of AI technologies in education to save teachers' time and enhance students' critical thinking skills. The platform also promotes responsible AI use with legal and ethical considerations. Technically, the website is built on WordPress with Elementor and Yoast SEO, ensuring good SEO and mobile responsiveness. It uses modern web technologies and integrates Google Analytics for user insights. Security-wise, the site uses HTTPS with a good SSL configuration but lacks explicit security headers and published security policies. Privacy compliance is partial, with no visible privacy or cookie policies on the main page. The domain registration is consistent with the business purpose and geographic focus, registered with a reputable Czech registrar in 2024. Overall, the site is professional, content-rich, and trustworthy, but could improve privacy and security transparency.
ARCHE Thomas Tschechnearcheholz.com
Retail · Germany
49High
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Archeholz is a specialized retailer and manufacturer of solid wood flooring, terrace wood, and wood facades, focusing on ethically sourced native woods from Europe and North America. Established in 1985, the company serves end customers, trade professionals, and wood dealers with a direct-to-customer e-commerce model that emphasizes personalized offers and factory-direct pricing. The website is professionally designed, multilingual, and provides detailed product information and customer reviews, enhancing trust and user engagement. Technically, the website runs on a customized modified eCommerce platform based on xt:Commerce, utilizing modern technologies such as Bootstrap 5 and jQuery. It features responsive design, accessibility considerations, and cookie consent mechanisms aligned with GDPR requirements. Performance is moderate, with lazy loading for images and a clean navigation structure. Security posture is strong with HTTPS enforced and secure form handling, though the absence of HTTP security headers and incident response contacts suggests room for improvement. The lack of WHOIS registration data for the domain is a notable concern, potentially impacting trustworthiness despite the professional web presence. Overall, Archeholz presents a credible and well-maintained online presence for its niche market, but should address domain registration transparency and enhance security headers to strengthen its security and compliance posture.
- Bayerische Musikakademie Marktoberdorf
modakademie.de
Education · Germany
43High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The Bayerische Musikakademie Marktoberdorf is a regional Bavarian music academy focused on providing a wide range of music education services including vocal and instrumental courses, choir and orchestra leadership training, and music pedagogy. It serves musicians, educators, and enthusiasts primarily within Bavaria, Germany. The website reflects a medium-sized educational institution with a professional and consistent brand presence, supported by its parent organization, the Bayerischer Musikrat. Technically, the website employs a modern tech stack with Bootstrap, jQuery, and third-party integrations for user consent and reviews, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit incident response policies. Overall, the site is accessible, well-structured, and trustworthy with no signs of malicious content or blocking mechanisms.
- AAFC Consulting Group AG
lebensmittelmarketing.net
Other · Germany
44High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Lebensmittelmarketing.net is a niche educational website providing free online access to updated academic and professional publications related to food marketing and regional marketing. The site is operated by AFC Consulting Group AG and targets German-speaking professionals and academics interested in these topics. The business model focuses on offering valuable content without direct monetization or advertising. Technically, the website uses basic HTML5 and CSS with minimal interactivity and moderate mobile optimization. There is no evidence of advanced CMS or analytics tools, indicating a simple infrastructure. Security posture is limited; no HTTPS or security headers information was provided, and no privacy or cookie policies are present, which poses compliance and security risks. The domain registration is consistent and legitimate, with no privacy protection and an appropriate domain age. Overall, the website is functional but requires improvements in security, privacy compliance, and contact transparency to enhance trust and user confidence.
Kaffee-Feekaffee-fee.com
Retail · Germany
43High
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Kaffee-Fee operates an e-commerce platform focused on selling coffee products at fair prices primarily targeting German-speaking customers. The website presents a professional and consistent brand image with a clear business model centered on retail and fast delivery. The technical infrastructure is based on WordPress CMS with modern SEO and cookie consent plugins, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and GDPR-compliant cookie consent, though some improvements such as enabling DNSSEC and adding security headers could enhance protection. Overall, the website is trustworthy and well-maintained with no signs of blocking or malicious activity.
KV GmbHkv-gmbh.de
Technology · Germany
43High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
KV GmbH is a small technology company based in Osnabrück, Germany, specializing in web projects including hosting, domain management, and regional web portals. The company serves a global client base and offers job opportunities in software development and apprenticeships. Their website is professionally designed, built on WordPress with modern plugins and scripts, and optimized for mobile devices. While the site uses HTTPS and includes Google Analytics for tracking, it lacks explicit privacy and cookie policies, as well as security headers, which are important for compliance and security posture. No WAF or blocking mechanisms were detected, and the site content is safe and business-focused. Overall, KV GmbH presents a credible and professional online presence but should improve privacy compliance and security best practices.
designhouse® GmbHdigitocs.de
Media · Germany
41High
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Digitocs is a premium digital art brand operated by designhouse® GmbH, a German company with decades of experience in design and marketing. The website showcases digital art collections and offers custom digital artwork commissions, targeting digital art collectors and NFT enthusiasts. The technical infrastructure is based on WordPress with Elementor and Yoast SEO, hosted on agenturserver. The site is well-optimized for SEO and mobile devices, with a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS and no visible vulnerabilities, though some security headers could be improved. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a professional and trustworthy digital art platform.
Zawoko NET s.r.o.botyobleceni.cz
Retail · Czech Republic
41High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
BotyObleceni.cz is an established Czech e-commerce retailer specializing in CrossFit, weightlifting, and fitness apparel and equipment. Operating since 2011 under Zawoko NET s.r.o., the site targets fitness enthusiasts in the Czech Republic and Slovakia, offering a broad range of products including shoes, clothing, and accessories from well-known brands. The business maintains a strong market position as an authorized WORKOUT reseller and partner to many CrossFit gyms and national weightlifting teams. Technically, the website runs on PrestaShop CMS with a moderate performance profile and basic mobile optimization. It integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and Heureka widgets, enabling extensive user tracking and remarketing capabilities. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, but lacks advanced security headers and modern JavaScript libraries. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site presents a professional and trustworthy e-commerce platform with room for improvement in security and privacy practices.
ANECT a.s.anect.cz
Technology · Czech Republic
49High
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
ANECT a.s. is a leading Czech ICT solutions provider specializing in enterprise architecture, information and cyber security, and IT operations management. The company positions itself as a professional and innovative partner with over 25 years of experience, targeting business clients requiring advanced technology and security services. The website reflects a mature digital presence with clear service descriptions and client references. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics and cookie consent mechanisms, indicating a good level of digital maturity. Security posture is adequate with HTTPS and cookie consent but lacks visible advanced security headers and incident response contacts. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, though the website content and business information appear legitimate. Overall, the site is professional, secure, and compliant with privacy regulations, but domain registration verification is recommended.
lebenleben.cz
Other · Czech Republic
46High
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
leben.cz is a Czech-based printing and graphic design company specializing in offset printing, stamps, large-format advertising, and luxury paper bags. The company emphasizes quality craftsmanship with over 30 years of experience, positioning itself as a significant player in the Czech printing market. The website is built on WordPress with WooCommerce and Elementor, indicating a modern and flexible technical infrastructure. While the site is accessible and uses HTTPS, it lacks explicit privacy and terms of service pages, and no direct contact information is readily available on the homepage. The cookie consent mechanism is implemented, showing some level of GDPR compliance. Security posture is moderate with SSL enabled but missing security headers. Overall, the site presents a professional business presence but could improve transparency and security practices.
- SSilicon Hill
retrofest.cz
Education · Czech Republic
45High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
RetroFest.cz is a small-scale, niche event website dedicated to a 2015 retro computing conference organized by students of the Czech Technical University in Prague under the Silicon Hill club. The site serves primarily as an informational portal for event details, partner acknowledgments, and archival content such as lecture recordings. The business model revolves around community engagement and educational event hosting within the technology and education sectors. The website's market position is limited to a specialized audience interested in retro hardware and software history. Technically, the website is a simple static HTML site with basic CSS and JavaScript, including Google Analytics for visitor tracking. The hosting is provided by ACTIVE 24, and the domain is registered consistently with the academic affiliation. However, the site lacks modern web standards such as HTTPS, security headers, and mobile optimization, which limits its technical maturity and security posture. From a security perspective, the absence of HTTPS and security headers, along with loading external scripts over HTTP, exposes the site to potential man-in-the-middle attacks and data interception risks. No privacy or cookie policies are present, which is a compliance gap under GDPR. The site does not collect user data via forms, reducing some risk, but the use of Google Analytics without consent mechanisms is a privacy concern. Overall, the website is functional for its intended purpose but requires significant improvements in security, privacy compliance, and technical modernization to enhance trustworthiness and user safety. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, improving mobile responsiveness, and adopting security best practices.
- Silicon Hill
installfest.cz
Technology · Czech Republic
47High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Installfest.cz is a well-established community-driven event focused on Linux and open-source software, organized primarily by the Silicon Hill club at the Czech Technical University. The website serves as an information hub for the annual InstallFest conference, targeting both beginners and experts in the Linux and open-source community. The event offers installation assistance, lectures, and online participation, positioning itself as a key community event in the Czech Republic's technology education sector. Technically, the website uses modern web technologies such as Vue.js and JavaScript modules, hosted by a reputable Czech provider, Active24. The site is mobile-optimized and well-structured, providing a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and avoids exposing sensitive data but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. Overall, the domain registration data aligns well with the website's history and content, supporting its legitimacy and trustworthiness.
- Studentska Unie ?VUT
avc.sh
Education · Czech Republic
47High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
AVC Silicon Hill is a student audiovisual center affiliated with the Students' Union of Czech Technical University (ČVUT). It provides technical support for small to medium-sized events including audio, video, and lighting services, both live and online, with a strong focus on education and training in audiovisual technologies. The organization collaborates with several partners and maintains an active presence on social media platforms. Technically, the website uses modern web technologies and is hosted by OVH SAS, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks advanced security headers and privacy compliance documentation. Overall, the domain registration and WHOIS data align well with the organization's identity, supporting legitimacy and trustworthiness.