Security Directory

P

Privat-Brauerei Hohenfelde GmbH

hohenfelder.de

54

Privat-Brauerei Hohenfelde GmbH operates a regional brewery in Germany, offering a diverse range of beer products and related services such as brewery tours and equipment rentals. The company emphasizes tradition, local roots, and environmental responsibility, targeting mature consumers interested in quality regional beverages. The website is built on WordPress with modern front-end technologies, providing a good user experience and mobile optimization. Security measures include HTTPS and Google reCAPTCHA, though there is room for improvement in security headers and cookie consent mechanisms. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy business presence.

C

Captury

thecaptury.com

56

Captury is a technology company specializing in advanced markerless motion capture solutions that enable precise tracking of full-body, finger, and facial movements for multiple actors simultaneously. Their product suite includes real-time processing software, post-processing tools, and specialized hardware solutions targeting industries such as 3D game development, VFX, virtual reality, live entertainment, in-game player tracking, and life sciences research. The company has a solid market position with notable clients including Airbus, Audi, Daimler, Rockstar Games, and Scanline VFX. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as jQuery, CSS3 Animate It, and Slick Carousel for UI enhancements. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Hosting appears stable with SSL properly configured, ensuring secure HTTPS connections. From a security perspective, the site employs HTTPS but lacks visible security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but no cookie consent mechanism was found. Contact information is clearly presented, enhancing business credibility. Overall, Captury's website reflects a mature, professional technology company with strong business credibility and a good security posture. Strategic improvements in security headers, cookie consent, and incident response transparency would further enhance trust and compliance.

C

Centigrade GmbH

centigrade.de

48

Centigrade GmbH is a medium-sized German technology company specializing in human-centered IT solutions, focusing on digital product development, UX design, software engineering, and AI integration. The company serves business clients seeking to enhance user experience and digital transformation success. Their website reflects a mature digital presence with comprehensive service descriptions, client references, and industry awards, positioning them as a reputable player in the UX and software engineering consultancy market. Technically, the website employs a modern tech stack including jQuery, lazy loading, Google Analytics with privacy features, and a consent management platform (Usercentrics). The site is mobile-optimized, accessible, and SEO-friendly, though it appears to use a custom or proprietary CMS. Performance is moderate, with good user experience and navigation clarity. From a security perspective, the site enforces HTTPS, uses consent management for GDPR compliance, and implements form validation with required privacy consent. However, it lacks explicit security policies, incident response information, and security.txt files. No critical vulnerabilities or exposed sensitive data were detected, indicating a solid security posture but with room for improvement in transparency and security headers. Overall, the website is professional, trustworthy, and compliant with privacy regulations. The risk level is low, but strategic enhancements in security documentation and incident response readiness are recommended to further strengthen trust and compliance.

D

Debrecen 2030

d2030.hu

41

Debrecen 2030 is a municipal urban and economic development program managed by the Municipality of Debrecen, Hungary. The website serves as an official communication platform to inform residents and stakeholders about ongoing and completed development projects, news, and media related to the program. The site targets local citizens and government stakeholders interested in city development and infrastructure improvements. Technically, the website uses a modern frontend stack including Bootstrap, jQuery, and various UI libraries, with a custom or unknown CMS backend. It implements GDPR-compliant consent management via InMobi's CMP and uses Google Analytics for visitor tracking. However, explicit privacy policies and terms of service are not found, and no advanced security headers are detected, indicating room for improvement in security posture. The website is accessible without WAF or blocking mechanisms and presents a professional and trustworthy image consistent with an official government program.

M

Médiacentrum Debrecen Kft.

dehir.hu

47

Dehir.hu is a well-established regional news portal serving Debrecen and Hajdú-Bihar county in Hungary, operated by Médiacentrum Debrecen Kft. The website offers comprehensive local news coverage, including culture, sports, economy, and lifestyle, supported by multimedia content such as video and photo galleries and live TV streaming. It holds a strong market position as a trusted regional media source with a consistent brand presence and active social media engagement. Technically, the site employs a modern tech stack including jQuery, Bootstrap, Font Awesome, and various JavaScript libraries for UI and media handling. The platform appears to be a custom CMS with moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though some improvements are possible. From a security perspective, the site uses HTTPS and secure login modals but lacks visible security headers and explicit cookie consent mechanisms, which are important for GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. The domain's WHOIS data is consistent with the business history, supporting legitimacy. Overall, Dehir.hu presents a professional, content-rich, and trustworthy regional news platform with room for improvement in privacy compliance and security hardening to enhance user trust and regulatory adherence.

«

«Roodell» MChJ

cheryauto.uz

43

Cheryauto.uz is the official website of the Chery automobile brand's authorized distributor in Uzbekistan, operated by «Roodell» MChJ. The site provides comprehensive information about Chery car models, pricing, test drive registration, dealer locations, after-sales services, and warranty programs. It targets consumers in Uzbekistan interested in purchasing or servicing Chery vehicles, positioning itself as a trusted and official source for the brand in the region. The business model revolves around automotive sales and support through a network of authorized dealers.

R

Rogy und Rogy Wirtschaftsprüfungs- und Steuerberatungs GmbH

rogyundrogy.at

48

Rogy und Rogy Wirtschaftsprüfungs- und Steuerberatungs GmbH is a well-established, family-run tax consulting and auditing firm based in Vienna, Austria, with over 40 years of experience. The company offers a broad range of financial services including tax declarations, social insurance consulting, business advisory, auditing, and specialized services for small and micro-entrepreneurs. Their market position is that of a trusted local expert catering primarily to small and medium-sized enterprises and self-employed individuals. The website is professionally designed, content-rich, and compliant with GDPR and cookie regulations, targeting German-speaking Austrian clients. Technically, the website uses a proprietary CMS (Internetkonzepte.at CMS) and incorporates modern JavaScript libraries such as jQuery and Owl Carousel for UI enhancements. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit incident response policies are missing. Overall, the security posture is good with no detected vulnerabilities or exposed sensitive data. The WHOIS data aligns well with the business claims, showing consistent registration details and domain age appropriate for the business history. No WAF or blocking mechanisms interfere with content access. The strategic recommendation includes enhancing security headers, publishing a security policy, and improving accessibility features to further strengthen trust and compliance. The website demonstrates a high level of professionalism and trustworthiness suitable for its business domain.

F

Franz Neubauer Ges.m.b.H.

mercedes-benz-werkstatt.at

46

Franz Neubauer Ges.m.b.H. operates as an authorized Mercedes-Benz and smart vehicle service center located in Vienna, Austria. The company provides comprehensive automotive repair, maintenance, bodywork, and parts sales services, targeting Mercedes-Benz vehicle owners seeking quality and authorized service. The website reflects a small-sized, family-owned business with a clear focus on automotive transportation services. Technically, the site uses a CMS from Internetkonzepte.at and common JavaScript libraries such as jQuery and Modernizr, delivering a moderately performant and mobile-optimized experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published security policies. Privacy compliance is basic but present, with a GDPR-compliant privacy policy and cookie banner. Overall, the website is professional, trustworthy, and well-structured, supporting the business's credibility and customer engagement.

C

Computer-L.A.N. GmbH

lancloud.cloud

53

LANcloud is a cloud-based seminar and event management software developed by Computer-L.A.N. GmbH, targeting organizers of seminars, coachings, courses, and events primarily in Germany. The platform offers a comprehensive SaaS solution with automated administrative processes, integrated online booking, and compliance with GDPR and GoBD standards. The company positions itself as a reliable and modern solution with a growing customer base and strong trust indicators such as certifications and customer testimonials. Technically, the website is built on WordPress with a modern tech stack, hosted securely on Microsoft Azure, and employs best practices in privacy and security, including SSL encryption and cookie consent management. The security posture is strong, though improvements like enabling DNSSEC and additional security headers are recommended. Overall, the website is professional, secure, and compliant, reflecting a trustworthy business with a clear market niche.

U

Up Portugal

up-portugal.pt

55

Up Portugal is a well-established company specializing in employee benefit solutions such as meal cards, education support, fuel payment, and multi-service vouchers. The company operates primarily in Portugal but is part of a larger international group with presence in 28 countries and over 26 million users. Their website reflects a professional and consistent brand image targeting companies and their employees. Technically, the website uses a variety of JavaScript libraries and Google Tag Manager for analytics, with a custom CMS platform. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. Privacy compliance is evident with GDPR-aligned privacy and cookie policies. No direct contact emails or phone numbers are provided, relying on contact forms instead. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

A

Awaze Vacation Rentals Ltd

awaze.com

60

Awaze Vacation Rentals Ltd operates as the largest managed vacation rentals and holiday resorts business in Europe, aggregating multiple trusted travel brands such as cottages.com, Hoseasons, and NOVASOL. The company targets holidaymakers and property owners across Europe, offering a wide range of self-catering accommodations and villas. Their market position is strong as a leading group in the European hospitality sector, with a large employee base and extensive property portfolio. The website reflects a professional and consistent brand image with comprehensive business information and regulatory compliance references. Technically, the website is built on WordPress and leverages modern JavaScript libraries and analytics tools including Google Analytics and CookieScript for cookie consent management. The site is mobile optimized, accessible, and SEO friendly, with good performance metrics. However, some security headers are missing, and no explicit security or incident response policies are published, which could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent mechanisms. The absence of WHOIS domain registration data is a concern, potentially indicating privacy protection or query limitations, which slightly impacts trustworthiness. Overall, Awaze presents a credible and professional online presence with strong business and technical foundations. Strategic improvements in security transparency and domain registration clarity would enhance trust and compliance further.

S

Stadtsportbund Bielefeld e.V.

sportbund-bielefeld.de

50

Stadtsportbund Bielefeld e.V. is a medium-sized non-profit organization dedicated to promoting sports and community engagement in Bielefeld, Germany. The website serves as an information hub for sports clubs, youth programs, educational initiatives, and community sports activities. It positions itself as a local leader in sports promotion with a clear focus on inclusivity and education. The site uses TYPO3 CMS and integrates modern web technologies such as Bootstrap, jQuery, and Google Analytics to provide a responsive and accessible user experience. The presence of a comprehensive cookie consent mechanism and privacy policy indicates good GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is professional, trustworthy, and well-aligned with its mission to support sports in the Bielefeld community.

M

Museum Huelsmann

museumhuelsmann.de

53

Museum Huelsmann is a cultural institution located in Bielefeld, Germany, specializing in applied arts with a diverse collection displayed in a historic villa. The museum offers exhibitions, special events, workshops, and an online ticketshop, positioning itself as a young but quality art museum in Germany. The website is professionally designed with clear navigation and content relevant to its audience, primarily German-speaking visitors interested in art and culture. Technically, the site uses standard web technologies such as jQuery and Fancybox, hosted with DomainControl (GoDaddy), and employs HTTPS for secure communication. The cookie consent mechanism is implemented, supporting GDPR compliance. Security posture is moderate with HTTPS enabled but lacks advanced security headers and explicit incident response policies. Overall, the site is trustworthy, safe, and well-maintained, with room for improvements in mobile optimization and security best practices.

A

ASVÖ Salzburg

asvoe-sbg.at

52

ASVÖ Salzburg is a regional non-profit umbrella sports association representing over 380 member clubs in Salzburg, Austria. It provides advisory and service functions, supports sports clubs with legal, tax, and sports-specific questions, and manages various projects and funding programs. The website reflects a well-established organization with a clear focus on community sports development and member support. The target audience includes sports clubs, officials, trainers, and athletes within the Salzburg region. Technically, the website is built on TYPO3 CMS, utilizing modern JavaScript libraries such as jQuery, fancybox, and slick slider for enhanced user experience. The site is mobile-optimized and includes a cookie consent mechanism via Usercentrics, demonstrating compliance with GDPR requirements. Google Analytics 4 is used for visitor tracking with consent. From a security perspective, the site enforces HTTPS and uses a consent management platform for privacy compliance. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns well with the website's claims, supporting legitimacy and trustworthiness. Overall, the website presents a professional and trustworthy digital presence for a regional non-profit sports association, with good content quality, technical implementation, and privacy compliance. Security posture is adequate but could be improved by adding security headers and incident response information.

P

Pour Bien Vieillir

pourbienvieillir.fr

57

Pour Bien Vieillir is a French government-affiliated platform dedicated to providing seniors and retirees with comprehensive resources on retirement preparation, health maintenance, social engagement, and home adaptation. The website is positioned as a trusted public health and retirement information portal, supported by official retirement funds and Santé publique France. It offers a wide range of services including prevention activities, educational content, and professional resources for senior care providers. Technically, the site is built on WordPress with modern frameworks like Bootstrap and enhanced by SEO and performance plugins such as Yoast SEO and Rocket Loader. The site demonstrates good mobile optimization, accessibility features, and SEO best practices. Security-wise, the site enforces HTTPS and manages cookie consent effectively but lacks some advanced security headers and explicit security policies. No WHOIS data is publicly available, likely due to privacy protection, but the site’s legitimacy is supported by its official partnerships and professional presentation. Overall, the platform is a high-quality, trustworthy resource for its target audience with room for minor security and transparency improvements.

S

Schweizer Agrarmedien AG

agrarmedien.ch

67

Schweizer Agrarmedien AG is the largest agricultural specialized publishing company in Switzerland, offering a portfolio of print and digital media products including newspapers, magazines, and online marketplaces focused on agriculture, nature, and environment. Their target audience includes farming families, animal and nature enthusiasts, and professionals in the Swiss agricultural sector. The company maintains a strong market position with multiple well-known media brands and digital platforms. Technically, the website is built on TYPO3 CMS and leverages modern JavaScript libraries and analytics tools such as Matomo, Microsoft Clarity, and Google Tag Manager, indicating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and use of reCAPTCHA, but lacks some security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and professionally managed, with room for improvement in security and privacy transparency.

A

AVANZINI

avasped.it

46

Avanzini is a well-established Italian logistics and transportation company with over 30 years of experience, primarily serving clients in Italy and across Europe. The company offers comprehensive transport and integrated logistics solutions, including specialized services for wine, beer, and alcoholic products. Their market position is strong in Verona, supported by multiple operational sites and a significant volume of shipments and warehouse space. Technically, the website employs modern JavaScript libraries and frameworks, ensuring a good user experience with mobile optimization and basic accessibility. Privacy compliance is robust, featuring a comprehensive cookie consent mechanism and GDPR-aligned policies. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and incident response documentation are recommended. Overall, the website reflects a professional and trustworthy business with clear contact information and certifications that enhance credibility.

O

O‘zbekiston Avtomobil Biznesi Uyushmasi

abauzbekistan.uz

47

O‘zbekiston Avtomobil Biznesi Uyushmasi is a national non-profit association uniting automotive manufacturers, component producers, distributors, and dealers in Uzbekistan. The organization aims to develop the automotive industry, promote standards, support export and localization, and represent member interests. The website is professionally designed, content-rich, and targets industry stakeholders and partners. Technically, it uses modern JavaScript libraries and analytics tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and CSRF protections, though some security headers and policies could be improved. Privacy compliance is basic with a cookie consent mechanism and privacy policy present. Overall, the domain registration aligns well with the business founding date, supporting legitimacy.

J

JuBla Sissach

jubla-sissach.ch

52

JuBla Sissach is a well-established non-profit youth organization operating in the German-speaking region of Switzerland. The organization focuses on providing leadership opportunities for young adults and organizing events, camps, and activities for children and youth. Their market position is strong as one of the largest Catholic youth associations in the region, emphasizing community engagement and outdoor experiences. The website effectively communicates their mission and services, targeting families and youth interested in social and recreational activities. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, and various UI enhancement libraries, hosted likely on a Swiss cloud provider. The site is mobile-optimized with good SEO practices and moderate performance. However, there is room for improvement in accessibility and security headers implementation. The site uses HTTPS with a strong SSL configuration, ensuring secure communications. From a security perspective, the website demonstrates good baseline practices such as HTTPS enforcement and no visible sensitive data exposure. However, it lacks advanced security headers and formal security policies or incident response information. Privacy compliance is supported by a comprehensive privacy policy document, but cookie consent mechanisms are missing. No vulnerabilities or suspicious activities were detected. Overall, the website presents a low-risk profile with a solid business credibility and trustworthy domain registration. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and compliance.

A

ARBÖ

arboe.at

47

ARBÖ is a well-established Austrian automobile club providing roadside assistance, vehicle inspections, legal advice, and various automotive-related services. The website targets vehicle owners and drivers in Austria, offering membership benefits and technical services. The digital infrastructure is built on TYPO3 CMS with modern frontend technologies including Bootstrap and jQuery, and integrates Google Tag Manager for analytics and marketing. The site is mobile optimized and presents a professional user experience with clear navigation and relevant content. Security posture is good with HTTPS enforced and a comprehensive cookie consent mechanism, though it lacks explicit security policies and incident response contacts. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website is trustworthy and professionally maintained, suitable for its audience and business model.

I

Internetkonzepte.at GmbH

internetkonzepte.at

46

Internetkonzepte.at GmbH is a small Austrian technology company specializing in custom web and software development, content management systems, hosting, and related IT services. With over 20 years of experience and numerous client references, the company holds a solid market position in the Austrian and German-speaking business sectors. Their website reflects a professional and consistent brand image, targeting businesses seeking tailored internet solutions. The company emphasizes security and support, with a 24/7 support offering and a strong partnership with their hosting provider myNET.at. Technically, the website employs a modern tech stack including jQuery, Font Awesome, and Matomo analytics, running on a proprietary CMS developed by the company. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is strong with HTTPS and no visible vulnerabilities, but lacks some advanced security headers and formal policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the security posture is good, with no detected vulnerabilities or blocking mechanisms. The WHOIS data confirms the legitimacy and consistency of the business registration. Strategic improvements include implementing cookie consent, publishing security and incident response policies, and adding security headers to enhance protection and compliance.

A

ASKÖ WAT Wien

askoewat.wien

42

ASKÖ WAT Wien is a well-established regional sports association based in Vienna, Austria, operating under the umbrella of the ASKÖ Bundesorganisation. The organization focuses on providing diverse sports programs, supporting sports clubs, and promoting health and fitness activities for a broad audience including athletes, clubs, and the general public. Their website reflects a professional and community-oriented approach with clear navigation and relevant content. Technically, the site uses a mix of established JavaScript libraries and a proprietary CMS, delivering moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms, indicating room for improvement in compliance and security best practices. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given the professional presentation and active content. Overall, the site is trustworthy and serves its community well, though enhancements in privacy compliance and security hardening are recommended.

A

ASKÖ Steiermark

askoe-steiermark.at

10

ASKÖ Steiermark is a regional non-profit sports association based in Graz, Austria, focused on promoting diverse sports activities, memberships, training, and community engagement within the Styria region. The organization operates under the umbrella of the ASKÖ Bundesorganisation, providing services such as sports center facilities, educational programs, and project funding. The website reflects a well-structured and professional digital presence, targeting sports clubs, athletes, and the general public interested in sports in Styria. Technically, the site uses a moderate tech stack including jQuery, FontAwesome, and a proprietary CMS by Internetkonzepte.at, with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is strong with clear cookie consent and a comprehensive privacy policy. Overall, the site is trustworthy and professionally maintained, with clear contact information and partner relationships.

A

ASKÖ Oberösterreich

askoe-ooe.at

52

ASKÖ Oberösterreich is a regional non-profit sports association dedicated to promoting diverse sports activities and supporting sports clubs in Upper Austria. The organization provides a wide range of services including club support, sports education, fitness and health programs, and competitive sports event organization. It serves sports clubs, athletes, and community members, positioning itself as a key regional player in sports promotion. The website reflects a professional and consistent brand image aligned with its mission. Technically, the website uses a moderate technology stack including jQuery, FontAwesome, Owl Carousel, and a proprietary CMS by Internetkonzepte.at. The site is mobile optimized and performs moderately well, with basic SEO and accessibility features. Privacy and cookie policies are present and GDPR compliant, though explicit security policies and incident response contacts are not found. From a security perspective, the site enforces HTTPS and uses secure external scripts but lacks advanced security headers and a vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website's claims, indicating a legitimate and established organization. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic improvements in security headers, incident response transparency, and accessibility could enhance its security posture and user trust.

A

ASKÖ Niederösterreich

askoenoe.at

48

ASKÖ Niederösterreich is a well-established regional non-profit sports association dedicated to promoting diverse sports activities and supporting sports clubs in Lower Austria. The organization offers a variety of projects, training programs, and community services aimed at athletes, sports clubs, and enthusiasts. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its target audience. Technically, the website employs a modern technology stack including jQuery, Font Awesome, and several UI libraries, running on a custom CMS by Internetkonzepte.at. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Privacy and cookie policies are implemented with GDPR compliance, and social media integration is active, primarily via Facebook. From a security perspective, the site uses HTTPS and has basic security best practices in place, though it lacks advanced security headers and explicit incident response or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data confirms the legitimacy and consistency of the domain registration with the business entity. Overall, the website presents a low-risk profile with a solid foundation for business credibility and user trust. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure could further enhance the security posture and compliance maturity.

A

ASKÖ Burgenland

askoe-burgenland.at

50

ASKÖ Burgenland is a regional non-profit sports association based in Austria, focused on promoting diverse sports activities, supporting local sports clubs, and organizing events and training programs. The organization serves athletes, trainers, and the general public within the Burgenland region, positioning itself as a key regional player in sports promotion and community engagement. The website reflects this mission with comprehensive content about services, events, and funding opportunities. Technically, the site uses a custom CMS (Internetkonzepte.at CMS) and incorporates modern JavaScript libraries such as jQuery, Owl Carousel, and Fancybox, indicating a moderate level of digital maturity. The site is mobile optimized and provides clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses trusted external libraries but lacks explicit security headers and published security policies. Privacy compliance is strong with clear GDPR-aligned privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-maintained, with room for improvement in security policy transparency and technical enhancements.

B

Bayerischer Turnverband e. V.

btv-turnen.de

47

Bayerischer Turnverband e. V. is a regional non-profit sports association focused on gymnastics, fitness, and health sports in Bavaria, Germany. The website serves as an information hub for educational programs, events, and youth activities, positioning itself as a key player in the regional sports education sector. The technical infrastructure includes modern JavaScript libraries such as Swiper.js and Fancybox, with privacy-conscious analytics via Matomo and a cookie consent mechanism from Consentmanager.net. The site is well-structured, mobile-optimized, and provides rich content relevant to its audience. Security posture is moderate with HTTPS implied but no explicit security headers detected. Privacy compliance is basic, lacking a visible privacy policy or terms of service. Overall, the domain appears legitimate and consistent with the organization's mission, though WHOIS data is minimal. Strategic improvements include publishing comprehensive privacy and security policies and enhancing security headers.

S

Sebastian-Kneipp-Akademie

kneippakademie.de

48

Sebastian-Kneipp-Akademie is a specialized educational institution focused on health promotion and prevention through the Kneipp methodology. It offers a variety of in-person and online training programs, seminars, and workshops targeting health-conscious individuals, course instructors, and self-employed professionals in the health sector. The organization maintains a niche market position within Germany, emphasizing quality and tradition in health education. Technically, the website is built on TYPO3 CMS with common JavaScript libraries for enhanced user experience. The site is mobile-optimized, well-structured, and includes modern web practices such as HTTPS and cookie consent mechanisms. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site demonstrates a good baseline with HTTPS and privacy compliance but lacks advanced security policies and vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious activities were detected. Overall, the site is trustworthy and professionally maintained. Strategically, the organization should consider enhancing its security posture by implementing security headers, publishing incident response contacts, and possibly adding a vulnerability disclosure policy. These steps will improve trust and compliance, especially as digital threats evolve.

O

Otak

otak.com

55

Otak, Inc. is a professional integrated design and project delivery firm specializing in architecture, engineering, environmental consulting, planning, and project management services. The company emphasizes sustainability, integrity, and community engagement as core values, serving government agencies, developers, and communities primarily in the United States. Their market position is that of a medium-sized, reputable firm with a strong focus on delivering community-centric projects and sustainable solutions. Technically, the website is built on WordPress with a modern technology stack including Google Analytics, Google Tag Manager, and various performance and SEO optimization plugins. The site is well-optimized for mobile devices, features good accessibility, and demonstrates excellent SEO practices. The infrastructure appears robust with fast loading times and a professional design. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks visible security headers, a published security policy, and incident response contact information. The absence of WHOIS domain registration data raises some concerns about domain transparency, although the website content and social media presence support its legitimacy. Overall, Otak presents a professional and trustworthy online presence with minor gaps in security transparency and domain registration information. Strategic improvements in security policy publication and domain WHOIS transparency would enhance trust and compliance.

I

Institut der Deutschen Zahnärzte

idz.institute

53

The Institut der Deutschen Zahnärzte (IDZ) is a reputable German dental research institute affiliated with the Bundeszahnärztekammer (BZÄK) and the Kassenzahnärztliche Bundesvereinigung (KZBV). It focuses on oral epidemiology, health economics, dental profession research, and related fields, providing valuable studies such as the German Oral Health Studies (DMS). The website is professionally designed, content-rich, and well-structured, targeting a broad audience interested in dental health research and policy. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes a consent management platform for GDPR compliance. Security posture is good with HTTPS and secure form handling, though some security headers are missing and no explicit security policies are published. WHOIS data is unavailable due to malformed queries or registry restrictions, but the website's content and affiliations strongly support its legitimacy. Overall, the site represents a trustworthy and authoritative source in the dental research sector in Germany.

AB Hyllteknik is a well-established Swedish manufacturer specializing in strong and flexible shelving and sken systems since 1957. The company serves B2B customers primarily in the Nordic region, including offices, schools, libraries, and furniture resellers. Their product portfolio includes office furniture, library shelving, school cloakroom furniture, and related interior systems. The website reflects a mature business with a consistent brand presence and a clear market position as a leader in their niche. Technically, the site uses a modern tech stack with popular JavaScript libraries, CDN hosting, and standard analytics tools, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and CSRF protections, though improvements are recommended in DNSSEC deployment and security headers. Privacy compliance is basic with cookie usage disclosed but lacking a formal privacy policy and consent mechanism. Overall, the domain registration data supports the legitimacy and trustworthiness of the business, with a domain age consistent with the company's long history.

Horizons by heise is a well-established German conference platform focusing on digital transformation, AI, data-driven organizations, and the future of work. It is backed by the reputable heise medien group and targets decision-makers and digital change agents. The website provides comprehensive event information, speaker profiles, and additional content such as podcasts and online meetups. Technically, the site uses modern JavaScript libraries like Swiper and Fancybox, and employs Matomo for privacy-conscious analytics. The hosting is consistent with the domain's WHOIS data, indicating a legitimate and professional setup. Security posture is good with HTTPS enforced and no visible vulnerabilities, though the site lacks some security headers and a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-positioned in its niche.

L

Start – Landesgartenschau Bad Nenndorf 2026

landesgartenschau-badnenndorf.de

48

The website for Landesgartenschau Bad Nenndorf 2026 serves as an informational portal for a regional garden exhibition event in Germany. It provides visitors with event dates, planning updates, and engagement opportunities. The site is built on Joomla CMS and uses modern frontend libraries such as Swiper and Fancybox, indicating a moderate level of technical maturity. However, the absence of privacy and cookie policies, as well as explicit contact information, suggests gaps in compliance and user trust facilitation. Security posture is basic, with no visible security headers or incident response contacts. Overall, the site is functional and informative but would benefit from enhanced privacy, security, and contact transparency to improve trust and compliance.

C

CM4all GmbH

cm4all.com

59

CM4all GmbH operates a mature software platform specializing in web application and website building solutions, primarily targeting small businesses and partners such as hosting providers and telecommunications companies. The company is part of the we22 group and has a strong market presence with millions of users worldwide. Their offerings include white-label web builders, hosting platforms, and service tools, supported by expert consulting and 24/7 support. Technically, the website is built on TYPO3 CMS with modern frontend frameworks like Bootstrap and jQuery, delivering a responsive and professional user experience. Security posture is moderate with secure form handling and GDPR compliance evident, but lacks visible security headers and explicit incident response policies. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and business information appear consistent and trustworthy. Overall, the site demonstrates good digital maturity but would benefit from enhanced security practices and domain registration transparency.

W

we22

we22.com

50

we22 is a German-based technology company specializing in software development, platform operations, and consulting services aimed at empowering small businesses through digital transformation. Their offerings include scalable website software, hosting, domain management, CRM integration, and white-label services, positioning them as a market leader in website creation and online marketing solutions for small enterprises. The company leverages a strong partner ecosystem including major industry and telecommunications firms to enhance its market reach and service quality. Technically, the website is built on TYPO3 CMS with modern frontend frameworks and integrates Google Tag Manager for analytics. The site is well-designed, mobile-optimized, and GDPR compliant with clear cookie consent mechanisms and multiple contact forms integrated with Salesforce. Security posture is moderate with room for improvement in HTTP security headers and published security policies. WHOIS data is missing, which reduces domain trustworthiness and should be verified. Overall, the website and business present a professional and credible digital presence with a solid foundation for growth and customer engagement.

S

Saint-Louis Agglomération

agglo-saint-louis.fr

55

Saint-Louis Agglomération is a regional governmental entity serving the Alsace region in France, focusing on intercommunal cooperation and public service delivery. The website provides comprehensive information on local governance, community services, environmental initiatives, and economic development. It targets residents, businesses, and public stakeholders within the territory. The digital presence is built on WordPress with a modern tech stack including SEO and social media integration, reflecting a mature digital infrastructure. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements in security headers and explicit policies are recommended. The absence of WHOIS data limits domain trust verification but the overall site content and structure indicate legitimacy. Strategic recommendations include enhancing security policies, updating technical components, and improving transparency around incident response.

N

Neudeck

neudeck.de

49

Neudeck is a well-established German family-owned business specializing in the international import and distribution of semi-finished wood products. Founded in 1946, it operates with over 180 employees, multiple locations, and a significant logistics fleet, serving primarily B2B customers in the wood manufacturing and construction sectors. The company emphasizes sustainability through FSC and PEFC certifications and maintains a professional digital presence with a modern WordPress-based website featuring SEO optimizations and multimedia content. Technically, the website uses a mature tech stack including Bootstrap and Borlabs Cookie for GDPR compliance, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. Overall, the website reflects a credible and trustworthy business with a strong market position in the manufacturing sector.

A

Atlas Estate Agents

atlasestateagents.co.uk

45

Atlas Estate Agents is a well-established real estate agency specializing in residential and commercial property sales, lettings, and management in Liverpool, UK. The company emphasizes competitive pricing, family business values, and customer service, positioning itself as a trusted local market player since 1965. Their website provides property search functionality, valuation requests, and detailed service information targeting buyers, sellers, landlords, and tenants in the Liverpool area. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Maps API, Google reCAPTCHA, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features are basic. Security measures include HTTPS enforcement and spam protection via reCAPTCHA, but lack certain HTTP security headers and cookie consent mechanisms. From a security perspective, the site shows a moderate maturity level with no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and formal privacy/cookie consent banners indicates room for improvement in compliance and defense-in-depth. The WHOIS lookup failed due to querying a subdomain rather than the registered domain, limiting domain trust verification. Overall, the site is professional and trustworthy but could enhance its security posture and privacy compliance. Strategically, the company should prioritize implementing security headers, cookie consent mechanisms, and publishing security policies to strengthen user trust and regulatory compliance. Additionally, clarifying domain registration details and improving accessibility would further enhance their digital maturity and risk management.

A

axapharm ag

diabetes-care.ch

51

The website www.diabetes-care.ch represents axapharm ag's Healthpro brand, specializing in diabetes care products such as blood glucose meters, test strips, lancets, and related accessories. The company positions itself as a niche healthcare provider offering modern, user-friendly devices with features supporting effective diabetes management. The site targets individuals managing diabetes and healthcare professionals seeking reliable measurement tools. Technically, the website is built on WordPress with Elementor and Yoast SEO, leveraging modern web technologies and Google Analytics for user insights. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS with a valid SSL certificate and anonymizes IPs in Google Analytics, but lacks some security headers and displays minor PHP notices, which could expose information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Contact information is comprehensive and transparent, enhancing business credibility. Overall, the site is trustworthy and professionally maintained but would benefit from addressing minor security and privacy gaps.

C

Christkatholische Kirchgemeinde Zürich

christkath-zuerich.ch

53

Christkatholische Kirchgemeinde Zürich operates as a Christian Catholic parish serving the Zurich community with religious services, social support, and cultural events. The website is well-structured, providing detailed event information, contact details, and community resources. Technically, it employs modern web technologies such as Bootstrap and jQuery, with a CMS based on ZMS, and uses HTTPS with appropriate security headers. However, the site lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is strong with no visible vulnerabilities, and WHOIS data confirms the legitimacy of the domain and organization. Overall, the website effectively serves its community audience but should improve privacy compliance to enhance trust and legal adherence.

P

Paprec Group

paprec.com

65

Paprec Group is a leading French company specializing in waste management and recycling services. Established in 1994, it has grown into a major player in the environmental sector, serving both industrial clients and local authorities with a comprehensive range of services including waste collection, sorting, recycling, and energy valorization. The company emphasizes sustainability and circular economy principles, positioning itself as a key contributor to environmental preservation in France. The website reflects a mature digital presence with multilingual support and rich content aimed at educating and engaging its audience. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and Matomo analytics. It demonstrates good performance, mobile optimization, and accessibility features. Security best practices are observed with HTTPS enforcement and security headers, although public security policies and incident response information are not explicitly published. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. However, the WHOIS data for the domain is missing or not publicly available, which raises minor concerns about domain registration transparency but does not detract significantly from the overall legitimacy given the professional website and business presence. Overall, Paprec Group's website is professional, secure, and compliant, supporting its position as a trusted leader in the recycling industry. Strategic recommendations include publishing explicit security and incident response policies and improving domain registration transparency.

St. Franziskus Riehen-Bettingen is a local Roman Catholic parish serving the Basel-Stadt community in Switzerland. The website provides comprehensive information about church services, events, spiritual impulses, and community involvement, targeting parishioners and local residents. The business operates as a non-profit religious organization affiliated with the Römisch-Katholische Kirche Basel-Stadt. Technically, the site uses a modern webIQ CMS framework with common JavaScript libraries such as jQuery and Bootstrap, offering a responsive and user-friendly experience. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though additional security headers and privacy mechanisms could improve compliance. The domain registration data aligns well with the website's claims, supporting legitimacy and trust. Overall, the site is professional, trustworthy, and well-maintained, serving its community effectively.

T

Team Deutschland Paralympics

teamdeutschland-paralympics.de

45

Team Deutschland Paralympics is the official German Paralympic team website, providing comprehensive information about athletes, events, news, and partners related to Paralympic sports in Germany. The site serves as an authoritative platform for fans, athletes, and stakeholders interested in Paralympic activities. It is supported by official government and sports federation entities, enhancing its credibility and trustworthiness. Technically, the website is built on TYPO3 CMS and employs modern front-end libraries and privacy-conscious analytics (Matomo) with GDPR compliance. The site is well-structured, mobile-optimized, and accessible, offering a professional user experience. Security posture is good with HTTPS enforced and privacy mechanisms in place, though some security headers could be improved. No critical vulnerabilities or suspicious patterns were detected. Overall, the website demonstrates a mature digital presence suitable for its non-profit, government-affiliated sports mission.

M

MOVE-ON(KO)

move-onko.de

47

MOVE-ONKO is a German healthcare project dedicated to integrating movement therapy into oncological care to improve patient outcomes by reducing side effects of cancer treatment. The project is funded by Deutsche Krebshilfe with a substantial budget and involves a consortium of clinical, scientific, and patient organizations. The website presents comprehensive information about the project, its vision, partners, and news updates, targeting cancer patients, healthcare professionals, and researchers. Technically, the site is built on WordPress with modern plugins and libraries, optimized for SEO and mobile use. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and formal policies could be improved. WHOIS data is minimal but consistent with the project timeline and hosting infrastructure. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

P

Pflegezentrum Rotacher

pz-rotacher.ch

56

Pflegezentrum Rotacher is a Swiss healthcare provider specializing in elderly care services including long-term, short-term, dementia, psychiatric, and transitional care. The organization serves residents primarily in the Dietlikon, Wallisellen, and Wangen-Brüttisellen communities. Their website reflects a regional healthcare provider with a clear focus on quality care and community integration. The business model centers on providing comprehensive care services recognized by local health authorities and insurers. Technically, the website is built on TYPO3 CMS with modern frontend libraries such as jQuery and Owl Carousel. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and published security policies. Overall, the website is professional, trustworthy, and compliant with privacy regulations including GDPR. No critical security issues or blocking mechanisms were detected. The domain WHOIS data aligns well with the business, supporting legitimacy. Recommendations include enhancing security headers, publishing security and incident response policies, and adding vulnerability disclosure information to improve trust and security maturity.

L

Landessportverband Schleswig-Holstein e.V.

lsv-sh.de

11

The Landessportverband Schleswig-Holstein e.V. is a regional non-profit sports association dedicated to supporting sports clubs and organizations in Schleswig-Holstein, Germany. The website provides comprehensive information about the association's services, including sports promotion, education, funding opportunities, and community projects. It targets sports clubs, volunteers, and sports enthusiasts within the region. The organization holds a strong market position as the leading sports association in Schleswig-Holstein, supported by reputable partners and sponsors. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries such as jQuery and Owl Carousel for enhanced user experience. The site is mobile-optimized, accessible, and SEO-friendly, with a well-structured navigation system. Privacy compliance is robust, featuring GDPR-compliant privacy and cookie policies with active consent mechanisms. From a security perspective, the site enforces HTTPS and employs cookie consent tools, with no visible vulnerabilities or exposed sensitive data. However, it lacks publicly available security policies and incident response contacts, which could be improved to enhance trust and preparedness. Overall, the website is professional, trustworthy, and well-maintained, reflecting the organization's commitment to transparency and community engagement. Strategic recommendations include publishing a dedicated security policy, incident response information, and enhancing security headers to further strengthen the security posture.

K

Kneipp-Bund e.V.

kneippbund.de

58

Kneipp-Bund e.V. is a well-established German non-profit organization dedicated to health promotion and prevention through natural healing methods based on the teachings of Sebastian Kneipp. With a large network of associations and certified institutions, it serves approximately 200,000 people daily. The website reflects a mature digital presence using TYPO3 CMS, offering rich content, membership information, and educational resources. The organization maintains a consistent brand and clear communication channels, including multiple contact points and social media presence. Technically, the site is modern and mobile-optimized, with standard analytics and cookie consent mechanisms implemented. Security posture is good with HTTPS and privacy-conscious analytics, though formal security policies and incident response information are absent. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained.

S

Sozialverband Deutschland e.V.

sovd-kaufhaus.de

55

The Sozialverband Deutschland e.V. (SoVD) Landesverband Niedersachsen operates as a regional non-profit social advocacy organization focused on informing and supporting citizens regarding social policy and social law in Germany. Their website serves as an informational portal with services including consultation, publications, and digital tools. The SoVD Shop is currently under maintenance, indicating ongoing updates to their e-commerce capabilities. The organization maintains a solid market position within the non-profit sector in Germany, targeting a broad audience interested in social welfare and policy. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience and accessibility. The site is mobile-optimized and includes a cookie consent mechanism compliant with GDPR. Analytics are handled via Matomo, and user interaction is supported by the Userlike chatbot. Hosting appears stable with domain nameservers consistent with the organization's infrastructure. From a security perspective, the site enforces HTTPS and implements cookie consent, but lacks explicit security headers and published security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear policies and consent mechanisms. However, the absence of a terms of service page and vulnerability disclosure policy suggests areas for improvement. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could benefit from enhanced security documentation and transparency. The current AI score reflects a good balance of content quality, technical implementation, security posture, and privacy compliance, with room for strategic enhancements.

S

Sozialverband Deutschland e.V.

sovd-verwaltung.de

55

The website www.sovd-nds.de represents the Landesverband Niedersachsen branch of the Sozialverband Deutschland e.V., a non-profit social advocacy organization focused on social welfare, rights, and support services in Lower Saxony, Germany. The site provides comprehensive information about social counseling, campaigns, digital tools, and membership services, targeting members and interested individuals in the social sector. The organization maintains a clear market position as a regional branch of a national social association, offering valuable services such as online calculators, social policy updates, and member support. Technically, the website is built on TYPO3 CMS with modern frameworks like Bootstrap and jQuery, ensuring good mobile optimization, accessibility, and SEO. The site uses HTTPS and implements a detailed cookie consent mechanism with categories for essential, marketing, and chatbot cookies, reflecting good privacy compliance. Security posture is solid with no visible vulnerabilities or exposed sensitive data, though explicit security policies and vulnerability disclosure mechanisms are absent. Overall, the website is professional, trustworthy, and well-maintained, with active social media presence and partner integrations. Recommendations include publishing explicit security and incident response policies and enhancing security headers for improved protection.