Security Directory

K

Katholische Kirche Kärnten

kath-kirche-kaernten.at

67

Katholische Kirche Kärnten operates as the official online portal for the Catholic Church in the Kärnten region of Austria, providing daily news, event information, and community engagement tools for its audience. The website serves as a comprehensive resource for parishioners and interested individuals, offering spiritual content, organizational updates, and access to church services and events. The platform maintains a consistent brand identity and high content quality, reflecting its role as a trusted religious institution's digital presence. Technically, the website employs a modern tech stack including jQuery, Slick Slider, and Google Analytics, with a responsive design optimized for mobile devices. The site uses HTTPS with strong SSL configuration and incorporates privacy and cookie consent mechanisms, demonstrating compliance with GDPR and user privacy standards. While no explicit security policies or incident response contacts are published, the site follows good security practices such as CSRF protection and encrypted form submissions. Security posture is solid with no detected vulnerabilities or suspicious domains linked. The site integrates social media channels effectively and maintains transparency through an impressum and privacy policy. Overall, the website is professional, trustworthy, and well-maintained, supporting the Catholic Church's mission in the region. Recommendations include enhancing security headers, publishing a formal security policy or incident response contact, and considering a terms of service page to further improve compliance and user trust.

Y

youngCaritas Österreichweit

youngcaritas.at

41

youngCaritas Österreichweit is a non-profit organization focused on youth engagement in social actions and workshops across Austria. The website serves as a national platform to promote various campaigns, workshops, and youth participation initiatives aimed at helping people in need. The organization targets children, youth, teachers, and multipliers with a clear mission to facilitate social responsibility and community involvement. Technically, the website is built on WordPress with modern plugins for SEO, cookie management, and social sharing, demonstrating a moderate to good level of digital maturity. The site is mobile optimized and uses HTTPS with standard security headers, reflecting a good security posture. However, explicit privacy and terms of service pages were not found in the provided content, indicating room for improvement in compliance documentation. Overall, the website is professional, trustworthy, and safe for general audiences.

W

Welput

welput.com

58

Welput is a large, specialist unlisted Central London office fund managed by BentallGreenOak (BGO). The company focuses on creating sustainable, wellness-oriented office environments with a strong emphasis on future-proofing and community engagement. Their portfolio includes major developments such as 105 Victoria Street and Regent's Wharf, targeting high sustainability certifications like BREEAM Outstanding and WELL Platinum. The website reflects a professional and modern digital presence built on WordPress, with good SEO and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements such as DNSSEC and security headers are recommended. Overall, the site is trustworthy and well-aligned with the business's market position and audience.

N

Numaferm

numaferm.com

62

Numaferm is a German biotechnology company specializing in the discovery, optimization, and production of peptides, pepteins, and proteins for life sciences and related industries. The company leverages proprietary technologies such as Numascreen™ and Numatech™ to deliver innovative, cost-effective, and sustainable bioprocess solutions from lead discovery to commercial manufacturing. Their market position is strengthened by partnerships with academic institutions and industry leaders, and they maintain ISO 9001:2015 certification to ensure quality standards. Technically, the website is built on WordPress with modern SEO and analytics tools including Yoast SEO, Google Analytics, and Google Tag Manager. The site is mobile-optimized and performs moderately well, with clear navigation and professional design. Hosting is provided by IONOS SE, a reputable provider. However, DNSSEC is not enabled, and some security headers are missing, indicating room for improvement in security hardening. Security posture is generally good with HTTPS enforced and no exposed sensitive data detected. The site implements a cookie consent mechanism but lacks explicit privacy and terms of service pages, as well as a published security policy or incident response contacts. WHOIS data shows privacy protection but aligns with the company's German location and business age, supporting legitimacy. Overall, Numaferm presents a professional and trustworthy online presence suitable for its biotech B2B audience. Strategic improvements in privacy documentation, security headers, and incident response transparency would enhance compliance and trust further.

V

Verein MEFOgraz

mefograz.at

10

MEFOgraz is a small non-profit association based in Graz, Austria, dedicated to supporting young researchers in the field of medical research. The organization focuses on funding projects related to cancer, cardiovascular diseases, and other health conditions to improve patient outcomes and quality of life. Their website clearly communicates their mission, funding programs, and donation opportunities, targeting researchers, donors, and corporate partners. The site is built on TYPO3 CMS and uses modern web technologies to provide a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though formal security policies and incident response information are absent. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate organization.

N

Nationale Dekade gegen Krebs

dekade-gegen-krebs.de

60

The website 'Die Nationale Dekade gegen Krebs' is a German government-backed initiative led by the Bundesministerium für Bildung und Forschung (BMBF) to advance cancer research and support affected individuals. It serves as a comprehensive platform providing information on research projects, patient involvement, partner organizations, and relevant events. The site is professionally designed with excellent content quality, clear navigation, and strong branding consistency. Technically, it uses the Government Site Builder CMS, modern JavaScript libraries like Slick Slider and MediaElement.js, and is hosted by ITZBund, ensuring reliable infrastructure and good performance. Security posture is solid with HTTPS enforced and a cookie consent mechanism that complies with GDPR, although some security headers could be improved. The site uses Matomo analytics with anonymized data collection and explicit user consent, reflecting good privacy practices. No contact emails or phone numbers are explicitly listed, and no terms of service page is found. Overall, the website is trustworthy, secure, and well-aligned with its mission as a national cancer research initiative.

E

European Environmental Bureau

eeb.org

64

The European Environmental Bureau (EEB) is a well-established non-profit organization founded in 1974, serving as Europe’s largest network of environmental citizens’ organizations. It represents over 190 member organizations across 41 countries, advocating for environmental sustainability and policy influence at the European level. The website reflects a mature digital presence with comprehensive content, clear navigation, and active engagement channels including social media and newsletters. The organization’s market position is strong within the environmental advocacy sector, supported by EU funding and a broad membership base. Technically, the website is built on WordPress with modern plugins and frameworks such as Elementor and Contact Form 7, hosted by OVH sas. The site is mobile-optimized and employs standard web technologies including jQuery and Slick Slider. Performance is moderate with good SEO and accessibility basics in place. Security posture is solid with HTTPS enforced, domain locking, and cookie consent mechanisms, though DNSSEC is not enabled and some advanced security headers are missing. From a security perspective, the site shows good compliance with GDPR and privacy regulations, featuring a comprehensive privacy policy and cookie management. Incident response contact is provided via a complaints email. No critical vulnerabilities or suspicious patterns were detected. The domain registration is consistent with the organization’s history and legitimacy is high. Overall, the EEB website is a professional, trustworthy, and content-rich platform that effectively supports its mission. Strategic improvements could include enabling DNSSEC, enhancing security headers, and publishing a formal security policy to further strengthen trust and resilience.

Z

Združenje Delodajalcev Slovenije

zds.si

52

Združenje Delodajalcev Slovenije (ZDS) is a well-established Slovenian employer association founded in 1999, providing advocacy, education, and advisory services to employers. The website serves as a professional platform offering news, events, publications, and membership benefits targeted at Slovenian employers and business professionals. The organization maintains strong partnerships with international employer bodies such as BusinessEurope and IOE, reinforcing its market position. Technically, the website is built on the SilverStripe CMS and employs modern JavaScript libraries including jQuery, Slick Slider, and Google Analytics for tracking. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features could be enhanced. Security is well-managed with HTTPS enforced and cookie consent implemented, but additional HTTP security headers could improve the security posture. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear policies and consent mechanisms. Contact information is transparent and professional, enhancing business credibility. No adult or questionable content is present, making the site safe for general audiences. Overall, the website reflects a mature digital presence for a non-profit business association with good security hygiene and compliance. Strategic improvements in security headers and incident response transparency would further strengthen trust and resilience.

D

de Nederlandse Veiligheidsbranche

veiligheidsbranche.nl

48

De Nederlandse Veiligheidsbranche is a prominent Dutch industry association representing private security companies and related sectors such as event security, cash transport, and private investigations. The website serves as an information hub offering certification programs, collective labor agreements, industry news, and member services. It targets private security firms and stakeholders within the Netherlands, positioning itself as a leading authority in the sector. Technically, the website is built on WordPress with modern plugins and integrations including Google Tag Manager and Cookiebot for privacy compliance. It uses a CDN (Cloudfront) for content delivery and implements responsive design for mobile users. The site demonstrates good SEO practices and basic accessibility features. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and a published security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. The domain registration details align well with the business identity, supporting legitimacy. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. Strategic improvements include adding explicit security headers, publishing a security policy, and providing incident response contacts to enhance security posture and trust.

C

Commune de Russin

russin.ch

50

Commune de Russin is a small local government entity in the Canton of Geneva, Switzerland, serving approximately 540 residents. The website provides comprehensive community information, local news, administrative services, and tourism details. It is built on WordPress with common plugins and libraries, offering a functional and user-friendly experience. The site is well-branded and consistent with its government role, targeting residents and visitors. Technically, the site uses modern web technologies but lacks advanced security headers and privacy compliance features. Security posture is moderate with HTTPS enabled but missing some best practices. Overall, the website is trustworthy and professional but could improve privacy and security policies to enhance compliance and user trust.

A

Another Kind Studio

anotherkind.co.uk

61

Another Kind Studio is a small, specialized creative agency based in East London, focusing on impactful brand identity and web design services. The company targets brands and businesses seeking strategic and memorable design solutions, positioning itself as a growth-focused and future-proof design partner. The website showcases a professional portfolio with notable clients, reinforcing its market presence in the media and creative sectors. Technically, the website is built on WordPress with modern performance optimizations and SEO best practices, including the use of Yoast SEO and WP Rocket. The site is mobile-optimized and accessible, providing a smooth user experience. Security-wise, the site uses HTTPS and modern libraries but lacks explicit security headers and published security policies, which could be improved. Privacy compliance is minimal, with no visible privacy or cookie policies, which is a gap for GDPR adherence. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

G

Guten Tag Apotheke

mein-tag.de

61

MEIN TAG® is a German-language health advisory website affiliated with the Guten Tag Apotheke pharmacy network. It provides daily health and wellness content, including medical news, tips, recipes, and expert advice. The platform targets the general German-speaking public interested in health topics and wellness. The business model centers on content publishing with ancillary services such as a pharmacy finder and e-prescription information, supported by advertising partnerships and a linked online shop. Technically, the site is built on WordPress with modern plugins for SEO, advertising, and GDPR compliance, delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. No critical vulnerabilities or privacy issues were detected. Overall, the site is professional, trustworthy, and compliant with GDPR, serving as a reliable health information source.

K

Kagiso Media

kagisomedia.co.za

9

Kagiso Media is a prominent South African media and publishing company with a diversified portfolio including broadcasting, content creation, specialised publishing, and advertising solutions. The company manages several well-known brands and subsidiaries, positioning itself as a leader in the South African media landscape. The website reflects a professional and modern digital presence built on WordPress with advanced plugins and multimedia content, indicating a mature technical infrastructure. Security posture is generally good with HTTPS enabled and no obvious vulnerabilities, though the absence of security headers and privacy policies suggests room for improvement. The lack of publicly available WHOIS data indicates privacy protection, which is reasonable for this business type but reduces transparency. Overall, the website is trustworthy and well-maintained but would benefit from enhanced privacy compliance and security best practices.

P

Picus Capital GmbH

picuscap.com

50

Picus Capital GmbH is an early-stage technology investment firm focused on partnering with daring technology companies to build global leaders. The company operates primarily in the technology sector, providing pre-seed, seed, and Series A investment along with strategic and operational support. The website is professionally designed using WordPress and modern web technologies, featuring client testimonials and a clear business focus. Technical infrastructure includes Google Analytics and Tag Manager with opt-out mechanisms, and the site is SSL secured. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Privacy and security policies are not explicitly presented, and security headers are missing, indicating room for improvement in security posture. Overall, the site is functional and trustworthy from a business perspective but requires enhanced transparency and security measures.

M

Musikkultur Rheinsberg gGmbH

kammeroper-schloss-rheinsberg.de

45

Kammeroper Schloss Rheinsberg is a well-established international festival and music education organization based in Germany, focusing on young opera singers. It offers a rich program of operas, concerts, and an international singing competition, attracting a culturally engaged audience. The organization operates as a non-profit and maintains a professional online presence with detailed event and visitor information. Technically, the website is built on WordPress with modern libraries and plugins, providing good mobile optimization and SEO. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit privacy and security policy pages. Overall, the site is trustworthy and professionally managed, serving its cultural mission effectively.

M

Musikkultur Rheinsberg gGmbH

musikakademie-rheinsberg.de

45

Musikakademie Rheinsberg is a well-established cultural and educational institution based in Brandenburg, Germany, focused on music education, music theater, and amateur music. The organization offers a wide range of courses, workshops, and event hosting services targeting musicians, educators, and music enthusiasts. The website reflects a medium-sized non-profit entity with a clear mission to serve musicians of all generations and promote cultural engagement through music. The business model is centered on educational and cultural services with a strong regional presence. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap Grid, and various plugins such as Yoast SEO and Borlabs Cookie for privacy compliance. The site demonstrates good mobile optimization, SEO practices, and moderate performance. The use of structured data enhances search engine visibility. However, hosting provider details are not explicitly identified. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security policies, incident response contacts, and vulnerability disclosure information. Security headers are not explicitly detected, suggesting room for improvement. No vulnerabilities or exposed sensitive data were found in the content. Overall, the security posture is good but could be enhanced with additional policies and technical controls. The overall risk assessment is low with no signs of malicious activity or unsafe content. Strategic recommendations include publishing security and privacy policies, implementing security headers, and establishing incident response contacts to improve trust and compliance. The website is professional, trustworthy, and suitable for its target audience.

H

Hauptstadtregion Berlin-Brandenburg

berlin-brandenburg.de

48

The website berlin-brandenburg.de serves as the official regional cooperation portal for the German federal states of Berlin and Brandenburg. It provides information on joint political initiatives, projects, and public services aimed at citizens, government officials, and businesses within the metropolitan region. The site is positioned as a trusted government platform facilitating collaboration and communication between the two states. Technically, the site is built on WordPress, leveraging popular plugins such as Yoast SEO for search optimization and Borlabs Cookie for GDPR-compliant cookie management. Hosting is provided via Amazon AWS infrastructure, ensuring reliable availability. The website demonstrates good mobile responsiveness, accessibility, and SEO practices, although some improvements in security headers and legal disclosures could be made. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism with user control over external media cookies. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security headers and incident response contacts suggests room for enhancement in security posture and transparency. Overall, berlin-brandenburg.de is a professionally maintained government website with strong compliance and trust indicators. Strategic improvements in security policies and legal documentation would further strengthen its risk profile and user confidence.

S

Splitpixel Creative Ltd

splitpixel.co.uk

11

Splitpixel Creative Ltd is a specialized full-service digital agency based in Huddersfield, UK, focusing on accessible, inclusive, and sustainable digital solutions. Their core offerings include bespoke WordPress development, web design, branding, and strategic multi-channel digital marketing, targeting businesses and charities, particularly in the arts, culture, and B2B sectors. The company emphasizes quality user experiences and regional market understanding, positioning itself as a trusted partner in Yorkshire and beyond. Technically, the website is built on WordPress with modern technologies such as Yoast SEO, Google Tag Manager, Vimeo integration, and CookieYes for consent management. The site demonstrates excellent mobile optimization, accessibility compliance, and SEO best practices, reflecting a mature digital infrastructure. Performance is moderate, with room for optimization in hosting and security headers. From a security perspective, the site uses HTTPS and cookie consent mechanisms effectively but lacks explicit security policies and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS lookup failed due to querying the subdomain rather than the registered domain, but the website content and structured data confirm legitimacy and professional operation. Overall, Splitpixel presents a strong digital presence with high content quality, good technical implementation, and solid privacy compliance. Strategic improvements in security headers and incident response transparency would enhance their security posture further.

M

Musikkultur Rheinsberg gGmbH

musikkultur-rheinsberg.de

52

Musikkultur Rheinsberg gGmbH is a well-established cultural non-profit organization based in Germany, offering a broad range of music and cultural events, including concerts, operas, festivals, and educational courses. It operates through three main divisions: the Musikakademie Rheinsberg, the Kammeroper Schloss Rheinsberg, and the Schlosstheater Rheinsberg, serving both professional and amateur musicians as well as cultural audiences. The organization holds a strong market position as a cultural beacon in northern Brandenburg, with a clear focus on music and performing arts. The website is built on a modern WordPress platform utilizing popular plugins such as Yoast SEO, Borlabs Cookie for privacy compliance, and various JavaScript libraries for enhanced user experience. The site demonstrates good technical maturity with responsive design, SEO optimization, and moderate performance. Analytics are handled via Matomo, indicating a preference for privacy-conscious tracking. From a security perspective, the site enforces HTTPS and uses privacy and cookie management plugins, but lacks explicit published security policies, incident response contacts, or vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website content, supporting the legitimacy of the domain and organization. Overall, the website is professional, trustworthy, and serves its cultural mission effectively. However, improvements in privacy documentation, security transparency, and accessibility could enhance compliance and user trust.

E

eService Sp. z o.o.

eservice.pl

50

eService Sp. z o.o. is a leading Polish payment services provider specializing in card acceptance, payment terminals, mobile payments, and e-commerce payment solutions. It holds a strong market position as the largest settlement agent in Central Europe and is affiliated with PKO Bank Polski and Global Payments. The company offers a broad portfolio of services including BLIK mobile payments, Pay by Link, PIN Pads, and certified secure payment solutions such as P2PE and PCI DSS. The website is professionally designed, mobile-optimized, and rich in relevant business content targeting Polish merchants and businesses. Technically, the site is built on HubSpot CMS with modern libraries and integrates Google Tag Manager and HubSpot Analytics for marketing and tracking purposes. Security posture is solid with HTTPS, certifications, and cookie consent mechanisms, though it lacks a publicly visible security policy or incident response contacts. WHOIS data is unavailable, which slightly impacts trust but the overall business credibility remains high due to clear company information and certifications. Strategic recommendations include publishing a security policy, adding incident response contacts, and enhancing HTTP security headers to further strengthen security and compliance.

M

mg: mannheimer gründungszentren gmbh

next-mannheim.de

46

NEXT MANNHEIM is a professionally managed startup ecosystem platform focused on supporting entrepreneurs and startups in Mannheim, Germany. It operates as a 100% subsidiary of Innovationsstadt Mannheim, providing infrastructure, consulting, networking, and event spaces tailored to various startup communities including female entrepreneurs and international founders. The website reflects a strong regional market position with comprehensive services and active community engagement. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and some security headers, though improvements are recommended in CSP and incident response transparency. Overall, the site is trustworthy and well-maintained, with minor gaps in privacy compliance and security policy disclosures.

U

Uzin Utz Tools GmbH & Co.KG

pajarito-tools.com

63

Pajarito is a German manufacturer specializing in high-quality professional tools for painters, drywall installers, and plasterers, with a history dating back to 1923. The company emphasizes precision, durability, and reliability, offering a comprehensive product range made entirely in Germany. Their market position is strong within the professional trades sector, supported by a well-structured website and active social media presence. Technically, the website is built on TYPO3 CMS, leveraging modern frontend technologies and analytics tools such as Google Analytics and Matomo, ensuring good performance and user experience across devices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not found. The absence of WHOIS data for the domain raises some concerns but may be explained by the use of a subdomain or privacy measures. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

S

Schule ohne Rassismus – Schule mit Courage

schule-ohne-rassismus.org

59

Schule ohne Rassismus – Schule mit Courage is Germany's largest school network dedicated to promoting human dignity, anti-racism, and democratic culture among students and educators. With over 4,800 member schools and more than 1.5 million students involved, the organization provides networking, educational materials, and events to foster inclusive school environments. The website is professionally designed, mobile-optimized, and rich in relevant content, targeting schools and educational stakeholders primarily in Germany. Technically, the site is built on WordPress with WooCommerce for e-commerce functionalities, uses modern JavaScript libraries, and implements strong SEO and accessibility practices. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies could be improved. The WHOIS data is unavailable or malformed, which slightly reduces domain trustworthiness, but the organization's transparency, social media presence, and compliance with GDPR indicate legitimacy. Overall, the site presents a trustworthy, well-maintained digital presence for a non-profit educational network.

C

Con i Bambini

percorsiconibambini.it

39

Percorsi con i bambini is a non-profit network platform managed by Con i Bambini, focused on coordinating and sharing projects aimed at combating educational poverty among minors in Italy. The website serves as a collaborative space for project leaders and partners to publish updates, articles, and event information. It is affiliated with Fondazione CON IL SUD, indicating a strong institutional backing. The platform targets organizations involved in social and educational initiatives, providing a niche but important service in the non-profit sector. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and the Yoast SEO plugin, ensuring good SEO and mobile responsiveness. It uses Matomo for analytics, emphasizing privacy. The site is well-structured with comprehensive metadata and structured data for SEO. However, the domain is currently expired, posing a risk to availability. Security headers are not explicitly detected, and there is no visible security policy or incident response information, which are areas for improvement. From a security perspective, the site uses HTTPS and DNSSEC, which are positive indicators. The lack of explicit security headers and vulnerability disclosure mechanisms suggests moderate security maturity. Privacy compliance is good, with clear privacy and cookie policies and a consent mechanism. Contact information is clearly provided, enhancing trust. Overall, the website is professional, trustworthy, and serves a clear social mission. The main risk is operational due to domain expiration and some missing security best practices. Addressing these will improve resilience and trustworthiness.

C

Codex GmbH & Co. KG

codex-x.com

47

Codex GmbH & Co. KG operates a professional website focused on providing high-quality installation systems for tiling and natural stone, targeting qualified tilers and construction professionals. The company is positioned as a medium-sized manufacturing entity within Germany and is part of the Uzin Utz SE group, which is reflected in the branding and linked domains. The website is built on TYPO3 CMS and integrates modern analytics tools such as Google Analytics and Matomo, demonstrating a mature digital infrastructure. The site features comprehensive cookie consent mechanisms and privacy policies aligned with GDPR requirements, enhancing user trust and compliance. Security posture is solid with HTTPS enforced and session management for logged-in users, though some security headers and explicit security policies are absent. Overall, the website presents a professional, well-structured, and user-friendly experience with clear business information and contact details. However, the lack of WHOIS data for the subdomain reduces domain trustworthiness slightly, though the overall legitimacy is supported by consistent branding and external references.

U

Uzin Utz Nederland bv

arturoflooring.com

60

Arturo Flooring, operated by Uzin Utz Nederland bv, specializes in resin and cementitious flooring solutions for industrial, retail, public, office, and residential applications. The company offers a broad product portfolio including self-smoothing floors, resin screeds, coatings, sealers, and professional tools, positioning itself as a reputable international brand in the flooring industry. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to industry professionals and end customers alike. Technically, the site is built on TYPO3 CMS, employs modern JavaScript libraries, and integrates analytics tools such as Google Analytics and Matomo, demonstrating a balanced approach to performance and user tracking. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response information are not publicly disclosed. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact channels, supporting a positive business credibility profile.

U

Uzin Utz Tools GmbH & Co.KG

wolff-tools.com

61

WOLFF, operated by Uzin Utz Tools GmbH & Co.KG, is a well-established manufacturer and distributor of powerful machines and premium quality tools for floor removal, subfloor preparation, and floor installation. The company targets flooring professionals and distributors, offering a comprehensive product range including cordless power tools, measurement devices, and cleaning equipment. The website reflects a strong market position with consistent branding and detailed product information, supported by a parent company presence (Uzin Utz SE). Technically, the website is built on TYPO3 CMS with modern frontend technologies such as Bootstrap, FontAwesome, and slick sliders. It integrates Google Analytics and Matomo for analytics, with a robust cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks visible security headers and explicit security or incident response policies. The absence of WHOIS registration data for the domain raises moderate concerns about domain legitimacy, although the website content and company information appear trustworthy and professional. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in security headers, incident response transparency, and domain registration verification would enhance trust and security posture.

U

University of Augsburg

uni-augsburg.de

68

The University of Augsburg is a medium-sized public university in Germany offering a broad range of academic programs and research opportunities across eight faculties. The website reflects a professional and comprehensive digital presence with detailed information for students, researchers, and the public. The university emphasizes interdisciplinary research and international cooperation. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Matomo analytics, hosted likely within German academic infrastructure. Security posture is good with HTTPS and privacy-conscious analytics, though cookie consent mechanisms and explicit security policies are not visible. Contact information is provided clearly, enhancing trust. Overall, the site is well-designed, accessible, and trustworthy, suitable for its academic audience.

M

Max-Planck-Gesellschaft zur Förderung der Wissenschaften

mpg.de

61

The Max-Planck-Gesellschaft zur Förderung der Wissenschaften is Germany's leading non-university research organization, operating 84 institutes focused on fundamental scientific research. The website serves as a comprehensive portal for information about the organization, its research activities, innovation initiatives, career opportunities, and international collaborations. The site is professionally designed, mobile-optimized, and uses modern web technologies including a consent management platform to comply with privacy regulations. Hosting and DNS infrastructure align with academic and research networks, reinforcing legitimacy. However, explicit privacy policies, terms of service, and security incident response information are not clearly presented in the accessible content, representing areas for improvement.

U

Uzin Utz SE

uzin-utz.com

57

Uzin Utz SE is a well-established German manufacturer specializing in floor installation systems and related products, boasting over a century of history. The company operates a portfolio of strong brands including UZIN, WOLFF, PALLMANN, Arturo, codex, and Pajarito, serving professionals in construction, flooring, and related industries. Their website reflects a mature digital presence with comprehensive content, investor relations, and career opportunities. Technically, the site is built on TYPO3 CMS with modern analytics and consent management tools, ensuring good performance and compliance with privacy regulations. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent, though some security headers could be explicitly implemented. The absence of WHOIS data limits domain trust verification, but the overall professional presentation and transparent policies support legitimacy. Strategic recommendations include enhancing security headers, maintaining updated software, and improving incident response visibility.

W

Würzburg-Dresden Cluster of Excellence ct.qmat

ctqmat.de

43

The Würzburg-Dresden Cluster of Excellence ct.qmat is a prominent academic research center specializing in topological and complex quantum matter. Established in 2019, it unites leading research hubs from Universität Würzburg and Technische Universität Dresden, focusing on advancing quantum materials research, education, and public outreach. The website reflects a professional and well-maintained digital presence with comprehensive content targeted at researchers, students, and the interested public. Technically, the site employs modern web standards, responsive design, and uses Matomo analytics for privacy-conscious tracking. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Privacy compliance is good with a clear privacy policy but lacks a cookie consent mechanism. Overall, the site is trustworthy and authoritative within its academic domain.

M

Musikkultur Rheinsberg gGmbH

schlosstheater-rheinsberg.de

10

Musikkultur Rheinsberg gGmbH operates the Schlosstheater Rheinsberg, a year-round cultural venue offering concerts, theater, dance, film, and opera in Rheinsberg, Germany. The organization targets a broad audience including families and culture enthusiasts, providing diverse programming and venue rental services. The website reflects a well-established regional cultural institution with a professional online presence and clear event information. Technically, the website is built on WordPress with modern plugins and libraries such as jQuery, Slick Slider, and Yoast SEO, indicating a mature digital infrastructure. The site is mobile-optimized and uses HTTPS with good SEO practices, although some accessibility features could be improved. Cookie consent is managed via Borlabs Cookie, showing attention to privacy compliance. From a security perspective, the site uses HTTPS and nonce tokens for AJAX calls but lacks visible security headers and a published security policy or incident response contacts. No vulnerabilities or suspicious content were detected. The absence of a privacy policy page is a notable compliance gap. Overall, the security posture is solid but could be enhanced with additional headers and transparency. The risk assessment is low given the site's cultural and non-profit nature, absence of sensitive data exposure, and legitimate domain registration. Strategic recommendations include publishing a comprehensive privacy policy, implementing security headers, and adding vulnerability disclosure information to improve trust and compliance.

K

Kirsamers-Backstube GmbH

kirsamers-backstube.de

53

Kirsamers-Backstube GmbH is a regional German bakery business established in 1927, specializing in fresh, handmade bakery products including spelt (Dinkel) breads, rolls, and cakes. The company emphasizes quality, regional ingredients, and traditional craftsmanship, targeting general consumers seeking healthy and artisanal baked goods. The website reflects a medium-sized retail bakery with consistent branding and a clear business model focused on quality and regionality. Technically, the site is built on WordPress using modern plugins such as WPBakery Page Builder and Slider Revolution, hosted on rzone.de servers. The site is mobile optimized and performs moderately well with good SEO and accessibility basics. Security posture is adequate with HTTPS enabled and GDPR-compliant cookie consent mechanisms, though explicit security policies and incident response contacts are not present. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting the company's credibility and customer engagement.

D

Deutsche Leasing AG

deutsche-leasing.de

66

Deutsche Leasing AG operates as a leading asset finance partner primarily serving the German Mittelstand (SMEs). The company offers a broad portfolio of leasing and financing solutions including machinery, mobility, IT leasing, and sustainable financing options. The website reflects a mature enterprise with a strong market position and international presence through subsidiaries. Technically, the site employs a modern tech stack with jQuery, Google Tag Manager, and Cookiebot for consent management, ensuring compliance with GDPR and privacy standards. Security posture is robust with HTTPS, security headers, and secure login forms, although explicit security policies and incident response details are not published. The absence of WHOIS data reduces transparency but the professional presentation and comprehensive contact information support legitimacy. Overall, the site is well-designed, user-friendly, and trustworthy, targeting business customers in finance and leasing sectors.

Z

ZEREN Energy

zerenenergy.com

62

ZEREN Energy is a relatively new company founded in 2022, operating in the European energy trading sector with a focus on natural gas. The company offers a range of services including forward contracts, market access and capacity products, financial derivatives, and physical delivery of natural gas across multiple European countries. The website reflects a professional business presence with consistent branding and clear contact information, targeting energy market participants in Western, Central, and Southeastern Europe. Technically, the website uses a modern frontend stack including jQuery, Bootstrap, and various UI libraries, hosted behind Cloudflare DNS and CDN services. The site is mobile optimized and performs moderately well, though SEO and accessibility features are basic. No CMS or backend platform was detected from the provided data. From a security perspective, the site uses HTTPS with a good SSL configuration and has domain transfer protections enabled. However, it lacks important security headers and DNSSEC is not enabled. There are no visible privacy or cookie policies, nor any incident response or vulnerability disclosure information, which indicates gaps in compliance and security transparency. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and transparency measures to improve trust and regulatory adherence.

K

kdvz Rhein-Erft-Rur

kdvz.nrw

63

kdvz Rhein-Erft-Rur is a regional IT service provider supporting public administrations in the Rhein-Erft-Rur area of Germany. Founded in 2019 and operated by 'Der Verbandsvorsteher', it offers a broad portfolio including IT infrastructure, digitalization services, specialized applications, and training. The website reflects a professional and well-established organization with strong regional ties and partnerships with key municipal IT associations such as vitako and KDN. The technical infrastructure is based on the Sitepark CMS platform with modern web technologies and good mobile optimization. Security posture is robust, evidenced by ISO 27001 certification and HTTPS enforcement, though DNSSEC is not enabled. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. No critical vulnerabilities or suspicious activities were detected, and the domain registration data aligns well with the business identity, supporting high legitimacy.

I

INDIGO FILM SRL

indigofilm.it

49

Indigo Film SRL is an established independent film production company based in Italy, specializing in films, TV series, documentaries, and factual content. The company maintains a professional and well-branded online presence with a website optimized for both desktop and mobile users. Their market position is that of a medium-sized player in the Italian media production industry, targeting a general audience interested in independent film and television content. The website demonstrates good digital maturity with a modern WordPress CMS, SEO optimization via Yoast, and compliance with GDPR through an integrated cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although formal security policies and incident response information are not published. Overall, the site is trustworthy and professionally managed, with strong social media integration and clear business information. Strategic recommendations include enhancing security headers, publishing a security policy, and providing incident response contacts to further improve trust and compliance.

F

fixpunkt für digitales GmbH

fixpunkt.com

54

fixpunkt für digitales GmbH is a small, regional full-service internet and advertising agency based in Bonn, Germany, specializing in web development, online marketing, and digital communication services. Their expertise centers on TYPO3 and WordPress CMS platforms, offering services such as SEO, SEM, social media marketing, consulting, and website maintenance. The company targets businesses and organizations in the Bonn and Köln regions seeking professional digital solutions. Technically, the website is built on TYPO3 CMS with integration of Matomo for privacy-focused analytics and uses modern web components like Slick Slider for UI. The site is mobile-optimized and provides clear navigation and professional content. Security posture is moderate; while HTTPS and cookie consent mechanisms are present, no advanced security headers or explicit incident response policies were found. WHOIS data is missing, which raises concerns about domain registration legitimacy, though the website content and business information appear credible and professional. Overall, the website demonstrates good digital maturity with room for improvement in security practices and domain registration transparency.

K

KielRegion GmbH

kielregion.de

48

KielRegion GmbH is a regional cooperation entity uniting the strengths of the Kreise Rendsburg-Eckernförde, Plön, and the city of Kiel to foster sustainable development in the region. The company focuses on three main thematic areas: WirtschaftsRegion (economic development), MobilitätsRegion (mobility solutions), and ZukunftsRegion (future-oriented projects). It supports networking among political, economic, scientific, and administrative stakeholders and promotes initiatives such as the SprottenFlotte bikesharing system. The website targets regional stakeholders including startups, innovative companies, and traditional businesses within the KielRegion, serving approximately 650,000 residents.

D

Deutsche Leasing AG

deutsche-leasing.com

65

Deutsche Leasing AG operates as a leading asset finance partner primarily serving the German Mittelstand (SMEs). The company offers a broad range of leasing and financing solutions including machinery, mobility, IT leasing, and sustainable financing options. The website reflects a mature enterprise with a strong market position and comprehensive service portfolio. Technically, the site employs a modern JavaScript stack with consent management and analytics tools, ensuring good user experience and compliance with privacy regulations. Security posture is solid with HTTPS and secure login forms, though some security headers could be improved. The absence of WHOIS data is a notable anomaly but does not detract from the overall legitimacy indicated by the professional web presence. Strategic recommendations include enhancing security headers and clarifying domain registration details.

B

Bundesministerium für Wirtschaft und Energie (BMWK)

existenzgruendungsportal.de

69

The Existenzgründungsportal is an official German government website operated by the Bundesministerium für Wirtschaft und Energie (BMWK). It serves as a comprehensive informational portal dedicated to supporting individuals interested in professional self-employment and business startups in Germany. The site offers extensive resources including guides on business plan creation, financing, company registration, insurance, consulting, and FAQs, positioning itself as a trusted authority in the entrepreneurship ecosystem. Technically, the website employs modern web technologies such as jwplayer for media, etracker for analytics with privacy-respecting configurations, and is hosted on managed IP infrastructure. The site is well-optimized for mobile and accessibility, with a professional design and clear navigation. Security-wise, it enforces HTTPS, uses secure cookies, and respects user privacy, though it could enhance security headers and publish explicit security policies. Overall, the website demonstrates a strong security posture and high business credibility, making it a reliable resource for its target audience.

A

Auto-École FUN DRIVE - Genève

fun-drive.ch

48

Auto-École FUN DRIVE - Genève is a well-established driving school based in Geneva, Switzerland, with nearly three decades of experience. The company offers a range of services including car and motorcycle driving lessons, first aid courses, and sensitization programs. Their market position is strong locally, supported by a history of over 3000 driving licenses obtained and experienced, federally certified instructors. The website reflects a professional and consistent brand image targeting individuals seeking driving education in the Geneva area. Technically, the site is built on WordPress with modern plugins and tools such as Google reCAPTCHA and GDPR compliance mechanisms, hosted by Net Oxygen. While the site performs moderately well with good mobile optimization and SEO, there is room for improvement in accessibility and security headers. Security posture is solid with HTTPS and cookie consent management, but the contact form misconfiguration and lack of explicit security headers are areas to address. Overall, the website is trustworthy and compliant with GDPR, though it lacks explicit security and incident response policies. Strategic recommendations include fixing the contact form, enhancing security headers, and publishing security policies to improve trust and compliance.

T

Technische Jugendfreizeit- und Bildungsgesellschaft (tjfbg) gGmbH

tjfbg.de

46

The Technische Jugendfreizeit- und Bildungsgesellschaft (tjfbg) gGmbH is a German non-profit organization specializing in providing scientific and technical educational content primarily to children, youth, and multipliers across Germany. Their services include extracurricular programs, school-based offers, vocational training, voluntary services, and youth technology education. The organization has a well-established market presence with a history dating back to at least 1991, supported by a consistent brand and active social media engagement. Technically, the website is built on TYPO3 CMS with legacy JavaScript libraries such as jQuery 1.7.2 and Modernizr 2.5.3, indicating moderate modernization. The site is mobile-optimized with good SEO and accessibility basics. Google Tag Manager is used for analytics with privacy-conscious configurations including IP anonymization and consent-based tracking. From a security perspective, the site uses HTTPS with good SSL configuration and cookie consent mechanisms. However, it lacks explicit security headers and incident response contact information. No vulnerabilities or exposed sensitive data were detected, but the use of outdated JavaScript libraries could pose risks. The WHOIS data aligns well with the organization's profile, showing a consistent and legitimate domain registration. Overall, the website demonstrates a solid security posture and compliance with privacy regulations, supporting a trustworthy and professional online presence. Strategic improvements in security headers, incident response transparency, and modernization of JavaScript libraries would further enhance their security and compliance stance.

Andrea Ritter Immobilien GmbH is a specialized real estate agency offering services in property sales, rentals, and management primarily in Bad Wörishofen, Allgäu, and broader southern Germany. The company emphasizes its long-standing experience and comprehensive client support throughout the sales process. The website is professionally designed, mobile-optimized, and built on a specialized real estate CMS platform, immoprofessional. It features detailed property listings with images and descriptions, providing a good user experience. Privacy and cookie policies are implemented with GDPR compliance, including a consent mechanism. Security posture is solid with HTTPS and secure form handling, though additional security headers and explicit incident response contacts could enhance trust. Overall, the site presents a credible and trustworthy business presence with clear contact information and legal disclosures.

B

Bundesministerium für Wirtschaft und Klimaschutz | BMWE

bmwi.de

71

The Bundesministerium für Wirtschaft und Klimaschutz (Federal Ministry for Economic Affairs and Climate Action) is a key German federal government entity responsible for economic and energy policy, climate protection, and related regulatory frameworks. The website serves as an authoritative platform providing comprehensive information, press releases, policy dossiers, and contact channels for citizens, businesses, and stakeholders. It maintains a strong market position as an official government source with enterprise-level scale and reach. Technically, the website employs modern web technologies including jwplayer for video content, eTracker for analytics with user consent, and responsive design for mobile optimization. Hosting is managed via professional managed IP name servers, ensuring reliable infrastructure. The site demonstrates good SEO, accessibility, and performance characteristics. From a security perspective, the site enforces HTTPS, includes cookie consent mechanisms, and explicitly requests user consent for video player data processing. While some security headers are not explicitly confirmed, no vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence, including a named data protection officer contact. Overall, the website presents a high level of professionalism, trustworthiness, and compliance suitable for a government ministry. Recommendations include enhancing security headers, publishing a dedicated security policy and incident response contacts, and maintaining up-to-date third-party libraries to further strengthen security posture.

D

Deutscher Gutachter und Sachverständigen Verband e. V.

dgusv.de

47

DGuSV is a well-established professional association serving experts and appraisers primarily in Germany and the German-speaking region. The organization offers membership benefits including certifications, training seminars, networking opportunities, and access to specialized products and services. The website reflects a mature digital presence with a professional design, clear navigation, and GDPR-compliant consent management. Technically, the site uses a variety of modern JavaScript libraries and frameworks to enhance user experience, including sliders and consent platforms. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. The absence of explicit incident response or security policy pages suggests room for enhancement in transparency. Overall, the site is trustworthy, well-branded, and serves its target audience effectively.

E

Energiefabrik Knappenrode

energiefabrik-knappenrode.de

41

Energiefabrik Knappenrode is a regional cultural and industrial heritage museum located in Germany, specializing in energy and industrial history. The website serves as an information portal for visitors, offering details about exhibitions, events, educational programs, and visitor services. It is affiliated with the Zweckverband Sächsisches Industriemuseum, indicating a non-profit organizational structure focused on cultural preservation and education. The target audience includes families, tourists, and educational institutions interested in industrial heritage. Technically, the website is built on TYPO3 CMS and employs modern JavaScript libraries such as jQuery, UniteGallery, Lightbox (Tobii), and Slick Slider to enhance user experience. The site is mobile-optimized with good navigation clarity and moderate performance. Hosting is managed through professional DNS providers, and SSL is properly configured, ensuring secure connections. From a security perspective, the website uses HTTPS and secure form submissions but lacks some advanced security headers and a cookie consent mechanism, which are recommended for GDPR compliance. No vulnerabilities or exposed sensitive data were detected. The site includes Matomo analytics for user tracking, with moderate tracking levels and basic privacy compliance. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. Strategic improvements include implementing cookie consent, adding security headers, and publishing security and incident response policies to enhance compliance and security posture.

T

Tuchfabrik Gebr. Pfau Crimmitschau

tuchfabrik-crimmitschau.de

42

The Tuchfabrik Gebrüder Pfau Crimmitschau is a cultural heritage museum located in Germany, focusing on the history and future of the textile industry in Saxony. The website serves as an informational portal for visitors, offering details on exhibitions, events, educational programs, and visitor services such as a museum shop and café. The target audience includes families, education institutions, and individuals interested in technology and fashion history. The museum operates as a small-sized entity with a regional focus. Technically, the website is built on TYPO3 CMS, utilizing modern web technologies such as Bootstrap for responsive design and Slick Slider for interactive content. Hosting is provided by a professional German hosting provider (timmehosting.de). The site demonstrates good mobile optimization, clear navigation, and moderate performance. Analytics are handled via Matomo, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks several security headers and does not implement a cookie consent mechanism, which is important for GDPR compliance. No explicit security policies or incident response contacts are published, which could be improved to enhance trust and compliance. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. Strategic improvements in privacy compliance and security hardening would further strengthen its posture and user trust.

I

IPCamLive Inc.

ipcamlive.com

65

IPCamLive Inc. operates a cloud-based video broadcasting platform specializing in embedding live IP camera streams into web pages and generating time-lapse videos. The company targets IP camera users, developers, and businesses seeking easy integration of live video content across multiple platforms including PC, Mac, iOS, and Android. Their business model is subscription-based SaaS with a free trial offering, positioning them as a niche provider in the IP camera streaming market. Technically, the website employs modern JavaScript libraries such as jQuery, Google Analytics, Facebook Pixel, and Google Tag Manager, supporting responsive design and multi-platform compatibility. The infrastructure supports direct IP camera streaming without additional software, unlimited viewers, and privacy features like AI-based face blurring and stream access controls. Security posture is moderate with HTTPS enforced and privacy controls implemented, but lacks explicit security headers and published incident response policies. The absence of WHOIS data for the domain raises some trust concerns, although the website content and business presence appear legitimate. Privacy compliance is basic with cookie consent and privacy policy present but no explicit GDPR confirmation. Overall, the website is professionally designed and functional with good user experience and relevant content. Strategic improvements in security policies, WHOIS transparency, and compliance documentation would enhance trust and security posture.