Security Directory

B

Berufsverband der Frauenärzte e.V. (BVF)

frauenaerzte-im-netz.de

59

Frauenärzte im Netz is a well-established German medical information portal focused on women's health, gynecology, family planning, and pregnancy. It is published by the Berufsverband der Frauenärzte e.V. in cooperation with the Deutsche Gesellschaft für Gynäkologie und Geburtshilfe (DGGG), positioning it as a trusted source for women seeking reliable health information and medical services. The website offers comprehensive content, including educational articles, a doctor and clinic search, and digital services such as video consultations and a patient app. The target audience spans from teenagers to older women, emphasizing preventive care and health education. Technically, the site is built on the TYPO3 CMS platform, uses modern JavaScript libraries like jQuery and FlexSlider, and employs Matomo analytics configured for privacy. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Security-wise, the site enforces HTTPS, uses a cookie consent banner with no tracking cookies by default, and disables cookies in Matomo analytics, reflecting a privacy-conscious approach. However, it lacks explicit security policies, incident response contacts, and security headers, which are areas for improvement. WHOIS data is consistent with the site's professional nature, showing no privacy protection and stable domain registration. Overall, the website demonstrates a strong commitment to content quality, privacy, and user trust, with moderate technical and security maturity.

I

Infortrend Technology Inc.

infortrend.com

67

Infortrend Technology Inc. is a global enterprise data storage provider specializing in SAN, NAS, unified storage, hybrid cloud, and AI storage solutions. The company targets enterprise IT customers and offers a broad portfolio of storage products and management software. Their market position is supported by a strong partner ecosystem including major technology companies such as Microsoft, Intel, and Amazon Web Services. The website content is professional, comprehensive, and well-structured, reflecting a mature digital presence. The technical infrastructure of the website leverages modern web technologies including Bootstrap, jQuery, Google Tag Manager, Matomo, and Tawk.to chat integration. The site is mobile optimized and includes privacy and cookie consent mechanisms, indicating a good level of digital maturity and compliance with GDPR. Analytics usage is moderate with multiple tracking services employed responsibly. Security posture is solid with HTTPS enforced and reCAPTCHA implemented on forms. However, the absence of visible HTTP security headers and lack of explicit incident response or vulnerability disclosure information are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, which slightly reduces trust but the overall website professionalism and partner ecosystem support legitimacy. Overall, Infortrend's website demonstrates a strong business and technical foundation with good security and privacy practices. Strategic improvements in security headers, incident response transparency, and contact information visibility would enhance trust and compliance further.

Rema Trade is a small hospitality equipment company based in Bosnia and Herzegovina, established in 2005. The company specializes in professional equipment for the hospitality industry, offering a wide range of products including kitchen equipment, small inventory, butcher equipment, and laundry equipment. They provide comprehensive services such as consulting, project design, transport, installation, servicing, and staff training. The website reflects a regional leader position with a professional and consistent brand presence. Technically, the site is built on WordPress with modern plugins and frameworks, offering good mobile optimization and SEO. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers. Privacy and cookie policies are missing, indicating compliance gaps. Contact information is clearly provided, enhancing business credibility.

T

Texas Association of School Boards, Inc.

buyboard.com

64

BuyBoard Purchasing Cooperative is a well-established purchasing cooperative affiliated with the Texas Association of School Boards, Inc., serving schools, municipalities, counties, and non-profits primarily in Texas and nationally. The cooperative offers streamlined purchasing services with free membership, facilitating public procurement and vendor contracting. The website presents a professional and clear structure with dedicated sections for national and Texas cooperatives, vendors, and industry insights. Technically, the site uses modern web technologies including Bootstrap, jQuery, Google Tag Manager, and Microsoft Application Insights, hosted likely on Microsoft Azure. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and monitoring tools in place, but lacks some security headers and a cookie consent mechanism. WHOIS data is unavailable, which reduces transparency but the website content and contact information strongly support legitimacy. Overall, the site is trustworthy and professionally maintained, with room for improvement in privacy compliance and security best practices.

The website luna-aboshop.de is currently under maintenance and provides no substantive business information or services. The site uses WordPress with a coming soon plugin and standard frontend libraries such as jQuery, Tailwind CSS, and FontAwesome. The technical infrastructure appears basic with no advanced frameworks or analytics detected. Security posture is minimal with no visible security headers or privacy policies, and no contact or incident response information is provided. The domain WHOIS data shows standard reseller name servers but lacks registrant details, limiting trustworthiness. Overall, the site is low in content quality, security, and compliance, resulting in a low AI score and limited business credibility.

V

VGROUP

vgroup.com

52

VGROUP is a professional brand strategy, design, and communications agency that helps businesses develop their brand identity and market presence. The company showcases a strong portfolio of projects and client testimonials, positioning itself as a trusted partner in brand development. The website is built on WordPress with modern technologies and includes comprehensive privacy and cookie consent mechanisms, reflecting a mature digital presence. Security posture is good with HTTPS and cookie consent, but lacks visible security headers and explicit incident response information. The absence of WHOIS data reduces domain trust slightly, but the professional website content and branding mitigate concerns. Overall, the site is well-designed, user-friendly, and compliant with privacy regulations.

G

Gabler Ocean Group

gabler-ocean.com

10

Gabler Ocean Group is a medium-sized technology group based in Germany, specializing in subsea digital and industrial applications for sectors including energy, science, and defense. The group comprises several subsidiaries such as Gabler Naval Technology, develogic GmbH, north.io GmbH, SubCtech GmbH, and Gabler Korea, offering a broad portfolio of solutions from environmental monitoring to underwater communication and maritime data management. The company has a strong market position with a history dating back to 1962 and is supported by the Possehl Group as its shareholder. Technically, the website is built on WordPress with modern plugins like Slider Revolution and Borlabs Cookie for consent management. The site is well-optimized for mobile and performance, with fast loading times and good SEO practices. Security posture is solid with HTTPS enabled and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Cookie consent mechanisms are in place, supporting GDPR compliance. Security-wise, the site shows good practices but lacks explicit security policies, incident response information, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The domain registration is transparent and consistent with the business claims, enhancing trustworthiness. Overall, Gabler Ocean Group presents a professional and trustworthy online presence with strong business credibility and technical maturity. Strategic improvements in security headers, DNSSEC, and published security policies would further enhance their security posture and compliance.

G

Gabler Maschinenbau GmbH

gabler-naval.com

57

Gabler Maschinenbau GmbH is a well-established German company specializing in naval technology solutions, particularly mast systems, submarine components, and tactical gateways. With over 60 years of experience, the company serves sovereign nations and maritime security sectors, positioning itself as a trusted provider of mission-critical technology. The website reflects a professional and modern digital presence, leveraging WordPress CMS and advanced front-end technologies to deliver an excellent user experience. Embedded multimedia content and comprehensive policy disclosures demonstrate digital maturity and compliance awareness. Security posture is strong with HTTPS enforcement, Cloudflare DNS, and cookie consent mechanisms, though some security headers could be improved. Overall, the website is trustworthy, well-maintained, and aligned with the company's business objectives.

G

Gabler Maschinenbau GmbH

gabler-maschinenbau.com

57

Gabler Maschinenbau GmbH is a well-established German company specializing in naval technology solutions, including mast systems, submarine components, and tactical gateways. With over 60 years of experience, the company positions itself as a trusted provider for naval defense and maritime security sectors, offering both products and lifecycle support services. The website reflects a professional and modern digital presence, leveraging WordPress CMS with advanced SEO and multimedia integration. The technical infrastructure includes Cloudflare DNS and uses modern JavaScript libraries to enhance user experience. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent banners. Overall, the website and domain data indicate a legitimate and credible business with a strong market position in the naval technology industry.

T

Thüringer Theaterportal

thueringer-theaterportal.de

52

Thüringer Theaterportal is a regional cultural platform dedicated to providing comprehensive schedules and information about theater performances in Thuringia, Germany. It aggregates event details from local theaters such as Schotte e.V. and Kabarett DIE ARCHE, offering users detailed descriptions, images, and direct links to ticket purchasing on partner websites. The portal targets theater enthusiasts and the general public interested in cultural events within the region. Technically, the website is built on the Contao Open Source CMS and employs a variety of JavaScript libraries including jQuery, jQuery UI, Colorbox, and Select2 to enhance user experience. The site is mobile-optimized with a responsive design and includes accessibility features such as skip navigation links. SEO is basic but functional, with meta tags and structured data present. From a security perspective, the site enforces HTTPS and includes essential cookies with CSRF protection. A cookie consent banner is implemented, allowing users to opt-in for external content such as Google Maps. However, the site lacks several recommended security headers and does not provide explicit incident response or vulnerability disclosure information. No critical vulnerabilities or suspicious content were detected. Overall, the website presents a professional and trustworthy front for a small regional cultural information service. It complies with GDPR requirements at a basic level and maintains a good balance between usability and security. Strategic improvements in security headers and transparency would enhance its security posture further.

N

NorSIS

slettmeg.no

47

Slettmeg.no is a Norwegian website operated by NorSIS, providing free advice and guidance on deleting personal information from internet services and offering privacy and digital rights support. The site targets Norwegian users seeking assistance with online data removal and privacy issues. Technically, the site is built on WordPress with modern plugins such as Yoast SEO, Matomo analytics for privacy-respecting tracking, and Google invisible reCAPTCHA for form security. The website is mobile-optimized and accessible, with good SEO practices. Security posture is moderate with HTTPS enforced and no exposed sensitive data, but lacks explicit security headers and has some technical issues with a Facebook deceased profile deletion form. Privacy compliance is good with clear privacy and cookie policies, though no terms of service or vulnerability disclosure policies are found. Overall, the site is trustworthy, professional, and serves a niche government/non-profit role in Norway.

U

Utdanningsdirektoratet and Datatilsynet (collaborative project)

dubestemmer.no

58

DuBestemmer.no is a Norwegian government-backed educational platform collaboratively operated by Utdanningsdirektoratet and Datatilsynet. It provides comprehensive learning resources focused on privacy, internet safety, and critical media literacy targeted at children and youth aged 9 to 18 years, as well as teachers and parents. The site is positioned as an authoritative resource in the Norwegian education sector, emphasizing digital citizenship and responsible online behavior. Technically, the website employs modern JavaScript libraries including jQuery, Microsoft Application Insights, and Matomo Analytics for performance monitoring and user behavior analysis, while respecting user privacy by disabling cookies for tracking. The site appears to be built on the Episerver CMS platform, with good mobile optimization, accessibility, and SEO practices. Hosting details are not explicitly disclosed but analytics are served via udir.matomo.cloud. From a security perspective, the site enforces HTTPS and uses minimal necessary cookies with explicit consent mechanisms. While no advanced security headers were detected, the site avoids collecting sensitive user data on the homepage and demonstrates privacy-conscious analytics usage. The WHOIS data is not publicly available due to Norid privacy policies, which is typical for Norwegian domains. Overall, the domain registration and website content are consistent with a legitimate, government-backed educational service. The overall risk profile is low, with no detected vulnerabilities or suspicious indicators. Strategic recommendations include enhancing security headers, publishing an incident response policy, and adding a vulnerability disclosure mechanism to further strengthen trust and security posture.

N

Netbeat GmbH

netbeat.de

61

Netbeat GmbH is a German-based web hosting provider offering affordable and professional web hosting, domain registration, and server solutions primarily targeting private users and small to medium-sized businesses. The company emphasizes transparency, compliance with GDPR, and security certifications such as ISO 27001, hosting all services in German data centers operated by their partner Vautron Rechenzentrum AG. The website is well-structured, mobile-optimized, and provides clear information about various hosting packages with competitive pricing. Technically, the site uses modern frameworks like Bootstrap and jQuery, with privacy-conscious analytics via Matomo. Security posture is solid with HTTPS and ISO certification, though security headers could be improved. Privacy compliance is strong with explicit cookie consent and a comprehensive privacy policy. Overall, the site projects a trustworthy and professional image suitable for its market segment.

V

Vautron Rechenzentrum AG

vautron.de

56

Vautron Rechenzentrum AG is a well-established German technology company specializing in domain registration, dedicated servers, cloud servers, and managed hosting services. With a strong market position as one of Germany's leading domain registrars and a portfolio exceeding 1.1 million domains, Vautron operates multiple data centers and offers comprehensive IT infrastructure solutions tailored to business clients. Their services include Proxmox virtualization, S3 cloud storage, and managed private cloud offerings, emphasizing flexibility, security, and scalability. Technically, the website employs modern web technologies such as Bootstrap, jQuery, FontAwesome, and Matomo analytics, ensuring a responsive and user-friendly experience. The infrastructure is supported by ISO 27001 certified data centers, reflecting a mature security posture. The company demonstrates GDPR compliance through clear privacy and cookie policies, consent mechanisms, and transparent contact channels. Security-wise, Vautron maintains strong practices including secure managed services, abuse reporting, and encrypted communications. However, there is room for improvement in publicly disclosing vulnerability disclosure policies and enhancing HTTP security headers. No critical vulnerabilities or suspicious activities were detected. Overall, Vautron presents a trustworthy, professional, and technically sound digital presence with a high level of business credibility and compliance. The risk profile is low, supported by consistent WHOIS data and transparent business operations.

L

LAG Soziokultur Thüringen e.V.

soziokultur-thueringen.de

71

LAG Soziokultur Thüringen e.V. is a regional non-profit association dedicated to representing and supporting socio-cultural initiatives in the German state of Thüringen. The organization provides key services including cultural consulting, education, funding support, public relations, and lobbying to strengthen the socio-cultural landscape. Their market position is that of a leading regional advocate and service provider for socio-cultural actors. The website is professionally designed, content-rich, and well-structured, targeting cultural stakeholders and the general public interested in socio-cultural projects. Technically, the website is built on the Contao Open Source CMS platform, utilizing modern JavaScript libraries such as jQuery, Slick Slider, and Google Maps API for enhanced user experience. The site is mobile-optimized and includes accessibility features, though some improvements could be made. Performance is moderate, with no major technical issues detected. From a security perspective, the site enforces HTTPS, uses CSRF tokens in forms, and includes CAPTCHA to prevent spam. Cookie consent is implemented with detailed categories, reflecting GDPR compliance. However, there is no publicly available formal security policy or incident response information, which could be improved to enhance trust and preparedness. Overall, the website is trustworthy, safe, and compliant with privacy regulations. It effectively serves its target audience with relevant content and services. Strategic recommendations include publishing a formal security policy, adding a security.txt file, enhancing security headers, and improving accessibility to further strengthen the site's security posture and user experience.

L

Landesarbeitsgemeinschaft Puppenspiel e.V. Thüringen

puppe-thueringen.de

47

Landesarbeitsgemeinschaft Puppenspiel e.V. Thüringen is a small non-profit cultural association dedicated to puppetry arts in the Thüringen region of Germany. The organization provides puppetry events, educational projects, and supports a community of puppetry artists and enthusiasts. Their website serves as an informational portal with event details, member information, and contact resources. Technically, the site is built on Joomla CMS using Yootheme templates and UIkit framework, delivering a moderately performant and mobile-optimized experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking advanced security headers and incident response information. Overall, the site is trustworthy and professionally presented, targeting cultural audiences and puppetry communities.

L

LAG Spiel und Theater in Thüringen e.V.

lag-thueringen.de

36

LAG Spiel und Theater in Thüringen e.V. is a regional non-profit organization founded in 1992, dedicated to youth culture and theater education in Thüringen, Germany. It coordinates member theater groups, supports educational initiatives, organizes theater events for students, and provides resources such as a specialized library. The website reflects a focused mission with clear content targeting theater professionals, educators, and youth cultural initiatives in the region. Technically, the site is built on the Contao CMS platform, uses jQuery and SVG graphics, and demonstrates moderate performance with good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, though additional security headers and policies could enhance protection. Privacy compliance is evident with a GDPR-aligned privacy policy and cookie banner. No contact emails or phone numbers are explicitly provided on the homepage, which may limit direct communication. Overall, the website is professional, trustworthy, and well-aligned with its mission, though it could benefit from enhanced security practices and more visible contact information.

brand ENGINEERING SOLUTIONS GmbH (bES) is a specialized consultancy focused on naval architecture, marine and offshore engineering, and salvage engineering services. The company leverages up-to-date tools and industry experience to deliver reliable reports and simulations, serving clients primarily in the shipping industry. As part of the bMC GROUP, bES benefits from a broader ecosystem of complementary maritime services, positioning itself as a niche expert within the transportation and energy sectors. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to industry professionals. Technically, the website is built on the Contao Open Source CMS platform, utilizing modern web technologies such as Bootstrap 5, jQuery, and FontAwesome. The site is mobile-optimized with good SEO practices and includes a cookie consent mechanism compliant with GDPR. Hosting and domain registration are stable and consistent with the company's German origin, though DNSSEC is not enabled. Analytics are handled via Matomo, indicating a preference for privacy-conscious tracking. From a security perspective, the site enforces HTTPS and uses CSRF tokens to protect forms. However, it lacks advanced security headers and does not publish a formal security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the security posture is solid but could be enhanced with additional headers and transparency. The overall risk assessment is low, with no critical issues identified. Strategic recommendations include enabling DNSSEC, publishing security and incident response policies, and enhancing security headers. These improvements would further strengthen trust and compliance, supporting the company's professional image and operational resilience.

B

brand MARINE CONSULTANTS GmbH

the-bmc-group.com

52

The bMC GROUP is a medium-sized, Germany-based marine consultancy group established in 2014, offering a broad range of specialized services to the shipping industry including marine consultancy, claims management, vessel design, and behavioral science tools. The group operates globally with multiple international offices and subsidiaries, serving shipowners, law firms, P&I clubs, offshore contractors, and insurance companies. Technically, the website is built on the Contao CMS platform, uses jQuery, Google Maps API, and Matomo analytics, and demonstrates good mobile optimization and user experience. Security posture is solid with HTTPS enforcement and CSRF protections, though DNSSEC is not enabled and security headers could be improved. Privacy compliance is well addressed with a cookie consent mechanism and a privacy policy page. Overall, the website is professional, trustworthy, and business-focused with no signs of malicious or adult content.

N

Nepada Wildlife e.V.

nepadawild.life

51

Nepada Wildlife e.V. is a small non-profit organization dedicated to wildlife conservation and biodiversity preservation, with a strong focus on environmental education. The organization operates primarily in Germany and engages its audience through educational programs, conservation projects, and public outreach. Their website reflects a professional and consistent brand image, supported by active social media channels on Facebook, Instagram, and YouTube. Technically, the website is built on WordPress using modern plugins such as Elementor and Slider Revolution, providing a good user experience with mobile optimization and moderate performance. Security posture is solid with HTTPS and no exposed sensitive data, though security headers could be improved. Privacy compliance is limited due to the absence of explicit privacy and cookie policies on the main site. WHOIS data is unavailable, which slightly reduces domain trust but does not negate the legitimacy of the organization given the quality of content and social presence. Overall, the website is trustworthy and well-positioned for its niche audience.

O

Ocean Summit

ocean-summit.de

54

Ocean Summit is a non-profit organization dedicated to marine conservation education, actions, and networking primarily in Schleswig-Holstein, Germany. The website serves as a platform to engage marine enthusiasts of all ages through educational programs, events, and media content such as podcasts and magazines. It positions itself as a regional leader in marine protection advocacy and education. Technically, the website is built on WordPress using the Enfold theme and several plugins including EventON and Toolset Blocks. It employs modern web technologies such as jQuery and Google Maps API, and is hosted with domain control services likely provided by GoDaddy. The site is mobile-optimized and SEO-friendly with structured data markup and social media integration. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, indicating good privacy compliance. However, explicit security headers are not detected, and no formal security policy or incident response information is published. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website is professional, trustworthy, and safe for general audiences. It demonstrates good privacy compliance and technical maturity but could improve its security posture by adding security headers and incident response details.

S

Stiftung Chancen für Kinder

stiftung-chancenfuerkinder.de

60

Stiftung Chancen für Kinder is a German non-profit foundation established in 2004, dedicated to improving the lives of children worldwide through projects in education, culture, and medical care. The foundation has a solid market position supported by reputable partners and a clear mission to provide children in poverty with better opportunities. The website is professionally designed using WordPress, featuring modern plugins for marketing and cookie management, and offers content in German with an English version available. Technically, the site is well-structured, mobile-optimized, and implements GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site reflects a trustworthy and credible organization with transparent domain registration and consistent business information.

S

SubCtech - Ocean Power & Monitoring

subctech.com

65

SubCtech GmbH is a German-based company specializing in advanced ocean engineering technologies, focusing on high-performance Li-Ion batteries for subsea applications and autonomous ocean monitoring systems. With over 15 years of industry experience and a strong market position, SubCtech serves scientific and industrial clients globally, offering certified and customized solutions. The company is part of the Gabler Maschinenbau GmbH under the Possehl Group, enhancing its market credibility and resources. Technically, the website is built on a modern WordPress platform with robust SEO and user experience features, though some security enhancements like DNSSEC and CSP headers could be implemented. Security posture is solid with HTTPS and clientTransferProhibited domain status, but lacks explicit incident response contacts and vulnerability disclosure mechanisms. Overall, the website reflects a professional, trustworthy, and compliant business entity with clear contact channels and privacy practices.

G

GLYNT

glynt.com

72

GLYNT operates an e-commerce platform specializing in professional hair care and styling products for home use, targeting consumers seeking salon-quality products. The website is built on the Contao CMS and employs modern JavaScript libraries such as jQuery and Isotope, with integrations for Google Tag Manager and Cookiebot for analytics and cookie consent management. The site demonstrates good design quality, clear navigation, and mobile optimization, providing a professional user experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and explicit privacy or security policies. The absence of WHOIS data raises concerns about domain registration legitimacy, though the website content and HTTPS usage suggest a legitimate business presence. Overall, the site scores moderately well but would benefit from enhanced transparency and security practices.

B

Briese Schiffahrts GmbH & Co. KG

briese-research.de

25

BRIESE Research, a division of Briese Schiffahrts GmbH & Co. KG, specializes in the management and chartering of German research vessels, serving scientific institutions and maritime research communities. The company manages a fleet of notable research vessels and collaborates with prominent scientific organizations such as AWI, GEOMAR, and Senckenberg. Their business model focuses on providing comprehensive vessel management, crew recruitment, and logistical support tailored to research needs. The website reflects a niche market position with a medium-sized enterprise footprint in Germany.

H

HASYTEC - Ultrasonic Antifouling Technology

hasytec.com

10

HASYTEC is a German-based company specializing in AI-controlled ultrasound antifouling technology, primarily serving the shipping and industrial sectors. Positioned as a world leader in this niche, HASYTEC offers innovative ultrasound solutions designed to prevent biofouling on vessels and industrial equipment. The company’s website reflects a professional B2B technology provider with a clear market focus and a medium-sized operational scale, founded in 2016. Technically, the website is built on WordPress using the Divi theme, enhanced with SEO tools like Rank Math and a cookie consent mechanism via Borlabs Cookie. The infrastructure is modern and supports mobile optimization, though performance is moderate. Hosting and DNS services are consistent with the company’s German location, though DNSSEC is not enabled, representing a minor security gap. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent, but lacks advanced security headers and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected, but enabling DNSSEC and security headers would strengthen the security posture. Overall, HASYTEC’s website is trustworthy and professional, with good business credibility and technical implementation. However, the absence of a privacy policy and terms of service pages slightly reduces privacy compliance scores. Strategic improvements in security and compliance documentation are recommended to enhance trust and regulatory adherence.

N

NIBE

nibe.eu

72

NIBE is a global group specializing in energy-efficient and sustainable indoor climate solutions, including heat pumps, heating, ventilation, and cooling products. The company emphasizes sustainability and renewable energy, targeting homeowners and professional installers worldwide. The website reflects a mature digital presence with a modern tech stack including SiteVision CMS, React, and integration of analytics and consent management tools. Security posture is strong with HTTPS enforcement and GDPR-compliant cookie consent mechanisms, although explicit security headers and incident response information are not publicly available. Overall, the domain and website appear legitimate and professionally maintained, with a strong focus on sustainability and energy efficiency.

W

Web-Betreiber

web-betreiber.de

10

Web-Betreiber is a German network of developers, designers, content creators, and SEO experts offering comprehensive digital marketing, web development, and software tool services. The website presents a professional image with detailed team member profiles and client references, targeting businesses seeking expert web and marketing solutions in Germany. Technically, the site is built on WordPress with modern plugins such as Gravity Forms, Yoast SEO, and WP Rocket, hosted behind Cloudflare for performance and security. The security posture is solid with HTTPS enforced and GDPR-compliant privacy and cookie policies including consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and accessible platform.

B

Behinderten- und Rehabilitations-Sportverband Berlin e.V.

sportbildung.berlin

36

The website sportbildung.berlin serves as the official training and licensing portal for the Behinderten- und Rehabilitations-Sportverband Berlin e.V., a regional sports association focused on disabled and rehabilitation sports in Berlin, Germany. It provides educational resources, licensing guides, and online application services for training and continuing education in the rehabilitation sports sector. The portal targets individuals and clubs involved in this niche sports community, offering structured information and digital services to support their certification and training needs. Technically, the site is built on TYPO3 CMS with Bootstrap 5 and jQuery, ensuring a modern and responsive user experience. It integrates Matomo analytics with privacy-conscious settings and uses HTTPS with a valid SSL certificate. However, DNSSEC is not enabled, and some security headers appear to be missing, indicating room for improvement in security hardening. The site is well-structured with clear navigation and good accessibility features, supporting a positive user experience. From a security and compliance perspective, the site demonstrates basic GDPR compliance with a privacy policy and cookie consent banner. However, it lacks visible terms of service, security policies, incident response contacts, and explicit business contact information, which are important for trust and legal completeness. The WHOIS data is consistent and legitimate, with a domain age appropriate for the business. No suspicious or malicious indicators were found. Overall, the website is a credible and professional portal for its niche audience but would benefit from enhanced security practices, clearer contact and legal information, and improved transparency to strengthen trust and compliance.

Nestlé Coffee Partners operates as a business-to-business provider of coffee and tea solutions, offering curated foodservice products and equipment. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content targeting foodservice businesses and hospitality sectors. The technical infrastructure is built on Magento with integrations for analytics and performance monitoring, indicating a commitment to digital maturity and user experience. Security posture is strong with HTTPS enforcement and security headers, although the absence of a public security policy and incident response contact is noted. The WHOIS data is unavailable, which limits domain trust verification but the overall branding and content strongly suggest a legitimate enterprise operation under Nestlé's corporate umbrella. Strategic recommendations include publishing security policies, enhancing transparency, and maintaining compliance with evolving privacy regulations.

I

INTERSOS

intersos.org

10

INTERSOS is a well-established humanitarian non-profit organization focused on providing frontline aid during emergencies worldwide. The website presents a professional and comprehensive digital presence, targeting donors, humanitarian workers, and partners. It offers detailed information about its activities, news updates, and donation options, supporting its mission effectively. Technically, the site is built on WordPress with modern plugins for SEO, donations, and cookie consent, ensuring a good user experience and compliance with privacy regulations. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although formal security policies and incident response contacts are not published. Overall, the domain appears legitimate despite the lack of WHOIS registrant data, likely due to privacy protection common in NGOs. The site is safe, trustworthy, and well-optimized for its audience.

D

Društvo Ujedinjenih Građanskih Akcija

dugabih.ba

10

Društvo Ujedinjenih Građanskih Akcija (Duga BiH) is a non-profit organization based in Bosnia and Herzegovina dedicated to supporting children, youth, parents, and professionals through educational and psychosocial programs. The organization positions itself as a leading entity in social inclusion and community support, offering training, counseling, and project-based services. Their website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the site is built on WordPress using modern frameworks and plugins, ensuring good performance and mobile optimization. Security measures such as HTTPS and security headers are properly implemented, although explicit privacy and cookie policies are missing, representing a compliance gap. Overall, the domain registration data aligns well with the organization's claims, supporting the legitimacy of the site.

H

HOMA lakástextil

homahu.hu

50

The website homahu.hu operates as an online retail platform specializing in home textiles such as bedding, towels, and household fabrics, targeting primarily the Hungarian market. It is part of a regional network with sister sites in Slovakia, Czech Republic, and Austria, indicating a focused Central European presence. The business model is e-commerce retail with a clear emphasis on product variety and customer convenience, supported by visible contact information and promotional offers. The site demonstrates consistent branding and a professional online presence.

E

EMOS

emos.hu

72

EMOS.hu is a Hungarian e-commerce website specializing in the online sale of lighting technology and electronic devices. The site targets general consumers in Hungary and positions itself as a significant player in the retail sector for these product categories. The website features a professional design with consistent branding and good content quality, supporting a positive user experience. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, Facebook SDK, and Cookiebot for cookie consent management. It is hosted with CDN support to optimize performance and is mobile-optimized with basic accessibility features. Security-wise, the site enforces HTTPS, uses cookie consent with granular controls, and integrates multiple advertising and analytics services responsibly. No critical vulnerabilities or security issues were detected, though explicit security and incident response policies are not publicly available. Overall, EMOS.hu demonstrates a mature digital presence with good privacy compliance and business credibility.

C

COSORI MAGYARORSZÁG

cosori.hu

59

COSORI MAGYARORSZÁG operates a professional Hungarian e-commerce website specializing in the retail of Cosori brand kitchen appliances, primarily air fryers and multifunctional cooking pots. The site targets Hungarian consumers seeking healthy and efficient cooking solutions, offering a range of products, accessories, recipes, and customer support. The business is relatively young, founded around 2021, and positions itself as an official distributor with strong trust signals such as awards and customer testimonials. Technically, the website leverages a modern e-commerce platform (ShopRenter) with a robust tech stack including jQuery, Bootstrap, and multiple marketing and analytics integrations such as Google Tag Manager, Facebook Pixel, TikTok Pixel, and Klaviyo. The site is mobile-optimized with good SEO practices and moderate performance. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security policy pages and some recommended HTTP security headers. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear policies and consent banners. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements could focus on enhancing security headers and publishing dedicated security and incident response information.

W

World Clinical Laser Institute

wcli.org

57

The World Clinical Laser Institute (WCLI) is a well-established professional organization founded in 2000, focused on advancing dental care through laser technologies. It serves a global membership of over 19,000 dental professionals, researchers, and manufacturers. The organization provides education, certification, events, and resources to its members, positioning itself as the largest dental laser group worldwide. The website reflects a professional and consistent brand image, targeting dental professionals seeking advanced training and certification in laser dentistry. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and plugins to deliver a responsive and user-friendly experience. Hosting and DNS are managed through reputable providers, with HTTPS enabled ensuring secure communications. However, some security best practices such as DNSSEC and security headers are not implemented, representing areas for improvement. From a security perspective, the site maintains a good posture with HTTPS and domain registration protections but lacks explicit security policies and incident response information. Privacy compliance is weak due to the absence of privacy and cookie policies, which could expose the organization to regulatory risks. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening to align with best practices and regulatory requirements.

N

Nakladatelství Fraus, s.r.o.

skolasnadhladom.sk

54

Škola s nadhľadom is an educational online platform operated by Nakladatelství Fraus, s.r.o., targeting Slovak primary and secondary school students and their parents. The website offers interactive exercises linked with printed workbooks, aiming to support learning in various subjects such as mathematics, physics, chemistry, biology, geography, and Slovak language. The platform is positioned as a trusted educational resource with a professional design and consistent branding, supported by partnerships with recognized educational entities. Technically, the site employs modern JavaScript libraries and Google Tag Manager for analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not published. Overall, the site demonstrates a mature digital presence suitable for its educational mission.

C

Campus

campus-cowork.com

42

Campus is a small business focused on providing tailored corporate innovation services such as hackathons, ideathons, and B2B partnerships primarily targeting businesses seeking innovation solutions. The website is built on WordPress using Elementor and integrates common analytics and marketing tools like Google Analytics, Facebook Pixel, Hotjar, and Google Tag Manager. The technical infrastructure is modern and mobile-optimized, offering a good user experience and professional design. However, the security posture is moderate due to the absence of visible security headers and lack of explicit privacy and cookie policies. The domain WHOIS data is missing or unavailable, which raises concerns about domain legitimacy and trustworthiness. Overall, the site is safe for general audiences and presents a professional business front but requires improvements in security and compliance documentation.

D

Darkmay s.r.o.

cestovnysystem.sk

53

Darkmay s.r.o. operates the CeSYS platform, a comprehensive system for travel agencies primarily in Slovakia, offering online tour sales and related services. The company holds a strong market position with over 100 active travel agencies using its data and services. The website is well-structured, professionally designed, and optimized for performance and mobile use. It integrates modern technologies such as jQuery, Bootstrap, Google Analytics, and Google Maps API, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and accessible platform. Overall, the website demonstrates good compliance with privacy regulations and provides clear business and partner information.

O

October CMS

octobercms.com

63

October CMS is a mature, developer-focused content management system built on the Laravel PHP framework. It targets developers, agencies, and businesses seeking a flexible, extensible CMS platform. The website demonstrates strong branding, professional design, and a comprehensive presentation of services including free licenses, premium support, and a marketplace for plugins and themes. The technical infrastructure leverages modern technologies such as Laravel, PHP, AWS hosting, and Google Tag Manager for analytics, indicating a solid digital maturity. Security posture is good with HTTPS enforced and domain transfer protections, though there is room for improvement in security headers and explicit security policies. Privacy compliance is basic with no visible cookie consent mechanism or detailed privacy policy disclosures. Overall, the website is trustworthy, well-maintained, and serves its target audience effectively.

A

Argus AS

argus.no

57

Argus AS is a Norwegian company specializing in providing systems and document bases for effective management of system requirements in the construction, transport, and related industries. They offer digital solutions, certification assistance including ISO standards, and support for regulatory inspections. The company has a long-standing presence since 1999, positioning itself as a specialist in compliance and document management within its sectors. The website reflects a business-to-business model targeting companies needing compliance and certification support. Technically, the site uses a custom ASP.NET Web Forms platform with older JavaScript libraries such as AngularJS and jQuery 1.7.1, indicating moderate digital maturity. The site is functional with good content quality but lacks modern security headers and explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate with HTTPS usage but missing advanced security headers and vulnerability disclosures. Overall, the website is professional and trustworthy but would benefit from updates to security practices and privacy compliance to reduce risk and enhance user trust.

A

Allgemeine Anthroposophische Gesellschaft

sektion-landwirtschaft.org

47

The Sektion für Landwirtschaft is a non-profit organization affiliated with the Allgemeine Anthroposophische Gesellschaft and based at the Goetheanum in Switzerland. It focuses on promoting biodynamic agriculture through education, research, publications, and events. The website is professionally designed using TYPO3 CMS and integrates modern technologies such as Matomo for analytics and Tiny Slider for UI components. Contact information and social media presence are clearly provided, enhancing trust and accessibility. Privacy and cookie policies are implemented with GDPR compliance, although explicit terms of service and security policies are absent. The WHOIS data is unavailable due to query failure, but the website content and affiliations strongly indicate legitimacy and a mature organizational presence.

G

Goetheanum, Dornach

steiner100.ch

48

The website steiner100.ch is a dedicated platform commemorating the 100th anniversary of Rudolf Steiner's death in 2025. It serves as a regional cultural hub focusing on events, exhibitions, and initiatives related to Rudolf Steiner in Northwest Switzerland and the tri-border area. The site targets a general audience interested in cultural, spiritual, and educational activities linked to Steiner's legacy. The business model is non-profit and event-driven, with partnerships involving notable cultural institutions such as the Goetheanum. Technically, the site is built on WordPress using modern themes and plugins, ensuring a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, though improvements in security and privacy transparency are recommended.

P

Pedagogical Section at the Goetheanum and International Council for Steiner Waldorf Education

waldorf-resources.org

50

Waldorf Resources is a specialized online platform dedicated to supporting Waldorf and Steiner educators worldwide by providing academic publications, essays, and pedagogical articles. The website is affiliated with the Pedagogical Section at the Goetheanum and the International Council for Steiner Waldorf Education, positioning it as a niche educational resource within the Waldorf community. The platform operates as a non-profit entity focused on educational content and resource sharing. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including Bootstrap and jQuery, with integrated privacy compliance tools such as Iubenda for cookie consent and Matomo for analytics. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be enhanced. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and employs a comprehensive cookie consent mechanism, reflecting good privacy compliance with GDPR. However, security headers are not explicitly detected, and no published security or incident response policies are available. The WHOIS data is malformed or privacy-protected, limiting transparency but not indicating suspicious activity. Overall, the security posture is solid but could benefit from additional hardening and transparency. The overall risk assessment is low, with the site presenting as a trustworthy educational resource. Strategic recommendations include implementing security headers, publishing vulnerability disclosure and incident response information, and enhancing accessibility. These improvements would strengthen trust and security culture while maintaining compliance and user confidence.

A

Allgemeine Anthroposophische Gesellschaft

paedagogik-goetheanum.ch

51

The Pädagogische Sektion am Goetheanum website represents a small, specialized educational organization focused on Waldorf and anthroposophical pedagogy. It offers resources, events, and publications targeting educators and researchers in this niche field. The site is professionally designed using TYPO3 CMS and integrates modern privacy compliance tools such as Iubenda for cookie and privacy policies. The technical infrastructure is solid, with moderate performance and good mobile optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Contact information and business legitimacy are clearly established with consistent WHOIS data and a professional imprint. Overall, the website is trustworthy, well-maintained, and serves its educational mission effectively.

V

VAAGER

vaager.com

66

VAAGER is a small Norwegian business founded in 2021 that provides consulting services focused on growth and innovation. The website presents a professional design built on WordPress with SEO optimization via Yoast plugin, targeting businesses seeking development assistance. The technical infrastructure is modern and mobile-optimized, though hosting details are not explicitly stated. Security posture is basic with no advanced headers or policies detected, and privacy compliance is lacking due to absence of privacy and cookie policies. No contact or incident response information is provided, which limits trust and compliance. Overall, the domain registration is consistent and legitimate, supporting the business claims. Strategic improvements in privacy, security headers, and contact transparency are recommended to enhance trust and compliance.

J

Jazzklub Altenburg

jazzklub-altenburg.de

43

Jazzklub Altenburg is a small, non-profit cultural organization based in Germany dedicated to promoting jazz music through concerts and community events. The website serves as an information hub for event schedules, membership, and gallery content, targeting jazz enthusiasts and local community members. The organization operates primarily as a cultural club with a focus on live music and membership engagement. Technically, the website is built on WordPress using the Avada theme and Fusion Builder, with common plugins such as Contact Form 7. Hosting is provided by RZone, as indicated by the nameservers. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. The technical infrastructure is standard for small cultural organizations but could benefit from modernization and enhanced security measures. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers and explicit privacy or security policies. No cookie consent mechanism is present, indicating partial GDPR compliance. The absence of contact emails and phone numbers reduces direct communication options, relying instead on a contact form. Social media integration is present via Facebook and Instagram links. Overall, the security posture is moderate but could be improved with better headers, policies, and compliance mechanisms. The overall risk is low given the non-commercial nature and limited sensitive data handling. Strategic recommendations include implementing security headers, adding cookie consent and privacy compliance features, and enhancing contact information transparency to improve trust and compliance.

IG Jazz Arnstadt e.V. is a small non-profit cultural association based in Germany focused on organizing and promoting jazz music events in Arnstadt. The website serves as an information hub for upcoming concerts, ticket sales, and archival content related to jazz. The target audience primarily consists of jazz enthusiasts and the local community interested in cultural events. The organization maintains an active presence on social media platforms such as Facebook and Instagram and offers a newsletter subscription to engage its audience. Technically, the website is built on WordPress using a modern tech stack including Bootstrap, jQuery, and several plugins for SEO, booking, and GDPR compliance. The site is hosted on servers associated with avidesign.eu and employs HTTPS with a valid SSL certificate. Performance and mobile optimization are good, with SEO best practices implemented via Yoast SEO. The site includes a cookie consent mechanism compliant with GDPR regulations and uses Matomo for analytics and Mailchimp for marketing. From a security perspective, the site has HTTPS enabled and uses cookie consent tools to manage user privacy. However, no advanced security headers were detected, and there is room for improvement by implementing CSP, HSTS, and other HTTP security headers. No vulnerabilities or exposed sensitive data were found in the provided content. Incident response and security policies are not explicitly documented on the site. Overall, the website presents a professional and trustworthy front for a local cultural organization with good privacy compliance and moderate security posture. Recommendations include enhancing security headers, maintaining up-to-date software, and possibly publishing explicit security and incident response policies to improve trust and compliance.

Sonneberger Jazzfreunde e.V. is a non-profit cultural organization dedicated to promoting jazz music and small arts in the Thüringisch-Fränkischer region of Germany. The website serves as the official portal for the International Sonneberger Jazztage, a well-established jazz festival entering its 39th year. The organization relies on ticket sales, sponsorships, and partnerships with local businesses and cultural institutions to operate. The website provides detailed event information, partner acknowledgments, and ticket purchasing links, targeting jazz enthusiasts and regional visitors. Technically, the website is built on the Contao CMS platform and employs modern web technologies such as jQuery, Tiny Slider, and Usercentrics for consent management. The site is mobile-optimized and presents a professional design with clear navigation. Hosting is provided by a German hosting provider, consistent with the regional focus of the organization. Performance is moderate with room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS and implements GDPR-compliant consent management. However, no explicit security headers or incident response policies are published, and no vulnerability disclosures or security certifications are evident. The absence of a terms of service page and limited security documentation suggests areas for enhancement. No critical vulnerabilities or suspicious activities were detected. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic improvements in security headers, incident response transparency, and SEO could further strengthen its posture and user trust.

J

Jazzclub Nordhausen e.V.

jazzclub-nordhausen.de

39

Jazzclub Nordhausen e.V. is a small non-profit cultural association based in Germany focused on organizing jazz music events and concerts. The website provides event listings, membership information, and historical background about the club. It targets jazz enthusiasts and the local community. The site is built on the Contao CMS platform and hosted by Cloudpit, using common JavaScript libraries for UI enhancements. The technical infrastructure is moderately mature with basic mobile optimization and SEO. Security posture is average with cookie consent implemented but lacking advanced security headers and explicit incident response policies. No blocking or WAF mechanisms interfere with content access. Overall, the website is trustworthy and professionally maintained but could improve in security and compliance transparency.