Security Directory

D

Diözesanarchiv Berlin

dioezesanarchiv-berlin.de

52

The Diözesanarchiv Berlin website serves as the official archival repository for the Archdiocese of Berlin, preserving and providing access to historical and ecclesiastical documents related to the Catholic Church in Berlin, Brandenburg, and Pommern. The site targets researchers, historians, and church officials, offering curated archival content and documentation. The business operates under the Archdiocese of Berlin, positioning itself as a specialized government/non-profit archival institution with a clear mission and trusted affiliation. Technically, the website is built on WordPress using a professional theme and SEO plugins, ensuring good SEO optimization and mobile responsiveness. The hosting is managed via DomainControl nameservers, and the site uses HTTPS with no detected blocking or WAF interference. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site benefits from HTTPS and absence of exposed sensitive data or vulnerable libraries. However, it lacks important security headers and a cookie consent mechanism, which are critical for GDPR compliance and enhanced security posture. No incident response or vulnerability disclosure information is provided, limiting transparency in security management. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance measures, improved security headers, and clearer contact information to strengthen user trust and regulatory adherence.

D

Diözesane Arbeitsgemeinschaft der Mitarbeitervertretungen im Erzbistum Berlin

diag-mav-berlin.de

55

DiAG-MAV Berlin is a small non-profit organization serving employee representatives within the Archdiocese of Berlin. The website provides informational resources, legal documents, seminar announcements, and contact details tailored to its niche audience. The organization positions itself as a trusted source for employee representation in church-related contexts. Technically, the website is built on WordPress with common plugins and libraries such as jQuery, Bootstrap, and Revolution Slider, indicating a standard but functional digital infrastructure. The site is mobile-optimized and includes interactive maps for location display. Security-wise, the site uses HTTPS and basic form validation but lacks advanced security headers and visible incident response policies. Privacy compliance is addressed with a cookie consent banner and a privacy policy page in German. Overall, the site is professional and trustworthy but could improve in security best practices and transparency regarding terms of service and incident response.

E

Erzbistum Berlin

schulen-erzbistumberlin.de

58

The website for Schulen des Katholischen Erzbistum Berlin represents a network of Catholic educational institutions in Berlin and Brandenburg, offering primary, secondary, and special education. It serves a broad audience including children, youth, parents, and educational staff, positioning itself as a regional leader in faith-based education. The site provides news, job postings, and educational offerings, reflecting a community-oriented non-profit model under the Archdiocese of Berlin. Technically, the site is built on Joomla CMS with modern web technologies, including GDPR-compliant cookie consent mechanisms and responsive design, ensuring accessibility and privacy compliance. Security posture is solid with HTTPS and cookie management, though lacks explicit security policy and incident response disclosures. Overall, the site is professional, trustworthy, and well-aligned with its educational mission.

R

radio horeb

horeb.org

66

radio horeb is a private Christian radio broadcaster based in Germany, focusing on Catholic-themed religious programming. The website offers live radio and video streams, podcasts, and various spiritual and community-oriented content. It operates on a donation-supported non-profit model targeting German-speaking Christian audiences. The site is built on TYPO3 CMS and employs modern web technologies including jQuery and Flexslider, with integrated analytics tools such as Google Analytics and Matomo. Privacy and cookie policies are clearly presented, and a cookie consent mechanism is implemented, reflecting good compliance with GDPR requirements. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though additional security headers and formal security policies could enhance protection. The absence of WHOIS data limits domain registration trust analysis, but the website's professional presentation and consistent branding support its legitimacy. Overall, the site is well-structured, user-friendly, and trustworthy for its target audience.

K

Katholisches Netzwerk Kinderschutz im Erzbistum Berlin

katholisches-netzwerk-kinderschutz.de

10

The Katholisches Netzwerk Kinderschutz im Erzbistum Berlin is a non-profit network established in 2011, focused on protecting children and youth from sexual violence, abuse, and neglect within Catholic institutions in Berlin. It operates under the Archdiocese of Berlin, collaborating with various Catholic organizations, schools, and social services. The website serves as an information and networking platform, providing resources, event recaps, and contact points for prevention and intervention. Technically, the site is built on TYPO3 CMS, uses modern web technologies, and implements GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS and consent-based third-party content loading, though formal security policies and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and well-aligned with its mission and audience.

S

Sankt Hedwigs-Kathedrale / Metropolitankapitel bei Sankt Hedwig

hedwigs-kathedrale.de

10

Sankt Hedwigs-Kathedrale is a prominent religious and cultural institution in Berlin, serving as the central Catholic cathedral for the archdiocese. The website provides comprehensive information about the cathedral's history, services, music programs, events, and community engagement. It targets parishioners, visitors, and cultural tourists, offering schedules, guided tours, and donation opportunities. The institution holds a respected position within the religious community and maintains partnerships with the archdiocese and choir organizations. Technically, the website is built on the TYPO3 CMS platform, leveraging jQuery and privacy-focused Matomo analytics. The site is well-structured, mobile-optimized, and includes a GDPR-compliant cookie consent mechanism. Hosting is managed via reputable providers as indicated by the nameservers. Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and uses cookie consent to manage user privacy. However, explicit security headers and incident response policies are not evident, representing areas for improvement. No vulnerabilities or suspicious content were detected. The WHOIS data aligns reasonably with the website's institutional identity, supporting legitimacy. Overall, the website demonstrates a solid balance of content quality, technical implementation, and privacy compliance, suitable for its non-profit religious mission. Strategic enhancements in security policies and transparency could further strengthen trust and resilience.

C

Centrum environmentálních technik a technologií (CETT)

cett.eu

42

CETT (Centrum environmentálních technik a technologií) operates as a specialized hospitality and educational center located in the Czech Republic, offering conference facilities, accommodation, and environmental education programs. The business targets corporate clients, institutions, schools, and individual guests, emphasizing quality service and environmental awareness. The website reflects a professional and consistent brand image with clear service offerings and positive trust indicators such as certifications and guest ratings. Technically, the site employs modern frontend technologies including Bootstrap and Google Analytics, providing a responsive and user-friendly experience. However, some areas such as explicit cookie consent and security policies could be improved. Security posture is moderate with HTTPS usage but lacks visible security headers and incident response information. Overall, the site is trustworthy and well-positioned in its niche but would benefit from enhanced privacy and security transparency.

F

Filip Kňažek

filipknazek.eu

36

Filip Kňažek operates a personal coaching and facilitation business focused on nature-based self-development and emotional well-being. The website presents a professional and consistent brand image with clear service offerings including workshops, coaching walks, and group facilitation. The technical infrastructure is based on WordPress with Elementor and Yoast SEO, indicating a modern and maintainable platform. Security posture is adequate with HTTPS enabled, but lacks some security headers and formal privacy/cookie policies. The absence of WHOIS data is due to privacy protection, which is typical for small personal businesses. Overall, the site is trustworthy and well-positioned for its niche audience.

K

Klidem - institut pro ekoterapii, z.ú.

klidem.com

49

Klidem - institut pro ekoterapii, z.ú. is a Czech non-profit organization focused on promoting mental health through ecotherapy. They provide therapy, coaching, educational courses, workshops, and custom services to individuals, groups, and professionals. The organization actively collaborates with other ecotherapy-related entities in the Czech Republic and internationally. Their website presents a professional image with consistent branding and clear descriptions of their services and team. Technically, the site is built on WordPress using modern themes and plugins, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies and absence of explicit contact information. Overall, the site is trustworthy and serves its niche well but would benefit from enhanced compliance and security practices.

I

IPčko.sk

ipcko.sk

42

IPčko.sk is a well-established Slovak non-profit organization providing anonymous, free, and 24/7 crisis psychological support through multiple channels including phone, chat, email, and personal visits. The website reflects a mature digital presence with a clear focus on accessibility and user support. The organization has a strong market position in Slovakia as a trusted crisis helpline service. Technically, the site is built on WordPress with modern plugins and frameworks, hosted on a reputable provider with DNSSEC and HTTPS enabled, ensuring good security and performance. Security posture is strong with best practices observed, though some improvements in privacy compliance and explicit security policies are recommended. Overall, the site is professional, trustworthy, and user-friendly, serving a critical social function.

P

PDCS, o.z.

pdcs.sk

41

PDCS is a Slovak non-governmental organization specializing in conflict resolution, civic participation, and social dialogue. The organization offers educational courses, facilitation, consulting, and project support primarily targeting individuals, groups, and organizations interested in societal development and democratic processes. The website reflects a professional and consistent brand image with clear communication of services and contact information. Technically, the site uses modern web technologies including Vue.js and Bootstrap, and integrates privacy-respecting analytics via Plausible. Security posture is strong with HTTPS and security headers implemented, though there is room for improvement in privacy compliance with the absence of a cookie consent mechanism and a dedicated privacy policy page. Overall, PDCS demonstrates a credible and trustworthy online presence aligned with its non-profit mission.

A

adribo

adribo.de

56

adribo is a German-based company specializing in modern conflict management services including mediation, coaching, dialog management, and organizational development. The company operates multiple offices across Germany, serving a diverse clientele from public, private, and economic sectors. Their website reflects a professional and consistent brand image with detailed team profiles and project examples, positioning them as an established player in the conflict resolution market. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution, hosted on Strato servers. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is adequate with HTTPS enabled, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with a comprehensive privacy and cookie policy including consent mechanisms, aligning with GDPR requirements. However, no explicit security policy or incident response information is published. Contact information is thorough, with multiple verified emails, phone numbers, and physical addresses. Overall, adribo's digital presence is professional and trustworthy, with room for improvement in security headers and transparency around security policies. The risk profile is low, making it a credible and reliable business website.

D

Die Zulassungssoftware der Zukunft

zulex.de

44

ZULEX is a specialized cloud-based software provider focused on digitizing vehicle registration processes in Germany. Positioned as the only independent Zulassungssoftwareanbieter and a member of the Kraftfahrtbundesamt's i-Kfz project, ZULEX offers comprehensive services including new registrations, deregistrations, re-registrations, and address changes. Their platform is accessible 24/7 via browser without installation, targeting Zulassungsbetriebe, car dealerships, fleet operators, and large customers. The website demonstrates a professional and consistent brand presence with strong trust signals such as certifications and customer testimonials. Technically, the website is built on WordPress with Elementor and Yoast SEO, integrating modern tools like HubSpot forms and GDPR-compliant cookie management. The hosting is managed via kasserver.com, and the site uses HTTPS with good SSL configuration. Performance is moderate with good mobile optimization and accessibility features. Analytics and tracking are implemented via Fathom and SalesViewer, with transparent cookie consent mechanisms. From a security perspective, the site enforces HTTPS and uses cookie consent but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website content, indicating a legitimate and consistent domain registration. Overall, ZULEX presents a secure, professional, and compliant digital presence suitable for its business domain. Strategic improvements include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

M

MarkerCS

markercs.cz

45

MarkerCS is a small non-profit organization focused on providing non-formal education training primarily for youth workers and teachers in Slovakia and the Czech Republic. Their website offers detailed information about their training programs, educational principles, and testimonials from past participants, positioning them as a niche educational provider supported by the Erasmus+ program. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, hosted by a Czech registrar and hosting provider. The site is moderately performant, mobile-optimized, and SEO-friendly but lacks some advanced accessibility features. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but the absence of security headers and formal privacy and cookie policies indicates room for improvement. Overall, the website is professional and trustworthy but could enhance compliance and security transparency.

A

Asociace neformálního vzdělávání

neformalnivzdelavani.eu

52

The website www.neformalnivzdelavani.eu serves as an educational resource focused on non-formal education primarily targeting youth workers, teachers, social workers, camp leaders, volunteers, and parents interested in innovative educational methods. It is managed by the Asociace neformálního vzdělávání (ANEV), a Czech non-profit organization, and is supported by European Union funding. The site offers multilingual content, including Czech, English, Finnish, and Portuguese versions, enhancing its accessibility across Europe. The business model is non-profit, focusing on providing educational content, resources, and community support rather than commercial services. Technically, the website is built on WordPress with common plugins such as WPML for multilingual support and Featherlight for image lightboxes. It uses jQuery and Google Fonts, with a moderate performance profile and good mobile optimization. SEO and accessibility are basic to good, but there is room for improvement in accessibility features and security headers. The site is served over HTTPS with a valid SSL certificate, ensuring secure communications. From a security perspective, the site lacks visible security headers and does not expose sensitive data or vulnerable libraries in the provided content. However, the absence of a privacy policy and terms of service pages, as well as no explicit contact emails or phone numbers, reduces privacy compliance and user trust. The WHOIS data is unavailable due to EURid privacy policies, but the website’s association with known organizations and EU funding supports its legitimacy. No WAF or blocking mechanisms were detected, and the content is safe for general audiences. Overall, the website is a credible, well-structured educational resource with moderate technical maturity and a good security baseline. Strategic improvements in privacy documentation, security headers, and contact transparency would enhance compliance and trustworthiness.

T

TB Transportbeton Glöckle GmbH & Co. KG

tb-gloeckle.de

64

TB Transportbeton Glöckle GmbH & Co. KG is a regional German company specializing in the supply of transport concrete, mortar, special concrete, and flowable fill products. Established with a modern mixing plant since 2009, the company positions itself as a reliable and quality-focused partner for the construction industry in its region. The website reflects a professional business presence with clear service offerings and contact information. Technically, the site is built on WordPress with modern plugins for SEO, GDPR compliance, and interactive maps, indicating a moderate to advanced digital maturity. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site is trustworthy and compliant with EU regulations, supporting the company's credibility in its sector.

G

GW-Immobilienverwaltungs GmbH

gwi-sw.de

58

GW-Immobilienverwaltungs GmbH is a small regional real estate management company based in Schweinfurt, Germany, specializing in residential property management, rental property management, facility management, and rental services. The website is professionally designed using Joomla! CMS with modern front-end libraries such as jQuery, Bootstrap, and UIkit, providing a good user experience and mobile optimization. The company targets property owners, homeowners associations, and tenants within the local market. Security posture is moderate with HTTPS implied but no explicit security headers detected; cookie consent is implemented indicating GDPR awareness. No advanced security or incident response policies are published, and no analytics or advertising scripts are present, reducing privacy risks. Overall, the website is trustworthy and business credible with clear contact information and consistent branding.

S

SuprNation

suprnation.com

53

SuprNation is a Malta-based technology company specializing in the iGaming industry, founded in 2015. The company develops innovative online casino products with a focus on mobile optimization and enhanced user experience. Their product portfolio includes brands such as VoodooDreams, NYspins, and Duelz, positioning them as a creative challenger in the competitive iGaming market. The website reflects a professional and consistent brand image with clear contact information and social media presence. Technically, the site is built on WordPress with common industry plugins and uses Cloudflare for DNS and likely CDN services. Analytics are implemented via Google Tag Manager. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and trustworthy but would benefit from enhanced security and privacy measures.

Sky City Casino is a well-established hospitality and gaming business located in Western New Mexico, offering casino gaming, hotel accommodations, an RV park, dining, entertainment, and cultural tourism services. The website reflects a medium-sized regional casino and hotel destination with a focus on adult customers interested in gaming and cultural experiences. Technically, the site is built on WordPress using the Astra theme and Beaver Builder, integrating Google Analytics and Facebook Pixel for marketing and tracking. The site is mobile optimized with good design and navigation but lacks explicit privacy and cookie policies, which impacts privacy compliance. Security posture is moderate with HTTPS enabled and domain transfer lock in place, but no DNSSEC or security headers detected. The domain is long-standing and consistent with the business claims, enhancing trustworthiness. Overall, the website is professional and functional but would benefit from improved privacy disclosures and enhanced security headers.

The website is the official online booking platform for Seminole Hard Rock Hollywood, a major hospitality brand in Florida. It provides users with the ability to reserve hotel rooms, access loyalty programs, and view promotional offers. The site is well-branded and professionally designed, targeting travelers seeking accommodations at this property. The technical infrastructure leverages modern web technologies including ASP.NET, JavaScript libraries, and integrates multiple analytics and marketing tools such as Google Analytics, TikTok Pixel, and Facebook Pixel. Privacy and cookie policies are implemented with consent mechanisms, reflecting compliance with GDPR and other privacy regulations. Security posture is strong with HTTPS enforcement and appropriate security headers, though no explicit incident response or vulnerability disclosure information is provided. Overall, the site presents a trustworthy and professional digital presence aligned with the parent Hard Rock brand.

The website is an online booking platform for Hard Rock Hotel & Casino Sacramento at Fire Mountain, a hospitality and casino property located in Wheatland, California. It serves as a reservation interface for hotel rooms and related services, targeting adult customers interested in gaming and lodging. The site is branded consistently with the Hard Rock brand and integrates multiple third-party marketing and analytics tools to optimize user engagement and conversion. Technically, the site uses a modern JavaScript stack with integrations for Google Tag Manager, OneTrust for cookie consent, and various advertising pixels. The site is mobile responsive and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though explicit security headers could be improved. Privacy compliance is addressed with cookie consent mechanisms and a privacy policy, though direct contact information and security policies are limited. WHOIS data for the subdomain is not available, which is typical for subdomains managed under a parent domain. Overall, the site is legitimate, professionally maintained, and suitable for its business purpose.

The website is an online booking platform for Hard Rock Atlantic City, a hospitality property located in Atlantic City, New Jersey. It provides hotel room reservations and package bookings integrated with loyalty programs. The site is part of the Hard Rock Hotels chain, a well-known brand in the hospitality industry. The technical infrastructure includes modern JavaScript libraries, Google Maps API, and multiple analytics and advertising tools, indicating a mature digital presence. Security posture is generally good with HTTPS enforced and cookie consent implemented, though some security headers are not explicitly detected. The absence of visible privacy policy and terms of service pages is a compliance gap. WHOIS data is unavailable for the subdomain, which is expected, and the domain is consistent with the parent Hard Rock brand. Overall, the site is professional, trustworthy, and safe for general audiences.

P

Palladium Hotel Group

palladiumhotelgroup.com

71

Palladium Hotel Group operates a large portfolio of luxury 4 and 5-star hotels across multiple countries including Spain, Mexico, and Germany. The website is professionally designed, multilingual, and targets leisure travelers seeking premium hospitality experiences. The technical infrastructure leverages Adobe Experience Manager CMS, modern JavaScript libraries, and integrates multiple analytics and marketing tools with user consent mechanisms. Security posture is strong with HTTPS, security headers, and cookie consent, though explicit security policies and incident response contacts are not prominently published. The absence of WHOIS data reduces transparency but the website's content and branding indicate a legitimate and established business. Overall, the site demonstrates a mature digital presence with good compliance and user experience.

T

TC-Innovations GmbH

tc-innovations.de

53

TC-Innovations GmbH is a specialized Shopware agency based in Germany, recognized as a market leader in Shopware themes, particularly through their flagship product ThemeWare®, which is deployed in over 15,000 shops. Their core services include grand design, sales promotion, and individualization of Shopware shops, complemented by installation and support services. The company targets e-commerce businesses and agencies seeking professional Shopware solutions. Technically, the website employs modern web technologies such as jQuery, Slick Carousel, and LazyLoad, and is optimized for mobile devices with good SEO and accessibility practices. Security-wise, the site enforces HTTPS and implements a comprehensive cookie consent mechanism, though it lacks explicit security headers and published security policies. Overall, the domain registration data aligns well with the business claims, indicating a trustworthy and legitimate operation.

The Bundesverband der Deutschen Transportbetonindustrie e.V. (BTB) is a professional industry association representing transport concrete manufacturers and related businesses in Germany. The organization focuses on key industry challenges such as decarbonization, resource conservation, technical standards, research, education, and workplace safety. It operates the Concrete Sustainability Council (CSC) certification system in Germany, underscoring its commitment to sustainable construction practices. The website serves as a comprehensive resource for members and the broader industry, offering news, training, research updates, and member-exclusive content. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including jQuery and Matomo analytics. It features good SEO optimization, accessibility, and mobile responsiveness. Security practices include HTTPS enforcement and secure login forms with CSRF protection. Cookie consent mechanisms and GDPR-compliant privacy policies are implemented, reflecting a mature approach to privacy and compliance. While the website content and technical infrastructure are robust and professional, the WHOIS data for the domain is unavailable due to a malformed WHOIS response, limiting the ability to fully verify domain registration legitimacy. No WAF or blocking mechanisms were detected, allowing full content access and analysis. Overall, the site demonstrates a strong security posture with minor recommendations for enhanced security headers and explicit incident response information. Strategically, BTB is well-positioned as a leading industry association in Germany's transport concrete sector, with a clear focus on sustainability and member services. The digital presence supports its mission effectively, though verifying domain registration details through alternative means is advisable to strengthen trust.

H

Heinrich Krieger KG

dialog-krieger.de

46

Dialog Krieger, operated by Heinrich Krieger KG, is a specialized service provider focusing on modern conflict management and public participation facilitation in Germany. The company emphasizes transparent and fair dialogue processes, primarily serving municipalities, companies, and initiatives. Their website reflects a professional and consistent brand image, highlighting certified mediators and structured citizen engagement services. The technical infrastructure is based on WordPress CMS with common plugins and a hosting provider identified as netcup, ensuring reliable performance and moderate mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the website is trustworthy, GDPR compliant, and provides sufficient contact information and business insights.

P

Putzmeister

putzmeister.com

61

Putzmeister is a globally recognized leader in manufacturing and servicing construction and mining machinery, specializing in concrete pumps, mixers, and related equipment. Founded in 1958 and headquartered in Germany, the company operates under the parent company SANY Group and maintains a strong market position with multiple subsidiary brands. The website reflects a professional and comprehensive digital presence targeting industry professionals and customers worldwide. Technically, the site is built on the Liferay CMS platform with modern web technologies including React and Matomo analytics, providing a good user experience with moderate performance and mobile optimization. Security posture is solid with HTTPS enforcement and domain transfer protections, though improvements such as DNSSEC and explicit cookie consent mechanisms are recommended. Overall, the domain registration and website content align well, supporting high legitimacy and trustworthiness.

M

MSE Camsoft GmbH

camsoft.de

52

MSE Camsoft GmbH is a German-based small technology company specializing in custom software development with a focus on mobile software and dispatch systems for industrial and commercial sectors such as construction, airport services, and vehicle rental. Their business model is B2B, providing tailored software solutions integrated into existing IT environments. The website is professionally designed with clear navigation and relevant content targeting business clients. Technically, the site uses a modern front-end stack including Bootstrap and jQuery, but relies on an outdated Google Analytics script and lacks visible security headers, indicating room for modernization and security improvements. Security posture is moderate with no critical vulnerabilities detected but missing best practices such as security headers and cookie consent mechanisms. WHOIS data aligns well with the website's German business identity, supporting legitimacy. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.

Profi Beton GmbH is a medium-sized manufacturing company specializing in the production and distribution of transport concrete and splitt concrete, primarily serving the Rhein-Main region and the vorderen Odenwald in Germany. As a 100% subsidiary of Mitteldeutsche Hartstein-Industrie Aktiengesellschaft, it holds a leading market position with over 30 years of experience and a DIN ISO 9001 certification, indicating a commitment to quality. The company targets private, commercial, and public customers with tailored concrete products for various construction needs. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including jQuery, FontAwesome, and Google Maps API for location services. The site demonstrates good mobile optimization, clear navigation, and moderate performance. Privacy and compliance are well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policies. Matomo analytics is used for user tracking, reflecting a privacy-conscious approach. From a security perspective, the site enforces HTTPS and uses session cookies appropriately. However, some standard security headers are not explicitly detected, and there is no visible security policy or incident response contact, which could be improved. No vulnerabilities or suspicious content were found, and the domain registration data aligns well with the business claims, supporting legitimacy. Overall, Profi Beton GmbH presents a professional, trustworthy online presence with solid compliance and security foundations. Strategic improvements in security headers and incident response transparency would further enhance their security posture and trustworthiness.

E

Evangelisch-Lutherisches Landeskirchenamt Sachsens

evlks.de

50

The website www.evlks.de serves as the official online portal for the Evangelisch-Lutherisches Landeskirchenamt Sachsens, a regional religious authority in Germany. It provides comprehensive information about church activities, events, educational resources, and community support services. The site targets both the general public and church members, including volunteers and staff. It holds a strong market position as a trusted source for religious and cultural information within Saxony. The business model is non-profit, focusing on community engagement and information dissemination.

E

www.ekir.de

ekir.de

42

The website www.ekir.de appears to be a German language site with a strong emphasis on accessibility, integrating a comprehensive accessibility tool (digi·access) that offers multiple profiles and customization options for users with various disabilities. The site is built on WordPress CMS and uses common plugins such as Yoast SEO for search engine optimization and MashShare for social sharing. Hosting is provided by Cancom, as indicated by the nameservers. The site includes cookie consent management via Usercentrics, ensuring compliance with cookie regulations. However, explicit privacy policy and terms of service pages were not found in the provided content, which is a gap in compliance and transparency. Contact information such as emails, phone numbers, or physical addresses are not present in the analyzed content, limiting direct communication channels.

E

Ev.-Luth. Kirche in Oldenburg

kirche-oldenburg.de

48

The Evangelisch-Lutherische Kirche in Oldenburg operates as a regional non-profit religious organization serving the Oldenburg area in Germany. The website provides comprehensive information about church services, community support, educational programs, and social initiatives, targeting a broad audience interested in religious and community activities. The organization maintains a consistent brand presence and offers clear contact channels including phone, email, and social media. Technically, the website is built on TYPO3 CMS with modern frontend technologies such as Bootstrap and jQuery, ensuring good mobile responsiveness and accessibility. SEO practices are well implemented with meta tags and structured data. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms aligned with GDPR requirements. However, some security headers like Content-Security-Policy and X-Frame-Options are missing, which could be improved. No vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a solid security posture and compliance with privacy regulations, supporting the organization's credibility and trustworthiness. Strategic improvements in security headers and publishing a formal security policy would enhance the security maturity further.

M

Medienhaus der Evangelischen Kirche in Hessen und Nassau GmbH

ev-medienhaus.de

69

The Medienhaus der Evangelischen Kirche in Hessen und Nassau GmbH is a non-profit organization serving as the central media and publishing hub for the Evangelische Kirche in Hessen und Nassau. It offers a broad range of services including media production, publishing, seminars, and agency services tailored to church and diaconal staff and institutions. The website reflects a professional and consistent brand presence with clear navigation and relevant content for its target audience. Technically, the website is built on TYPO3 CMS, employs Matomo for privacy-conscious analytics, and uses standard web technologies such as JavaScript and CSS. The site is moderately optimized for performance and mobile devices, with a cookie consent mechanism ensuring GDPR compliance. Hosting is via DomainControl, a reputable registrar service. From a security perspective, the site enforces HTTPS and uses session cookies appropriately. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website demonstrates a solid security posture and good privacy compliance, supporting its role as a trusted media provider for a religious non-profit entity. Strategic improvements in security headers and incident response transparency would further enhance its security maturity.

I

inspiration Miller

inspiration-miller.de

42

Inspiration Miller is a small freelance consultancy based in Germany specializing in IT consulting, data protection, and auditing services. The business leverages over 25 years of experience and cooperates with reputable certification bodies such as DEKRA and TÜV-Süd. The website presents a professional image with clear contact information and a focus on compliance and certifications. Technically, the site is built on Joomla CMS with standard modern libraries and includes a GDPR-compliant cookie consent mechanism. Security posture is adequate with HTTPS and no visible vulnerabilities, though security headers could be improved. Overall, the site is trustworthy and well-suited for its target SME audience in technology and related sectors.

S

Schönstattbewegung Frauen und Mütter

zeitschrift-begegnung.de

41

The website represents a niche religious magazine 'begegnung' targeted at women associated with the Schönstatt movement, a Catholic community focused on family and faith. The business model revolves around subscription services including gift and single issue orders. The site is well-branded and consistent, serving a small, specialized audience primarily in Germany. Technically, the site uses the concrete5 CMS (version 5.6.4.0), jQuery, Bootstrap grid, and Typekit fonts, hosted likely on servers indicated by the nameservers. The site is mobile optimized with good navigation and content relevance but lacks modern security headers and cookie consent mechanisms. Security posture is moderate with HTTPS enabled but missing advanced headers and incident response information. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the site is safe, professional, and trustworthy with room for improvement in security and privacy compliance.

T

Toyota Tsusho Europe

toyota-tsusho-europe.com

72

Toyota Tsusho Europe is a well-established trading company within the Toyota Motor Group, focusing on energy, automotive, and sustainability sectors. The company operates globally with a strong presence in Europe, offering key services such as battery projects, hydrogen solutions, and green infrastructure. The website reflects a professional corporate image with consistent branding and relevant business content targeting partners and customers in the energy and transportation industries. Technically, the site uses Joomla CMS with modern frameworks like Bootstrap and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and performs moderately well. Security posture is good with HTTPS enforced and cookie consent implemented, though improvements like DNSSEC and CSP headers are recommended. Overall, the domain registration is consistent with the business profile, indicating legitimacy and trustworthiness.

Mobilis Sport's website functions primarily as a login portal for users, likely members or customers of a sports-related service based in Hungary. The site provides minimal public-facing content beyond the login form and basic cookie usage disclosure. The business appears to be small and relatively young, founded around 2020, with no detailed business description or contact information available on the site. The technical infrastructure uses common open-source libraries such as AngularJS, jQuery, and AdminLTE for UI styling, indicating a moderate level of digital maturity but with room for modernization and improvement in SEO and accessibility. From a security perspective, the site employs basic best practices such as HTTPS assumed usage and password masking on login forms. However, it lacks important security headers, CSRF protections, and a proper cookie consent mechanism, which lowers its security posture. No explicit privacy policy or terms of service are present, which raises compliance concerns especially under GDPR. The absence of contact information and business credentials further limits trust and credibility. Overall, the website is functional for its purpose but lacks comprehensive security, privacy, and business transparency features. The domain age and WHOIS data suggest a legitimate small business operation, but the site would benefit from enhanced security controls, privacy disclosures, and richer content to improve user trust and compliance. Strategic recommendations include implementing full GDPR-compliant privacy and cookie policies, adding security headers and CSRF protections, fixing minor JavaScript issues, and providing clear business contact information to enhance credibility and user confidence.

T

Triversum Kft.

ametszet.hu

40

aMetszet, operated by Triversum Kft., is a Hungarian technology company offering integrated online services focused on transparent and simple data management. Their platform includes CRM, project management, restaurant software, inventory management, e-learning, and content management systems, targeting businesses seeking unified data solutions. The website presents a professional design with good user experience and clear navigation, though it lacks comprehensive privacy and security policies. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and Owl Carousel, ensuring mobile responsiveness and moderate performance. However, security posture is limited due to missing security headers and absence of HTTPS verification in the provided data. No analytics or tracking scripts are detected, indicating minimal user tracking. Overall, the site is safe for general audiences and shows moderate trustworthiness but would benefit from enhanced security and compliance measures.

L

Landwirtschaftsverlag Münster

lv-mediasales.de

10

LV Mediasales operates as the media sales center for Landwirtschaftsverlag Münster, specializing in advertising sales for agricultural publications. The website targets agricultural professionals and advertisers, offering media data and advertising opportunities across various agrarian titles. The company holds a niche market position within the agricultural media sector in Germany. Technically, the website is built on WordPress using the Divi theme, enhanced with Yoast SEO and Usercentrics for consent management, indicating a moderate to advanced digital maturity. Security posture is adequate with HTTPS enforced and consent mechanisms in place, but lacks some security headers and explicit security policies. Overall, the site is professional and trustworthy, though it could improve privacy disclosures and contact transparency.

Sozialpolitik aktuell is an academic and informational website operated by the Institut für Arbeit und Qualifikation (IAQ) at Universität Duisburg-Essen. It provides extensive, up-to-date information on social policy topics in Germany, including analyses, infographics, legislative updates, and reports. The site targets researchers, policymakers, students, and the interested public, positioning itself as a trusted source in the social policy domain. Technically, the website is built on the Contao CMS platform, uses common JavaScript libraries, and employs Matomo analytics with IP anonymization to respect user privacy. The site is well-structured, mobile-optimized, and includes a comprehensive cookie consent mechanism. Security posture is good with HTTPS enforced, though security headers are not explicitly detected. No direct contact emails or phone numbers are present, but a contact form is available. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

K

Katholische Akademie der Erzdiözese Freiburg

katholische-akademie-freiburg.de

38

The Katholische Akademie der Erzdiözese Freiburg is a regional non-profit educational and cultural institution affiliated with the Catholic Archdiocese of Freiburg, Germany. It organizes interdisciplinary events and discussions on theology, philosophy, ethics, church matters, and social topics, targeting interested individuals and the broader community. The website reflects a professional and consistent brand presence with a focus on event promotion and educational content. Technically, the website is built on the Edith CMS platform, utilizing jQuery, Bootstrap, and Matomo analytics for tracking. Hosting is provided by w-commerce.de, with multiple authoritative nameservers ensuring domain stability. The site is mobile-optimized with good navigation and SEO practices, although performance is moderate. From a security perspective, the site enforces HTTPS and uses Matomo with cookie disable options, indicating some privacy awareness. However, it lacks explicit privacy and cookie policies, security headers, and incident response information, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is safe, trustworthy, and professionally maintained but would benefit from enhanced privacy compliance and security best practices to strengthen user trust and regulatory adherence.

hinsehen.net is a German-language online cultural and religious commentary platform operated by kath.de gGmbH and affiliated with Verein publicatio. It targets German-speaking audiences interested in Catholic culture, religion, and social issues across Germany, Austria, and Switzerland. The website offers articles, analysis, and newsletters focusing on Catholic and societal topics, positioning itself as a niche media outlet within the religious and cultural media sector. Technically, the site is powered by TYPO3 CMS and integrates modern web technologies including Google Analytics and Tag Manager for analytics, FontAwesome for icons, and Google Fonts for typography. The hosting is provided by Hetzner Online GmbH, a reputable German hosting provider. The website demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security posture is adequate but could be improved by enabling DNSSEC, adding security headers, and publishing formal security policies. Privacy compliance is basic with a cookie consent banner and a privacy policy page, but lacks detailed GDPR compliance indicators and data retention disclosures. No direct contact emails or phone numbers are published, which limits direct user engagement. Overall, the site is professional and trustworthy with moderate risk and room for security and compliance enhancements.

E

ELB LEARNING

cenariovr.com

53

CenarioVR is a specialized VR course authoring platform developed by ELB LEARNING, founded in 2017. It targets eLearning professionals and organizations seeking to create immersive VR training content without coding. The platform supports multiple VR devices and integrates xAPI tracking and analytics, positioning itself as an accessible and versatile tool in the VR education technology market. The website reflects a professional and consistent brand image with clear contact information and customer testimonials, indicating a mature business presence. Technically, the website is built on Webflow CMS and leverages modern web technologies including Google Analytics, Google Tag Manager, and Google reCAPTCHA Enterprise for security and marketing. Hosting appears to be on AWS infrastructure. The site is mobile optimized and supports a range of VR platforms, demonstrating good digital maturity. However, some technical improvements such as enabling DNSSEC and adding security headers could enhance security posture. Security-wise, the site uses HTTPS and has implemented reCAPTCHA on forms, but lacks explicit security policies and incident response contacts. No major vulnerabilities were detected, but the absence of privacy and cookie policies and consent mechanisms indicates compliance gaps, especially regarding GDPR. The WHOIS data is consistent with the business claims, showing a legitimate and stable domain registration. Overall, the website is trustworthy and professionally managed but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust.

C

Christof Brand Transporte

christof-brand-transporte.de

51

Christof Brand Transporte is a small, family-owned German transportation company specializing in specialized and heavy transport of construction machinery and equipment. Founded in 1994 with a transport division established in 2012, the company serves regional and European markets with a focus on flexibility and reliability. The website reflects a professional business presence with clear service offerings and contact information. Technically, the site is built on Joomla CMS using standard libraries such as jQuery, Bootstrap, and Leaflet.js for mapping, with hCaptcha integrated for form security. Security posture is solid with HTTPS and spam protection, though security headers and incident response policies are absent. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, but no terms of service or vulnerability disclosure policies are found. Overall, the website is trustworthy, well-structured, and suitable for its business purpose.

J

Jochum Betonlogistik

jochum-egelsbach.de

41

Jochum Betonlogistik is a German-based company specializing in concrete logistics, particularly transport using silo vehicles for dust and bulk goods. The company also offers pump services and mobile conveyor belts, serving construction companies, architects, and private builders. Their website reflects a well-established regional business with partnerships with major construction firms such as Hochtief and Strabag. The business model focuses on providing reliable and punctual logistics services for concrete and related materials. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Revolution Slider, indicating a moderate to good digital maturity. The site is mobile-optimized and SEO-friendly, though some performance and accessibility improvements could be made. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and a formal security or incident response policy. Overall, the security posture is solid but could be enhanced by adding security headers and formal policies. The domain registration data aligns well with the business claims, supporting legitimacy. No suspicious or malicious content was detected, and privacy compliance is basic but present. Strategic recommendations include improving security headers, configuring analytics properly, and publishing security and incident response policies to enhance trust and compliance.

B

BauMineral GmbH

baumineral.de

51

BauMineral GmbH is a medium-sized German company specializing in the marketing and supply of by-products from coal-fired power plants to the construction and building materials industry. As a 100% subsidiary of Uniper SE, it leverages about 50 years of experience and offers a range of products including coal fly ash fillers, fine fly ash, boiler sand, REA gypsum, and hydraulic binders. The company operates its own laboratory, logistics fleet, and mixing/preparation facilities, positioning itself as an integrated service provider in its sector. The website is professionally designed, well-structured, and provides clear contact information and product details, targeting industry professionals in energy and construction sectors.

H

Heidelberg Materials

heidelbergmaterials.de

71

Heidelberg Materials is a leading global construction materials company with a strong market presence in Germany, particularly as the market leader in cement and ready-mixed concrete. The company offers a broad portfolio including cement, concrete, aggregates (sand, gravel), and precast concrete elements, with a strong focus on sustainability and innovation such as their evoZero® Carbon Captured Net-Zero Cement. The website reflects a mature enterprise with comprehensive product information, customer engagement through events and newsletters, and a consistent brand identity. Technically, the site is built on Drupal 11, leveraging modern web technologies and analytics tools, with good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

M

Make AS

make.as

74

Make AS is a Norwegian technology company specializing in providing user-friendly newsletter and communication services, including email marketing, SMS, and automation tools. The company emphasizes local expertise, personal service, and secure data storage on Norwegian servers, positioning itself as a trusted partner for Norwegian businesses and organizations. Their market position is strengthened by certifications such as 'Made in Norway' and memberships in reputable Norwegian industry associations. Technically, the website is built on WordPress with modern plugins and frameworks, optimized for performance, SEO, and accessibility. Security posture is strong with HTTPS, cookie consent management, and integration of third-party services like Cloudflare and Intercom with privacy considerations. Overall, the website reflects a professional, secure, and privacy-conscious business with clear contact information and trust indicators.

S

Schweisstec Internationale Fachmesse für Fügetechnologie

schweisstec-messe.de

55

Schweisstec Internationale Fachmesse für Fügetechnologie is a specialized trade fair focused on the entire process chain of cold forming sheet metal processing and associated thermal or mechanical cutting, joining, and connection technologies. The event is held in Stuttgart, Germany, and targets professionals and companies in the manufacturing and metalworking sectors. It is positioned as an important international platform for industry networking, showcasing innovations, and disseminating knowledge. The website reflects a medium-sized business model centered on event organization and industry engagement. Technically, the website is built on WordPress with a modern tech stack including jQuery, Slider Revolution, WP Rocket for performance optimization, and Borlabs Cookie for privacy compliance. Hosting is provided by Anexia, as indicated by the nameservers. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Structured data and Open Graph metadata are well implemented, enhancing search engine visibility and social media integration. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms. However, it lacks explicit security headers such as Content-Security-Policy and does not publish a security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with cookie policies present but no visible privacy or terms of service pages. Overall, the security posture is good but could be improved with additional policies and headers. The risk assessment indicates a trustworthy and professional website with no signs of malicious activity or suspicious domain registration patterns. Strategic recommendations include publishing privacy and security policies, enhancing security headers, and improving accessibility. The website is safe for general audiences and serves its business purpose effectively.