Security Directory

B

BIC Plzeň, s.r.o.

bic.cz

10

BIC Plzeň, s.r.o. operates as a regional business and innovation center in Plzeň, Czech Republic, providing incubation, mentoring, funding support, and infrastructure rental to startups and technology-oriented companies. The organization supports early-stage ideas through to scaling businesses, offering tailored programs and international networking opportunities. Their market position is that of a key regional enabler for innovation and entrepreneurship, collaborating with universities, government, and industry partners. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Contact Form 7, employing Google Fonts and reCAPTCHA v3 for security. The site is mobile-optimized, SEO-friendly, and uses lazy loading for images, indicating a mature digital infrastructure. Performance is moderate with good accessibility and user experience. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, though additional HTTP security headers and published security policies would enhance trust. Privacy compliance is strong with visible GDPR-aligned privacy and cookie policies and consent mechanisms. Contact information is clearly presented, supporting business credibility. Overall, the website presents a professional and trustworthy front for BIC Plzeň, though the absence of WHOIS data reduces domain registration transparency. Strategic recommendations include improving security headers, publishing incident response contacts, and verifying domain registration details to strengthen trust and compliance.

P

PRAVIDLA SE ZMĚNILA

pravidlasezmenila.cz

9

PRAVIDLA SE ZMĚNILA is a small-scale creative and marketing-focused platform that provides space for creatives and marketers to advance their skills and knowledge. The website promotes events such as AI-related conferences, film festivals, and courses, targeting professionals interested in marketing and AI innovation. The site is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable technical infrastructure. Tracking tools like Google Analytics and Facebook Pixel are employed for user analytics and marketing purposes. Security posture is moderate with HTTPS enabled but lacks visible security headers and explicit security policies. The absence of WHOIS data and privacy policy pages reduces transparency and compliance confidence. Overall, the website is professional and content-rich but would benefit from enhanced security and privacy disclosures.

N

Nordic CAMPUS Berufsbildungswerk Bremen gGmbH

bbw-bremen.de

56

Nordic CAMPUS Berufsbildungswerk Bremen gGmbH is a well-established non-profit vocational training institution in Germany focused on educating and supporting young people with disabilities. With over 40 years of experience and multiple locations, it offers a broad range of training programs, personal and health support services, and fosters inclusion through strong partnerships and community engagement. The website reflects a professional and inclusive brand with comprehensive content and clear navigation. Technically, the website uses a custom or unknown CMS with a technology stack including jQuery and responsive design elements. Hosting is provided by a German ISP (Ewetel). The site is mobile-optimized and SEO-friendly but lacks some modern security headers. Cookie consent mechanisms are implemented, supporting GDPR compliance. Security posture is moderate with HTTPS enforced and email obfuscation in place, but missing explicit security headers and incident response contacts. No vulnerabilities or malware indicators were found. Overall, the site is trustworthy and professionally maintained, with room for security enhancements. The risk level is low, with recommendations to improve security headers, publish a security policy, and enhance incident response transparency to further strengthen trust and compliance.

R

RM

rm.com

73

RM is a UK-based leading supplier of technology and services tailored for the education sector, supporting a wide range of educational institutions from pre-school to higher education, including examination boards and government bodies. Their offerings encompass education technology, assessment solutions, broadband, VoIP, and support services, positioning them as a comprehensive provider in the education technology market. The website reflects a professional and consistent brand presence with clear navigation and extensive content targeting schools, teachers, and educational institutions globally. Technically, the site employs a modern tech stack including C#, jQuery, Google Analytics, and OneTrust for cookie consent, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement and use of reCAPTCHA, though some security headers and explicit policies are not evident in the provided data. The absence of WHOIS registration details limits domain trust verification but the overall digital footprint and related domains support legitimacy. Privacy compliance is partially addressed with cookie consent but lacks a clearly accessible privacy policy in the analyzed content. Overall, RM demonstrates a strong market position with room for improvement in transparency and security documentation.

The Verband für Sicherheit in der Wirtschaft Hessen (VSW) is a professional association serving as a key interface between government security agencies and the private sector in Germany, particularly in Hessen. It provides a platform for information exchange, networking, and professional development through seminars, events, and an expert pool. The organization collaborates closely with federal and state security bodies, enhancing its credibility and influence in the security domain. The website reflects a mature digital presence built on TYPO3 CMS, featuring modern web technologies and a responsive design that caters well to its professional audience. Security-wise, the site enforces HTTPS, uses GDPR-compliant cookie consent mechanisms, and integrates Google reCAPTCHA to protect forms. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the site is trustworthy, well-maintained, and aligned with its business mission.

P

Projekt Pilgerheiligtum

pilgerheiligtum.de

50

Projekt Pilgerheiligtum is a well-established non-profit religious initiative based in Germany, focused on promoting the pilgrimage of the Mater Ter Admirabilis image within Christian communities. With over 25 years of history and a network of thousands of pilgrimage images, it serves as a spiritual and community-building platform. The website offers rich content, multilingual support, and various services including newsletters, online prayer sessions, and a shop for religious materials. Technically, the site is built on WordPress using Elementor and WooCommerce, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Privacy compliance is strong, reflecting GDPR adherence. Overall, the site is professional, trustworthy, and well-positioned within its niche.

S

Schönstattbewegung Frauen und Mütter

s-fm.de

42

The Schönstattbewegung Frauen und Mütter website represents a small non-profit religious community focused on women and mothers within the Catholic Church in Germany. The organization provides spiritual support, events, publications, and community engagement. The website is well-structured, content-rich, and clearly targeted to its niche audience. The technical infrastructure is based on the concrete5 CMS platform, with standard web technologies such as jQuery and Bootstrap grid. The site is mobile-optimized and performs moderately well, though some modernization could improve performance and security. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and an outdated CMS version present potential risks. Privacy compliance is partially met with a privacy policy present but lacking cookie consent mechanisms. Contact is primarily via a web form, with no direct emails or phone numbers publicly listed. Overall, the site is trustworthy and professional but could benefit from enhanced security and privacy features.

The Schönstatt Familienbewegung Deutschland is a German non-profit organization focused on supporting families and couples through community events, spiritual engagement, and educational materials. Their website reflects a well-structured platform offering event information, media resources, and networking opportunities tailored to their target audience of families and young couples. Technically, the site is built on the Contao CMS platform, utilizing modern JavaScript libraries and a compliant cookie consent mechanism, hosted by a reputable German provider. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and active consent management. Overall, the website presents a trustworthy and professional image consistent with its mission and audience.

U

Unitus

unitus.it

56

The website www.unitus.it represents the official online presence of the Università degli Studi della Tuscia, a public university based in Italy. The site provides information about degree courses, research activities, and university life, targeting students, researchers, and the academic community. It holds a regional market position as an educational institution and offers key services related to higher education and research. Technically, the website is built on WordPress with multilingual support via WPML, utilizing common web libraries such as jQuery and DataTables. Google Analytics and Google Tag Manager are employed for user tracking and analytics. The site demonstrates moderate performance and good mobile optimization, with a professional design and clear navigation structure. Security-wise, HTTPS is enforced, and a cookie consent mechanism is implemented, indicating GDPR awareness. However, the absence of security headers and explicit security policies suggests room for improvement in security posture. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professionally maintained, though it lacks some compliance documentation such as privacy and terms of service pages. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility features.

I

INTERVISTA AG

intervista-ag.de

49

INTERVISTA AG operates as a specialized provider of sales automation and digitalization software solutions primarily targeting the insurance and finance sectors in Germany. Their offerings include consulting, software development, and operational services designed to enhance sales efficiency and digital transformation for their clients. The company positions itself as a partner for businesses seeking to outperform competitors through innovative technology solutions. Technically, the website is built on WordPress with modern plugins and frameworks such as Beaver Builder and Yoast SEO, indicating a mature digital infrastructure. The presence of tracking and analytics tools like Matomo and Leadinfo suggests an active approach to user engagement and lead generation, although privacy compliance mechanisms are lacking. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and explicit policies. Overall, the website is professional and content-rich but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

B

B-TA Soft

btasoft.hu

42

B-TA Soft is a Hungarian small technology company specializing in cloud-based services aimed at improving business workflows, communication, and efficiency. Their key offerings include business process support software (aMetszet), a sports career tracking application (MobilisSport), and comprehensive hosting services. The company targets local businesses and sports professionals, positioning itself as a niche provider of integrated cloud solutions. The website reflects a professional and consistent brand image with good design and mobile optimization, though it lacks comprehensive privacy and security disclosures. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and SumoMe for marketing and analytics, but does not employ advanced security headers or provide incident response contacts. The domain is well-established since 2015, consistent with the business profile, and no suspicious elements were detected. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.

S

Sign Research Foundation

signresearch.org

56

The Sign Research Foundation is a small non-profit organization founded in 2015, dedicated to advancing research and education on signage to build safer, accessible, and thriving communities. It serves a diverse audience including sign manufacturers, designers, planners, and city officials. The foundation collaborates with industry associations and planners to improve sign codes and urban wayfinding. Technically, the website is built on WordPress using Elementor and Yoast SEO, with Google Analytics for tracking. The site is well-structured, mobile-optimized, and accessible, though performance is moderate. Security posture is good with HTTPS and anonymized analytics, but lacks DNSSEC and security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Business credibility is high with clear contact information, social media presence, and trust signals such as testimonials and donation calls. Overall, the site is professional and trustworthy, with room for improvement in security headers and privacy compliance.

B

Bonn.digital GbR

digitalesbonn.de

71

Bonn.digital GbR is a small, regionally focused digital communication agency based in Germany, specializing in social media consulting, community management, and event services. Founded in 2013, the company targets businesses and institutions primarily in Bonn, offering expert guidance on digital communication strategies and event moderation. Their website is professionally designed, content-rich, and actively maintained with a blog featuring recent posts relevant to social media trends and digital events. Technically, the website is built on WordPress with WooCommerce and German Market plugins, indicating compliance with regional e-commerce regulations. The site uses modern web technologies including jQuery, FontAwesome, and WPBakery Page Builder. Performance and mobile optimization are good, though accessibility could be improved. Security posture is solid with HTTPS enabled and no obvious vulnerabilities, but some security headers are missing. Privacy compliance is partial; while a cookie consent mechanism is implemented, explicit privacy and terms of service pages were not found in the provided content. Contact information is available via phone and contact page, but no direct company email addresses are visible. Social media presence is strong, enhancing trust and outreach. Overall, Bonn.digital presents as a credible and professional digital agency with a good security baseline and active digital presence. Enhancing privacy documentation and security headers would further strengthen their posture.

T

Tourismuszentrale Fränkische Schweiz

fraenkische-schweiz.com

47

The website www.fraenkische-schweiz.com serves as the official tourism portal for the Fränkische Schweiz region in Bavaria, Germany. It provides comprehensive information on activities, accommodations, gastronomy, and events, targeting tourists and vacationers interested in this historic and scenic area. The site is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, it is built on the TYPO3 CMS platform and integrates modern JavaScript libraries and Google Analytics for tracking. Security measures include HTTPS and a cookie consent mechanism, though explicit security headers and detailed security policies are not evident. The absence of WHOIS registration data raises concerns about domain legitimacy, which should be verified to ensure full trust. Overall, the site is a reliable resource for regional tourism but would benefit from enhanced transparency in domain registration and security disclosures.

B

Bayreuth Marketing & Tourismus GmbH

bayreuth-tourismus.de

59

Bayreuth Marketing & Tourismus GmbH operates a comprehensive tourism website promoting Bayreuth, Germany, focusing on cultural attractions, events, and accommodations. The site targets tourists and visitors interested in exploring the region's heritage and leisure opportunities. It serves as a regional marketing authority with a strong digital presence and multilingual content to cater to international audiences. Technically, the website is built on WordPress with modern plugins and SEO tools, ensuring good performance, mobile optimization, and accessibility. Security measures include HTTPS, cookie consent management, and basic security headers, though there is room for improvement in advanced security policies and incident response transparency. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable resource for visitors and stakeholders.

T

TechSolutions Group N.V.

bayern.by

57

22Bet Deutschland is an online gambling and sports betting platform targeting German-speaking users. Operated by TechSolutions Group N.V. under a Curacao license, it offers a wide range of casino games, sports betting options, live casino, and esports betting. The platform provides bonuses and promotions to attract and retain users, with a focus on secure and fair gaming experiences. The website is built on WordPress and includes mobile-friendly features such as apps and APK downloads. Affiliate marketing is integrated via partner domains. While the site uses HTTPS and SSL encryption, it lacks explicit privacy and cookie policies, which are important for compliance and user trust. No direct contact information is visible, which may impact user support perception.

O

Oberfranken Offensiv e.V.

oberfranken.de

50

Oberfranken Offensiv e.V. is a regional non-profit association dedicated to promoting the development, innovation, and cultural richness of the Oberfranken region in Germany. The website serves as an information portal highlighting regional projects, events, and campaigns to foster community engagement and regional pride. It targets residents, businesses, and institutions interested in the region's growth and quality of life. The association positions itself as a key regional player with a focus on innovation and community collaboration. Technically, the website is built on the Weblication CMS platform and uses modern web technologies including JavaScript, jQuery, and Font Awesome. It employs Piwik/Matomo for analytics, indicating a preference for privacy-conscious tracking. The site is mobile-optimized with good SEO practices and a cookie consent mechanism compliant with GDPR. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and provides cookie consent controls but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's regional and organizational identity, supporting legitimacy. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could enhance its security posture and transparency by adding formal security policies and incident response information.

U

unimess GmbH

unimess.de

46

unimess GmbH is a small, established internet and advertising agency based in Ulm, Germany, with over 25 years of experience. The company specializes in internet presence creation, web design, CMS implementation, SEO, SEA, programming, online shops, app development, cloud solutions, and business consulting. Their market position is regional with a focus on delivering tailored digital marketing and technology solutions. Technically, the website employs modern front-end frameworks such as Bootstrap and jQuery, with additional libraries for animations and user experience enhancements. The use of Matomo analytics reflects a privacy-conscious approach. Security posture is moderate with no visible critical vulnerabilities, but lacks explicit security headers and published security policies. Privacy compliance is good with a comprehensive privacy policy but missing cookie consent mechanisms. Overall, the website is professional, well-branded, and trustworthy, though improvements in security transparency and compliance could enhance their posture.

A

Arctic Data Committee

arcticdc.org

48

The Arctic Data Committee (ADC) operates as a non-profit organization focused on coordinating Arctic data interoperability and standards. The website serves as an information hub for researchers and stakeholders interested in polar data, offering resources such as meeting archives, data products, and working groups. The organization appears well-established with a domain age of approximately 8 years, consistent with its operational history. Technically, the site is built on Joomla CMS using Bootstrap and jQuery, providing a moderately performant and mobile-optimized experience. However, the site lacks critical privacy and cookie policies, and no contact information is explicitly provided, which may hinder user trust and compliance with data protection regulations. Security posture is basic with HTTPS enabled but no DNSSEC or security headers detected. Google Analytics is used for minimal user tracking without visible consent mechanisms. Overall, the site is professional and trustworthy but would benefit from enhanced privacy, security, and contact transparency.

T

top farmplan

topfarmplan.de

63

top farmplan is a German-based digital agriculture office platform designed specifically for farmers. It offers a comprehensive suite of tools including email, document management, field record keeping, and contact management, enabling farmers to maintain oversight of their operations anytime and anywhere. The business operates primarily on a subscription SaaS model, targeting the agriculture sector in Germany, with a medium-sized company profile and a founding date around 2017. The website reflects a professional and consistent brand image with excellent content quality and user experience.

I

i.m.a - information.medien.agrar e.V.

landwirtschaftmachtschule.de

47

The website 'Landwirtschaft macht Schule' is an initiative by i.m.a - information.medien.agrar e.V. aimed at integrating agriculture into school education in Germany. It connects farmers with schools to provide practical and sustainable learning experiences, promoting awareness of regional food production and agricultural practices. The platform offers resources, training, and a network for teachers, farmers, and associations, positioning itself as a niche educational non-profit with a strong focus on sustainability and hands-on learning. Technically, the website is built on the MYOB CMS platform using modern frameworks such as UIkit and jQuery. It features responsive design, good navigation, and moderate performance. The site employs HTTPS with a cookie consent mechanism, ensuring GDPR compliance. However, it lacks some advanced security headers and explicit incident response or vulnerability disclosure information. From a security perspective, the site demonstrates good practices with no detected vulnerabilities or exposed sensitive data. The absence of tracking scripts and minimal user data collection aligns with privacy best practices. The WHOIS data is limited but consistent with the site's professional and educational nature, showing no suspicious patterns. Overall, the website is trustworthy, well-structured, and serves its educational mission effectively. Strategic improvements in security headers, accessibility, and transparency regarding security policies could further enhance its posture and user trust.

Nordisk KulturlandskabsForbund is a Nordic non-profit organization dedicated to promoting interest and sustainable use of the Nordic countries' cultural landscapes. The organization operates primarily through membership activities including seminars, excursions, publications, and an active website with forums and resources. The website is built on WordPress with a moderate technical infrastructure and uses common plugins for community engagement and email subscriptions. The site is well designed with good navigation and relevant content for its target audience of Nordic cultural and environmental professionals and enthusiasts. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and professionally maintained, serving a niche non-profit community effectively.

Norsk Havforskerforening is a Norwegian non-profit association dedicated to marine research and science. The organization primarily serves the Norwegian marine research community by organizing annual conferences, disseminating news, and providing membership services. The website is professionally maintained using WordPress and features content primarily in Norwegian, with some English posts. It targets marine researchers, students, and professionals interested in marine science. The association's market position is specialized and regional, focusing on education and non-profit sectors. Technically, the website uses common web technologies such as WordPress, jQuery, and Font Awesome, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks some security headers and visible privacy or cookie policies, indicating room for improvement in compliance and security best practices. The domain WHOIS data is not publicly available, suggesting privacy protection, which is justified for this type of organization. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

N

Norsk entomologisk forening

entomologiskforening.no

52

Norsk entomologisk forening is a Norwegian non-profit organization dedicated to promoting interest and study of entomology. The website serves as an information hub for members and enthusiasts, offering event announcements, educational content, and membership information. The organization targets hobbyists, researchers, and the general public interested in insects in Norway. Technically, the site is built on WordPress using Elementor and related plugins, providing a modern and responsive user experience with moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, which are compliance gaps. Overall, the site is professional and trustworthy but could improve privacy compliance and security best practices.

N

Nordic Society Oikos

nordicsocietyoikos.org

60

The Nordic Society Oikos is a well-established non-profit academic society dedicated to advancing ecology in the Nordic region and globally. It supports national ecological societies, publishes respected international journals, organizes conferences, and fosters a vibrant member community. The website reflects a professional and consistent brand with clear navigation and relevant content for ecologists and researchers. Technically, the site is built on Drupal 9 with modern libraries and frameworks, hosted likely by Oderland, and incorporates analytics tools with privacy-conscious settings such as IP anonymization. Security posture is solid with HTTPS and secure login forms, though improvements like enabling DNSSEC and adding security headers are recommended. Privacy compliance is partially met with a privacy policy present but lacks cookie consent mechanisms. Overall, the site is trustworthy, functional, and serves its academic audience effectively.

N

Norsk Biologforening

bio.no

51

Norsk Biologforening is a well-established Norwegian non-profit organization focused on biology education and community engagement. Founded in 1981, it serves a niche audience of biology professionals and enthusiasts through memberships, conferences, publications, and expert Q&A services. The website reflects a consistent brand and provides relevant content and contact information, supporting its credibility. Technically, the site is built on Joomla CMS with Gantry 5 framework and uses modern frontend libraries, offering a good user experience and mobile optimization. However, the site lacks visible privacy and cookie policies, security headers, and explicit security or incident response policies, indicating areas for compliance and security improvement. No blocking or WAF mechanisms were detected, and the domain age supports legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

U

Unitätsarchiv der Evangelischen Brüder-Unität Herrnhut

unitaetsarchiv.de

55

The Unitätsarchiv der Evangelischen Brüder-Unität Herrnhut is a specialized archival institution based in Germany, serving as the central archive for the worldwide Brüder-Unität and the European Continental Province. The website provides access to archival resources, restoration project information, public lectures, and publications. It targets researchers, historians, and community members interested in the Brüder-Unität heritage. The institution operates as a non-profit entity with a small organizational size and a focused niche in historical archival services. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and employs modern web technologies such as jQuery and FontAwesome. The site is mobile-optimized with good navigation and SEO practices, though hosting details and SSL configuration specifics are not provided. Cookie consent mechanisms are implemented, reflecting GDPR compliance. From a security perspective, the website shows basic best practices such as cookie consent and no visible sensitive data exposure. However, it lacks explicit security headers and incident response policies. No analytics or advertising scripts were detected, indicating minimal user tracking and a privacy-conscious approach. Overall, the website is professional, trustworthy, and well-suited for its archival mission. Recommendations include enhancing security headers, publishing a security policy, and clarifying SSL configurations to improve security posture and user trust.

E

Evangelische Brüder-Unität Herrnhuter Brüdergemeine

herrnhuter-spenden.de

57

The website www.herrnhuter-spenden.de serves as a donation portal for the Evangelische Brüder-Unität Herrnhuter Brüdergemeine, a religious non-profit organization based in Germany. It facilitates philanthropic support for various charitable projects including educational, health, environmental, and social initiatives. The site prominently features affiliated institutions such as Herrnhuter Missionshilfe and the Graf-Zinzendorf-Stiftung, positioning itself as a trusted platform for donors interested in religious and social causes. Technically, the website is built on TYPO3 CMS, leveraging Bootstrap and FontAwesome for responsive and accessible design. The site demonstrates good mobile optimization and clear navigation, with a cookie consent mechanism indicating GDPR compliance. However, no explicit security headers or incident response policies are published, suggesting room for improvement in security transparency. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML content. No WAF or blocking mechanisms are detected, and no vulnerabilities or tracking scripts are evident. The WHOIS data aligns well with the website's business claims, enhancing trustworthiness. Overall, the security posture is solid but could benefit from enhanced header configurations and published policies. The overall risk assessment is low, with the site presenting a professional, trustworthy, and compliant presence suitable for its non-profit mission. Strategic recommendations include implementing security headers, publishing incident response and vulnerability disclosure policies, and enhancing accessibility features to further strengthen the platform's security and compliance posture.

I

IfT Institut für Talententwicklung GmbH

parentum.de

52

The website parentum.de is a professionally designed platform operated by IfT Institut für Talententwicklung GmbH, focusing on organizing career fairs for parents and youth in Germany. It serves as an informational and event promotion site, providing details about upcoming parentum career fairs across various German cities. The site leverages TYPO3 CMS and modern web technologies, ensuring a good user experience with mobile optimization and clear navigation. Privacy and cookie policies are well implemented with GDPR compliance, supported by Cookiebot for consent management. Security posture is adequate with HTTPS enforced, though additional security headers and incident response information could enhance trust. The domain registration and hosting details are consistent and trustworthy, with no signs of suspicious activity. Social media presence on TikTok and Instagram supports outreach and engagement. Overall, the site is a reliable educational event platform with a solid technical foundation and good privacy practices.

The website 'Ehrenamt Evangelisch Engagiert' serves as an informational and community platform supporting voluntary engagement within the Evangelical Lutheran Church in Bavaria. It provides news, resources, and coordination services for volunteers and church members, positioning itself as a niche non-profit entity focused on church-related volunteerism. The site is professionally designed with consistent branding and clear navigation, targeting German-speaking church volunteers and coordinators. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries such as Leaflet for maps and Matomo for privacy-conscious analytics. The site is mobile-optimized and performs moderately well, with basic accessibility features. Security posture is solid with HTTPS enforced and minimal cookies used, although security headers are not explicitly detected. Privacy compliance is good, with a clear cookie banner and privacy policy in German. No critical vulnerabilities or blocking mechanisms were detected. The WHOIS data aligns with the website's organizational claims, showing consistent domain registration and DNS management. Contact information is transparent and professional, including official church email and phone numbers. Social media presence is limited to Facebook. Overall, the website demonstrates a mature digital presence for a small non-profit church entity, with good security and privacy practices but room for improvement in security headers and incident response disclosures.

Vogel Software GmbH is a small, established German software company specializing in custom software development, particularly in Warenwirtschaft (inventory management) and Produktionsplanung (production planning) systems using Visual FoxPro and .NET technologies. Founded in 1989, the company offers tailored software solutions, coaching, and porting services, targeting SMEs in various sectors including trade, industry, and engineering firms. Their flagship products include vmAuftrag and the StarLib C# framework. The website reflects a professional and consistent brand image with detailed business and contact information, supporting their market credibility. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google reCAPTCHA for form security. Hosting is managed via nshost2.de name servers, and the site includes analytics via Piwik. While the site is mobile-optimized and SEO-friendly, some security best practices like security headers (CSP, HSTS) are missing, and no cookie consent mechanism is implemented despite cookie usage. From a security perspective, the site uses HTTPS and protects its contact form with reCAPTCHA, but lacks explicit security policies and incident response information. The WHOIS data confirms the domain's legitimacy and long-standing registration consistent with the company's history. Overall, the site is trustworthy, safe, and professionally maintained, though improvements in security headers and privacy compliance could enhance its posture. The risk level is low, with no signs of malicious content or blocking mechanisms. Strategic recommendations include implementing security headers, adding cookie consent, and publishing security policies to strengthen compliance and trust.

F

Frankfurt Zoological Society

fzs.org

69

Frankfurt Zoological Society is a well-established non-profit organization dedicated to wildlife and ecosystem conservation, focusing on protected areas and wilderness preservation. Founded in 1858, it operates internationally with projects in 18 countries and maintains a strong presence through partnerships and subsidiaries such as the Frankfurt Zoological Society – U.S. and Zoo Frankfurt. The organization relies on donations, sponsorships, and memberships to fund its conservation efforts and engages a broad audience including conservationists, donors, and the general public. Technically, the website is built on WordPress using modern plugins like Contact Form 7 and Relevanssi Live Search, with a moderate performance profile and good mobile optimization. The site employs HTTPS and domain management best practices but lacks DNSSEC and explicit security headers, which could be improved. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of security headers and incident response information suggests room for enhancement. The domain registration is consistent with the organization's history, registered since 1997 with a reputable registrar, supporting high legitimacy. Overall, the website is professional, trustworthy, and content-rich, serving its audience effectively. Strategic improvements in security headers, cookie consent, and explicit security policies would further strengthen its security and compliance posture.

S

SympH2ony

symph2ony.eu

69

SympH2ony is a business focused on providing hydrogen-based fleet mobility solutions aimed at decarbonizing vehicle fleets through clean hydrogen technologies. The company offers a comprehensive one-stop-shop approach including zero-emission vehicles, hydrogen refueling infrastructure, hydrogen supply with optional on-site production, and operational services tailored to customer needs. Backed by reputable global companies Messer and Toyota Tsusho Europe, SympH2ony positions itself as a strategic partner for fleet operators transitioning to zero emissions. The website is professionally designed, uses modern web technologies including Liferay CMS and HubSpot marketing tools, and complies with GDPR through clear privacy and cookie policies. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. WHOIS data is privacy protected, which is typical for EU domains, and does not detract from the legitimacy of the business. Overall, the website presents a credible and professional front for a medium-sized enterprise in the energy and transportation sectors.

E

EMB Energieversorgung Miltenberg-Bürgstadt GmbH & Co. KG

we-are-energy.de

54

EMB Energieversorgung Miltenberg-Bürgstadt GmbH & Co. KG is a regional energy and utility provider based in Miltenberg, Germany. The company offers a range of services including electricity, water, gas supply, parking, e-mobility, and heat supply, positioning itself as a sustainable and customer-focused provider in its local market. The website reflects a professional and comprehensive digital presence with clear business information, active social media engagement, and customer service portals.

Elektro Braun GmbH is a medium-sized German company specializing in electrical engineering products and services, targeting the electrical trade and industrial sectors. Their offerings include e-mobility, renewable energy, intelligent building technology, and related services, positioning them as a comprehensive provider in the energy and manufacturing sectors. The website reflects a professional and consistent brand image with clear navigation and good content relevance. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and Modern Events Calendar Lite, hosted likely on Telekom infrastructure. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though security headers could be improved. No critical vulnerabilities or security issues were detected. Privacy compliance is strong with a comprehensive privacy policy and cookie consent banner, indicating GDPR adherence. Contact information is primarily via contact forms; no direct emails or phone numbers were found in the analyzed content. Overall, the website presents a trustworthy and professional digital presence with room for enhancement in security headers and explicit security policies. The domain WHOIS data aligns well with the website's claims, supporting legitimacy.

R

Richter+Frenzel GmbH + Co. KG

richter-frenzel.de

55

Richter+Frenzel GmbH + Co. KG operates as a large-scale wholesaler specializing in sanitary and building technology products, serving private customers, craftsmen, and object business clients primarily in Germany. The company maintains a strong market position with a clear business model focused on wholesale distribution and retail showroom services. Their website reflects a professional and consistent brand image, targeting a broad audience including private consumers and trade professionals. Technically, the website is built on TYPO3 CMS and leverages modern JavaScript libraries and frameworks such as jQuery, Bootstrap, and Usercentrics for consent management. Hosting infrastructure appears reliable, with DNS nameservers linked to Deutsche Telekom, indicating a stable and professional hosting environment. The site is mobile-optimized and demonstrates good SEO practices with comprehensive metadata and structured data. From a security perspective, the website enforces HTTPS and integrates a GDPR-compliant cookie consent mechanism. However, it lacks explicit security headers and does not provide a public security policy or incident response contact, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website presents a low risk profile with strong business credibility and privacy compliance. Strategic enhancements in security policy transparency and header implementation would further strengthen their security posture.

B

Bundesverband des Schornsteinfegerhandwerks

schornsteinfeger.de

65

The Bundesverband des Schornsteinfegerhandwerks is a German national trade association representing the chimney sweep industry. The website provides comprehensive information about the trade, including services, regulations, partner organizations, and regional contact points. It targets homeowners, industry professionals, and partners with a focus on safety, environmental protection, and energy efficiency. Technically, the site is built on Drupal 10 with modern frontend technologies and integrates Matomo analytics and YouTube video content with a cookie consent mechanism. Security posture is good with HTTPS and cookie management, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

S

SHK Innung Aschaffenburg–Miltenberg

shk-aschaffenburg.de

49

SHK Innung Aschaffenburg–Miltenberg operates as a regional professional guild specializing in sanitary, heating, and air conditioning services within the Aschaffenburg and Miltenberg regions of Germany. The website serves as an information portal and member resource, providing industry news, contact details, and regulatory compliance information. The business model focuses on supporting local professionals and companies in the sector, positioning itself as a trusted regional association. Technically, the website is built on WordPress, utilizing common plugins such as Real Cookie Banner for privacy compliance and Bold Page Builder for content management. The site is hosted via DomainControl (GoDaddy), employs HTTPS, and demonstrates moderate performance with good mobile optimization. SEO and accessibility are adequately addressed, though some improvements in security headers could enhance the technical posture. From a security perspective, the website enforces HTTPS and includes a cookie consent mechanism aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a dedicated security policy or incident response information suggests room for maturity in security governance. Overall, the site maintains a good security posture suitable for its business scope. The overall risk assessment indicates a low risk profile with strong compliance and trust indicators. Strategic recommendations include enhancing security headers, formalizing incident response procedures, and maintaining regular updates to WordPress and plugins to mitigate potential vulnerabilities.

L

Landratsamt Miltenberg

landkreis-miltenberg.de

61

Landkreis Miltenberg's official website serves as a comprehensive portal for residents and stakeholders, providing current news, administrative services, and information about the local government. The site is well-structured with clear navigation and accessibility features, reflecting a mature digital presence for a public sector entity. The content focuses on public administration, social services, environmental protection, and community engagement, targeting local citizens and businesses. Technically, the site uses common web technologies such as jQuery, Revolution Slider, and accessibility plugins, hosted on professional infrastructure with secure HTTPS connections. Security posture is solid with no evident vulnerabilities or exposed sensitive data, though formal security policies and incident response contacts are not explicitly published. Privacy compliance is strong, with GDPR-aligned cookie consent and privacy policies. Overall, the website demonstrates a high level of professionalism and trustworthiness appropriate for a government institution.

株

株式会社ZEエナジー

ze-energy.net

47

株式会社ZEエナジー is a Japanese company specializing in biomass energy solutions aimed at achieving a sustainable society. Their core business involves developing and operating biomass power generation systems that convert waste and thinning wood into energy through carbonization and gasification processes. The company positions itself as an environmental consulting group focused on renewable energy and waste management, targeting enterprises and government bodies concerned with environmental issues. Their product lineup includes various biomass gasification and carbonization devices, supported by consulting and service offerings. The website is professionally designed, bilingual (Japanese and English), and provides comprehensive company and contact information, reflecting a credible and established business presence since 2011. Technically, the website is built on WordPress CMS, utilizing modern libraries such as jQuery, Bootstrap 5, Slick Carousel, and Font Awesome 6. It employs Google Analytics for user tracking and is hosted under a registrar known for domain services in Japan. The site is mobile-optimized with good SEO practices but lacks some advanced accessibility features. Performance is moderate, with no critical technical debt observed. From a security perspective, the site uses HTTPS with a valid SSL certificate, ensuring encrypted communications. However, it lacks DNSSEC and security headers like Content-Security-Policy or X-Frame-Options, which are recommended for enhanced protection. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is partial; a privacy policy is present, but no cookie consent mechanism or GDPR-specific indicators were found. Incident response contacts and vulnerability disclosure policies are absent, representing areas for improvement. Overall, the website demonstrates a solid business credibility and technical foundation with room for security and privacy enhancements. The risk profile is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include implementing DNSSEC, adding security headers, deploying cookie consent tools, and publishing incident response information to strengthen trust and compliance.

M

Maine Energy Systems (MESys)

maineenergysystems.com

53

Maine Energy Systems (MESys) is a specialized energy company focused on manufacturing and distributing fully-automated wood pellet boilers and furnaces, along with bulk wood pellet delivery services primarily in the Northeastern United States and North America. The company positions itself as a sustainable and financially beneficial alternative heating solution provider, targeting residential, commercial, and industrial customers. Their website reflects a mature digital presence with a professional design, clear navigation, and comprehensive product information, supported by customer testimonials and a certified dealer network. The business model combines product sales with fuel delivery, supported by training and installer resources.

Wifotek is a Finnish company specializing in renewable energy heating solutions, including pellet boilers, wood gasification boilers, and solar energy packages. Established in 2006, the company positions itself as a provider of durable, long-lasting heating systems with minimal maintenance needs. Their business model focuses on product sales and expert service, targeting residential customers seeking economical and sustainable heating options. The website is professionally designed using WordPress with modern plugins and SEO tools, providing clear navigation and comprehensive product information. Contact details and privacy compliance mechanisms are well implemented, including cookie consent and privacy policy pages in Finnish. Security posture is good with HTTPS enforced and domain registration stable, though DNSSEC is not enabled and no explicit security or incident response policies are published. Overall, the website reflects a credible and trustworthy business with a solid digital presence.

H

HOME OF LOGISTICS

home-of-intralogistics.de

45

HOME OF LOGISTICS is a German-language industry portal focused on logistics, intralogistics, and autonomous transport. Operated by DVS Media, it provides news, event information, and advertising services targeted at logistics professionals and companies. The website demonstrates a solid market position as a niche media platform with consistent branding and a professional content offering. Technically, the site uses modern web technologies including JavaScript libraries, a consent management system, and Google Analytics 4 for tracking, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and CSRF protections, though security headers and explicit policies could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, with no signs of malicious or adult content.

H

HOME OF STEEL

home-of-steel.de

45

HOME OF STEEL is a German-language online portal dedicated to the steel industry, providing free access to specialized information, news, product and company listings, and event details. The platform targets companies, professionals, and interested parties within the steel sector, positioning itself as a reputable media and information hub supported by DVS Media. The website demonstrates a professional design with consistent branding and a clear navigation structure, including integration with partner portals and social media presence on LinkedIn. Technically, the site uses modern web technologies including JavaScript libraries, a consent management system, and Google Analytics 4 for user tracking, ensuring GDPR compliance through explicit cookie consent mechanisms. Security-wise, the site enforces HTTPS, includes CSRF tokens, and uses a consent manager, but lacks explicit security headers and published security policies or incident response contacts. WHOIS data indicates a legitimate and consistent domain registration with no privacy protection, supporting the site's credibility. Overall, the website is well-maintained, secure, and compliant with privacy regulations, serving as a trusted resource for the steel industry.

H

HOME OF WELDING

home-of-welding.com

51

Home of Welding is a specialized media platform serving the welding and manufacturing industries, offering news, product information, and event coverage primarily targeting industry professionals in Germany and internationally. The website demonstrates a professional digital presence with a consistent brand and active social media channels. Technically, the site uses modern web technologies including JavaScript libraries and a consent management system, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and CSRF protections, though the absence of security headers and WHOIS transparency are areas for improvement. Overall, the site is trustworthy and well-positioned in its niche, but domain registration opacity slightly reduces confidence.

Questwärts GmbH is a specialized education and training provider focusing on personal development and workforce training, particularly for the chemical industry and related sectors. Their offerings include open seminars, inhouse seminars, webinars, and business coaching aimed at HR professionals, managers, trainers, and apprentices. The company positions itself as a niche player with a strong emphasis on practical and legal aspects of workforce development. Technically, the website is built on the Contao CMS with modern frameworks like Bootstrap and jQuery, providing a responsive and accessible user experience. Security posture is solid with HTTPS, CSRF protection, and cookie consent mechanisms, though some advanced security headers and policies are missing. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

M

Militzer & Münch Group

mumnet.com

53

Militzer & Münch Group is a well-established global logistics and transportation company specializing in freight forwarding, warehousing, and supply chain management services. The company targets businesses requiring comprehensive logistics solutions and maintains a professional online presence with multilingual support. Their market position is that of a large, international logistics provider headquartered in Germany. The website is built on WordPress using modern page builder technologies, indicating a mature digital infrastructure. Performance and mobile optimization are good, though accessibility could be improved. Security posture is solid with HTTPS and security headers implemented, but lacks dedicated security and incident response documentation. Privacy and cookie policies are present and GDPR compliant, reflecting attention to regulatory requirements. Overall, the website is professional and trustworthy, but the absence of WHOIS data raises some concerns about domain registration legitimacy.

N

Newbie

newbie-academy.eu

42

The NEWBIE website represents a European agriculture innovation network focused on supporting new entrants and successors in farming through business model development and knowledge dissemination. The platform connects various stakeholders including researchers, advisors, and regional actors to foster sustainable agricultural entrepreneurship. The site is professionally designed using WordPress with modern plugins and SEO optimizations, reflecting a moderate to good level of digital maturity. Security posture is adequate with HTTPS and secure forms, but lacks advanced security headers and explicit privacy and cookie policies, indicating room for compliance improvement. Overall, the site is trustworthy and serves a niche audience effectively, though enhancing privacy transparency and security policies would strengthen its risk profile.

Admoderate is a specialized digital brand development agency based in Germany, focusing on medium-sized businesses and agencies. They offer services including brand creation, corporate website design, and digital media conception with over 10 years of experience. The company positions itself as a reliable partner for digital growth in the mid-market segment and is part of the queo Gruppe, enhancing its market credibility. Technically, the website is built on WordPress using Elementor and optimized with Yoast SEO and WP Rocket, ensuring fast performance and excellent mobile responsiveness. Security measures include HTTPS enforcement, content security policy monitoring, and cookie consent management, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates a strong professional presence with good SEO and privacy compliance, but could improve transparency on security and vulnerability disclosures.