Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,190001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
63,851–63,900 of 99,067
- RRegenbogenschule Steinfurt
regenbogenschule-steinfurt.de
Education · Germany
67Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Regenbogenschule Steinfurt is a small primary educational institution located in Steinfurt-Borghorst, Germany. The website serves as an informational portal for parents, children, and the local community, offering details about school activities, events, and contact information. The school provides key services including primary education, after-school care, and a communication platform for its community. The website is built on a CMS platform tailored for administrative portals, utilizing technologies such as jQuery and Nivo Slider for interactive elements. While the site is functional and accessible, it exhibits basic design and limited mobile optimization. Security measures are minimal, with no advanced headers or incident response policies visible, though GDPR compliance and cookie consent mechanisms are implemented. Overall, the website reflects a modest digital maturity appropriate for a small educational institution but would benefit from enhanced security and technical improvements.
- GGemeindeverwaltung Herrischried
herrischried.de
Government · Germany
67Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The website www.herrischried.de serves as the official online presence of the municipal government of Herrischried, Germany. It provides comprehensive information about the community, local government services, public announcements, tourism, and events. The site targets residents, local officials, and visitors, offering a broad range of municipal and tourism-related content. The business model is that of a public sector entity focused on community engagement and service delivery. Technically, the website employs a modern technology stack including Bootstrap, jQuery, and Nivo Slider, hosted likely on German infrastructure associated with verwaltungsportal.de. The site is mobile-optimized, accessible, and performs moderately well. It uses HTTPS and implements cookie consent mechanisms, reflecting a good level of digital maturity. From a security perspective, the site enforces HTTPS and includes cookie consent but lacks explicit security headers and a published security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a clear privacy policy and GDPR adherence. Overall, the website is trustworthy, professional, and safe for general audiences. It effectively supports the municipality's communication and service goals. Strategic improvements could include enhanced security headers and explicit incident response details to further strengthen security posture.
Förderverein für regionale Entwicklung e.V.digitale-gemeinschaft.de
Government · Germany
65Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The website www.digitale-gemeinschaft.de represents the Förderverein für regionale Entwicklung e.V., a small non-profit organization based in Germany that offers a subsidized app solution for community groups such as municipalities, tourism sectors, associations, and church communities. The app focuses on improving communication through push notifications, event management, directories, and multimedia galleries. The business model emphasizes cost-effective digital transformation with permanent subsidies and low monthly fees, positioning itself as a niche provider in the digital community app market. Technically, the website is built on a CMS platform (verwaltungsportal), uses modern web technologies like jQuery and Bootstrap, and is hosted with domain control services. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses SSL encryption with servers located in Germany, but lacks explicit security headers and formal security policies. Privacy compliance is addressed with a privacy policy and cookie consent mechanism, though no terms of service or vulnerability disclosure policies are found. Overall, the site is trustworthy and professional, with clear contact information and support channels.
Förderverein für regionale Entwicklung e.V.zeiterfassung-pflicht.de
Government · Germany
70Medium
NIS2 25 · GDPR 55
NIS2 25 · GDPR 55
The website www.zeiterfassung-pflicht.de is operated by the Förderverein für regionale Entwicklung e.V., offering a comprehensive digital time tracking solution tailored primarily for German public sector organizations, SMEs, and healthcare/social service providers. The platform supports multiple devices including Windows, Android, iOS, and macOS, and provides modules for time tracking, vacation, sick leave, absences, and shift planning. The business model is SaaS-based with a strong emphasis on compliance with German labor laws and GDPR. The site features user testimonials and references that enhance credibility. Technically, the website uses a modern tech stack including jQuery, Material Design Lite, and slick carousel components, hosted on infrastructure consistent with the domain registration. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and captcha protection on forms, though some security headers could be improved. Privacy compliance is well addressed with a detailed privacy policy and cookie consent mechanism. Overall, the site presents a professional and trustworthy digital presence with no signs of malicious activity or content safety concerns. The domain registration aligns well with the business entity, supporting legitimacy. However, the absence of explicit security policies and incident response contacts is a minor gap. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party components.
Förderverein für regionale Entwicklung e. V.mobile-mitarbeiter-kommunikation.de
Government · Germany
74Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
The website www.mobile-mitarbeiter-kommunikation.de presents the momikom Mitarbeiter-App, a mobile employee communication platform designed primarily for small to medium organizations and public sector entities in Germany. The app offers a free basic package with essential communication tools such as messaging, event management, galleries, and contact lists, complemented by modular paid extensions including chat, digital time tracking, and document sharing. The business model is SaaS-based, targeting sectors like healthcare, social services, crafts, companies, and municipalities. The site is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content including testimonials and detailed feature descriptions. Technically, the website leverages a modern tech stack including jQuery, Material Design Lite, and slick carousel components, hosted on a German ISO 27001-certified environment ensuring compliance with strict data protection standards. The site uses HTTPS with good SSL configuration and implements GDPR-compliant privacy and cookie policies. Contact information is transparent and includes a contact form, phone number, email, and physical address. No security challenges or WAF blocks were detected, and no critical vulnerabilities were found in the visible content. Security posture is strong with ISO 27001 certification, granular access rights management, SSL encryption, and regular security updates. However, the site lacks a published security.txt file and explicit incident response contact details, which could be improved. Privacy compliance is robust with clear policies and consent mechanisms. The business credibility is supported by trust signals such as certifications, testimonials, and transparent contact details. Overall, the website scores well across content quality, technical implementation, security, privacy compliance, and business credibility, making it a trustworthy and professional platform for mobile employee communication. Strategic recommendations include publishing vulnerability disclosure information, enhancing security headers, and maintaining ongoing audits of third-party libraries to sustain security and compliance standards.
- VVerwaltungsgemeinschaft Oberes Sprottental
vg-sprottental.de
Government · Germany
59Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
The Verwaltungsgemeinschaft Oberes Sprottental website serves as the official digital portal for a local government administrative community in Germany. It provides comprehensive information and services for its member municipalities, including administrative tasks, contact details, news updates, and an online appointment booking system for the residents. The site is well-structured, professionally designed, and targets local citizens seeking municipal services and information. Technically, the website employs a specialized CMS platform tailored for German municipal administrations, utilizing common JavaScript libraries such as jQuery and Nivo Slider for interactive elements. The site is mobile-optimized and accessible, with good SEO practices and a cookie consent mechanism that complies with GDPR requirements. From a security perspective, the site enforces HTTPS and implements cookie consent with detailed cookie categorization. However, it lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected, indicating a solid security posture for a government website. Overall, the website is trustworthy, compliant with privacy regulations, and provides a positive user experience. Strategic improvements could focus on enhancing security headers and publishing formal security policies to further strengthen trust and compliance.
- AAmt Recknitz-Trebeltal
recknitz-trebeltal.de
Government · Germany
65Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Amt Recknitz-Trebeltal is a regional government administrative body in Germany providing a range of public services including citizen administration, tourism information, and local governance. The website serves residents and visitors with information on administration, events, and community resources. The digital infrastructure is based on a specialized Verwaltungsportal CMS with modern frontend technologies like jQuery and Material Design Lite, offering a moderate performance and basic mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security headers and incident response disclosures. Overall, the site is trustworthy, professional, and compliant with GDPR requirements.
Verwaltungsgemeinschaft Heldburger Unterlandvg-heldburgerunterland.de
Government · Germany
65Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
The Verwaltungsgemeinschaft Heldburger Unterland website serves as the official digital presence of a local government administrative community in Germany. It provides residents and visitors with comprehensive information on public administration, citizen services, tourism, events, and job opportunities. The site targets local citizens and stakeholders, offering essential services such as online appointment booking and access to official forms. The business model is focused on government service delivery and public information dissemination, positioning itself as a trusted regional authority. Technically, the website employs a moderate technology stack including jQuery, slick carousel, and Nivo Slider, integrated within a CMS environment likely provided by verwaltungsportal.de. The site demonstrates good mobile optimization, accessibility, and SEO practices, with clear navigation and structured content. Performance is moderate, with no significant technical debt or errors detected. From a security perspective, the site enforces HTTPS and implements a detailed cookie consent mechanism aligned with GDPR requirements. However, it lacks explicit security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were found. Privacy compliance is strong, with clear privacy and cookie policies. The absence of analytics and tracking tools further enhances privacy. Overall, the website is a well-maintained, trustworthy government portal with a strong focus on user privacy and accessibility. The risk profile is low, with recommendations to enhance security headers and publish incident response contacts to further improve security posture.
- VVerwaltungsgemeinschaft Hainich Werratal
vg-hainich-werratal.de
Government · Germany
66Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
The Verwaltungsgemeinschaft Hainich Werratal website serves as the official digital portal for a local government administrative community in Germany. It provides residents and visitors with access to municipal services, news, event information, and resources such as online appointment booking and downloadable forms. The site targets local citizens and stakeholders, positioning itself as a trusted source of regional administrative information and services. Technically, the website leverages a modern technology stack including jQuery, Bootstrap, Material Design Lite, and specialized plugins like Nivo Slider and Portuna Fancybox. It is hosted on a platform tailored for German municipal websites (verwaltungsportal.de), ensuring integration with local government systems. The site is mobile optimized, accessible, and performs moderately well, with clear navigation and structured content. From a security perspective, the site enforces HTTPS and implements a detailed cookie consent mechanism compliant with GDPR. While no advanced security headers or incident response policies are published, the site uses session management best practices and Captcha protections for unusual user behavior. No vulnerabilities or suspicious domains were detected, indicating a solid security posture for a government portal. Overall, the website is a reliable, professional, and compliant government resource with good content quality and technical implementation. Strategic improvements could include publishing explicit security policies, incident response contacts, and enhancing security headers to further strengthen trust and compliance.
- GGemeinde Kraftsdorf
kraftsdorf.de
Government · Germany
66Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
The website www.kraftsdorf.de serves as the official online presence of the Gemeinde Kraftsdorf, a local government municipality in Germany. It provides residents and visitors with essential information about municipal administration, citizen services, event calendars, and public announcements. The site targets local community members and stakeholders seeking government-related information and services. The business model is that of a public sector entity focused on governance and community engagement. Technically, the website is built on a specialized German municipal CMS platform (verwaltungsportal.de) and employs modern web technologies such as jQuery, Material Design Lite, and Nivo Slider for interactive and responsive user experience. The site demonstrates good mobile optimization, accessibility, and SEO practices, although hosting provider details are not explicitly identified. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism with clear categorization and retention policies. No critical vulnerabilities or exposed sensitive data were detected. However, security headers are not explicitly present, and no published security or incident response policies were found, indicating room for improvement in formal security governance. Overall, the website is trustworthy, professional, and compliant with GDPR requirements. It effectively serves its purpose as a municipal information portal with a good balance of usability and privacy. Strategic recommendations include enhancing security headers, publishing incident response information, and maintaining up-to-date third-party libraries to strengthen security posture further.
Stadt Wilkau-Haßlauwilkau-hasslau.de
Government · Germany
62Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
Stadt Wilkau-Haßlau operates an official municipal website providing comprehensive information and services to its citizens and visitors. The site offers access to administrative services such as appointment booking for the residents' registration office and registry office, current news, official announcements, and community engagement tools like the Bürgermelder for reporting issues. The website is positioned as a local government portal serving the Wilkau-Haßlau community in Germany, focusing on transparency and accessibility. Technically, the website leverages a CMS platform provided by verwaltungsportal.de, utilizing modern web technologies including jQuery, Material Design Lite, and accessibility tools like Eye-Able. The site is hosted on infrastructure associated with Deutsche Telekom, ensuring reliable performance and security. The website is mobile-optimized and includes SEO best practices, cookie consent management, and accessibility features. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms compliant with GDPR. While no explicit security policy or incident response information is published, the site uses CAPTCHA for suspicious activity and avoids exposing sensitive data. Security headers could be improved, and publishing a vulnerability disclosure policy would enhance trust. Overall, the website presents a trustworthy, professional, and user-friendly portal for municipal services. It demonstrates good compliance with privacy regulations and accessibility standards, making it a reliable resource for its target audience.
Gemeinde Nessetalgemeinde-nessetal.de
Government · Germany
62Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
Gemeinde Nessetal is a municipal government entity serving a small community in the Landkreis Gotha, Thüringen, Germany. The website provides comprehensive information about local administration, services, events, and tourism, targeting residents and visitors. The site is built on a specialized CMS platform (verwaltungsportal.de) using modern web technologies and offers a good user experience with mobile optimization and accessibility features. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the site is trustworthy and professionally maintained, reflecting the municipality's official presence online.
- SStadt Adorf/Vogtl.
adorf-vogtland.de
Government · Germany
63Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
Stadt Adorf/Vogtl. operates a municipal government website serving local citizens and tourists with information about the town, services, events, and contact details. The site positions itself as a regional hub for community engagement and tourism promotion within the Vogtlandkreis region of Germany. The business model is public administration with a focus on local government services and community outreach. Technically, the website uses legacy JavaScript libraries such as jQuery 1.6.2 and Prototype.js, indicating a need for modernization to improve security and performance. The site is built on the Plone CMS platform, which is known for stability but requires updates to its components. Security posture is moderate; HTTPS is used, and a cookie consent banner is implemented, but outdated libraries and missing security headers present vulnerabilities. Privacy compliance is good with a clear cookie policy and privacy policy in German, aligned with GDPR requirements. Contact information is transparent and professional, enhancing business credibility. Overall, the website is functional and trustworthy but would benefit from technical and security improvements.
Gemeindeverwaltung Ebersbachgemeinde-ebersbach.de
Government · Germany
58Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
The website www.gemeinde-ebersbach.de serves as the official online presence of the municipal government of Ebersbach, Germany. It provides residents and visitors with access to local government services, news, event information, and administrative contacts. The site is well-structured, primarily targeting local citizens and stakeholders, and offers comprehensive information about community services and governance. The business model is that of a government service provider, focusing on transparency and citizen engagement. Technically, the site employs a range of JavaScript libraries including jQuery, Bootstrap, and Nivo Slider, hosted on infrastructure likely provided by Deutsche Telekom, as indicated by the nameservers. The site is built on a specialized CMS platform tailored for German municipal portals, ensuring a consistent and professional user experience. Mobile optimization is basic but functional, and accessibility features are present. From a security perspective, the site uses HTTPS and implements a detailed cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and incident response information, which could be improved. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration data aligns with the official nature of the site, supporting its legitimacy. Overall, the website demonstrates a solid security posture and good privacy compliance, with a professional and trustworthy presentation. Strategic recommendations include enhancing security headers, adding incident response details, and maintaining up-to-date third-party libraries to further strengthen security and compliance.
Gemeinde Kloster Lehninklosterlehnin.de
Government · Germany
63Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
The website www.klosterlehnin.de serves as the official municipal portal for the Gemeinde Kloster Lehnin in Brandenburg, Germany. It provides comprehensive information about the municipality, including local government services, tourism, events, and community resources. The site targets residents and visitors, offering easy access to administrative contacts, news, and online appointment booking. The business model is that of a local government authority focused on public service and community engagement. Technically, the website is built on a platform provided by verwaltungsportal.de, utilizing Bootstrap for responsive design, jQuery for interactivity, and Nivo Slider for image carousels. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a clear navigation structure and professional design. External resources are primarily hosted on trusted German domains related to municipal services. From a security perspective, the site employs cookie consent mechanisms and CAPTCHA for unusual user behavior, indicating attention to privacy and bot mitigation. However, no explicit security headers or incident response policies are published, and SSL configuration details are not provided. The WHOIS data shows the domain is registered with reputable German DNS providers, consistent with the municipal identity, though registrant details are minimal. Overall, the website presents a trustworthy and professional digital presence for the municipality, with good content quality and privacy compliance. Strategic improvements could include publishing security policies, enhancing SSL and header configurations, and adding vulnerability disclosure information to strengthen security posture and transparency.
Gemeinde Malsburg-Marzellmalsburg-marzell.de
Government · Germany
66Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
Gemeinde Malsburg-Marzell operates as a small municipal government entity in the southern Black Forest region of Germany, providing comprehensive local administration and public services to its approximately 1,580 residents across seven districts. The website serves as an information hub and digital service portal, offering access to administrative forms, local news, event calendars, and tourism information. The platform is built on the Verwaltungsportal.de CMS, leveraging standard web technologies such as jQuery and Nivo Slider for interactive content presentation. The site demonstrates good content quality, clear navigation, and basic mobile optimization, catering primarily to local citizens and visitors seeking municipal services or tourism information. Security measures include cookie consent management and captcha protections, though explicit security policies and headers are not evident. Overall, the website maintains a trustworthy and professional presence consistent with a government entity.
- SStadt An der Schmücke
stadtanderschmuecke.de
Government · Germany
63Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Stadt An der Schmücke is a small municipal government entity in Thüringen, Germany, serving approximately 6,000 residents across several formerly independent communities merged in 2019. The website serves as an official portal providing city information, news, event calendars, administrative services, and contact details. It targets local residents, visitors, and community members seeking municipal services and information. The business model is typical for local government, focusing on public service and community engagement. Technically, the website uses a standard German municipal CMS platform with Bootstrap and jQuery frameworks, enhanced by libraries like Nivo Slider for image carousels. The site is mobile-optimized, accessible, and performs moderately well. It employs HTTPS and basic security practices but lacks advanced security headers and explicit incident response or security policy disclosures. Security posture is adequate for a government informational site, with no visible vulnerabilities or exposed sensitive data. Privacy compliance is supported by a privacy policy and cookie consent mechanism, aligning with GDPR requirements. Contact information is clearly presented, and social media channels enhance community engagement. Overall, the site is trustworthy, professional, and well-suited for its purpose. Recommendations include enhancing security headers, publishing explicit security and incident response policies, and maintaining up-to-date third-party libraries to improve security and compliance further.
Stadt Zahna-Elsterstadt-zahna-elster.de
Government · Germany
66Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
Stadt Zahna-Elster operates as the official municipal government portal for the city of Zahna-Elster in Germany, providing residents and visitors with comprehensive information about local administration, cultural events, tourism, and public services. The website offers key services such as online appointment booking, event calendars, and detailed contact information, positioning itself as a trusted local government resource. The target audience includes residents, local businesses, and tourists seeking municipal services and information. Technically, the website employs a moderate technology stack including jQuery, Bootstrap, and Material Design Lite, hosted on a Verwaltungsportal CMS platform. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The cookie consent mechanism is robust and GDPR compliant, enhancing privacy transparency. From a security perspective, the site uses HTTPS and implements cookie consent with user control, but lacks advanced security headers and a published security policy or incident response contact. No vulnerabilities or suspicious domains were detected, and the WHOIS data aligns with German DNS providers, supporting legitimacy. Overall, the security posture is solid but could benefit from additional hardening. The overall risk assessment is low, with recommendations focusing on improving security headers, publishing security policies, and enhancing transparency around incident response. The website is professional, trustworthy, and well-suited for its governmental role.
Gemeinde Milower Landmilow.de
Government · Germany
61Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
Gemeinde Milower Land is a small German municipal government entity providing local administration, public services, and tourism information for its approximately 5,000 residents. The website serves as an official portal offering comprehensive information about the municipality, its public institutions, events, and contact points. The digital infrastructure is built on a specialized municipal CMS with common web technologies such as jQuery, Material Design Lite, and various UI libraries, ensuring a good user experience and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be enhanced. No signs of blocking or WAF interference were detected, and privacy compliance is well addressed with clear policies and consent banners. Overall, the website is trustworthy, professional, and serves its community effectively.
- Gemeinde Weichs
weichs.de
Government · Germany
67Medium
NIS2 17 · GDPR 55
NIS2 17 · GDPR 55
The website www.weichs.de serves as the official digital presence of the municipality of Weichs in Germany. It provides comprehensive information about local government services, community news, events, and administrative resources. The site targets residents and visitors seeking municipal information and services, including online appointment booking and access to forms. The business model is that of a government service portal, focusing on transparency and citizen engagement. Technically, the website employs a mature infrastructure built on the Verwaltungsportal CMS platform, utilizing common web technologies such as jQuery, Bootstrap, and various carousel and slider libraries. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience across devices. From a security perspective, the site enforces HTTPS, implements cookie consent mechanisms compliant with GDPR, and uses session management and captcha protections to mitigate abuse. However, it lacks explicit published security policies or incident response contacts, which could enhance trust and preparedness. Overall, the website is professional, trustworthy, and well-maintained, with no signs of malicious content or vulnerabilities. Strategic improvements could include publishing a formal security policy, adding incident response information, and enhancing HTTP security headers to further strengthen its security posture.
- VVerwaltungsgemeinschaft Dornburg-Camburg
vg-dornburg-camburg.eu
Government · Germany
66Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
The Verwaltungsgemeinschaft Dornburg-Camburg website serves as the official online portal for a local government administrative community in Germany. It provides citizens with access to administrative information, services such as online appointment booking for the residents' registration and civil registry offices, news updates, and contact details. The site targets local residents and stakeholders seeking government services and information. Technically, the website uses a custom government portal CMS with technologies including jQuery, Slick Carousel, and Material Design Lite, delivering a moderately performant and accessible user experience. Security-wise, the site implements cookie consent and CAPTCHA mechanisms but lacks visible HTTP security headers and explicit incident response information. The WHOIS data is unavailable, likely due to privacy protection, which is uncommon for government domains but the website content and domain usage appear legitimate. Overall, the site is professional, trustworthy, and compliant with GDPR, though security enhancements are recommended.
Öffentliche Versicherung Oldenburg - Simon Rebitzerteamrathausplatz.de
Other · Germany
63Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
The website www.teamrathausplatz.de represents a regional insurance agency, Öffentliche Versicherung Oldenburg - Simon Rebitzer, offering tailored insurance solutions for private and commercial clients, including pet health insurance and claims services. The business operates primarily in Germany, targeting local customers with a focus on personalized advisory and insurance brokerage services. The site is well-branded and consistent with the parent company Öffentliche Versicherung Oldenburg, indicating a stable market position within the regional insurance sector. Technically, the website is built on the verwaltungsportal.de CMS platform, utilizing common web technologies such as jQuery, Bootstrap, and Material Design Lite. The site includes standard SEO and accessibility features but could improve mobile optimization and performance. Google Analytics is used for visitor tracking with appropriate cookie consent mechanisms in place, reflecting good privacy compliance. From a security perspective, the site uses HTTPS and implements cookie consent with categorized cookies, including captcha for suspicious behavior. However, no explicit security headers were detected, and there is no visible security policy or incident response information, which suggests room for improvement in security posture. No vulnerabilities or suspicious content were found. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. The main risks relate to enhancing security best practices and expanding transparency around terms of service and incident response. Strategic recommendations include implementing security headers, publishing security policies, and conducting regular security audits to maintain and improve trust and compliance.
Susanne Eichinsusanne-eichin.de
Healthcare · Germany
63Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
Susanne Eichin operates a small healthcare practice specializing in natural healing therapies including neurogenic tremor therapy (TRE), Dorn-Breuss therapy, and related wellness services. The website targets patients in the Lörrach region of Germany and offers both onsite and online courses and workshops. The business is well positioned locally with a clear niche and a professional online presence supported by social media and third-party booking and review widgets. Technically, the site uses a CMS platform with modern frontend libraries and frameworks, delivering a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking advanced security headers and incident response disclosures. Overall, the site is trustworthy and compliant with GDPR, providing comprehensive contact information and privacy policies.
- Stadt Rodewisch
rodewisch.de
Government · Germany
74Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Stadt Rodewisch operates as the official municipal government website for the city of Rodewisch, Germany. It provides comprehensive information about local government, politics, city services, events, and community resources targeted at residents, businesses, and visitors. The site is well-structured with clear navigation and offers key services such as public announcements, online appointment booking, and access to municipal documents. The website maintains consistent branding and trust indicators appropriate for a government entity. Technically, the website uses a modern yet somewhat traditional technology stack including jQuery, Material Design Lite, and Nivo Slider, hosted on a Verwaltungsportal CMS platform. It demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with room for improvement in loading speed and modernizing some libraries. From a security perspective, the site enforces HTTPS and implements GDPR-compliant cookie consent mechanisms. However, explicit security headers are not detected, and no dedicated security or incident response policies are published. There is no vulnerability disclosure or security.txt file, which could enhance transparency and security posture. The WHOIS data is minimal but consistent with a municipal domain, with no suspicious indicators. Overall, the website is a trustworthy and professional municipal portal with good privacy compliance and user experience. Strategic improvements in security headers, incident response transparency, and technical modernization could further strengthen its posture.
- SSandra Leist
sandraleist.de
Education · Germany
63Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
The website www.sandraleist.de represents a small German educational and social services provider focused on data protection and pedagogy. It offers training courses such as LRS Deutschland Trainer certification and intensive literacy programs, alongside human resources and family center services. The site is well-structured with clear navigation and professional design, targeting individuals and organizations interested in education and social care. Technically, the site uses a proprietary CMS platform with common JavaScript libraries and Material Design Lite framework, delivering moderate performance and basic mobile optimization. Security posture is adequate with cookie consent mechanisms and session management but lacks advanced HTTP security headers and explicit security policies. No contact emails or phone numbers are directly visible, and no terms of service or incident response policies are published. The domain WHOIS data is limited but consistent with the website's German localization and business nature. Overall, the site is safe, compliant with GDPR, and trustworthy for its niche audience.
Mobile Praxis für Ernährungsberatung und Ernährungstherapielukas-therapie.de
Healthcare · Germany
68Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
The website represents a small, specialized healthcare provider offering mobile and online nutritional counseling and therapy services primarily in Germany with some regional focus including Swiss guests. The business is well-positioned locally with certifications and recognized expertise in dietetics and nutrition therapy. The website infrastructure is built on a specialized CMS platform common in German public service sectors, utilizing modern frontend libraries such as jQuery and Material Design Lite. The site is mobile optimized, accessible, and provides clear navigation and professional content. Security posture is adequate with HTTPS enforced and cookie consent implemented, though lacking advanced security headers and explicit incident response policies. Overall, the site is trustworthy and compliant with GDPR, providing transparent contact information and privacy policies.
European Travel Commissionvisiteurope.com
Hospitality
69Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Visiteurope.com is the official travel portal of Europe, operated under the auspices of the European Travel Commission. It provides comprehensive travel inspiration, destination guides, experiences, events, and essential travel information to tourists interested in exploring Europe. The website targets a broad audience of travelers and tourists, offering multilingual support and rich content to facilitate trip planning. The business model appears to be informational and promotional, supported by EU co-funding and partnerships with tourism bodies. The site holds a strong market position as an authoritative source for European travel information. Technically, the website is built on WordPress with modern technologies including React, jQuery, and various SEO and multilingual plugins. It leverages Cloudflare for DNS and uses Google Fonts and Google Maps APIs. The site is well-optimized for SEO, mobile-friendly, and accessible, with good performance metrics. Structured data and Open Graph tags are properly implemented to enhance search engine visibility and social media sharing. From a security perspective, the site enforces HTTPS, uses clientTransferProhibited domain status, and implements cookie consent via Cookiebot. However, DNSSEC is not enabled, and there is no visible security policy or incident response information published. The site uses multiple third-party marketing and tracking tools, but with consent mechanisms in place. No critical vulnerabilities or exposed sensitive data were detected. Overall, visiteurope.com is a professional, trustworthy, and well-maintained website with strong content quality and business credibility. Minor improvements in DNS security and transparency around security policies could further enhance its security posture and user trust.
Tremaze GmbHtagea.app
Non-profit · Germany
73Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Tremaze GmbH is a German-based company specializing in digital software solutions tailored for social work organizations. Their flagship product, Tagea, integrates communication, documentation, and administrative functions into a unified platform designed to streamline workflows for social institutions. The company targets social sector organizations, offering a SaaS model that supports internal and external communication, appointment management, and integration with existing systems. Their market position is niche but well-defined, serving a critical need in the social services domain. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies including Google Analytics and Tag Manager for analytics, and Cookie-Script for consent management. Hosting is provided by Hetzner, a reputable German hosting provider, ensuring data residency within Germany. The site is mobile-optimized with good SEO and accessibility basics, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS with strong SSL configuration and incorporates privacy-conscious features such as IP anonymization in analytics and a comprehensive cookie consent mechanism. However, it lacks publicly available security policies, incident response contacts, and advanced security headers, which are areas for improvement. No vulnerabilities or suspicious patterns were detected in the WHOIS or site content. Overall, Tremaze GmbH presents a professional and trustworthy online presence with strong compliance to GDPR and privacy standards. The risk profile is low, but enhancing transparency around security policies and incident management would further strengthen trust and security posture.
- Junip Inc.
juniphq.com
E-commerce · Canada
66Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Junip Inc. operates a SaaS platform focused on helping ecommerce brands collect and display customer reviews to enhance product understanding and increase conversions. The company targets online retailers and boasts over 5000 customers, positioning itself as an industry leader in ecommerce review solutions. Their services include mobile-first review collection, automated requests, review display widgets, syndication to major sales channels, moderation, tagging, analytics, and multi-store management. Founded in 2020 and based in Canada, Junip demonstrates a strong market presence with integrations to platforms like Shopify and Klaviyo.
Social Snowballsocialsnowball.io
E-commerce · United States
65Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Social Snowball is a SaaS platform specializing in influencer, affiliate, and referral marketing automation for ecommerce and DTC brands. It positions itself as a leading solution with over 2,500 brands using its services, offering key features such as automated affiliate onboarding, influencer management, Safelinks to prevent coupon abuse, and TikTok Shop affiliate integration. The company was founded in 2019 and targets ecommerce businesses seeking to scale word-of-mouth marketing efficiently. Technically, the website is built on Webflow CMS, leveraging modern JavaScript libraries like jQuery, GSAP, and Slick Carousel for rich interactive experiences. It integrates with popular platforms such as Shopify and TikTok Shop and uses third-party services like Intercom for customer engagement and OptinMonster for conversion optimization. The site is well-optimized for mobile and SEO, with fast performance and clear navigation. From a security perspective, the site enforces HTTPS with a good SSL configuration and uses domain status protections to prevent unauthorized changes. Cookie consent is implemented via CookieYes, and privacy policies are comprehensive and GDPR compliant. However, there is no explicit security policy or incident response information publicly available, and DNSSEC is not enabled, which could be improved. Overall, Social Snowball demonstrates a mature digital presence with strong business credibility and technical implementation. The security posture is solid but could benefit from additional transparency and technical enhancements. The risk level is low, and the platform appears trustworthy and professional, serving a clear market need in ecommerce marketing automation.
Humble Bundlehumblebundle.com
E-commerce
66Medium
NIS2 47 · GDPR 68
NIS2 47 · GDPR 68
Humble Bundle is a well-established e-commerce platform specializing in curated bundles of games, books, and software with a unique pay-what-you-want model that supports charity. Since its founding in 2010, it has built a strong market position by combining digital content sales with charitable giving, appealing to gamers, readers, and software users globally. The website demonstrates a mature digital infrastructure with modern technologies, responsive design, and comprehensive privacy and cookie management. Security posture is strong with HTTPS, security headers, and anti-bot measures, though explicit security policies and incident response information are not publicly available. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is unavailable, possibly due to privacy protections or registry policies.
GOG.comgog.com
E-commerce
71Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
GOG.com is a prominent digital distribution platform specializing in DRM-free PC games for Windows, Mac, and Linux. Owned by CD Projekt, it holds a strong market position by offering a vast catalog of classic and new titles with a customer-friendly 30-day money-back guarantee. The platform targets gamers who prefer DRM-free content and values user freedom and ownership. Technically, the website employs modern web technologies including Angular, Google Tag Manager, and Cookiebot for consent management, ensuring a responsive and performant user experience across devices. Security is robust with HTTPS, multiple security headers, and CSRF protections, although explicit security policies and incident response details are not publicly disclosed. Overall, GOG.com demonstrates a mature digital infrastructure and trustworthy e-commerce presence with good privacy compliance and user protections.
Flottmann Kneipeflottmannkneipe.de
Hospitality · Germany
63Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Flottmann Kneipe is a small hospitality business located in Herne, Germany, operating within a historic cultural venue known as the Flottmann-Hallen. The business offers traditional bar food, drinks, a beer garden, and a rich program of cultural events including concerts and readings, positioning itself as a local cultural hub. The website is built using RapidWeaver CMS with a moderate technical infrastructure including jQuery and Google Analytics for user tracking. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is basic with cookie consent and privacy policy present. Overall, the website is professional and trustworthy with clear contact information and social media presence, targeting mature audiences interested in nightlife and culture.
Real Estate · Germany
62Medium
NIS2 2 · GDPR 55
NIS2 2 · GDPR 55
Wohnungsgenossenschaft Duisburg-Süd eG is the largest housing cooperative in Duisburg, Germany, managing approximately 4,300 residential units and several commercial properties. Established in 1905, the cooperative serves tenants primarily in Duisburg's city center and southern districts. The website provides comprehensive information about housing offers, membership, tenant services, and community engagement, reflecting a well-established local real estate business. Technically, the site is built on TYPO3 CMS with modern frontend technologies including Bootstrap and jQuery, offering good mobile responsiveness and accessibility. Security-wise, the site enforces HTTPS, implements cookie consent with clear categories, and avoids exposing sensitive data, though it lacks a formal published security policy or incident response details. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting the cooperative's credibility and tenant engagement.
Wohnungsgenossenschaft Duisburg-Hamborn eGhamborner-woge.de
Real Estate · Germany
68Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Wohnungsgenossenschaft Duisburg-Hamborn eG operates as a housing cooperative focused on providing rental apartments and related housing services in the Duisburg-Hamborn area of Germany. The website serves as an information portal for tenants and prospective members, offering details about housing offers, membership, events, and contact information. The organization maintains a local market position with a medium-sized operational scale and targets residents seeking affordable and community-oriented housing solutions. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, and Font Awesome, with integrated accessibility features and mobile optimization. Analytics are handled via Piwik, and cookie consent is managed through Cookiebot, reflecting a strong commitment to privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although formal security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting a positive user experience and business credibility.
Wohnungsgenossenschaft Duisburg-Mitte eGwgd-mitte.de
Real Estate · Germany
63Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Wohnungsgenossenschaft Duisburg-Mitte eG is a well-established housing cooperative based in Duisburg, Germany, with a history spanning over 125 years. The organization focuses on providing affordable, needs-based housing, modernizing properties with energy-efficient solutions, and fostering social engagement within the community. Their services include rental housing, guest apartments, repair services, and social programs, targeting local residents and cooperative members. The website reflects a professional and consistent brand image with clear contact information and active social media presence. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and various UI libraries, ensuring good mobile responsiveness and user experience. However, there is no indication of a CMS, suggesting a custom-built or static site. Performance is moderate with room for optimization. SEO and accessibility are basic to good but could be improved further. From a security perspective, the site uses HTTPS but lacks visible security headers and a vulnerability disclosure policy. No cookie consent mechanism is present, which is a compliance gap under GDPR. The WHOIS data aligns well with the business claims, indicating legitimacy and consistent domain registration practices. Overall, the website is trustworthy and professional but would benefit from enhanced security measures, privacy compliance improvements, and formalized policies to strengthen user trust and regulatory adherence.
Wohnungsgenossenschaft Rheinpreußensiedlung eGrheinpreussensiedlung.de
Real Estate · Germany
62Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Wohnungsgenossenschaft Rheinpreußensiedlung eG operates as a housing cooperative in Germany, providing residential housing services primarily targeting local residents and tenants. The website is built on WordPress using the Divi theme, reflecting a moderate level of digital maturity with basic content and design quality. While the site is accessible and functional, it lacks critical privacy and security documentation such as privacy policies, cookie consent mechanisms, and security policies. No contact information or incident response channels are explicitly provided, which may impact user trust and compliance with GDPR regulations. The domain registration data is consistent with the business identity, supporting legitimacy. Overall, the website serves its informational purpose but requires improvements in security posture and privacy compliance to enhance trust and regulatory adherence.
Bauverein Rheinhausen eGbauverein-rheinhausen.de
Real Estate · Germany
67Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Bauverein Rheinhausen eG is a well-established German housing cooperative founded in 1919, providing residential and commercial rental services primarily in Duisburg and surrounding areas. The cooperative manages a portfolio including approximately 3,300 households, commercial units, and parking facilities, focusing on sustainable development, modernization, and community-oriented living spaces. The website reflects a professional digital presence with clear navigation, comprehensive service offerings, and active communication channels including social media and a members' newsletter. Technically, the site is built on WordPress with modern plugins and frameworks, optimized for accessibility and SEO, and includes GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates a mature digital infrastructure supporting the cooperative's business goals and community engagement.
- GGemeinnütziger Spar- und Bauverein Friemersheim eG
bauverein-friemersheim.de
Real Estate · Germany
50Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The website for Gemeinnütziger Spar- und Bauverein Friemersheim eG serves as an informational portal for a local housing cooperative based in Duisburg Friemersheim, Germany. It provides details about housing offers, membership, tenant services, and organizational information. The site targets general audiences interested in cooperative housing with a focus on affordable and lifelong residential rights. The business operates in the real estate sector with a small-sized local market presence. Technically, the site is built on Joomla CMS using Bootstrap and jQuery, offering basic mobile responsiveness and moderate performance. Security posture is adequate with HTTPS enabled and CSRF tokens present, but lacks advanced security headers and incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service. Overall, the site is functional and moderately trustworthy but could improve in security and compliance aspects.
- Google Merchandise Store
googlemerchandisestore.com
Retail · United States
74Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The Google Merchandise Store website serves as an official e-commerce platform for Google branded merchandise, including apparel, accessories, and gifts. The site targets consumers globally with regional shipping options and maintains consistent branding aligned with Google's corporate identity. The business model is retail e-commerce, supported by a medium-sized operation likely under Google's corporate umbrella. The domain age and registration details support the legitimacy of the site as an official merchandise outlet. Technically, the website uses a combination of legacy and modern web technologies including jQuery, Google Analytics, and Google Tag Manager for tracking and performance monitoring. Hosting and content delivery appear to be managed in partnership with Robertson Marketing, a known marketing service provider. The site is mobile optimized with a good user experience but lacks advanced accessibility features and comprehensive SEO optimization. From a security perspective, the site enforces HTTPS and has domain status locks to prevent unauthorized changes. However, it lacks DNSSEC and visible security headers, which are recommended best practices. No privacy or cookie policies are present, indicating compliance gaps with GDPR and other privacy regulations. The site does not provide incident response or vulnerability disclosure information, which could be improved to enhance trust. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening. Strategic recommendations include implementing DNSSEC, adding security headers, publishing privacy and cookie policies with consent mechanisms, and providing clear incident response contacts to improve security posture and regulatory compliance.
- SStadt Haltern am See
haltern-am-see.de
Government · Germany
64Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
Stadt Haltern am See operates a municipal government website providing comprehensive information about local administration, politics, public services, and community news. The site targets residents and visitors, offering services such as Bürgerbüro contact, political updates, and event information. The website is well-structured, mobile-optimized, and uses modern web technologies including jQuery and CSS3. It is managed using the PANSITE CMS platform. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and incident response information are absent. Privacy compliance is strong with a comprehensive privacy policy and cookie banner. The domain WHOIS data is minimal but consistent with a legitimate municipal entity. Overall, the website is trustworthy, professional, and serves its public service mission effectively.
CASKlimaheldencasklimahelden.de
Energy · Germany
68Medium
NIS2 17 · GDPR —
NIS2 17 · GDPR —
The website 'CASKlimahelden' appears to be a German-based platform focused on climate awareness and energy-related services. The business targets a general audience interested in environmental issues and sustainable energy solutions. The site uses WordPress CMS and includes modern iconography with Font Awesome and Google Tag Manager for analytics. However, the site lacks critical privacy and cookie policies, contact information, and advanced security headers, which impacts its overall trustworthiness and compliance posture. The technical infrastructure is moderate with room for improvement in mobile optimization and accessibility. Security posture is basic, with no evident vulnerabilities but missing best practices such as security headers and incident response contacts. Overall, the site is functional but requires enhancements in privacy compliance, security, and business transparency to improve its risk profile and user trust.
Wirtschaftsbetriebe Duisburg - AöRwb-duisburg.de
Government · Germany
68Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Wirtschaftsbetriebe Duisburg - AöR is a large municipal utility and infrastructure service provider for the city of Duisburg, Germany. The organization manages a broad range of public services including waste disposal, street cleaning, wastewater management, road and bridge construction, municipal real estate, playgrounds, green spaces, and cemeteries. The website serves as a comprehensive portal for residents and businesses to access these services, including online scheduling, information, and customer portals. The site is well structured, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, the website is built on modern frameworks such as Next.js and React, with content managed via Storyblok CMS. It integrates third-party services like Usercentrics for cookie consent management and uses legacy jQuery 1.12.4, which may pose some security risks. Performance is moderate with good SEO and accessibility features. The site uses HTTPS and has basic security best practices but lacks explicit security headers and a published security policy or incident response information. From a security perspective, the site is generally secure with no visible vulnerabilities or exposed sensitive data. However, the use of an outdated jQuery version and absence of a vulnerability disclosure mechanism are areas for improvement. Privacy compliance is strong, with a clear privacy policy and cookie consent mechanism in place, aligning with GDPR requirements. Overall, the website represents a trustworthy and professional municipal service portal with a solid business credibility score. Strategic recommendations include upgrading legacy libraries, publishing security policies, and enhancing security headers to further strengthen the security posture and compliance.
Ruhr Tourismus GmbHmein-ruhrgebiet.blog
Other · Germany
53Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Mein Ruhrgebiet is a German-language travel blog operated by Ruhr Tourismus GmbH, focusing on providing travel inspiration, local tips, and cultural insights about the Ruhrgebiet region. The website targets tourists and travelers interested in exploring this area, offering curated content such as travel guides, event information, and regional highlights. The business model centers on digital content creation and regional tourism promotion, positioning itself as a trusted source for Ruhrgebiet travel information. Technically, the website is built on WordPress 6.8.1 with modern plugins like Yoast SEO and WP Rocket for SEO and performance optimization. It uses Bootstrap for responsive design and integrates third-party services such as Cookiebot for cookie consent management, Google Tag Manager for analytics, and Facebook Pixel for marketing. The site demonstrates good mobile optimization and SEO practices, though accessibility features could be enhanced. From a security perspective, the site enforces HTTPS with anonymized IP tracking in Google Analytics and provides a comprehensive cookie consent mechanism aligned with GDPR requirements. However, it lacks explicit security headers and a public vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data due to privacy protection slightly impacts trust but is common for such sites. Overall, the website presents a professional and trustworthy digital presence for regional tourism, with moderate technical maturity and a solid security posture. Strategic improvements in security headers, incident response transparency, and accessibility would further enhance its risk profile and compliance standing.
Media · Germany
55Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
ruhrkultur.jetzt is a digital cultural guide focused on the Ruhr metropolitan area in Germany, providing users with event calendars, ticket information, and location tips related to the RuhrKunstMuseen and RuhrBühnen networks. The website targets culture enthusiasts, tourists, and local residents interested in arts and cultural events. It operates as a regional informational portal with a small business profile founded in 2017. Technically, the website employs modern web technologies including the Ionic Framework and StencilJS, ensuring good mobile optimization and accessibility. The site is served over HTTPS, enhancing security, but lacks some advanced security headers and DNSSEC is not enabled. No CMS or third-party analytics/tracking scripts were detected, indicating a lightweight and privacy-conscious implementation. From a security perspective, the site has a cookie consent mechanism compliant with GDPR but lacks a published privacy policy, terms of service, and explicit security policies or incident response contacts. The domain registration is consistent and transparent, supporting the legitimacy of the business. No WAF or blocking mechanisms were detected, and no adult or questionable content is present. Overall, ruhrkultur.jetzt presents a trustworthy and professionally designed cultural guide with room for improvement in privacy documentation and security hardening. Strategic recommendations include publishing privacy and terms documents, enabling DNSSEC, adding security headers, and providing clear contact information for security incidents.
- RRuhr Tourismus GmbH
radrevier.ruhr
Transportation · Germany
54Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
radrevier.ruhr is a professionally managed regional tourism website focused on promoting cycling and bike holidays in the Ruhrgebiet area of Germany. It offers comprehensive route information, planning tools, and thematic cycling routes, positioning itself as a leading urban cycling travel region certified by the ADFC. The platform targets cycling tourists and outdoor enthusiasts, providing rich content and digital resources to enhance visitor experience. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates SEO and cookie consent tools effectively. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Privacy compliance is robust, with clear GDPR-aligned privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and digital maturity suitable for its tourism promotion role.
Route Industriekulturindustriekultur.ruhr
Other · Germany
55Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Route Industriekultur is a well-established cultural tourism platform dedicated to showcasing the industrial heritage of the Ruhr region in Germany. The website offers comprehensive information on 27 key industrial heritage sites, panoramic viewpoints, historic settlements, cycling tours, and events, targeting tourists, families, and culture enthusiasts. The platform is professionally designed with excellent content quality, clear navigation, and multilingual support, positioning it as a leading regional resource for industrial heritage tourism. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Borlabs Cookie for privacy compliance. It uses Bootstrap for responsive design and integrates analytics tools like Google Analytics and Matomo. The site demonstrates good performance, mobile optimization, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS, implements cookie consent mechanisms, and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced security posture. No critical vulnerabilities or WAF protections were detected, indicating open and accessible content. Overall, the website scores well on content quality, technical implementation, security, privacy compliance, and business credibility, reflecting a mature and trustworthy digital presence. Strategic improvements in security transparency and incident response readiness would further strengthen its posture.
RuhrKunstMuseenruhrkunstmuseen.com
Other
57Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
The domain www.ruhrkunstmuseen.com appears to be unregistered or inactive as per the WHOIS raw data, which shows no match for the domain. The website content is inaccessible or minimal, with the provided HTML content truncated and lacking meaningful data. Consequently, no business information, contact details, or security policies are available for analysis. The absence of registration and website content raises significant concerns about the legitimacy and operational status of the domain. Technically, no technologies, frameworks, or hosting details could be identified. Security posture cannot be assessed due to lack of data. Overall, the domain and website do not present any verifiable business presence or security maturity.
Bezirksregierung Münsterbezreg-muenster.de
Government · Germany
62Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Bezirksregierung Münster operates as a regional government authority in North Rhine-Westphalia, Germany, providing a broad range of public administrative services including education, environment, health, regional planning, and social affairs. The website serves as an official portal offering information and resources to citizens, businesses, and public institutions within the Münster district. It maintains a professional and consistent brand presence aligned with government standards. Technically, the website is built on Drupal CMS, leveraging modern web technologies such as Bootstrap for responsive design, Matomo for privacy-conscious analytics, and FontAwesome for iconography. The site demonstrates good performance, accessibility, and SEO practices, ensuring a positive user experience across devices. From a security perspective, the site enforces HTTPS, implements standard security headers, and provides a GDPR-compliant cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response information are not publicly available, suggesting room for improvement in transparency and preparedness. Overall, the website reflects a mature digital presence for a government entity, with high trustworthiness and compliance. Strategic recommendations include publishing detailed security and incident response policies, adding vulnerability disclosure mechanisms, and maintaining regular security audits to uphold and enhance the security posture.
Education · Germany
58Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
The Landesverband der Volkshochschulen von NRW e.V. is a large, well-established non-profit educational association representing 131 Volkshochschulen (adult education centers) across North Rhine-Westphalia, Germany. The organization focuses on providing accessible continuing education, promoting democracy, integration, sustainability, and digital literacy. Their website reflects a professional and comprehensive digital presence, leveraging WordPress with Elementor and Yoast SEO for content management and optimization. The site is well-structured, mobile-optimized, and includes clear navigation and rich content tailored to their target audience of local residents and educational stakeholders. Security posture is strong with HTTPS, cookie consent mechanisms, and no detected vulnerabilities, although some security headers could be improved. The presence of ISO 9001 certification and transparent contact information enhances trust and credibility. Overall, the website demonstrates a mature digital infrastructure supporting the organization's mission effectively.