Security Directory

M

Messer SE & Co. KGaA

messergroup.com

10

Messer SE & Co. KGaA is a large, well-established German company specializing in the production and supply of industrial, medical, and specialty gases. The company holds a strong market position as the world's largest privately owned specialist in its sector, serving industrial and medical customers globally. Their website reflects a mature digital presence built on the Liferay CMS platform, integrating modern marketing and analytics tools such as HubSpot. The site is well-structured, mobile-optimized, and provides comprehensive corporate information including compliance and privacy policies. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some improvements like enabling DNSSEC and additional security headers are recommended. The domain is long-standing and registered with a reputable registrar, supporting the company's credibility. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

K

Kinopolis Management Multiplex GmbH

gloria-palast.de

10

Gloria Palast is a premium cinema located in Munich, operated by Kinopolis Management Multiplex GmbH. The website provides comprehensive information about movie programming, ticket sales, events, and premium services such as luxury seating and catering. The business targets cinema enthusiasts seeking a high-end movie experience and corporate clients for event hosting. The site is well-branded and professionally maintained with consistent messaging and active social media presence. Technically, the website uses modern JavaScript libraries including Flickity for carousels, FontAwesome for icons, and integrates third-party services for ticketing and marketing. Hosting is provided by Hetzner, a reputable German hosting provider. The site is mobile-optimized and SEO-friendly, though some minor backend PHP warnings are visible which should be addressed. Security posture is good with HTTPS enforced and cookie consent mechanisms implemented in compliance with GDPR. However, the Content-Security-Policy is commented out and not enforced, and no security.txt or explicit security policy is found. Tracking and marketing tools include Google Tag Manager, Matomo, Facebook Pixel, and TikTok, indicating moderate user tracking. Overall, the website is trustworthy and professional with minor technical improvements recommended to enhance security and backend stability.

K

Kinopolis Management Multiplex GmbH

kinopolis.de

10

Kinopolis Management Multiplex GmbH operates a regional multiplex cinema chain in Germany, providing film programming, event hosting, and ticket booking services. The website serves as a portal for cinema selection and ticket purchases, targeting general cinema-goers in Germany. The business model centers on cinema exhibition and related services, positioning Kinopolis as a medium-sized player in the German cinema market with multiple locations and partner cinemas. The website branding is consistent and content quality is good, supporting a professional user experience.

C

Coburger Entsorgungs- und Baubetrieb CEB

ceb-coburg.de

53

Coburger Entsorgungs- und Baubetrieb CEB is a municipal service provider focused on maintaining and improving the infrastructure of Coburg, Germany. Their key services include waste management, street cleaning, wastewater treatment, and winter road services. The website targets local citizens and newcomers, providing comprehensive information and easy access to forms and service details. The business operates as a medium-sized government entity with a clear regional focus. Technically, the website uses a standard Bootstrap and jQuery stack with Google Fonts, offering a responsive and user-friendly experience. While the site is moderately optimized for performance and accessibility, there is room for improvement in SEO and security headers. The presence of a cookie consent banner and a detailed privacy policy indicates good privacy compliance. From a security perspective, the site uses HTTPS and has implemented basic privacy measures. However, it lacks advanced security headers and explicit incident response or security policy disclosures. The contact form includes privacy consent but could benefit from anti-CSRF protections. No vulnerabilities or malicious content were detected. Overall, the website is trustworthy, professionally maintained, and suitable for its public service role. Strategic improvements in security headers, incident response transparency, and technical modernization would enhance its security posture and compliance standing.

Z

Zweckverband Zulassungsstelle Coburg

zulassungsstelle-coburg.de

10

Zweckverband Zulassungsstelle Coburg operates as a joint vehicle registration and driver licensing authority serving the city and district of Coburg, Germany. The website provides essential public services including vehicle registration, driver licensing, online application portals, and appointment scheduling. It targets local residents and vehicle owners, positioning itself as a trusted local government entity with clear contact channels and official branding. Technically, the website is built on WordPress using the Enfold theme and Avia framework, incorporating modern web technologies such as jQuery and Google Maps integration. The site is mobile-optimized with good navigation and content quality, although accessibility features are basic. Performance is moderate, and SEO practices are adequately implemented. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, it lacks explicit HTTP security headers and does not provide visible incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the business purpose, though registrant details are minimal. Overall, the website demonstrates a solid security posture and privacy compliance suitable for a government service portal. Recommendations include enhancing security headers, publishing incident response contacts, and improving accessibility. The risk level is low, with no signs of malicious activity or content safety concerns.

S

Stadt Coburg

sagscoburg.de

30

Stadt Coburg operates the 'Sag's Coburg' platform, a municipal government website designed to facilitate communication between residents and city authorities by enabling citizens to report issues, provide suggestions, and offer compliments related to public spaces and services. The platform supports civic engagement and aims to improve the quality of life in Coburg through timely feedback and municipal responsiveness. The website is well-branded with official city logos and social media presence, targeting local residents and visitors. Technically, the website is built on WordPress CMS using the Enfold theme and Avia framework, hosted on RZone servers. It employs Matomo analytics for privacy-conscious user tracking and implements a cookie consent mechanism compliant with GDPR. The site is mobile-optimized and features good SEO practices, although accessibility features are basic. No forms are embedded on the analyzed page; reporting is redirected to an external city domain. From a security perspective, the site enforces HTTPS and uses cookie consent banners but lacks visible security headers in the HTML content. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is limited but consistent with a legitimate municipal domain. Privacy policies and terms of service are present and comprehensive, supporting GDPR compliance. Overall, the website presents a trustworthy, professional, and functional government service platform with moderate technical sophistication and good privacy practices. Strategic improvements in security headers and incident response transparency could enhance its security posture further.

K

Kultursommer Rheinland-Pfalz

kultursommer.de

63

Kultursommer Rheinland-Pfalz is a well-established non-profit cultural foundation affiliated with the Stiftung Rheinland-Pfalz für Kultur. Since 1992, it has been facilitating and promoting cultural projects across various art forms within the Rheinland-Pfalz region, targeting cultural practitioners, event organizers, and the general public interested in arts and culture. The website reflects a strong regional cultural focus with comprehensive information on events, funding, and community engagement. Technically, the site is built on WordPress with modern plugins and libraries, offering good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the site is professional, trustworthy, and compliant with GDPR regulations, serving as a reliable resource for cultural stakeholders in the region.

A

Arbeitgeberverband der Unternehmen im Weserbergland e.V.

adu.de

51

Arbeitgeberverband der Unternehmen im Weserbergland e.V. is a regional employer association founded in 1949, serving as the voice and support network for companies in the Weserbergland region of Germany. The organization provides legal advice, process representation, interest representation, nominations for labor and social courts, and informational services to its members. The website reflects a well-established, professional association with a clear focus on regional business support and networking. Technically, the site is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact channels.

C

CHARLES KNIE GmbH

weihnachtscircus.com

52

The Heilbronner Weihnachtscircus website represents a well-established regional event celebrating its 25th anniversary. The business is operated by CHARLES KNIE GmbH and focuses on delivering a large-scale Christmas circus experience with international artists. The website provides comprehensive event information, ticket sales links, and multimedia content to engage visitors. Technically, the site is built on Joomla CMS with Bootstrap and jQuery, offering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and CSRF tokens but lacks advanced security headers and DNSSEC. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy with minor areas for improvement in security and privacy transparency.

Perpetuum.cz is a Czech educational media platform established in 2017, focusing on trends, news, and innovations in education. It targets students, educators, parents, and education professionals by providing articles, videos, and expert blogs. The website is operated under the Scio brand, a recognized entity in Czech education. Technically, the site runs on WordPress with a modern theme and uses common web technologies such as jQuery, Google Analytics, and YouTube embeds. It implements GDPR-compliant cookie consent mechanisms and uses structured data for SEO. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Overall, the site is professional, trustworthy, and compliant with privacy regulations, serving as a reliable source of educational content in the Czech Republic.

S

SCIO

ucimsai.cz

40

Učím s AI is an educational website operated under the SCIO brand, focusing on integrating artificial intelligence into teaching practices for primary and secondary schools. The site provides practical tips, tutorials, blog articles, and tools such as Sciobot to assist teachers in leveraging AI for lesson preparation and classroom activities. The platform targets educators and educational institutions seeking to modernize teaching with AI technologies. Technically, the website is built on WordPress with Elementor, uses modern web technologies, and includes essential privacy and cookie consent mechanisms, reflecting a moderate to good level of digital maturity. Security posture is adequate with HTTPS enforced, though improvements in security headers and incident response transparency are recommended. Overall, the site presents a professional and trustworthy resource in the AI education niche, though the absence of WHOIS data introduces some uncertainty regarding domain registration legitimacy.

O

OFFENE-TÜRE.de

offenetuere.de

57

OFFENE-TÜRE.de is a specialized small business based in Germany offering professional 360° virtual tours, Google Street View entries, and digital twin services primarily targeting companies seeking to enhance their online visibility and customer engagement. The website presents a clear business model focused on digital marketing enhancement through immersive virtual experiences. Technically, the site uses a modern but basic technology stack including Bootstrap and jQuery, hosted on German servers with no detected content blocking or WAF interference. The site is mobile optimized and SEO friendly with good content quality and clear navigation. Security posture is moderate with some concerns such as the use of GET method for login forms and lack of explicit security headers. Privacy compliance is good with a cookie consent banner and a dedicated DSGVO page, though no terms of service or security policy pages are found. Overall, the site is trustworthy but could improve security and compliance aspects.

V

Verwaltungs-Verlag GmbH & Co. Betriebs OHG

verwaltungsverlag.de

56

Verwaltungs-Verlag GmbH & Co. Betriebs OHG operates as a leading provider of high-quality, advertising-financed cartographic products primarily serving governmental and municipal clients in Germany. The website reflects a professional business presence with clear branding and a focus on cartography services. The company leverages a WordPress-based digital infrastructure enhanced with popular plugins such as LayerSlider, WPBakery Page Builder, and Cookiebot for cookie consent management. Google Analytics and Google Tag Manager are used for analytics and tracking purposes, indicating a moderate level of digital maturity. From a security perspective, the website enforces HTTPS, ensuring encrypted communications. However, the absence of explicit security headers such as Content-Security-Policy and X-Frame-Options suggests room for improvement in hardening the site against common web threats. The presence of multiple third-party scripts and plugins increases the attack surface, necessitating regular updates and security audits. Privacy compliance is partially addressed through Cookiebot's consent mechanism, but the lack of a visible privacy policy or terms of service page is a notable gap. Overall, the website is accessible without WAF or security challenges, and no adult or questionable content is present, making it suitable for a general audience. The domain WHOIS data shows standard name servers without privacy protection, consistent with a transparent business operation. The site scores well on business credibility and technical implementation but should enhance privacy and security policies to improve compliance and trustworthiness.

Zu gut für die Tonne is a German government initiative aimed at reducing food waste through public education, tips, and campaigns. The website is professionally designed, content-rich, and targets the general public with a focus on sustainability and food preservation. Technically, it uses TYPO3 CMS with modern JavaScript libraries and implements a privacy-respecting Matomo analytics solution. Security posture is strong with HTTPS and cookie consent mechanisms, though some advanced security headers and explicit incident response policies are absent. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

B

Bundeszentrum Kita- und Schulverpflegung (NQZ)

gemeinsamgutessen.de

67

The website gemeinsamgutessen.de serves as the official platform for the Bundeszentrum Kita- und Schulverpflegung (NQZ), a government-affiliated initiative focused on improving the quality of nutrition in kindergartens and schools across Germany. It provides comprehensive information, resources, and networking opportunities for stakeholders involved in childcare and school meal provision. The site targets educators, parents, policymakers, and nutrition professionals, positioning itself as a trusted authority in this niche. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery and Slick Carousel for enhanced user experience. It employs Matomo analytics hosted on a controlled server, ensuring privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site uses HTTPS with a strong SSL configuration and implements a robust cookie consent mechanism aligned with GDPR requirements. While security headers are not explicitly detected, no vulnerabilities or exposed sensitive data were found. The absence of a published security policy or incident response contact suggests room for improvement in transparency and readiness. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It effectively serves its public service mission with clear navigation, quality content, and user-centric features. Strategic recommendations include enhancing security headers, publishing a security policy, and establishing a vulnerability disclosure channel to further strengthen its security posture and stakeholder trust.

B

biodiversityDS

biodiversitydatascience.com

56

Biodiversity Data Science is a specialized research and educational platform focused on leveraging data science tools to support biodiversity conservation and the United Nations 2030 Agenda for Sustainable Development. The website offers research publications, project descriptions, data science courses, code resources, and a podcast to engage researchers, policymakers, and environmental stakeholders. The platform positions itself as a niche player in the environmental data science domain with a strong emphasis on marine biodiversity and climate change impacts. Technically, the website is built using the Jekyll static site generator and incorporates modern front-end libraries such as Bootstrap, jQuery, and Font Awesome. It demonstrates good mobile optimization, clear navigation, and SEO best practices. Google Analytics is used for user tracking, indicating moderate data collection practices. However, no privacy or cookie policies are present, which is a compliance gap. From a security perspective, the site lacks visible security headers and formal security policies. The WHOIS data is missing or indicates the domain may not be registered, which raises concerns about domain legitimacy and trustworthiness. No forms or sensitive data inputs are present, reducing immediate risk exposure. Overall, the security posture is moderate but could be improved with better policy disclosures and technical hardening. The overall risk assessment suggests the website is a credible source of biodiversity data science content but requires improvements in domain registration transparency, privacy compliance, and security best practices to enhance trust and reduce potential vulnerabilities.

J

JOBST

jobst.de

61

JOBST is a well-established brand specializing in compression therapy products for lymphatic and venous diseases. The company operates under the parent company Essity and targets patients and healthcare professionals seeking effective medical compression solutions. The website reflects a professional and consistent brand image with a focus on product comfort and therapeutic efficacy. Technically, the site employs modern JavaScript libraries, Google Tag Manager, and OneTrust for consent management, indicating a mature digital infrastructure. Security-wise, the site uses HTTPS and Content Security Policy headers, but lacks some advanced security headers and a dedicated security policy page. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, the website is trustworthy, well-maintained, and suitable for its healthcare audience.

S

Sozialverband Deutschland e.V. Landesverband Nordrhein-Westfalen

sovd-nrw.de

45

The Sozialverband Deutschland e.V. Landesverband Nordrhein-Westfalen is a regional branch of a well-established German non-profit social welfare association. The organization provides social law advice, advocacy, and support services primarily targeting residents of Nordrhein-Westfalen. Their website is professionally designed, content-rich, and offers multiple channels for engagement including social media, newsletters, and podcasts. The business model focuses on membership and social support services, positioning the organization as a trusted regional social advocate. Technically, the website is built on TYPO3 CMS with modern frameworks like Bootstrap and integrates analytics tools such as Matomo and Google Tag Manager. The site is mobile-optimized, accessible, and performs moderately well. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site demonstrates a strong commitment to privacy compliance with comprehensive privacy and cookie policies. However, explicit security policies and incident response contacts are not published, which could be enhanced. The domain registration data is limited but consistent with a legitimate non-profit entity. The website is safe for general audiences with no adult or questionable content. Strategically, the organization should focus on enhancing security transparency, publishing incident response information, and maintaining strong privacy practices to further build trust and compliance.

S

Sozialverband Deutschland e.V.

sovd-gemeinsam.de

46

SoVD Gemeinsam gegen Einsam is a campaign website operated by Sozialverband Deutschland e.V., a large non-profit social welfare organization in Germany. The campaign addresses the issue of loneliness affecting various vulnerable groups including seniors, disabled persons, caregivers, and youth. The website offers information on counseling, neighborhood help, and political engagement to combat social isolation. Technically, the site is built on WordPress using the Elementor page builder and employs privacy-conscious tools such as Matomo analytics and Borlabs Cookie for GDPR-compliant cookie consent. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Contact is primarily via regional volunteer email addresses, with no phone numbers or physical addresses explicitly listed in the content provided. Overall, the site is professional, well-branded, and trustworthy with a clear social mission.

C

COMU Carl Orff Museum

co-mu.de

41

The COMU Carl Orff Museum website represents a well-structured, culturally focused institution dedicated to the life and work of composer Carl Orff. It serves a diverse audience including music enthusiasts, families, educators, and the international Orff community. The museum offers exhibitions, educational workshops, and community engagement programs, positioning itself as a unique cultural and educational hub in the Ammersee region of Germany. Technically, the site uses modern frameworks such as October CMS and Bootstrap, with integrated consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be enhanced. Overall, the site is professional, trustworthy, and compliant with GDPR, with clear contact information and active social media presence.

S

SCHOTT MUSIC GmbH & Co KG

organ-journal.com

61

organ - Journal für die Orgel is a specialized German media publication dedicated to organ music and church music culture. Operated by SCHOTT MUSIC GmbH & Co KG, it offers subscriptions, news, educational content, and a shop targeting organists, church musicians, and enthusiasts. The website is built on WordPress with a modern tech stack including Bootstrap and various plugins for SEO, anti-spam, and accessibility. The site is well-structured, mobile-optimized, and provides rich content relevant to its niche audience. Security posture is generally good with HTTPS enforced and anti-spam measures in place, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Business credibility is strong due to clear company information and long domain age. Overall, the site is professional, trustworthy, and serves its niche effectively.

Studio Neumann GmbH operates the website musik-und-bildung.de, a specialized platform offering music education materials primarily targeting educators and students in secondary and primary schools in Germany. The site provides a quarterly magazine, downloadable worksheets, media packages, and subscription services, positioning itself as a niche educational publisher with a consistent brand presence and a professional digital footprint. Technically, the website is built on WordPress with WooCommerce, leveraging modern web technologies and providing a responsive user experience. The hosting is likely provided by 1&1 IONOS, as inferred from the nameservers. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms, although some security headers and explicit policies like incident response are absent. Overall, the site is trustworthy, safe, and well-aligned with its business objectives.

S

SCHOTT MUSIC GmbH & Co KG

musikindergrundschule.de

57

Musik in der Grundschule is a German educational website operated by SCHOTT MUSIC GmbH & Co KG, focusing on music education for primary school children. The platform offers a subscription-based magazine, educational articles, downloadable materials, and an online shop. The website is well-branded and targets educators in the primary education sector. Technically, it is built on WordPress with a modern tech stack including Bootstrap and jQuery, and uses plugins for SEO, anti-spam, and accessibility. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and anti-spam measures, though some security headers are missing and no explicit security policy or incident response information is provided. Privacy compliance is basic with a privacy policy and cookie policy present, but lacking a cookie consent mechanism. Overall, the website is professional, trustworthy, and safe for general audiences.

S

SCHOTT MUSIC GmbH & Co. KG

musikspielundtanz.de

57

Musik, Spiel und Tanz is a specialized media publication operated by SCHOTT MUSIC GmbH & Co. KG, focusing on music, play, and dance education for children aged 0 to 6 years. The website offers magazine issues, educational articles, podcasts, and a shop for pedagogical materials, targeting educators and parents in early childhood development. The site maintains a professional and consistent brand presence with clear contact information and structured content. Technically, the website is built on WordPress with modern plugins and frameworks, providing good mobile optimization and accessibility features. Security posture is solid with HTTPS and anti-spam measures, though some advanced security headers and explicit incident response policies are missing. Privacy compliance is basic, with a privacy and cookie policy present but lacking an active cookie consent mechanism. Overall, the site is trustworthy, safe, and well-maintained, serving a niche educational market effectively.

S

SCHOTT MUSIC GmbH & Co KG

uebenundmusizieren.de

57

Üben und Musizieren is a specialized German media publication operated by SCHOTT MUSIC GmbH & Co KG, focusing on music education and pedagogy. The website offers subscription-based access to print and digital issues, archives, and related content targeting music educators and students. The business operates within the media sector with a niche focus, maintaining a consistent brand and professional content quality. Technically, the site is built on WordPress with modern plugins and frameworks, delivering a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS and anti-spam measures, though improvements in security headers and cookie consent are recommended. Overall, the site is legitimate, transparent, and well-maintained with clear contact information and partner relationships.

S

SCHOTT MUSIC GmbH & Co KG

musikderzeit.de

57

Neue Zeitschrift für Musik is a specialized German media publication focusing on contemporary and avant-garde music. Operated under SCHOTT MUSIC GmbH & Co KG, it offers a rich collection of articles, news, and archival content targeting musicians, composers, and music scholars. The website is professionally designed with consistent branding and clear navigation, serving a niche but dedicated audience. Technically, the site runs on WordPress with modern plugins for SEO, accessibility, and anti-spam, though some analytics tools are not fully configured. Security posture is solid with HTTPS and anti-spam measures, but could be improved with additional security headers and explicit incident response policies. Privacy compliance is adequate with clear privacy and legal pages, though cookie consent mechanisms are not fully implemented. Overall, the site is trustworthy, content-rich, and well-maintained, suitable for its target audience and business model.

S

SCHOTT MUSIC GmbH & Co KG

dasorchester.de

55

Das Orchester is a specialized German media publication operated by SCHOTT MUSIC GmbH & Co KG, focusing on orchestral music and providing the largest job market for orchestra musicians worldwide. The website offers rich editorial content, digital and print subscriptions, and advertising opportunities, targeting professional musicians and cultural stakeholders. Technically, the site is built on WordPress with a modern tech stack including Bootstrap and various plugins for SEO, anti-spam, and accessibility. Security posture is solid with HTTPS and anti-spam measures, though improvements in security headers and explicit cookie consent are recommended. Overall, the site is professional, trustworthy, and well-positioned in its niche.

H

HBS Firmengruppe

hbs-group.de

47

HBS Firmengruppe is a family-owned group of companies specializing in electrical and planning services with multiple subsidiaries distributed across Germany and one in Poland. The group combines craftsmanship with innovative planning, serving a professional audience in the energy sector. Their website is built on TYPO3 CMS and employs modern frontend technologies, offering a good user experience with mobile optimization and clear navigation. Social media presence is strong, supporting brand visibility and engagement. Security posture is solid with HTTPS enforced and secure forms, though explicit security headers and policies are absent. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the website reflects a professional medium-sized enterprise with a consistent brand and trustworthy online presence.

H

Haus für Sicherheit®

hfs-systempartner.de

42

Haus für Sicherheit® is a specialized security technology company based in Germany, offering a wide range of products and services including alarm systems, safes, locking systems, electronic cylinders, video surveillance, mailbox systems, and fire protection technology. The company targets both private and business customers seeking comprehensive security solutions. The website presents a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the site is built on WordPress using the Divi theme, enhanced with SEO and privacy-focused analytics tools such as Matomo. While the site employs HTTPS and obfuscates email addresses to reduce spam, it lacks some advanced security headers and a cookie consent mechanism, which are important for GDPR compliance. Overall, the security posture is moderate with room for improvement in policy transparency and technical safeguards. The domain registration data aligns well with the website content, indicating legitimacy and stable operation.

H

Haus für Sicherheit®

haus-fuer-sicherheit.de

42

Haus für Sicherheit® is a specialized small business focused on comprehensive security technology solutions including alarm systems, safes, locking systems, and video surveillance. The company targets both private and commercial customers seeking reliable security products and services. Their website reflects a professional presence with clear branding and a consistent message emphasizing experience and trust. Technically, the site is built on WordPress using the Divi theme, incorporating modern web technologies and privacy-conscious analytics via Matomo. The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. Security posture is good with HTTPS enforced and obfuscated contact details, but could be improved by adding security headers and incident response information. Privacy compliance is partially met with a privacy and cookie policy present, but lacks a cookie consent mechanism. Overall, the website is trustworthy and functional, supporting the business's market position as a regional security specialist.

H

Haus für Sicherheit® Hannover

hfs-hannover.de

40

Haus für Sicherheit® Hannover is a specialized security technology company based in Germany, focusing on mechanical and electronic security solutions including locking systems, safes, alarm systems, and video surveillance. The company targets both private and commercial customers seeking comprehensive security services. Their market position is that of a local specialist with a professional online presence and a clear business focus. Technically, the website is built on WordPress using the Divi theme, incorporating modern analytics tools such as Matomo and Google Analytics, and demonstrates good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS, uses common security headers, and obfuscates email addresses to reduce spam, though it lacks a cookie consent mechanism and explicit security or incident response policies. Overall, the website is trustworthy and professional, with room for improvement in privacy compliance and security transparency.

H

Haus für Sicherheit® Hildesheim

hfs-hildesheim.de

39

Haus für Sicherheit® Hildesheim is a specialized small business focused on providing comprehensive mechanical and electronic security technology solutions including locking systems, safes, alarm systems, and consulting services primarily for the Hildesheim region in Germany. The website reflects a professional and consistent brand presence with clear contact information and relevant service offerings. Technically, the site is built on WordPress using the Divi theme and integrates privacy-conscious analytics via Matomo alongside Google Analytics. Security posture is adequate with HTTPS enforced and email obfuscation implemented, though there is room for improvement in security headers and cookie consent mechanisms. Overall, the site is trustworthy and well-positioned for its local market niche.

L

Lichtwerber Deutschland e.V.

lwd24.de

42

Lichtwerber Deutschland e.V. is a German non-profit industry association representing companies in the illuminated advertising sector. The website provides comprehensive information about the association, including membership, events, industry news, and international partnerships. The organization targets professionals and companies within the illuminated advertising industry in Germany and abroad. The site is built on a modern WordPress platform using Elementor and related plugins, indicating a moderate level of digital maturity and technical infrastructure. Security posture is adequate with HTTPS enforced and updated software, but lacks advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional, trustworthy, and serves its business purpose effectively.

F

Fédération Internationale Catholique d’Education Physique et sportive

ficep.org

54

FICEP (Fédération Internationale Catholique d’Education Physique et sportive) is an international non-profit sports association promoting Christian ethical ideals in sports and communities. Established in 2003, it serves a niche audience of Christian sports organizations and advocates for the integration of Christian values in physical education and sports activities worldwide. The website reflects this mission with relevant content and a professional design tailored to its audience. Technically, the site is built on WordPress using popular plugins such as Modern Events Calendar Lite and Nextend Smart Slider3 Pro, indicating a moderate level of digital maturity. The site is mobile-optimized and uses HTTPS with a valid SSL certificate, ensuring secure communications. However, it lacks some key compliance documents such as a privacy policy and terms of service, which are important for GDPR and general user trust. Security posture is adequate with HTTPS but could be improved by adding security headers and publishing incident response and vulnerability disclosure policies. Overall, the website is functional and professional but would benefit from enhanced privacy and security documentation to improve trust and compliance.

C

CVJM Deutschland

cvjm.de

49

CVJM Deutschland is a well-established non-profit Christian youth organization operating primarily in Germany with a global YMCA affiliation. The website serves as an information hub for youth aged 10 to 30, offering community, spiritual growth, volunteer opportunities, and sports activities. The organization maintains a strong social media presence and provides clear contact information and donation options. Technically, the site uses Ecics CMS with jQuery, Slick Carousel, and Matomo analytics, delivering a moderately performant and mobile-optimized experience. Security posture is adequate with HTTPS and no visible vulnerabilities, but lacks advanced security headers and published policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and well-aligned with its mission.

Zusammen im Austausch is a German-Polish youth exchange platform operated under the Deutsch-Polnisches Jugendwerk (DPJW). It serves as an informational and resource hub for youth organizations, schools, and partners involved in cross-border cooperation projects. The website provides categorized project examples, search functionality for educational institutions, and practical tools to support cooperation. The platform targets youth and educational stakeholders interested in fostering German-Polish relations through exchange programs. Technically, the site is built on WordPress 4.5.2 with common plugins such as Contact Form 7 and Slider WD, and integrates Google Analytics and YouTube APIs for tracking and media embedding. While the site is functional and well-structured with good navigation and mobile optimization, it uses an outdated WordPress version, which poses security risks. No explicit cookie consent or comprehensive privacy policy is present, indicating partial GDPR compliance. Security headers are not detected, and no incident response or vulnerability disclosure policies are found, suggesting room for improvement in security posture. Overall, the website is credible and professional but would benefit from technical and compliance updates to enhance security and privacy.

A

AIONLINE.PL SP. Z O.O.

aionline.pl

51

AIONLINE.PL SP. Z O.O. is a Warsaw-based interactive agency specializing in digital marketing services including SEO, Google Ads campaigns, ecommerce development, and website design with a focus on AI and UX/UI. The company targets small and medium-sized businesses in Poland, offering comprehensive digital solutions to enhance online visibility and sales. The website reflects a professional and consistent brand image with clear service offerings and client references. Technically, the site is built on WordPress with modern plugins and scripts, optimized for mobile and SEO, and includes GDPR-compliant privacy and cookie policies with active consent mechanisms. Security posture is solid with HTTPS and DNSSEC enabled, though additional security headers and policies could enhance protection. No critical vulnerabilities or suspicious content were detected, and the domain registration data supports the legitimacy and stability of the business. Overall, the website presents a trustworthy and competent digital marketing agency with room for security and compliance improvements.

P

Polsko-Niemiecka Współpraca Młodzieży

pnwm.org

53

Polsko-Niemiecka Współpraca Młodzieży (PNWM) is a well-established non-profit organization founded in 1998, dedicated to fostering Polish-German youth cooperation through funding, educational resources, and project support. The website serves as a comprehensive platform offering information on grants, training, publications, and partner search tools, targeting youth organizations, schools, and project organizers in Poland and Germany. The organization maintains a strong market position as a bilateral youth cooperation entity with a medium-sized operational scale and a clear mission to support international youth exchange projects. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, WPML for multilingual support, and Matomo for privacy-conscious analytics. It demonstrates good mobile optimization, accessibility, and SEO practices. The site employs HTTPS with a good SSL configuration and uses a cookie consent mechanism compliant with GDPR, reflecting a mature digital infrastructure. From a security perspective, the site follows best practices including HTTPS enforcement, cookie consent, and privacy-respecting analytics. However, there is room for improvement by enabling DNSSEC, implementing additional security headers, and publishing explicit security policies and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Overall, PNWM's website is professional, trustworthy, and compliant with privacy regulations, supporting its mission effectively. The domain's WHOIS data confirms legitimacy with a long registration history consistent with the organization's profile. Strategic recommendations include enhancing security headers, publishing security policies, and continuous monitoring of third-party plugins to maintain a strong security posture.

F

Fränkischer Marienweg

fraenkischer-marienweg.de

53

Fränkischer Marienweg is a small non-profit organization dedicated to promoting the cultural and religious heritage of the Franconia region in Germany through the Fränkischer Marienweg pilgrimage route. The website provides comprehensive information about the pilgrimage, including events, downloadable route data, and useful resources for pilgrims. It targets pilgrims, tourists, and cultural enthusiasts interested in Marian devotion and regional heritage. The site is built on WordPress with Elementor and uses reputable plugins for event management and file downloads, reflecting a moderate to good level of digital maturity.

B

Bayerisches Staatsbad Bad Steben

bad-steben.de

51

Bayerisches Staatsbad Bad Steben operates a regional health and wellness spa specializing in radon and moor therapies located in the Naturpark Frankenwald, Germany. The website serves as an information and booking platform targeting tourists and patients seeking therapeutic and wellness services. The business holds a solid market position as a state-recognized spa with unique natural healing offerings. Technically, the site is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and YouTube integration, hosted by Int-Tech. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS, security headers, and privacy compliance, though there is room for improvement in formal security policy publication and incident response readiness. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

E

Evangelische Kirchengemeinde und Pfarrei Bad Steben

badsteben-evangelisch.de

44

The website www.badsteben-evangelisch.de serves as the official online presence for the Evangelical Lutheran Church communities of Bad Steben, Bobengrün, and Langenbach in Bavaria, Germany. It provides visitors with information about church services, community events, liturgical calendars, and church music activities. The site targets local community members and guests interested in the Evangelical Lutheran faith and related cultural events. The business model is non-profit and community-focused, emphasizing religious and cultural engagement rather than commercial activities. Technically, the website is built on Drupal 10 CMS with Bootstrap for responsive design and includes modern JavaScript libraries such as Klaro for cookie consent management and OpenLayers for map display. The site is mobile-optimized, accessible, and well-structured, with good SEO practices. Hosting is provided by kunde24.de, consistent with the domain's WHOIS data. From a security perspective, the site uses HTTPS (implied by canonical URLs), implements a cookie consent mechanism, and avoids exposing sensitive data. However, no explicit security headers or incident response policies are published, and no terms of service or vulnerability disclosure statements are present. The site shows good privacy compliance with GDPR through its privacy policy and consent manager. Overall, the website is trustworthy, professionally maintained, and suitable for its community and religious audience. Recommendations include enhancing security headers, publishing security and incident response policies, and adding terms of service to improve transparency and compliance.

K

Kreisjugendring Hof

kjr-hof.de

50

Kreisjugendring Hof is a regional non-profit organization affiliated with the Bayerischer Jugendring, focused on youth work and community engagement in the Hof district of Germany. The website provides detailed information about youth programs, training courses like Juleica, event organization, and equipment rental services. The organization targets youth, volunteers, and families, positioning itself as a key regional player in youth development and support. Technically, the site is built on WordPress with modern plugins such as Elementor and Slider Revolution, hosted behind Cloudflare DNS for performance and security. The site is well-structured, mobile-optimized, and accessible, with a good level of SEO and privacy compliance including GDPR-aligned cookie consent and a privacy policy. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers could be improved and a vulnerability disclosure mechanism is absent. Overall, the site is trustworthy, professional, and serves its community effectively.

U

USU Software AG

usu.com

66

USU Software AG is a technology company specializing in IT service management, IT asset management, and AI-driven enterprise solutions. The company positions itself as a leader in optimizing IT operations and elevating service delivery through innovative cloud, risk management, and cost control solutions. Their website reflects a mature digital presence with comprehensive product offerings and resources targeting IT professionals and enterprise decision makers. Technically, the site is built on HubSpot CMS with extensive use of modern analytics and marketing tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS and security headers implemented, though explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy, but the professional branding and external references support the company's credibility. Overall, USU demonstrates a robust business and technical foundation with room for improvement in transparency around security and domain registration details.

V

vkm Bayern

vkm-bayern.de

76

The vkm-Bayern website represents a regional non-profit union dedicated to church and diaconal employees in Bavaria, Germany. It focuses on advocating for fair wages, employee rights, and fostering a strong service community. The organization positions itself as a strong regional player within its niche, targeting employees in religious and social service sectors. The website content is professionally presented, with clear branding and consistent messaging aligned with its mission. Technically, the website is built on WordPress using Elementor and WooCommerce, indicating a mature digital infrastructure capable of supporting content management and e-commerce functionalities. Hosting is via AWS DNS services, ensuring reliable availability. The site implements GDPR-compliant cookie consent mechanisms and privacy policies, reflecting good digital maturity and regulatory adherence. Performance and mobile optimization are adequate, though accessibility features could be enhanced. From a security perspective, the site enforces HTTPS, employs standard security headers, and avoids exposing sensitive data. However, it lacks publicly available security policies and incident response contacts, which are recommended for transparency and preparedness. No vulnerabilities or suspicious activities were detected in the analysis. Overall, the website is trustworthy and professionally managed, with room for improvement in security transparency and accessibility. Strategic recommendations include publishing a security policy, incident response contacts, and enhancing accessibility compliance to strengthen user trust and regulatory adherence.

D

Deutsches Liturgisches Institut

dli.institute

44

The Deutsches Liturgisches Institut operates as a specialized non-profit institute dedicated to liturgical research, education, and resource provision primarily for German-speaking religious communities. The website serves as a portal for accessing publications, educational courses, event information, and practical liturgical aids. The organization maintains a consistent brand presence and provides clear contact information, reinforcing its credibility within its niche market. Technically, the website is built on WordPress and utilizes common libraries such as jQuery and RoyalSlider. While the site is accessible and functional with moderate performance, some technical improvements are recommended, including enforcing HTTPS on all resources and enhancing security headers. The site lacks a cookie consent mechanism, which is a compliance gap under GDPR regulations. From a security perspective, the site uses HTTPS but does not implement advanced security headers or mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable due to TLD restrictions, but the domain appears legitimate and actively maintained. Overall, the security posture is moderate but could benefit from improvements in security best practices and privacy compliance. The overall risk is low given the non-profit nature and content focus, but strategic enhancements in technical security and privacy compliance would strengthen trust and reduce potential risks.

E

Evangelischer KITA-Verband Bayern e.V.

evkita-bayern.de

49

The Evangelischer KITA-Verband Bayern e.V. is a regional non-profit association representing childcare providers affiliated with the Evangelical Lutheran Church in Bavaria. The organization offers advisory services, training, information, and advocacy for kindergartens and daycare providers. Their website reflects a professional and consistent brand image, targeting childcare professionals and church organizations in Bavaria. Technically, the site is built on TYPO3 CMS with modern frontend frameworks like Bootstrap and jQuery, providing a responsive and accessible user experience. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism, though it lacks published formal security policies or incident response contacts. Overall, the website is trustworthy, compliant with GDPR, and well-aligned with its business purpose.

W

Wach- und Werkschutz Kurt Strube GmbH

wws-strube.de

57

Wach- und Werkschutz Kurt Strube GmbH is a medium-sized German company specializing in fullservice security and facility management services, primarily serving cultural institutions and businesses. Founded in 1983, the company has a long-standing presence in the Emsland region and offers a broad range of services including security personnel, building cleaning, facility management, and temporary staffing. Their website reflects a professional and consistent brand image with clear navigation and comprehensive service descriptions. The company maintains active social media profiles and provides transparent contact information, enhancing trust and accessibility. Technically, the website is built on WordPress using modern plugins such as WPBakery Page Builder, Slider Revolution, and Borlabs Cookie for privacy compliance. The site is mobile-optimized and includes SEO best practices such as meta tags and structured data. Security-wise, the site enforces HTTPS and uses security plugins like Wordfence, but lacks explicit security headers and a published security policy or incident response information. Cookie consent is implemented in compliance with GDPR. Overall, the security posture is solid but could be improved by adding security headers, a vulnerability disclosure policy, and incident response contacts. The domain WHOIS data aligns well with the business claims, showing consistency and legitimacy. No WAF or blocking mechanisms were detected, allowing full content access. The website content is safe for general audiences with no adult or questionable material. Strategic recommendations include enhancing security headers, publishing a security.txt file, and improving accessibility features to further strengthen compliance and trust.

B

Bergh Special Products

berghspecialproducts.nl

61

Bergh Special Products is a specialized Dutch company focused on manufacturing and supplying wheelchair parts, accessories, and custom products such as spoke protectors and work surfaces. The company operates an e-commerce platform targeting both individual consumers and business clients, positioning itself as a niche supplier within the wheelchair and industrial product market. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the site is built on ASP.NET Web Forms with Telerik UI components and uses modern front-end frameworks like Bootstrap and FontAwesome. It integrates Google Tag Manager for analytics and maintains a moderate performance profile with good mobile optimization. Security-wise, the site enforces HTTPS and follows basic best practices but lacks some advanced headers like Content-Security-Policy. Privacy compliance is well addressed with visible privacy and cookie policies and GDPR adherence. No critical vulnerabilities or suspicious patterns were detected, and the domain registration aligns well with the business claims, indicating legitimacy and trustworthiness.

E

Evangelisch-Lutherisches Dekanat Hof

dekanat-hof.de

46

The website www.dekanat-hof.de represents the Evangelisch-Lutherisches Dekanat Hof, a regional church organization in Germany providing religious, community, and social services. The site is well-structured, content-rich, and targets local community members including families, youth, and churchgoers. It offers information on events, contact persons, and church music groups, reflecting a strong community engagement focus. Technically, the site is built on Drupal 10 with modern web technologies and includes GDPR-compliant cookie consent mechanisms. The hosting is managed via kunde24.de, and the site shows good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent, though some security headers could be improved. No critical vulnerabilities or malicious content were detected. WHOIS data is limited but consistent with the site's purpose and hosting. Overall, the site is trustworthy, professional, and compliant with privacy regulations.

The website bernhard-lichtenberg-hof.de serves as the official online presence for the Catholic parish Bernhard Lichtenberg in Hof, Germany. It provides comprehensive information about church services, community events, pastoral contacts, and religious education. The site targets local parishioners and visitors interested in the Catholic community activities within the Hof region. The business model is non-profit, focusing on spiritual and community services. The website is well-branded, consistent, and contains trust indicators such as official contact details and legal disclosures.