Security Directory

A

ALEA Music

alea-music.com

41

ALEA Music is a small, professional live band service based in Germany specializing in event entertainment including background music and party performances. The website presents a well-structured, content-rich platform showcasing their services, band members, and multimedia content to engage potential clients. The technical infrastructure uses modern web technologies such as Bootstrap, jQuery, and Google Analytics, providing a responsive and user-friendly experience. However, the absence of WHOIS data raises concerns about domain registration legitimacy, though the website content itself is professional and consistent with a legitimate business. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms, indicating room for improvement in compliance and security best practices.

A

ANAFRA a.s.

anafra.eu

54

ANAFRA a.s. is a Czech-based IT services company specializing in IT infrastructure solutions including virtual private servers, hosting, colocation, cloud storage via Nextcloud, IT management, and hardware sales with a focus on Supermicro systems. Established in 2006, the company positions itself as a trusted system integrator and IT partner for businesses requiring tailored IT solutions. The website reflects a professional and consistent brand image with clear navigation and multilingual support, targeting business and IT professional audiences. Technically, the site employs modern tracking and marketing technologies such as Google Tag Manager, Microsoft Clarity, and MailerLite, alongside live chat support via LimeTalk. The site is mobile optimized and performs moderately well, though no explicit CMS was detected, suggesting a custom or proprietary platform. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but lacks explicit security headers and published security policies. Privacy compliance is partial, with terms of service present but no visible cookie consent mechanism or privacy policy page. Overall, the site is trustworthy and professional but could improve in privacy and security transparency.

E

eCouleur : Die nachhaltige Designagentur

ecouleur.com

45

eCouleur is a sustainable design agency based in Cologne and Berlin, Germany, established in 2009. They specialize in creative services such as branding, print and digital media, web design, online marketing, and accessible publications, targeting clients interested in ecological and inclusive design solutions. The website reflects a mature digital presence with professional design, clear navigation, and SEO optimization. Technically, the site is built on WordPress with modern plugins and performance optimizations, though some security headers and DNSSEC are missing. Security posture is good with HTTPS and domain transfer protections, but lacks explicit security policies or incident response contacts. Privacy compliance is partial, with cookie consent implemented but no visible privacy or terms pages. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

M

Museen der Stadt Aschaffenburg

stiftsschatz.de

38

The website represents the Stiftsschatz exhibition of the Museen der Stadt Aschaffenburg, a cultural institution showcasing medieval treasures. It serves a local/regional audience interested in historical and religious artifacts. The site provides basic information and navigation in multiple languages but lacks comprehensive contact and policy information. Technically, the site uses standard web technologies including HTML, CSS, JavaScript, and jQuery, with Google Analytics for visitor tracking. The security posture is moderate with IP anonymization in analytics but lacks visible security headers and privacy compliance documentation. Overall, the site is functional but would benefit from enhanced privacy, security, and contact transparency to improve trust and compliance.

S

significa GmbH

significa.de

46

significa GmbH is a German full-service marketing agency specializing in digital and classical marketing solutions primarily for medium-sized companies in the technology and industrial sectors. With over 20 years of experience, the company offers a broad range of services including design, digital marketing, classic advertising, content creation, consulting, and innovative marketing on demand. The website reflects a professional and consistent brand image supported by client testimonials and a diverse portfolio of reputable clients. Technically, the site is built on a modern stack including HTML5, CSS3, JavaScript, jQuery, and uses REDAXO CMS with Matomo for privacy-conscious analytics. The site is well-optimized for SEO, accessibility, and mobile devices, providing a positive user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are not publicly disclosed. Overall, the site demonstrates high professionalism and trustworthiness with no signs of malicious content or blocking mechanisms.

Casino Aschaffenburg operates as a cultural arthouse cinema located in Aschaffenburg, Germany, offering a curated program of arthouse films, special film series, and events. The business targets local cinema enthusiasts and cultural audiences, providing ticket sales, café services, and venue rental. The website reflects a small-sized, community-focused business with consistent branding and good content quality. Technically, the site is built on TYPO3 CMS with modern frontend technologies including jQuery and Slick Slider, and incorporates a cookie consent manager (Klaro) to comply with privacy regulations. The site is mobile-optimized and provides a clear navigation structure. Security-wise, the website enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and incident response information. No vulnerabilities or suspicious content were detected. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

B

Baumüller Nürnberg GmbH

baumueller.com

57

Baumüller Nürnberg GmbH is a leading manufacturer specializing in electric automation and drive systems, serving industrial and mobility sectors. Established in 1930, the company holds a strong market position with a comprehensive portfolio including servo drives, control platforms, motors, and engineering tools. Their business model focuses on B2B engagements, supporting customers throughout the entire lifecycle from engineering to predictive maintenance. The website reflects a mature digital presence with multi-language support and detailed industry-specific content. Technically, the website is built on Joomla CMS with modern frameworks like UIkit and jQuery, enhanced by Google Tag Manager and CookieFirst for analytics and consent management. The site is mobile-optimized, accessible, and SEO-friendly, indicating a well-maintained technical infrastructure. Security posture is robust with HTTPS enforced, secure forms, and cookie consent mechanisms. However, explicit security policies and incident response contacts are not publicly visible, suggesting room for improvement in transparency. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy front for Baumüller, though the absence of WHOIS data due to privacy protection slightly impacts domain trust analysis. Strategic recommendations include publishing security policies, adding vulnerability disclosure channels, and enhancing direct security contact information.

T

Technische Universität Nürnberg

utn.de

62

Technische Universität Nürnberg (UTN) is a newly established public university in Germany focusing on interdisciplinary education and research in artificial intelligence and robotics. The website presents a modern, well-structured platform showcasing their master programs, research labs, sustainability initiatives, and public engagement activities. The university targets students, researchers, and international audiences interested in cutting-edge technology education. Technically, the site is built on WordPress with a solid tech stack including jQuery and media plugins, hosted likely on university infrastructure. Security posture is strong with HTTPS, cookie consent, and session management, though some security headers could be improved. Privacy compliance is robust with clear GDPR-aligned policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-optimized for SEO and accessibility.

I

IHK Nürnberg für Mittelfranken

ihk-nuernberg.de

74

IHK Nürnberg für Mittelfranken is a regional chamber of commerce serving the Mittelfranken region in Germany. The organization supports local businesses through advisory services, training, and representation of business interests. Their website reflects a mature digital presence with a structured content hierarchy covering topics such as international trade, sustainability, energy, innovation, and logistics. The target audience includes companies, international professionals, and stakeholders in various sectors. Technically, the site is built on TYPO3 CMS, uses modern JavaScript libraries, and integrates privacy-respecting Matomo analytics alongside a robust cookie consent mechanism. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though some security headers could be improved. The site provides clear contact information including email, phone, and chat support, enhancing business credibility. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

V

VertiGIS

topographics.de

61

VertiGIS is a German-based technology company specializing in geospatial software solutions for sectors including utilities, infrastructure, telecommunications, and construction. The company recently integrated TOPO graphics into its portfolio, enhancing its product offerings such as the VertiGIS Data Converter and VertiGIS Studio. The website demonstrates a professional presence with clear branding and targeted content for business clients in relevant industries. Technically, the site is built on WordPress with modern plugins for SEO, cookie management, and user experience, delivering good performance and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers and explicit policies could be improved. WHOIS data is unavailable, likely due to privacy protection, but the website's professionalism and compliance with GDPR indicate legitimacy. Overall, VertiGIS presents a credible and well-maintained digital presence aligned with its business objectives.

The website www.bender-verlag.com is currently inaccessible beyond a maintenance mode placeholder page in German, indicating the site is offline or under maintenance. There is no accessible business content, contact information, or security and privacy policies. The technical infrastructure is minimal, relying on WordPress with the SeedProd coming soon plugin, jQuery, Tailwind CSS, and FontAwesome. No advanced security headers or analytics tools are detected. The WHOIS data is unavailable or the domain appears unregistered, which severely impacts trust and legitimacy. Overall, the site lacks digital maturity and security posture, providing no meaningful business or compliance information.

H

Human Care Group

humancaregroup.com

54

Human Care Group operates a professional website offering safe patient handling products and walking aids targeted at clients and caregivers within the healthcare sector. The company appears to be established since 2019 and positions itself as a reliable supplier in this niche. The website is built on WordPress with modern SEO and consent tools, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent implemented, but lacks explicit security policies and WHOIS transparency. Overall, the site is trustworthy but would benefit from enhanced compliance and transparency measures.

K

Klaveness Footwear

klaveness.no

66

Klaveness Footwear is a specialized retailer focused on prescription, orthopaedic, medical, rehabilitation, and custom footwear, primarily serving the Nordic market. Established in 1999, the company offers a broad range of footwear products tailored for comfort and medical needs, leveraging an e-commerce platform built on Magento 2. The website is professionally designed with clear navigation, mobile optimization, and comprehensive content that targets customers requiring specialized footwear solutions. Technically, the site uses modern JavaScript libraries and Magento's PageBuilder for content management, ensuring a good user experience and moderate performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit security policy or incident response information is published. Overall, the site demonstrates a high level of business credibility and privacy compliance, with clear contact information and social media presence. Recommendations include enhancing security headers and publishing formal security policies to further strengthen trust and compliance.

E

Embreis AB

embreis.com

59

Embreis AB operates a specialized e-commerce website focused on orthoses, prostheses, and related materials, targeting healthcare professionals and patients in Sweden. The company has a well-established domain since 2008 and uses a WordPress CMS with WooCommerce and the Avada theme for its online presence. The website integrates analytics and customer engagement tools such as Google Analytics and Intercom, indicating a moderate level of digital maturity. However, the absence of visible privacy and cookie policies suggests gaps in privacy compliance. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security and security headers. Overall, the website presents a professional and trustworthy front but would benefit from enhanced compliance and security practices.

F

Fillauer

fillauer.com

65

Fillauer is a medium-sized healthcare company specializing in prosthetic and orthotic devices, serving both healthcare professionals and patients. The company has an established market presence since 1998 and operates an e-commerce platform built on WordPress and WooCommerce. The website employs modern technologies including jQuery, Font Awesome, and Google Tag Manager, indicating a moderate level of digital maturity. While the site is functional and professionally designed with good navigation and mobile optimization, it lacks visible privacy and cookie policies, which are critical for compliance and user trust. Security posture is adequate with HTTPS enabled and domain registration protections in place, but the absence of security headers and incident response information suggests room for improvement. Overall, the website is safe and trustworthy but would benefit from enhanced privacy compliance and security best practices.

F

Funke Medical

funke-medical.de

45

Funke Medical is a medium-sized German company specializing in manufacturing decubitus therapy systems, seating aids, and mobility aids, positioning itself as a leading provider in the healthcare sector within Germany. The website is professionally designed using WordPress with modern plugins and technologies, including Yoast SEO and Google Analytics, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers and incident response details are missing. Overall, the site is trustworthy, compliant with GDPR, and targets healthcare professionals and patients needing mobility solutions.

R

Respecta Oy

respecta.fi

55

Respecta Oy is a Finnish healthcare company specializing in assistive devices, prosthetics, and health technology solutions. The company serves both individual consumers and organizations, offering products, rental services, rehabilitation, and ergonomic solutions. The website reflects a mature market position with comprehensive service offerings and a strong local presence in Finland. Technically, the website uses modern JavaScript libraries and third-party tools such as Usercentrics for cookie consent and Google Tag Manager for analytics, indicating a good level of digital maturity. Security posture is strong with HTTPS enforced, privacy compliance evident, and no critical vulnerabilities detected. The website is professionally designed with excellent content quality and navigation, supporting a high trustworthiness rating. Overall, the site demonstrates a well-managed online presence aligned with business goals and regulatory requirements.

L

Livit Ottobock Care

livit.nl

71

Livit Ottobock Care is a specialized orthopedic healthcare provider based in the Netherlands, offering services such as prosthetics, orthotics, and rehabilitation support. The company targets patients requiring orthopedic care and operates a professional and user-friendly website that facilitates appointment scheduling and provides comprehensive information about their services. Technically, the website is built on WordPress using modern libraries and frameworks, with good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS, implements key security headers, and uses secure forms, though it lacks a dedicated security policy or incident response page. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

B

Behinderten-Sportverband Niedersachsen e.V.

bsn-ev.de

53

The Behinderten-Sportverband Niedersachsen e.V. (BSN e.V.) is a regional non-profit sports association in Germany focused on disability sports and rehabilitation training. Their website provides comprehensive information about their services, including rehabilitation sports and function training, targeting individuals interested in disabled sports within Niedersachsen. The site is built on TYPO3 CMS and incorporates modern web technologies such as Vue.js and jQuery, with integrated Google services for analytics and marketing. The presence of Cookiebot ensures GDPR-compliant cookie consent management. Security measures include HTTPS enforcement, security headers, and reCAPTCHA for form protection. No critical vulnerabilities or security issues were detected, and the site maintains a good privacy posture with a detailed privacy policy and cookie declaration. Overall, the website is professional, accessible, and trustworthy, serving its target audience effectively.

C

Carnegie Hall

carnegiehall.org

51

The analyzed URL is a queue/waiting room page powered by Queue-it for Carnegie Hall, designed to manage high traffic volume and control access to the main website. The page itself contains minimal content focused on queue status and instructions, with no direct business or contact information. The technical infrastructure relies on modern JavaScript libraries and multiple third-party analytics and marketing pixels, indicating a mature digital marketing setup. However, the page lacks visible privacy, cookie, or terms of service policies, and no contact or incident response information is provided. Security posture is moderate due to HTTPS usage and Queue-it's anti-bot mechanisms, but absence of security headers and policies reduces overall security confidence. The domain WHOIS data is unavailable due to privacy protection or query failure, which is common for large organizations but slightly reduces trust. Overall, the page is functional for its purpose but limited in content and compliance transparency.

D

Deutsche Forschungsgemeinschaft

dfg.de

67

The Deutsche Forschungsgemeinschaft (DFG) is Germany's central research funding organization, supporting scientific research across disciplines. The website serves as a comprehensive portal for researchers, institutions, and stakeholders, offering detailed information on funding programs, scientific commissions, and international cooperation. It maintains a strong market position as a leading non-profit government entity in the research sector. Technically, the website is built on the CoreMedia Content Cloud CMS, leveraging modern JavaScript frameworks like Alpine.js and jQuery, and is delivered securely via HTTPS with a robust Content Security Policy. The site is well-structured, mobile-optimized, and integrates multiple official research portals and social media channels, reflecting a mature digital infrastructure. From a security perspective, the site demonstrates good practices including HTTPS enforcement, CSP headers, and secure form handling. However, explicit privacy and cookie policies are not detected in the provided content, indicating room for improvement in privacy compliance. No vulnerabilities or suspicious elements were found. Overall, the site is professional, trustworthy, and safe for general audiences, with recommendations to enhance privacy transparency and incident response contact availability.

M

Missionsprokur der Don Bosco Schwestern

fmamission.de

59

The Missionsprokur der Don Bosco Schwestern is a small German non-profit organization dedicated to supporting development aid projects worldwide, primarily through the efforts of the Don Bosco Sisters. The website clearly communicates its mission, provides donation options, and highlights key projects in various countries. The organization maintains a consistent brand presence and offers transparent contact and banking information to foster trust with donors. Technically, the site is built on the siteswift CMS platform, utilizing modern JavaScript libraries such as jQuery and Swiper.js, and implements a cookie consent mechanism compliant with GDPR. Security posture is adequate with HTTPS and CSRF protections, though some security headers are missing and no explicit security policies are published. Overall, the site is professional, accessible, and trustworthy, with moderate analytics tracking via Matomo and no signs of malicious content or blocking mechanisms.

V

VIDES Freiwilligendienst

vides-freiwilligendienst.net

63

VIDES Freiwilligendienst is a non-profit organization affiliated with the Don Bosco Sisters, providing international volunteer opportunities primarily in education and social services for young adults. The organization has a well-structured website offering detailed information about volunteer placements, preparation, and support, targeting socially engaged youth interested in global solidarity. The website is professionally designed, mobile-optimized, and uses modern web technologies including jQuery, Swiper.js, and a proprietary CMS (siteswift). Privacy and cookie consent mechanisms are implemented in compliance with GDPR standards. However, the WHOIS data for the domain is missing or inaccessible, which raises concerns about domain registration transparency despite the professional appearance of the site. Security posture is generally good with HTTPS and CSRF protections, but lacks explicit security policies or incident response contacts. Overall, the website is trustworthy and serves its non-profit mission effectively, though domain registration verification is recommended.

K

Katholische Nachrichten-Agentur (KNA)

kna-bild.de

74

KNA-Bild is the image agency of the Catholic News Agency (Katholische Nachrichten-Agentur), providing a specialized service focused on religious, cultural, and social news imagery primarily for German-speaking media professionals and institutions. The website demonstrates a moderate level of digital maturity with the use of JavaScript frameworks such as PrimeFaces and OmniFaces, and includes a cookie consent mechanism with analytics opt-in, reflecting some privacy awareness. Security posture is adequate with HTTPS enforced and IP anonymization in analytics, though security headers are minimal and no explicit privacy policy or terms of service were found on the analyzed page. Contact information is not directly visible, which may impact user trust and support accessibility.

F

febis Service GmbH

foerdermittelauskunft.de

64

Foerderdata.de is a German-based online platform operated by febis Service GmbH that specializes in assisting individuals and businesses in finding and applying for government subsidies, particularly in the energy and renewable energy sectors. The website offers a comprehensive subsidy search service and application support, targeting a German-speaking audience interested in state funding programs. The company positions itself as a niche service provider with a focus on energy-related subsidies, leveraging digital tools to simplify access to funding opportunities. Technically, the website is built on WordPress using the Avada theme, integrating modern web technologies such as jQuery, Gravity Forms, and Cookiebot for cookie consent management. The site employs Google Tag Manager and HubSpot for analytics and marketing automation, indicating a mature digital marketing infrastructure. Performance is moderate with good mobile optimization and SEO practices, though accessibility features are basic. From a security perspective, the site enforces HTTPS and implements a detailed cookie consent mechanism compliant with GDPR. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and no dedicated security or incident response policies are published. The use of multiple third-party marketing and tracking services increases the surface for privacy considerations but is managed with user consent. Overall, foerderdata.de presents a professional and trustworthy online presence with a solid business model focused on subsidy facilitation. Security posture is adequate but could be improved with enhanced headers and published policies. Privacy compliance is strong, supported by transparent cookie management. The domain registration is consistent with the business, though some DNS details suggest third-party hosting. Strategic recommendations include strengthening security headers, publishing incident response information, and maintaining transparency in data protection practices.

B

buefet e.V.

buefet.de

54

buefet e.V. is a German non-profit organization dedicated to supporting elderly individuals, people with disabilities, and those requiring care to live independently and with social connection in Kirchheim unter Teck. The website presents a clear overview of their services, including assisted living at home, mobility support, recovery assistance, social activities, and counseling. Their market position is that of a local community service provider with a focus on social welfare. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, optimized for mobile devices and SEO-friendly with Yoast SEO integration. The site loads at a moderate speed and offers a good user experience with clear navigation and consistent branding. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks some advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing trust. Overall, the website is trustworthy and professionally maintained, with minor recommendations to improve security headers, cookie consent, and incident response transparency to further enhance compliance and security posture.

T

Turnverein Bissingen e.V.

tv-bissingen.de

10

Turnverein Bissingen e.V. is a local German sports club offering a variety of sports activities and community events. The website serves as an information hub for members and interested parties, providing details about departments, events, and contact information. The site is built on Joomla! CMS with modern frontend technologies and integrates Matomo for analytics and Usercentrics for cookie consent management. The overall technical infrastructure is solid with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies could enhance protection. No critical vulnerabilities or suspicious content were detected. Privacy compliance is good, with a clear privacy policy and consent mechanism. Business credibility is high given the clear presentation of contact information and consistent branding. The site is safe for general audiences and does not contain adult or questionable content.

T

Trägerverein Freies Kinderhaus e.V.

seegrasspinnerei.de

9

The Alte Seegrasspinnerei website represents a small non-profit organization, Trägerverein Freies Kinderhaus e.V., focused on child and youth community services in Nürtingen, Germany. The organization offers free children's house services, event hosting, workshops, and fundraising initiatives. Their market position is local and community-oriented, targeting families, donors, and supporters of youth welfare. The website content is primarily in German and provides clear contact information and donation links integrated with recognized platforms such as betterplace.org and wirwunder.de. Technically, the website is built on WordPress with common plugins for event management and galleries. The infrastructure includes jQuery and FontAwesome, hosted with DNS services from DomainControl (GoDaddy). The site is moderately performant and mobile-optimized, with basic accessibility and SEO features. No advanced security headers were detected, but HTTPS is enforced, and no sensitive data exposure was found. From a security perspective, the site shows a moderate security posture with room for improvement in implementing security headers and visible security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. No incident response or vulnerability disclosure information is available. The domain WHOIS data is minimal but consistent with a legitimate small non-profit entity. Overall, the website is professional, trustworthy, and safe for general audiences, with recommendations to enhance security headers, privacy compliance, and incident response transparency to improve trust and resilience.

Katholische Erwachsenenbildung MittenInFranken e. V. is a small regional non-profit organization dedicated to adult education and community engagement in the Ansbach-Neustadt/Aisch region of Germany. The website provides information about events, courses, seminars, and organizational details, targeting adults interested in Catholic adult education. The organization maintains a professional online presence with clear navigation, event listings, and downloadable program brochures. Contact information and privacy policies are clearly presented, supporting transparency and trust. Technically, the website uses a modern tech stack including Bootstrap, jQuery, Font Awesome, and JW Player, hosted on servers associated with internet1.de. It employs Matomo analytics with privacy-conscious configurations and Google reCAPTCHA for bot protection. The site is mobile-optimized and implements a detailed cookie consent mechanism, reflecting good digital maturity. From a security perspective, the website enforces HTTPS and uses cookie consent to comply with GDPR. However, it lacks explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is minimal and domain status is unusual, but the website content and contact details support legitimacy. Overall, the website is well-structured, secure, and compliant with privacy regulations, suitable for its non-profit educational mission. Strategic improvements could include adding explicit security policies and enhancing security headers to further strengthen its security posture.

V

Verband der W. K. St. V. Unitas e.V.

unitas.org

10

The website www.unitas.org represents the Verband der Wissenschaftlichen Katholischen Studentenvereine Unitas e.V., the oldest Catholic student and academic association in Germany, founded in 1855. It serves as a community platform for Catholic students and alumni across 29 university locations, offering social, educational, and religious activities. The organization uniquely includes both male and female student associations and emphasizes lifelong connections and social responsibility through various projects and events. The site content is primarily in German and targets Catholic students and academics in Germany.

S

Schönstatt-Institut Marienbrüder e.V.

smj-deutschland.de

10

The website www.smj-deutschland.de represents the Schönstatt Mannes Jugend, a German non-profit youth religious organization. It serves as an official information portal about the organization's work, principles, and diocesan branches. The site targets members and interested individuals within Germany, providing community, spiritual education, and event information. The business model is typical for a small non-profit focused on youth and religious community building. Technically, the site is built on the Jimdo Creator CMS platform, hosted by Jimdo, and uses standard web technologies including jQuery and Facebook SDK for social integration. The site is mobile-optimized with good navigation and content quality. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a clear privacy policy and cookie mechanism. Overall, the site is professional, trustworthy, and safe for general audiences.

Q

Quickborn AK

quickborn-ak.de

10

Quickborn AK is a German non-profit organization dedicated to cultural and educational activities, primarily organizing events such as the Silvestertagung and Augustwoche that focus on social, political, and spiritual themes. The website serves as an information hub for these events and the organization's history and mission. The target audience includes community members interested in cultural dialogue and education. Technically, the website is built on WordPress using a modern theme and plugins, hosted on a reputable German hosting provider. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced but lacks advanced security headers and incident response information. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and professionally maintained, suitable for its non-profit educational purpose.

Pfadfinderinnenschaft St. Georg (PSG) is a well-established German non-profit organization dedicated to empowering girls and young women through scouting activities. Founded in 1947, PSG is affiliated with the global WAGGGS network and serves approximately 9,000 members nationwide. The organization offers membership services, educational programs, international partnerships, and publishes a dedicated magazine. The website reflects a professional and consistent brand image with clear navigation and content relevant to its audience. Technically, the website is built on the Contao CMS platform, utilizing modern web technologies such as Bootstrap and jQuery. It features responsive design and accessibility tools, including a cookie consent mechanism compliant with GDPR. Performance is moderate with room for optimization, and the site employs HTTPS with a good SSL configuration. From a security perspective, the site demonstrates good practices including HTTPS enforcement and cookie consent management. However, it lacks explicit security headers and documented security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed through a detailed privacy policy and cookie banner. Contact information is primarily via a contact form, with no direct emails or phone numbers visible. Overall, PSG's website presents a trustworthy and professional digital presence suitable for its non-profit mission. Strategic improvements in security headers and enhanced transparency around security policies could further strengthen its posture.

K

Kolpingjugend – Kolpingwerk Deutschland

kolpingjugend.de

10

Kolpingjugend Deutschland is a well-established non-profit Catholic youth organization focused on engaging children, youth, and young adults in social projects, volunteer work, and community activities. The organization is democratically structured and rooted in the values of Adolph Kolping, with a strong presence in Germany and links to national and international Kolping organizations. The website serves as an information and engagement platform for members and interested parties, providing news, events, and resources. Technically, the website is built on TYPO3 CMS, leveraging modern frontend libraries such as jQuery and Bootstrap. It is hosted on dot-server.de and includes standard web technologies for responsive design and user interaction. The site implements GDPR-compliant cookie consent mechanisms and privacy policies, reflecting a mature approach to data protection and user privacy. From a security perspective, the site uses HTTPS and includes scripts to allow users to opt out of Google Analytics tracking. However, explicit HTTP security headers are not evident in the provided data, and no dedicated security or incident response policies are published. There are no visible vulnerabilities or exposed sensitive data, indicating a reasonable security posture for a non-profit organization. Overall, the website is professional, trustworthy, and well-aligned with its mission. It provides clear contact information via email and maintains transparency through privacy and imprint pages. Strategic improvements could focus on enhancing security headers, publishing incident response information, and expanding contact options.

K

Katholische junge Gemeinde

kjg.de

10

Katholische junge Gemeinde (KjG) is a well-established Catholic youth organization in Germany, focusing on youth engagement, social projects, and community activities. The organization maintains a professional and content-rich website that serves as a hub for information, events, and resources for its members and the public. The site targets youth and young adults interested in Catholic community involvement and social advocacy. KjG operates as a non-profit entity with a medium organizational size and a strong presence in Germany, supported by regional branches and partnerships with other youth and social organizations.

J

Jugendverbände der Gemeinschaft Christlichen Lebens

j-gcl.org

10

The website j-gcl.org represents the Jugendverbände der Gemeinschaft Christlichen Lebens (J-GCL), a non-profit Catholic youth organization in Germany. It serves as an informational and engagement platform for youth members, focusing on faith, community, and social responsibility. The organization has a long-standing presence since 2001, reflected in the domain age and content maturity. The site offers resources, regional group information, and opportunities for involvement, targeting students and young adults within the Catholic community in Germany. Technically, the website is built on WordPress with a modern plugin ecosystem including Yoast SEO and Gutenberg block extensions, ensuring good SEO and content management capabilities. The site is mobile-optimized and provides a user-friendly navigation experience. Hosting and domain registration are managed by reputable providers, with HTTPS enabled and basic security practices in place. However, DNSSEC is not enabled, and additional security headers could enhance the security posture. From a security perspective, the site shows no signs of blocking or WAF interference, and no critical vulnerabilities are evident in the HTML content. Privacy compliance is addressed with a privacy and cookie policy, including consent mechanisms, aligning with GDPR requirements. Contact information is primarily via contact forms, with no direct emails or phone numbers exposed in the HTML. Overall, the website demonstrates a solid digital presence for a small non-profit organization, with good content quality, technical implementation, and business credibility. Security practices are adequate but could be improved with DNSSEC and enhanced HTTP headers. The site is safe for general audiences and maintains a trustworthy and professional image.

I

Internationaler Bauorden

bauorden.de

10

Internationaler Bauorden is a small non-profit organization based in Germany that facilitates volunteer and cultural exchange programs. Their website is built on WordPress and uses common plugins such as Events Manager and Real Cookie Banner to manage events and ensure GDPR compliance. The site is well-structured, mobile-optimized, and provides comprehensive privacy and cookie policies, reflecting a good level of digital maturity. Security posture is strong with HTTPS enforced and standard security headers present, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website presents a trustworthy and professional image suitable for its target audience of volunteers and socially engaged individuals.

D

DJK-Sportverband e.V.

djk.de

57

DJK-Sportverband e.V. is a well-established non-profit sports federation in Germany, founded in 1920, that promotes sports activities underpinned by Christian and inclusive values. The organization targets sports clubs, athletes of all ages and abilities, and community members interested in ethical and inclusive sportsmanship. Their key services include diverse sports offerings, inclusion initiatives, prevention of sexualized violence, and organizing major sports events such as the Bundessportfest. The website reflects a strong community focus and a commitment to social responsibility.

C

Christliche Arbeiterjugend Deutschland

caj.de

52

Christliche Arbeiterjugend Deutschland (CAJ) is a well-established non-profit Christian youth organization in Germany, focusing on social justice, education, and community engagement. The website serves as an information hub for news, events, and organizational activities, targeting young people interested in Christian worker youth movements. The organization has a strong national presence with international connections, founded in 1947, and the international CAJ dates back to 1925. The website content is professionally presented in German, with consistent branding and active social media channels.

B

Bund der St. Sebastianus Schützenjugend

bdsj.de

59

Bund der St. Sebastianus Schützenjugend (BdSJ) is a large non-profit youth organization in Germany with approximately 30,000 members. The organization focuses on social, sporting, and religious youth work, emphasizing cultural and political education within the framework of the Schützenjugend tradition. The website serves as an information hub for the federal association, providing news, project details, and resources for members and interested parties. The organization is well-established, founded in 1961, and maintains a strong presence through its six diocesan associations and over 1,200 brotherhoods. Technically, the website is built on the Alkacon Mercury CMS platform, utilizing modern web technologies including HTML5, CSS3, JavaScript, and jQuery. Accessibility features are implemented via the EyeAble plugin, and the site is mobile-optimized with good SEO practices. The site uses HTTPS with an excellent SSL configuration, ensuring secure communications. Privacy and cookie policies are comprehensive and GDPR compliant, with a consent mechanism in place. Security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the site lacks explicit security policy or incident response information and does not publish a security.txt file. Contact information is clearly presented, including email, phone, physical address, and a contact form with privacy consent. Social media sharing is integrated but no direct official social media profiles are linked. Overall, the website is professional, trustworthy, and well-maintained, reflecting the organization's credibility and commitment to its members. Strategic improvements could include adding explicit security policies and enhancing security headers to further strengthen the security posture.

The website agvnet.de represents the Arbeitsgemeinschaft katholischer Studentenverbände (AGV) e.V., a small non-profit organization uniting Catholic student corporations in Germany. The site provides information about the association's activities, including dialogue seminars with politicians and church representatives, targeting Catholic students and affiliated groups. The organization maintains a niche position within the German Catholic student community, focusing on advocacy and event organization. Technically, the website is built on WordPress using the Divi theme and Yoast SEO plugin, hosted by webgo.de. The site is moderately performant, mobile-optimized, and SEO-friendly, with a clean and professional design. Privacy and cookie policies are implemented with GDPR compliance, though no explicit terms of service or security policies are present. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks visible security headers and explicit incident response information. No vulnerabilities or suspicious elements were detected. The WHOIS data is minimal but consistent with the organization's profile and domain age. Overall, the website presents a trustworthy and professional front for a small non-profit organization, with room for improvement in security headers and explicit policy disclosures to enhance compliance and trustworthiness.

A

Aktion West-Ost e.V.

aktion-west-ost.de

43

Aktion West-Ost e.V. is a small non-profit umbrella organization representing four Catholic youth associations within the BDKJ framework. The organization focuses on international youth work and political education aimed at fostering encounters and exchanges between Central and Eastern Europe. Their mission centers on overcoming East-West boundaries through personal contacts and shared experiences. The website reflects this mission with content in German and English, highlighting projects, publications, and social media engagement. Technically, the website is built on the ProcessWire CMS and leverages a modern JavaScript and CSS stack including jQuery, SlickNav, Slippry, and others to provide a responsive and user-friendly experience. Hosting is managed via kasserver.com, a known hosting provider. The site demonstrates moderate performance and basic SEO and accessibility features. From a security perspective, the site uses HTTPS (assumed), but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and security hardening. No incident response or vulnerability disclosure information is published. No sensitive data exposure or vulnerable libraries were detected in the provided content. Overall, the website is professional, trustworthy, and well-aligned with its non-profit mission. However, improvements in privacy compliance, security headers, and contact transparency would enhance its security posture and user trust.

Z

Zusage

zusage.global

45

Zusage is a German-language platform dedicated to strengthening civil society, likely operating as a non-profit or advocacy organization. The website is built on WordPress and incorporates modern consent management and analytics tools such as Usercentrics and Matomo, indicating a moderate level of digital maturity. The site is accessible without any WAF or blocking mechanisms, and the content is safe for general audiences with no adult or questionable material detected. However, the absence of publicly available WHOIS data and privacy policy reduces transparency and trustworthiness to some extent. Security posture is moderate, with no detected security headers and unknown SSL configuration, suggesting room for improvement in technical security measures.

The website katholische-kirche-hof.de serves as the official online presence for the Catholic parish community in Hof, Germany, affiliated with the Archdiocese of Bamberg. It provides parishioners and visitors with comprehensive information about church services, events, pastoral contacts, community groups, and news. The site targets local community members and religious followers, offering a non-profit service model focused on community engagement and spiritual support. The business operates within the government and non-profit sectors, emphasizing religious and community services.

Caritasverband Stadt- und Landkreis Hof e.V. is a medium-sized non-profit organization focused on providing social services and community support in the Hof region of Germany. Their offerings include social counseling, volunteer coordination, refugee and integration advice, family support, and care services. The organization maintains a strong regional presence and collaborates with partner entities within the Caritas network and local community institutions. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their audience. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and Matomo analytics, ensuring a responsive and user-friendly experience. Security measures include HTTPS enforcement, cookie consent mechanisms, and use of Google reCAPTCHA for form protection. However, explicit security policies and vulnerability disclosure mechanisms are not present. Overall, the website demonstrates a solid security posture with room for improvement in security headers and incident response transparency. The domain registration data aligns well with the organization's identity, reinforcing trustworthiness. Strategic recommendations include enhancing security headers, publishing a security policy, and implementing a security.txt file to improve transparency and compliance.

S

Stadt Hof

hof.de

63

Stadt Hof is the official municipal government website for the city of Hof in Bavaria, Germany. It serves residents and visitors by providing city information, public services, and tourism-related content. The website is built on TYPO3 CMS, a widely used open-source content management system favored by government entities. The site demonstrates a moderate level of digital maturity with a professional design, good mobile optimization, and clear navigation. It employs privacy-conscious analytics through a self-hosted Matomo instance and integrates Usercentrics for consent management, reflecting compliance with privacy regulations. However, explicit privacy policies and terms of service were not found in the provided content, indicating room for improvement in transparency and compliance documentation. Security posture is adequate with HTTPS enforced, but lacks visible security headers and published security policies or incident response information.

The website ssb-hoferland.de serves as the official online presence of the Seelsorgebereich Hofer Land, a Catholic church community in Germany. It provides parishioners and visitors with comprehensive information about church services, events, pastoral staff, and community life. The site targets local community members and operates as a non-profit religious information portal. The business model focuses on community engagement and service rather than commercial activities. The website maintains a consistent brand identity aligned with its religious mission and regional focus.

E

Europäische Metropolregion Nürnberg

innovationskunst.de

46

The website represents the initiative 'Innovationskunst' under the umbrella of the European Metropolitan Region Nuremberg, focusing on promoting innovation and technology in the region. It serves as a platform to showcase technological leadership, research collaborations, and career opportunities, targeting students, professionals, and companies. The site is well-positioned as a regional innovation hub with strong partnerships from industry leaders and research institutions. Technically, the site is built on TYPO3 CMS with modern frontend technologies including Bootstrap and Matomo analytics, ensuring good performance, mobile optimization, and accessibility. The use of structured data and comprehensive metadata supports SEO and content discoverability. From a security perspective, the site enforces HTTPS, employs cookie consent mechanisms, and uses encrypted email links to protect contact information. While explicit security headers are not fully evident, no critical vulnerabilities or exposed sensitive data were found. Privacy compliance is well addressed with clear policies and consent management. Overall, the website demonstrates a mature digital presence with strong business credibility and compliance posture. Strategic improvements in security headers and incident response transparency could further enhance trust and resilience.

Č

České dráhy, a.s.

ceskedrahy.cz

53

České dráhy, a.s. is the largest Czech railway carrier with a nearly 200-year tradition, providing passenger and freight transport services along with related services such as certification, testing, repairs, education, and IT solutions. The company holds a strong market position in the Czech Republic and is expanding its presence internationally. The website reflects a mature digital infrastructure built on Drupal 10, with modern web technologies and good mobile optimization. Privacy and cookie policies are implemented with GDPR compliance, and user tracking is conducted responsibly with IP anonymization. Security posture is moderate with room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and well-aligned with the company's business profile.

E

Emerald Technology Ventures

emerald.vc

68

Emerald Technology Ventures is a well-established venture capital firm specializing in sustainable industrial innovation. With over €1 billion in commitments and a portfolio of more than 90 companies, Emerald connects startups with corporate partners and institutional investors to accelerate green technologies. The website targets corporates, institutional investors, governments, and entrepreneurs, offering services such as CVC-as-a-Service and Emerald Sprints. The company is based in Switzerland and has a strong market position in the energy and industrial innovation sectors. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Fonts, Google Maps API, HubSpot forms, and advanced animation libraries like Lottie and GSAP. It demonstrates excellent performance, mobile optimization, accessibility, and SEO practices. Analytics and marketing tools such as Google Analytics, HubSpot, and LinkedIn Insight Tag are used with appropriate consent mechanisms. From a security perspective, the site enforces HTTPS, employs multiple security headers, uses reCAPTCHA on forms, and avoids exposing sensitive data. However, it lacks a dedicated security policy and incident response contact information, which are recommended for enhanced transparency and readiness. Privacy compliance is strong with clear privacy and cookie policies and GDPR indicators. Overall, the website presents a professional, trustworthy, and secure digital presence aligned with the company's business goals. Strategic recommendations include publishing a security policy, adding incident response contacts, and implementing a vulnerability disclosure program to further strengthen security posture and stakeholder trust.