Security Directory

H

HPW Fernwärme

hpw-fernwaerme.de

53

HPW Fernwärme is a well-established German company specializing in district heating and industrial insulation services with over 30 years of experience. The company offers a comprehensive range of services including planning, trade, production of custom PE parts, value preservation, and service. They hold certifications such as AGFW FW 605 and DIN EN ISO/IEC 17024, underscoring their commitment to quality and industry standards. Their market position is strong within the energy sector, targeting businesses and organizations requiring efficient and sustainable heating solutions. Technically, the website is built on a modern WordPress platform using Elementor and Yoast SEO, ensuring good SEO and mobile optimization. The site loads moderately fast and provides a professional user experience with clear navigation and relevant content. However, some technical improvements could enhance performance and security further. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers and published security policies. There is no visible incident response or vulnerability disclosure information, which could be improved to enhance trust and compliance. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the website presents a trustworthy and professional image with solid business credibility. Strategic improvements in security policies, privacy compliance, and direct contact information would further strengthen their digital presence and risk posture.

B

BUHLMANN GROUP

buhlmann-group.com

51

BUHLMANN GROUP is a well-established premium trading company specializing in steel pipes, fittings, and accessories with a global reach and a strong presence in the energy, chemical, shipbuilding, and machine construction sectors. The company emphasizes quality and innovation, supported by multiple ISO certifications and advanced logistics solutions. Technically, the website is built on a modern WordPress platform with good SEO and mobile optimization, leveraging tools like Google Tag Manager and Borlabs Cookie for privacy compliance. Security posture is solid with HTTPS enforcement and domain transfer protections, though there is room for improvement in security headers and incident response transparency. Overall, the site reflects a professional and trustworthy business with comprehensive content and good user experience.

A

AFK Geothermie GmbH

afk-geothermie.de

58

AFK Geothermie GmbH is a German regional energy provider specializing in geothermal energy and district heating services. Their website offers information about their services including geothermal energy production, district heating network expansion, internet services bundled with heating connections, and customer support. The company targets residential and commercial customers within the energy sector, positioning itself as a reliable regional utility provider. The website is built on WordPress with modern plugins and demonstrates good digital maturity with mobile optimization and cookie consent mechanisms. Security posture is solid with HTTPS enabled and no exposed sensitive data, though security headers and explicit security policies are absent. Overall, the website is professional, trustworthy, and compliant with GDPR, but could improve by publishing security policies and enhancing security headers.

L

Leadpartner Brand & Redning Sønderjylland

112interreg.eu

55

Interreg112 is a bilingual project website supporting the DanGer112 initiative, co-financed by the EU's Interreg 6A program. The project focuses on enhancing cross-border cooperation in emergency services between Denmark and Germany. The website serves as an information portal for project partners, stakeholders, and the public, providing news, events, and contact details. The site is professionally designed with consistent branding and clear navigation, targeting government agencies and emergency service organizations in the region. Technically, the website employs modern JavaScript libraries such as jQuery, Bootstrap, and accessibility tools like Monsido, ensuring good mobile optimization and user experience. Hosting and domain registration are consistent with the regional focus, with the registrar being a reputable Danish provider. The site uses HTTPS and includes cookie consent mechanisms, reflecting basic GDPR compliance. From a security perspective, the site has a good baseline with HTTPS and no exposed sensitive data. However, it lacks explicit security headers and a published privacy policy or incident response information, which are recommended for enhanced security posture and compliance. No vulnerabilities or suspicious patterns were detected. Overall, the website is trustworthy and professional, with moderate technical sophistication and a solid foundation for security and privacy. Strategic improvements include publishing comprehensive privacy and terms of service documents, adding security headers, and establishing incident response contacts to strengthen compliance and user trust.

H

Haderslev Kommune

haderslev.dk

68

Haderslev Kommune operates an official municipal website providing digital self-service and information to its residents and visitors. The site is designed to facilitate 24/7 access to municipal services and information, reflecting a commitment to digital accessibility and citizen engagement. The website leverages modern web technologies including ASP.NET Core, jQuery, Bootstrap, and third-party services such as Monsido for analytics and Cookie Information for privacy compliance. The cookie consent mechanism is comprehensive and GDPR compliant, indicating a strong focus on privacy and regulatory adherence. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and registration details. Security posture is generally good with HTTPS enforced and secure cookie practices, but the lack of explicit security headers and absence of published security policies suggest areas for improvement. Overall, the website presents a professional and trustworthy digital presence for the municipality, with moderate technical performance and good user experience.

A

Aabenraa Kommune

aabenraa.dk

60

Aabenraa.dk is the official website of Aabenraa Kommune, a Danish municipal government entity. The site serves as a comprehensive portal offering citizen services, business information, news, and self-service solutions tailored to residents, businesses, and visitors. The website is well-positioned as the authoritative source for local government information and services in the Aabenraa region. Technically, the site employs a modern technology stack including jQuery, Bootstrap, and accessibility tools like Monsido, ensuring good performance, mobile optimization, and accessibility compliance. Security posture is solid with HTTPS enabled and GDPR-compliant cookie consent mechanisms, though improvements can be made by enabling DNSSEC and adding security headers. Overall, the site demonstrates a professional and trustworthy digital presence consistent with a government organization.

H

Handwerkskammer Schwerin

hwk-schwerin.de

59

Handwerkskammer Schwerin is a regional public institution dedicated to supporting the skilled crafts sector in Westmecklenburg, Germany. The organization focuses on vocational training, continuing education, business consulting, and support services for craftsmen and enterprises. The website serves as a comprehensive portal for apprentices, businesses, and the general public, offering information on courses, legal advice, and funding opportunities. The institution holds a strong market position as an authoritative chamber of skilled crafts with a clear regional focus. Technically, the website is built on the ODAV Content Management System with modern web technologies such as jQuery and Bootstrap, ensuring good mobile optimization and accessibility. The site employs HTTPS and a cookie consent manager to comply with privacy regulations. Performance is moderate with well-structured content and clear navigation, supporting a positive user experience. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism with granular user controls. However, explicit security headers are not evident, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's CMS and business purpose, indicating legitimacy and trustworthiness. Overall, the website presents a professional, secure, and privacy-compliant digital presence for a public institution. It effectively serves its target audience with relevant content and services while maintaining a good security posture. Strategic improvements could focus on enhancing security headers and publishing formal security policies to further strengthen trust.

H

Handwerkskammer Ostmecklenburg-Vorpommern

hwk-omv.de

68

Handwerkskammer Ostmecklenburg-Vorpommern is a regional government-affiliated chamber serving the handcraft sector in the Ostmecklenburg-Vorpommern region of Germany. The organization provides a broad range of services including vocational training, continuing education, business consulting, and technical advice to handcraft businesses, apprentices, and professionals. The website reflects a well-structured and professional digital presence with clear navigation and relevant content tailored to its target audience. Technically, the website is built on the ODAV Content Management System and leverages modern web technologies such as jQuery and Bootstrap. It integrates accessibility tools like Eye-Able and uses a self-hosted Matomo analytics platform, indicating a focus on privacy and user experience. The site is mobile-optimized and includes a cookie consent mechanism compliant with GDPR. From a security perspective, the website enforces HTTPS and employs CAPTCHA for form protection. While explicit security headers are not fully confirmed, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. However, the site lacks a published security policy or incident response contact, which could be improved. Overall, the website is trustworthy, professional, and compliant with privacy regulations. It effectively serves its business and community role with minimal security risks and good technical implementation.

P

Prof. Dr. Martin Maslaton

qmvcheck.com

10

Quarter Mike 4 is a specialized aviation expertise website representing Prof. Dr. Martin Maslaton, a highly qualified pilot and legal expert in aviation. The business offers consulting services in aviation transactions, pilot language training and testing, UAV operations, flight simulation, and aviation infrastructure regulatory support. The website targets aviation professionals and entities requiring expert aviation legal and technical advice. Technically, the site is built on WordPress with Elementor, featuring modern web technologies and moderate performance. Security posture is good with HTTPS enabled but lacks advanced security headers and formal privacy/cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional, trustworthy, and content-rich, but could improve compliance and security transparency.

A

ABR-IT

abr-it.de

61

ABR-IT is a small German IT service provider specializing in comprehensive IT solutions including web design, consulting, cloud services, telephony, and security technology. The company targets small to medium businesses and private clients, positioning itself as a trusted regional IT partner with certifications from Microsoft, Ionos, Hetzner, and Easybell. The website is built on WordPress with Elementor and integrates modern technologies such as Google Tag Manager and Complianz for GDPR compliance. Security posture is good with HTTPS and cookie consent mechanisms, though improvements in security headers and incident response transparency are recommended. Overall, the website is professional, user-friendly, and compliant with privacy regulations, reflecting a mature digital presence.

W

Wärmewende durch Geothermie

waermewende-durch-geothermie.de

52

The website 'Wärmewende durch Geothermie' represents a collaborative initiative of geothermal energy companies and municipal/private energy suppliers in Germany. It promotes the use of deep geothermal energy for district heating and green electricity production as a key solution for the country's CO2-neutral heating goals. Supported by industry partners and research institutes like Fraunhofer, the initiative targets municipalities, energy providers, government bodies, and the general public interested in sustainable energy solutions. The site features comprehensive content, partner logos, testimonials, and active social media engagement, reflecting a mature and professional business presence. Technically, the website is built on WordPress 6.8.3 with a modern tech stack including popular plugins such as Smart Slider 3, Contact Form 7, and Complianz GDPR for privacy compliance. The hosting is provided by rzone.de, and the site is well-optimized for mobile devices with good SEO practices. Performance is moderate, with no critical technical issues detected in the HTML content. From a security perspective, HTTPS is enforced, and cookie consent mechanisms are implemented, indicating good privacy compliance. However, security headers like Content-Security-Policy and HSTS are not evident in the HTML, suggesting room for improvement. No vulnerabilities or exposed sensitive data were found, but regular updates and security audits are recommended to maintain a strong security posture. Overall, the website scores well on content quality, technical implementation, privacy compliance, and business credibility, with an overall AI score of 81. There are no signs of WAF blocking or malicious content. Strategic recommendations include enhancing security headers, maintaining plugin updates, and adding a security.txt file for vulnerability disclosures to further strengthen trust and security.

I

Initiative Energieeffizienz-Netzwerke

effizienznetzwerke.org

66

The Initiative Energieeffizienz-Netzwerke website represents a German government-backed program aimed at promoting energy efficiency through collaborative networks among companies. The initiative supports businesses in reducing energy consumption and costs by facilitating knowledge exchange and providing resources. The website is well-positioned as a trusted source in the energy sector within Germany, targeting companies interested in sustainable energy practices. Technically, the site is built on WordPress 6.8.2, leveraging modern libraries such as jQuery, Bootstrap, and Cookiebot for cookie consent management. The infrastructure supports good mobile optimization, accessibility, and SEO best practices, reflecting a mature digital presence. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and includes standard security headers, demonstrating a solid security posture. The integration of Cookiebot ensures GDPR compliance and transparent cookie management. However, the absence of explicit incident response contacts and security.txt files suggests areas for improvement in vulnerability disclosure and incident handling. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with no signs of malicious activity or content blocking. Strategic recommendations include implementing a security.txt file, publishing incident response contacts, and continuous monitoring of third-party scripts to maintain security and compliance.

V

Vereniging Afvalbedrijven

trashtalks.nl

9

TrashTalks is a social media campaign operated by the Vereniging Afvalbedrijven, aimed at raising awareness among Dutch consumers about waste management, recycling, and sustainable product choices. The campaign leverages social media influencers and educational content to engage the public and promote environmentally responsible behavior. The website serves as a hub for campaign information, social media links, and a toolkit for partners. Technically, the website uses modern JavaScript libraries such as jQuery and Swiper.js for interactive content and responsive design. The site is mobile-optimized and includes SEO-friendly meta tags and Open Graph data. Google Analytics is implemented with IP anonymization to track user engagement while respecting privacy. However, no explicit privacy or cookie policies are present, which is a compliance gap. From a security perspective, the site uses HTTPS and includes Google Tag Manager scripts but lacks visible security headers and formal security policies. There are no forms collecting user data on the homepage, reducing immediate risk exposure. WHOIS data confirms the domain is registered consistently with the Vereniging Afvalbedrijven organization, supporting legitimacy. Overall, the website is professionally designed and trustworthy but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

M

medpublico

med-publico.com

55

medpublico is a specialized full-service agency focused on medical and scientific communication, serving pharmaceutical companies, medical device manufacturers, academic institutions, and professional associations primarily in Germany. The company offers a broad range of services including strategic consulting, medical writing, PR and marketing, creative design, digital solutions, and training through its academy. With over 15 years of experience and a small but expert team, medpublico positions itself as a trusted partner in healthcare communication. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and integrating Google Analytics and Tag Manager for data insights, complemented by a cookie consent mechanism via Borlabs Cookie. Security posture is solid with HTTPS enforced and domain registration protections in place, though improvements could be made by enabling DNSSEC and adding security headers. Privacy compliance is basic, with cookie consent but no visible privacy policy or terms of service in the provided content. Overall, the website is professional, well-branded, and trustworthy, supporting the company's credibility in the healthcare communication sector.

B

Bertelsmann Stiftung

zukunftdernachhaltigkeit.de

56

Zukunft der Nachhaltigkeit is a German-language platform operated under the Bertelsmann Stiftung foundation, focusing on sustainability and economic transformation. The website provides research articles, podcasts, and newsletters aimed at professionals and stakeholders interested in sustainable economic systems. It holds a solid market position as a knowledge dissemination project backed by a reputable foundation. Technically, the site is built on WordPress with modern plugins and libraries, ensuring good performance and SEO optimization. Security posture is strong with HTTPS and secure forms, though some security headers and explicit policies are missing. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-maintained, with active social media engagement and clear business credibility.

B

Bertelsmann Stiftung

change-learning.de

52

Change Learning is a German educational project affiliated with the Bertelsmann Stiftung, focusing on transforming the school system into a learning-oriented environment that fosters participation, well-being, and equitable opportunities for children and youth. The website serves as a knowledge platform offering articles, project themes, awards, and publications aimed at educators, policymakers, and stakeholders in education. Technically, the site is built on WordPress with modern optimization plugins and uses HTTPS with moderate performance and good mobile optimization. Security posture is solid with HTTPS and secure forms but lacks explicit security headers and incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and content-rich, with a strong brand association to Bertelsmann Stiftung.

R

reframe[Tech]

reframetech.de

50

reframe[Tech] is a German non-profit project affiliated with the Bertelsmann Stiftung focused on promoting the ethical development and deployment of digital technologies, particularly algorithms and AI, for the common good. The website provides research, policy briefs, educational content, and newsletters targeting political decision-makers, public administration employees, and socially-oriented organizations. The project positions itself as a niche thought leader in ethical AI within Germany. Technically, the site is built on WordPress with modern plugins for SEO and multilingual support, and uses HTTPS with moderate performance and good mobile optimization. Security posture is solid with HTTPS and secure forms but lacks explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and content-rich, with moderate user tracking via Etracker analytics.

Jahn, Mack & Partner architektur und stadtplanung mbB is a medium-sized German firm specializing in architecture and urban/regional planning. Founded in 2003, the company offers a broad range of services including architectural design, project and funding management, and communication consulting. Their interdisciplinary team and network of specialized partners position them well in the real estate and planning sector. The website reflects a professional image with clear service descriptions and contact information, targeting public and private investors as well as municipal clients. Technically, the website is built on WordPress with a modern theme and plugins, including Contact Form 7 and GDPR-compliant cookie consent mechanisms. Hosting is provided by 1984hosting.com, and the site uses HTTPS with good SSL configuration. Performance and mobile optimization are adequate, though some improvements in accessibility and security headers could be made. From a security standpoint, the site enforces HTTPS and cookie consent but lacks explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data shows consistent domain registration with no privacy protection, supporting legitimacy. Overall, the security posture is solid but could benefit from enhanced headers and formal policies. The overall risk is low with no signs of malicious activity or content safety concerns. Strategic recommendations include implementing additional security headers, publishing security and incident response policies, and maintaining up-to-date software to ensure ongoing compliance and protection.

L

LIFEe.V.

elearning-erkunden.de

44

eXplorarium is a well-established non-profit educational project based in Berlin, focused on integrating digital media and discovery learning into school curricula. The project collaborates with multiple schools and partners, including universities and embassies, and offers digital learning workshops and platforms such as Moodle. The website reflects a professional and consistent brand presence with good content quality and clear navigation tailored to educators and students. Technically, the site is built on WordPress with the Divi theme and uses Matomo analytics configured for privacy. Security posture is solid with HTTPS and privacy-conscious analytics, though it lacks some security headers and formal security policies. Overall, the site is trustworthy and compliant with GDPR, though cookie consent mechanisms and incident response information could be improved.

S

STARFACE GmbH

starface.de

58

STARFACE GmbH is a well-established German technology company specializing in software-based VoIP telephone systems for digital communication. Their offerings include cloud-hosted PBX solutions, VM editions for self-hosting, and hardware appliances, targeting small to large enterprises. The company maintains a strong market position with recognized awards and a comprehensive product portfolio that integrates with popular business software and supports mobile and remote work scenarios. Technically, the website is built on WordPress with modern plugins and frameworks, optimized for performance and mobile use. Security posture is good with HTTPS and cookie consent mechanisms, though improvements can be made in security headers and published policies. Overall, the website reflects a professional and trustworthy business with a mature digital presence.

D

Deutsche Gesellschaft für Internationale Zusammenarbeit (GIZ) GmbH

collaborative-climate-action.org

47

The Partnership for Collaborative Climate Action website serves as a knowledge-sharing platform focused on fostering cooperation between national and subnational governments to address climate change effectively. It highlights the CHAMP initiative, providing resources, news, and events to support multilevel climate governance. The site is operated by Deutsche Gesellschaft für Internationale Zusammenarbeit (GIZ) GmbH, a reputable German development agency, positioning itself as a trusted source in the climate action domain. Technically, the website is built on WordPress with the Enfold theme and uses modern tools such as Smart Slider 3 and Matomo analytics. The infrastructure is stable, with HTTPS enabled and a moderate performance profile. Mobile optimization and SEO practices are good, though accessibility features are basic. The domain registration is consistent and appropriate, with no privacy protection, indicating transparency. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and explicit security headers. No security or incident response policies are published, and there is no cookie consent mechanism, which may impact GDPR compliance. The use of Matomo analytics suggests some privacy awareness, but overall privacy compliance is basic. Overall, the website is professional, trustworthy, and relevant to its target audience of government and climate stakeholders. However, improvements in security headers, privacy compliance, and explicit security policies would enhance its security posture and regulatory adherence.

D

DataBox

databox.hr

64

DataBox is a Croatian technology company specializing in secure data center colocation, cloud computing services, and telecommunication solutions. Established in 2014, the company positions itself as a key provider of secure business infrastructure in Croatia, offering Tier 3 and Tier 4 standard data center facilities, cloud backup, disaster recovery, and advanced IP telephony services. Their market position is supported by over 10 years of experience and a focus on reliability and security for business customers. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and integrates Google Analytics and Tag Manager for tracking. The site is well-optimized for SEO and mobile devices, with a professional design and clear navigation. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and explicit security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website reflects a credible and professional business with room for improvement in privacy and security transparency.

R

ROX doo

rox.hr

10

ROX doo is a well-established regional leader in consumer goods distribution, operating since 1992 with a strong presence in Croatia, Bosnia and Herzegovina, Serbia, and Slovenia. The company offers comprehensive distribution and logistics services, including transport, warehousing, and a B2B web shop, serving over 13,000 points of sale. Their market position is solidified by decades of experience and a broad supplier network. Technically, the website is built on a modern WordPress platform with up-to-date technologies such as jQuery, Bootstrap grid, and SEO optimization via Yoast. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Analytics and advertising tools like Google Analytics and Google Tag Manager are used with a cookie consent mechanism ensuring privacy compliance. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks visible security headers in the HTML content. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy and consistency with the business claims, supporting trustworthiness. Overall, ROX doo's digital presence reflects a mature, professional business with good technical and privacy practices. Strategic improvements in security headers and incident response transparency could further enhance their security posture and trust.

K

Klemm Security

klemmsecurity.hr

44

Klemm Security is a well-established Croatian company specializing in professional security solutions including physical protection, technical security systems, detective services, and risk assessment. Founded in 2003, it operates multiple subsidiaries and maintains a strong market position with premium quality services and numerous business collaborations. The website reflects a professional business model targeting companies requiring comprehensive security services. Technically, the site is built on WordPress with modern plugins and frameworks, including Avada theme and Slider Revolution, and implements essential security features such as HTTPS, Google reCAPTCHA, and cookie consent mechanisms. However, it lacks publicly accessible privacy policy and terms of service pages, which are critical for compliance and trust. Security posture is good with no visible vulnerabilities, but the absence of a security policy and incident response information is a gap. Overall, the website is trustworthy, well-branded, and provides clear contact information and social media presence.

R

RALU Logistika d.d.

ralulogistics.com

60

RALU Logistika d.d. is a well-established third-party logistics provider specializing in integrated cold chain services, including international and national transport, warehousing, and distribution across Croatia, Serbia, and Europe. The company has a strong market position supported by over 30 years of experience and a large fleet and infrastructure. Their website reflects a professional digital presence built on WordPress with Elementor, incorporating modern analytics and cookie consent mechanisms. Security posture is solid with HTTPS, domain transfer lock, and no detected vulnerabilities, though some security policies and disclosures could be improved. Overall, the company demonstrates transparency and compliance with GDPR, enhancing trustworthiness.

K

KI Bundesverband

ki-verband.de

10

KI Bundesverband is Germany's largest network for Artificial Intelligence and Deep Tech companies, connecting over 500 members from various sectors including business, politics, research, and investment. The organization acts as a facilitator, advocate, and community builder to promote AI innovation and collaboration in Germany. Their website is built on a modern WordPress platform with professional design and SEO optimization, reflecting a mature digital presence. The technical infrastructure includes popular plugins such as Yoast SEO, Elementor, and Slider Revolution, hosted on Raidboxes, a reputable WordPress hosting provider. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and formal security policies. Overall, the site is trustworthy, professional, and well-positioned in the AI ecosystem.

R

RE:Solut GmbH

re-solut.de

48

RE:Solut GmbH is a specialized service provider in the renewable energy sector, focusing on wind energy and real estate solutions. Founded in 2019, the company offers comprehensive services including permit management under BImSchG, technical and legal assessments, vendor due diligence, and investment structuring. Their strong network of partners enhances their market position and service quality. The website is professionally designed using WordPress with Elementor and OceanWP, featuring GDPR-compliant cookie consent and integrated CRM forms via Bitrix24. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and incident response policies could be improved. Overall, the company presents a credible and trustworthy digital presence aligned with its business focus.

S

SteadyFilm

steadyfilm.de

53

SteadyFilm is a small digital content agency based in Germany specializing in professional film production, social media videos, recruiting, and image films. The company focuses on emotional storytelling to build trust and reach target audiences effectively. Their website demonstrates a strong market position within the media sector, leveraging modern WordPress technologies including Elementor and Yoast SEO for a professional online presence. The site integrates Vimeo for video content and Calendly for client scheduling, enhancing user engagement. Security posture is solid with HTTPS enforced and GDPR compliance evident through a comprehensive privacy policy and cookie consent mechanisms. No critical vulnerabilities or suspicious activities were detected, indicating a trustworthy and well-maintained digital infrastructure. Overall, SteadyFilm presents a credible and professional business with a high-quality website and good privacy and security practices.

I

IBE.DE GmbH

ibe.de

61

IBE.DE GmbH operates a specialized online booking portal for business travel, targeting small and medium-sized enterprises in Germany. The platform offers integrated booking and management services for flights, trains, hotels, and rental cars, emphasizing ease of use, no online booking fees, and centralized travel management. The company leverages over 15 years of experience and positions itself as a reliable, local provider with technology developed in Augsburg. The website is professionally designed, mobile-optimized, and provides clear navigation and social media presence, enhancing its market credibility. Technically, the website is built on WordPress 6.4.2 using the Uncode theme and custom child themes, hosted via SchlundTech. It uses modern JavaScript libraries like jQuery and MediaElement.js for media handling. The site demonstrates moderate performance and basic accessibility features. However, explicit security headers and cookie consent mechanisms are absent, indicating room for improvement in security and privacy compliance. From a security perspective, the site uses HTTPS and includes a login form with password fields, but lacks visible security policies, incident response contacts, or vulnerability disclosure information. No exposed sensitive data or vulnerabilities were detected in the HTML content. The domain WHOIS data aligns with the hosting and business claims, supporting legitimacy. The site holds an IATA accreditation badge, reinforcing trust. Overall, the website presents a trustworthy and professional business travel service with solid business credibility and technical foundation. Enhancements in security headers, privacy consent, and incident response transparency would further strengthen its security posture and compliance standing.

M

MIS Recycling

mis.dk

45

MIS Recycling is Denmark's largest crushing contractor specializing in mobile crushing, sorting, shredding, and stacking of construction and demolition materials across Denmark and Southern Sweden. The company operates a large fleet of mobile crushing plants with significant daily capacity and has a strong market position supported by over 25 years of operational history. Their website reflects a mature digital presence built on WordPress with Elementor, featuring rich multimedia content and clear service descriptions. The technical infrastructure is modern and optimized for performance and mobile devices, with good SEO practices in place. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements could be made by enabling DNSSEC and adding security headers. The absence of explicit privacy and terms of service policies is a compliance gap. Overall, the website and domain data indicate a legitimate, professional business with a strong market presence and good digital maturity.

S

Spreewind GmbH

windenergietage.de

61

The Windenergietage website represents a well-established and professional event platform focused on the wind energy sector in Germany. It organizes the 33rd edition of its conference in 2025, attracting over 4200 participants, indicating a strong market position and relevance in the renewable energy industry. The site offers detailed program information, multiple forums, and networking opportunities, targeting industry professionals, project developers, legal experts, and investors. The business model centers on event organization and industry networking, supported by advertising and sponsorship opportunities. Technically, the website is built on WordPress with common plugins such as Contact Form 7 and Ajax Search Lite, using jQuery and other standard libraries. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is solid with HTTPS enabled and no exposed sensitive data, though security headers are not detected and cookie consent mechanisms are missing, which are areas for improvement. From a security and compliance perspective, the site maintains GDPR compliance with a comprehensive privacy policy but lacks visible cookie consent and explicit security or incident response policies. No vulnerabilities or suspicious patterns were detected. The WHOIS data aligns with the website's legitimacy, showing consistent domain registration and DNS setup without privacy protection, appropriate for the business type. Overall, the website is professional, trustworthy, and content-rich, serving its target audience effectively. Strategic recommendations include implementing cookie consent, adding security headers, and publishing security policies to enhance compliance and trust.

The website www.foo.com is a domain parking and search landing page operated by Digimedia.com, L.P. It provides a basic search interface and includes privacy and cookie policies with consent mechanisms. The site lacks detailed business information, contact details, or terms of service, indicating it is not a fully developed commercial or service website. The WHOIS data query returned no registration information, suggesting the domain may be unregistered or inactive, which raises legitimacy concerns. Technically, the site uses a modern JavaScript library (jQuery 3.7.1), Google Analytics, and Google Tag Manager for tracking, and appears to be built on Ruby on Rails. The site is moderately optimized for mobile devices and has basic SEO and accessibility features. However, no security headers were detected, and SSL configuration details are unknown, indicating room for improvement in security posture. From a security perspective, the site implements cookie consent and CSRF tokens but lacks visible security policies, incident response contacts, or vulnerability disclosure mechanisms. The absence of WHOIS registration data and contact information reduces trustworthiness. No adult or explicit content is present, making the site safe for general audiences. Overall, the site scores moderately low on business credibility and security due to missing registration data and limited content. Strategic recommendations include verifying domain registration, enhancing security headers and SSL configuration, adding clear contact and security policy information, and improving content quality and SEO.

R

ROY ROBSON

royrobson.com

51

ROY ROBSON is a well-established premium menswear brand based in Germany, with a history dating back to 1922. The company designs and produces formal and smart casual menswear, serving both direct consumers and B2B clients. The website reflects a mature digital presence with multilingual support and strong branding. Technically, the site is built on WordPress with Elementor and uses modern plugins for SEO and cookie consent. Security posture is generally good with HTTPS and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is partial, with cookie consent but no explicit privacy policy found in the provided content. Contact information is not visible on the homepage, which may affect user trust. Overall, the site is professional, secure, and credible but could improve transparency and security practices.

E

EDF Renewables

mea-edf-re.com

10

EDF Renewables MEA website represents a regional branch of the global EDF Group focused on renewable energy solutions in the Middle East and Africa. The company offers integrated services including development, financing, construction, and asset operation of renewable power plants such as solar and wind farms. The website content is professionally presented with detailed project information and service descriptions, targeting energy sector stakeholders and regional customers. Technically, the site is built on WordPress with Elementor and related Jet plugins, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain protection status flags, though DNSSEC and security headers are missing. Privacy compliance is basic with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the site is trustworthy and credible, reflecting a large enterprise with consistent branding and clear business focus.

R

Regional Information for Society

wcrp-rifs.org

58

The website www.wcrp-rifs.org represents the Regional Information for Society (RIfS), a scientific initiative under the World Climate Research Programme (WCRP). It focuses on enhancing collaboration among scientists, decision makers, and society to improve the value of regional climate information in policy and decision-making contexts. The site targets a specialized audience including climate scientists and policy stakeholders, operating as a non-profit entity with a clear mission to support climate science integration. Technically, the website is built on WordPress with modern themes and plugins, offering good mobile optimization and SEO practices. However, it lacks visible privacy and cookie policies, contact information, and some security headers, which are areas for improvement. Security posture is generally good with HTTPS enabled and no obvious vulnerabilities, but the absence of WHOIS data limits full domain trust evaluation. Overall, the site is professional and trustworthy but could enhance transparency and compliance aspects.

Z

Zihos Energy s.r.o.

zihosenergy.com

10

Zihos Energy s.r.o. is a Czech Republic-based company specializing in comprehensive energy ecosystems with smart management solutions for businesses and residential customers. Their offerings include photovoltaic systems, battery energy storage systems (BESS), solar carports, feasibility studies, and energy optimization services. The company positions itself as a reliable and experienced provider with over 30 years in the market and memberships in reputable industry organizations such as UKEN, ČFA, and Altare. The website reflects a professional and modern digital presence with clear service descriptions and customer engagement features. Technically, the website employs modern JavaScript libraries including jQuery, Tiny Slider, AOS for animations, and Google Analytics for tracking. It uses HTTPS with a cookie consent mechanism that respects user privacy preferences, indicating a good level of digital maturity. However, the absence of visible security headers and security.txt files suggests room for improvement in security hardening and vulnerability disclosure. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and explicit user consent on forms. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The lack of WHOIS data for the domain is a concern, as it limits the ability to verify domain registration legitimacy and consistency with the company's claimed history. This discrepancy should be investigated further to ensure trustworthiness. Overall, the website is well-designed, content-rich, and user-friendly, supporting the company's credibility and market position. Strategic recommendations include enhancing security headers, publishing incident response and security policies, and clarifying domain registration details to strengthen trust and compliance.

DECLIMA s.r.o. is a Czech company specializing in smart building technologies and energy management solutions, primarily serving private and commercial customers in the Litomyšl region. Their services include energy measurement and control, project design, coordination of trades, financing assistance, automation with Loxone systems, installation, training, and servicing. The company positions itself as a comprehensive provider from project inception to ongoing monitoring and support. Technically, the website is built on WordPress with modern SEO and analytics tools, showing a good level of digital maturity. Security posture is solid with HTTPS, cookie consent, and reCAPTCHA integration, though some advanced security headers are missing. The absence of WHOIS data limits domain trust assessment, but the professional web presence and clear contact information support legitimacy. Overall, the site is well-structured, user-friendly, and compliant with GDPR requirements.

G

GoldKnights

lastoricru.com

35

The Last Oricru website represents a small indie video game developer and publisher focused on an action RPG game emphasizing storytelling and player choices. The site is professionally designed using WordPress and integrates modern web technologies and analytics tools. The business is positioned as a niche player in the gaming industry with a clear target audience of gamers interested in story-driven RPGs with coop features. The domain registration and hosting align with the company's Czech origins and business timeline, indicating legitimacy and transparency. However, the website lacks critical privacy and cookie policies, which impacts compliance and user trust. Security posture is moderate with HTTPS enabled but missing key security headers and DNSSEC. Overall, the site is functional, trustworthy, and safe for general audiences but would benefit from enhanced privacy compliance and security hardening.

B

BluenetNTS

bluenet.as

51

BluenetNTS is a Czech Republic-based company specializing in comprehensive energy savings solutions, including the installation of photovoltaic systems and heat pumps for residential buildings and businesses. The company offers end-to-end services from project planning to subsidy consulting, targeting residential complexes, municipalities, and commercial clients. Their market position is that of an established regional player in renewable energy solutions, supported by customer references and media presence. Technically, the website is built on WordPress with Elementor and employs modern SEO and analytics tools, indicating a mature digital infrastructure. Security posture is solid with HTTPS, reCAPTCHA, and GDPR cookie consent mechanisms, though explicit security policies and incident response details are absent. Overall, the website is professional, trustworthy, and compliant with basic privacy regulations, with room for improvement in transparency and security documentation.

V

VENTA spol. s r.o.

koupelny-venta.cz

10

VENTA spol. s r.o. operates a comprehensive e-commerce platform focused on bathroom equipment, heating, ventilation, renewable energy systems, and related installation services primarily serving the Czech Republic. The company has a longstanding tradition since 1991 and offers a broad range of products alongside consulting, turnkey installations, subsidy handling, and after-sales service. The website reflects a mature digital presence with detailed product catalogs, clear navigation, and customer engagement tools such as live chat and customer reviews. Technically, the site employs modern frameworks like Bootstrap and integrates Google Analytics and Tag Manager for marketing and analytics purposes. Security posture is generally good with HTTPS enforced and reCAPTCHA implemented, though there is room for improvement in HTTP security headers and published security policies. The absence of WHOIS data limits domain trust assessment but the website content and business information appear professional and credible. Overall, the site is well-positioned in its market niche with a solid digital infrastructure and compliance with privacy regulations.

G

Game Dev Graz

gamedevgraz.at

38

Game Dev Graz is a small non-profit association founded in 2015 that supports the game development community and gaming culture in Styria, Austria. It organizes various community events such as meetups, game jams, expos, and awards to foster collaboration and growth in the local game development ecosystem. The website is built on WordPress using a modern theme and common JavaScript libraries, providing a good user experience with clear navigation and mobile optimization. However, it lacks formal privacy and cookie policies, and no direct contact emails or phone numbers are published, relying mainly on a contact form. Security posture is moderate with HTTPS enabled but missing security headers and incident response contacts. Overall, the site is trustworthy and professional but could improve compliance and security practices.

A

AOC (Administració Oberta de Catalunya)

digicanvis.cat

42

Digicanvis is a government-affiliated digital observatory platform focused on showcasing best practices and innovative initiatives in the digital transformation of local administrations in Catalonia, Spain. It is supported by the Administració Oberta de Catalunya (AOC), which is evident from branding and linked partner domains. The platform provides a searchable database of projects and encourages submissions of new digital transformation initiatives. Technically, the website is built on WordPress using modern frameworks like Bootstrap and WPBakery Page Builder, with integration of Google Tag Manager and GTranslate for multilingual support. The site is mobile optimized and presents a professional design with clear navigation. Security posture is good with HTTPS enforced and no visible vulnerabilities, though it lacks explicit privacy and cookie policies and security headers, which are recommended for compliance and enhanced security. WHOIS data is unavailable publicly, likely due to privacy protection, which is common for government-related domains. Overall, the site is trustworthy, well-maintained, and serves a niche government audience effectively.

B

BKK Dachverband

bkk-pflegefinder.de

70

The BKK PflegeFinder website is a well-structured, professional service platform operated by the BKK Dachverband to assist insured persons in Germany with finding suitable care services including nursing homes, ambulatory care, day and night care, and support offers. The platform provides comprehensive information including quality reports and payment details, targeting BKK insured individuals and their families. Technically, the site uses modern frontend technologies such as Bootstrap 5, jQuery, and FontAwesome, with a self-hosted Matomo analytics setup that is currently disabled, reflecting a privacy-conscious approach. The presence of a cookie consent mechanism and chatbot enhances user experience and compliance. Security posture is adequate with HTTPS enforced and session management in place, but lacks explicit security headers and published security policies. Overall, the site is trustworthy, with consistent branding and clear navigation, though it could improve by publishing terms of service and incident response information.

B

BKK Dachverband

bkk-klinikfinder.de

70

The BKK Klinikfinder website is a professionally designed and well-structured healthcare information platform operated by the BKK Dachverband. It provides BKK insured persons in Germany with a comprehensive hospital search tool based on official quality reports. The site offers multiple search filters and additional resources such as checklists and related service finders for care, doctors, and midwives. Technically, the site uses modern web technologies including Bootstrap, jQuery, and self-hosted Matomo analytics, ensuring good performance, mobile optimization, and privacy compliance. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks published security policies or incident response contacts. Overall, the site is trustworthy, privacy-conscious, and well-aligned with its target audience.

B

BKK Dachverband

bkk-arztfinder.de

70

The BKK ArztFinder website is a professional service platform operated by the BKK Dachverband, aimed at assisting statutory health insurance members in Germany to find doctors, dentists, and other healthcare providers. The site offers a user-friendly search interface with multiple filtering options and links to related healthcare services such as hospital, care, and midwife finders. The platform is well-branded and consistent with the parent organization's identity. Technically, the website uses a modern frontend stack including jQuery, Bootstrap, and FontAwesome, with responsive design and accessibility features. The site implements a cookie consent mechanism compliant with GDPR, using Matomo analytics in a privacy-conscious manner (disabled by default until consent). No major technical or security flaws are evident, though security headers and explicit security policies are absent. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks a published security policy, incident response contacts, and vulnerability disclosure mechanisms. The WHOIS data is consistent with a legitimate organization, with no privacy protection or suspicious patterns, supporting the site's trustworthiness. Overall, the site is a trustworthy, well-maintained healthcare service platform with good privacy compliance and moderate security posture. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure would enhance its security maturity and user trust.

N

Nový Hlavák

novyhlavak.com

10

Nový Hlavák is a Czech public infrastructure project focused on revitalizing the Vrchlického sady park, constructing a new tramway line, and reconstructing the main railway station's new hall in Prague. The project is led by the Danish architectural studio Henning Larsen Architects, which won the competitive dialogue with their design 'Šťastný Hlavák'. The website serves as an informational platform showcasing the project vision, visual comparisons, and virtual tours, targeting city residents, visitors, and stakeholders. Technically, the site is built on WordPress with Elementor and integrates Google Analytics for visitor tracking. The site is well-structured and mobile-optimized but lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and DNSSEC.

A

Amt für Gesundheit (Office for Health, Liechtenstein)

hitze.li

48

The website 'Hitze und Gesundheit' is an official government health information portal managed by the Amt für Gesundheit of Liechtenstein. It focuses on educating the public about heat-related health risks, protective measures, and vulnerable groups. The site is well-positioned as a trusted source for health and climate-related information in the region, targeting the general population with clear, scientifically backed content. Technically, the site is built on WordPress with a modern theme and uses standard web technologies such as jQuery and Typekit fonts. It is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and obfuscates emails to reduce spam, but lacks some security headers and a formal vulnerability disclosure mechanism. Privacy compliance is partially met with a privacy policy present, but no cookie consent mechanism is detected, which could be improved. Overall, the site is credible, secure, and professionally maintained, serving its public health mission effectively.

M

Mois Sans Tabac

month-without-tobacco.ch

51

Month Without Tobacco is a well-established Swiss public health campaign aimed at helping smokers quit through a structured 30-day program, practical guides, and community support. The website is multilingual, targeting French, German, Italian, and English speakers in Switzerland. It leverages WordPress with Elementor and several plugins to deliver a rich user experience including multimedia content, testimonials, and interactive forms. The campaign partners with various health organizations and provides free professional advice and online community engagement. Technically, the site is well-structured with good SEO practices, mobile optimization, and security headers in place. However, it lacks explicit privacy and terms of service pages, and no published security or incident response policies were found. Overall, the site is trustworthy and professionally maintained, with a strong focus on user engagement and health promotion.

S

Ströer Connections GmbH

stayfriends.de

60

StayFriends.de is a well-established German social networking platform focused on reconnecting former school friends, viewing class photos, and organizing reunions. Operated by Ströer Connections GmbH, it serves a large user base with over 15 million members and extensive class photo archives. The platform targets German-speaking alumni and offers freemium services with paid subscription options. Technically, the website employs a modern JavaScript stack including jQuery, Bootstrap, and Google Tag Manager, with custom CMS elements. The site is moderately optimized for performance and mobile use, with good SEO and basic accessibility features. Security posture is solid with HTTPS enforced and privacy consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates high professionalism and trustworthiness with consistent branding and comprehensive privacy compliance.