Security Directory

S

Stiftung der Evangelischen Landeskirche in Baden

gutes-stiften.org

55

The Stiftung der Evangelischen Landeskirche in Baden is a non-profit foundation focused on supporting charitable giving and foundation establishment within the Baden region of Germany. The organization provides advisory services for donors and foundations, including inheritance and precautionary initiatives, targeting individuals and entities with a Christian values orientation. The website reflects a professional and consistent brand presence, with clear contact information and relevant content tailored to its audience. Technically, the website is built on Edith CMS and utilizes common web technologies such as jQuery and Matomo analytics, with a moderate performance profile and good mobile optimization. The use of HTTPS and clientTransferProhibited domain status indicates a secure baseline, though DNSSEC is not enabled and security headers are absent, representing areas for improvement. From a security perspective, the site demonstrates privacy-conscious tracking by disabling cookies in Matomo and provides a comprehensive privacy policy compliant with GDPR. However, the absence of a cookie consent mechanism and explicit security policies limits full compliance. No incident response or vulnerability disclosure information is published. Overall, the website is trustworthy and professionally maintained, with minor technical and compliance gaps. Strategic improvements in DNS security, cookie consent, and security headers would enhance the security posture and regulatory compliance.

D

Diakonisches Werk Baden

diakonie-baden.de

42

Diakonie Baden is a leading non-profit social welfare organization in Baden-Württemberg, Germany, affiliated with the Evangelical Church. The website provides comprehensive information about their social services, including care, migration support, family services, and volunteer opportunities. The organization targets individuals in need, volunteers, and social institutions, positioning itself as a key player in the regional social welfare sector. Technically, the site is built on TYPO3 CMS with a modern tech stack including jQuery, Bootstrap, and various UI libraries, ensuring good performance, accessibility, and mobile optimization. Security posture is strong with HTTPS, consent management, and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is robust with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-maintained, reflecting the organization's credibility and commitment to social causes.

E

Evangelische Landeskirche in Baden

ekiba-leicht.de

51

The website ekiba-leicht.de is operated by the Evangelische Landeskirche in Baden, a regional religious institution in Germany focused on providing accessible information in easy German language. The site targets individuals with language or cognitive challenges, promoting inclusion and accessibility in church-related content and community work. The business model is non-profit and government-related, with a medium organizational size and a clear focus on accessibility services. Technically, the website uses Edith CMS hosted on w-commerce.de infrastructure, leveraging jQuery, Matomo analytics, and Bootstrap-like responsive design. The site is moderately performant, mobile-optimized, and accessible, with good SEO practices. However, it lacks explicit cookie consent mechanisms and some security headers, which are areas for improvement. Security posture is solid with HTTPS enforced and email obfuscation implemented, but the absence of security policies and incident response contacts limits transparency. No critical vulnerabilities or suspicious patterns were detected. The domain WHOIS data aligns well with the organization's identity, supporting legitimacy. Overall, the website is professional, trustworthy, and serves its target audience effectively. Strategic improvements in privacy compliance and security transparency would enhance its posture and user trust.

F

Fundacja Dorastaj z Nami

dorastajznami.org

61

Fundacja Dorastaj z Nami is a Polish non-profit organization dedicated to supporting children of public service workers and healthcare professionals who have lost their lives or suffered injuries in the line of duty. Established in 2010, the foundation provides long-term educational and social support to over 300 children, while also promoting respect for public service through exhibitions, social campaigns, and debates. The website is professionally designed using WordPress and Elementor, featuring comprehensive GDPR-compliant privacy and cookie policies, and integrates modern analytics and marketing tools such as Google Analytics and Facebook Pixel. Security posture is solid with HTTPS enforced and bot protection via Google reCAPTCHA, though additional security headers could enhance protection. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration is consistent and transparent. Overall, the foundation presents a trustworthy and well-maintained digital presence aligned with its mission.

G

Grupa Krynicka GOPR

gopr-krynica.pl

41

Grupa Krynicka GOPR is a regional mountain rescue organization operating in the Beskid Sądecki and Beskid Niski areas of Poland. The organization provides critical emergency rescue services, training courses, and event security primarily targeting hikers, tourists, and mountain visitors. Their website reflects a well-structured and professional presence with clear navigation and relevant content focused on public safety and rescue operations. The organization maintains partnerships with reputable companies and government entities, enhancing its credibility and trustworthiness. Technically, the website uses a combination of common JavaScript libraries and a proprietary CMS (EdicraLite), delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage and cookie consent mechanisms, though there is room for improvement in security headers and explicit incident response policies. WHOIS data is unavailable, which slightly reduces trust but does not detract significantly given the organization's public service nature and visible trust indicators. Overall, the website is a reliable and informative resource for its target audience.

M

Móda Ženy

modazeny.cz

7

The website modazeny.cz is a Czech-language content platform focused on women's fashion, health, and lifestyle topics. It operates as a small media publishing site using WordPress with the Newspaper theme and common plugins. The site targets a female audience interested in fashion and wellness. Technically, it employs standard web technologies including jQuery, Google Fonts, and Font Awesome, with moderate performance and good mobile optimization. However, the site lacks critical privacy and cookie policies, security headers, and incident response information, which impacts its compliance and security posture. The domain is currently expired, posing a significant risk to business continuity and trust. Overall, the site is safe for general audiences but requires urgent attention to domain renewal and compliance documentation.

P

PR články

pr-clanky.eu

36

PR články is a Czech-language website focused on publishing PR articles across various categories such as news, finance, health, travel, and lifestyle. The site operates on the WordPress platform, utilizing common plugins like Yoast SEO and jQuery-based libraries for enhanced user experience. Hosting is provided by WEDOS Internet, a reputable Czech hosting provider. The website targets a general audience interested in diverse PR content and informational articles. Technically, the site demonstrates moderate performance and good mobile optimization but lacks advanced security headers and privacy compliance mechanisms. No privacy policy, cookie consent, or terms of service were detected, which may expose the site to compliance risks, especially under GDPR regulations. Security posture is basic with no evident vulnerabilities but could be improved by implementing standard security headers and SSL verification. Overall, the website is professional and content-rich but would benefit from enhanced security and privacy practices to increase trust and compliance.

G

Gransy s.r.o.

ibydleni.eu

46

iBydlení.eu is a Czech online magazine specializing in housing, renovation, and garden design trends. The website provides advice and articles aimed at homeowners and enthusiasts interested in modern living spaces. The business operates in the media sector, targeting a general Czech-speaking audience with a niche focus on home improvement and lifestyle content. The company behind the domain is Gransy s.r.o., a Czech-registered entity, which aligns with the website's language and content focus. The website uses WordPress CMS with the Newspaper theme and several plugins to enhance SEO and user experience. Technically, the site is moderately optimized for performance and mobile devices, with good SEO metadata and structured data implementation. Security-wise, the site enforces HTTPS and uses some best practices like opening external links in new windows with noopener, but lacks security headers and formal privacy or cookie policies, which are compliance gaps. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening.

I

Ideální Bydlení

zpravodaj.wiki

46

Zpravodaj.wiki is a Czech lifestyle and women's magazine website focusing on topics such as home, family, horoscopes, and fashion. The site is powered by WordPress with Elementor and hosted by WEDOS Internet, a Czech hosting provider. The website presents a modern and consistent design with good content relevance and user experience. However, it lacks explicit privacy and cookie policies, which impacts its privacy compliance score. The site uses Google Analytics and Tag Manager for user tracking, but no advanced security headers were detected. The domain is relatively new, registered in 2023, consistent with the website's content and business model. Overall, the site is safe for general audiences and does not contain adult or explicit content.

E

EXTÉRIA FRANCHISING s.r.o.

exteriamarket.sk

48

EXTÉRIA FRANCHISING s.r.o. operates a unique franchising concept in the Czech Republic specializing in occupational safety (BOZP) and fire protection (PO). The company offers franchise opportunities with tailored BOZP products, targeting entrepreneurs and business managers seeking to establish or grow their own franchise branches. The website demonstrates a professional and consistent brand presence with comprehensive content and multimedia support, including videos and galleries. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates essential marketing and analytics tools such as Google Analytics, Facebook Pixel, and Google Tag Manager. Security measures include HTTPS enforcement and Google reCAPTCHA on forms, alongside GDPR-compliant cookie consent mechanisms. However, the absence of WHOIS data and lack of published security policies slightly reduce trustworthiness. Overall, the site is well-structured, user-friendly, and compliant with privacy regulations, positioning the company as a credible small business in its niche.

L

Locus Map - mobile outdoor navigation app

locusmap.app

50

Locus Map is a well-established mobile outdoor navigation app targeting outdoor enthusiasts engaged in hiking, cycling, geocaching, sailing, flying, and other sports activities. The company offers a multi-functional app with offline and online maps, route planning, track recording, and integration with wearable devices. The website reflects a mature digital presence with comprehensive content, active community engagement, and multiple map provider partnerships. Technically, the site is built on WordPress with modern plugins and frameworks, optimized for SEO and mobile use. Security posture is strong with HTTPS, security headers, and consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the domain registration is consistent with the business claims, enhancing trustworthiness.

G

Górskie Ochotnicze Pogotowie Ratunkowe

gopr.pl

56

Górskie Ochotnicze Pogotowie Ratunkowe (GOPR) is a Polish mountain rescue organization dedicated to providing rescue services and safety information in mountainous regions of Poland. The organization operates multiple regional groups with central stations, offering emergency contact numbers, avalanche warnings, and safety education. The website serves as an information hub for tourists, skiers, and hikers, providing weather conditions, avalanche risk updates, and a dedicated rescue application. GOPR is supported by government funding and partners, reflecting its important role in public safety. Technically, the website is built on a modern CMS platform (Vela CMS) and utilizes a variety of JavaScript libraries such as jQuery, FancyBox, and Slick Carousel to enhance user experience. The site is mobile optimized and includes accessibility features, though some improvements in security headers and SEO could be made. Google Analytics is used for visitor tracking with a visible cookie consent mechanism, indicating basic privacy compliance. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and explicit published security policies or incident response contacts. The absence of WHOIS data for the domain reduces transparency but does not contradict the legitimacy suggested by the official content and government affiliations. Overall, the site presents a good security posture with room for improvement in formal security documentation and technical hardening. The overall risk assessment is moderate-low, with recommendations focusing on enhancing security headers, publishing incident response policies, and improving WHOIS transparency. The website effectively supports GOPR's mission to provide mountain rescue services and safety information to the public.

T

Tatrzańskie Ochotnicze Pogotowie Ratunkowe

topr.pl

37

Tatrzańskie Ochotnicze Pogotowie Ratunkowe (TOPR) is a well-established mountain rescue organization operating primarily in the Tatra Mountains region of Poland. The website serves as an official portal providing critical safety information, emergency contact details, avalanche warnings, and weather updates to tourists, hikers, and residents. The organization is government-supported and operates as a non-profit entity, with clear disclosures of public funding and operational mandates. The site is professionally designed with consistent branding and clear navigation, targeting a general audience interested in mountain safety and rescue services. Technically, the website is built on WordPress CMS, leveraging modern frontend technologies such as Bootstrap 5, jQuery, and Swiper.js for interactive elements. Hosting is provided by cyber_Folks S.A., and the site enforces HTTPS with good SSL configuration. While performance is moderate and mobile optimization is good, there is room for improvement in accessibility and security headers implementation. The site uses Google Analytics for user tracking at a moderate level but lacks a cookie consent mechanism, which is a privacy compliance gap. From a security perspective, the site demonstrates a solid baseline with HTTPS and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and a formal security policy or incident response contact reduces the overall security posture. The WHOIS data aligns well with the business history, showing a domain age consistent with the organization's longevity and no suspicious registration patterns. Overall, the site is trustworthy and credible but could enhance compliance and security practices. The risk assessment indicates a low risk environment with no critical issues detected. Strategic recommendations include implementing security headers, adding a cookie consent banner, publishing a security policy, and conducting regular security audits to maintain and improve the security posture and privacy compliance.

D

Diözesanstelle Ehe Familie Leben

ehe-familie-lebensberatung.de

45

The website www.ebfr-efl.de represents the Diözesanstelle Ehe Familie Leben, a regional non-profit counseling service operating within the Archdiocese of Freiburg, Germany. It offers psychological counseling for marriage, family, and life issues, targeting individuals, couples, and families regardless of their background. The site provides information on counseling services, online counseling, training, and contact details, positioning itself as a trusted regional support entity. Technically, the site is built on the Edith CMS platform and hosted by w-commerce.de. It uses a modern tech stack including jQuery, AblePlayer for accessible video playback, and Matomo for analytics. The website is mobile-optimized and accessible, though SEO metadata is basic. Performance is moderate with well-structured navigation and consistent branding. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and a cookie consent mechanism, which impacts GDPR compliance. No explicit security or incident response policies are published. Analytics usage is moderate with privacy-conscious settings but could be improved with clearer user consent. Overall, the website is professional and trustworthy for its intended audience but would benefit from enhanced privacy compliance, security headers, and visible policy documentation to improve user trust and regulatory adherence.

B

Badischer Landwirtschaftlicher Hauptverband e.V. (BLHV)

blhv.de

57

The Badischer Landwirtschaftlicher Hauptverband e.V. (BLHV) is a regional agricultural association representing the interests of farmers and rural stakeholders in Südbaden, Germany. The organization provides a broad range of services including lobbying, legal advice, tax and social insurance consulting, insurance services, and support for farm succession. The website reflects a well-established regional entity with a clear focus on supporting agricultural members and strengthening rural areas. The presence of subsidiaries and partners further enhances its service offerings and regional influence. Technically, the website is built on WordPress with a modern plugin ecosystem including SEO tools, cookie management, and form handling. The site is mobile-optimized and uses HTTPS with a good SSL configuration. Basic security practices are in place, including reCAPTCHA and cookie consent mechanisms, although some security headers could be improved. Analytics usage is minimal and privacy compliance is well addressed with comprehensive privacy and cookie policies. Security posture is solid with no evident vulnerabilities or exposed sensitive data. However, the absence of a published security policy, incident response contacts, or vulnerability disclosure mechanisms suggests room for maturity in security governance. The domain WHOIS data aligns well with the website content, indicating legitimacy and consistency. Overall, the website is professional, trustworthy, and serves its target audience effectively. Strategic improvements in security headers and transparency around security policies would further strengthen its posture.

E

Evangelische Landeskirche in Baden

ekiba.de

53

The Evangelische Landeskirche in Baden operates a comprehensive and professionally designed website serving as an information and community engagement platform for its members and the general public interested in religious and social topics in the Baden region of Germany. The site provides extensive content on church activities, social services, educational programs, and community events, positioning itself as a key regional religious institution. Technically, the website leverages Edith CMS, jQuery, Bootstrap, and Matomo analytics, indicating a mature digital infrastructure with good mobile optimization and accessibility. Security posture is solid with HTTPS enforcement, privacy-conscious analytics, and cookie consent mechanisms, though explicit security policies and incident response information are not published. Overall, the website is trustworthy, GDPR compliant, and free from suspicious or adult content, reflecting a low-risk profile for users and stakeholders.

K

Katholische Landjugendbewegung (KLJB) der Erzdiözese Freiburg

kljb-freiburg.de

45

The Katholische Landjugendbewegung (KLJB) der Erzdiözese Freiburg is a German non-profit youth organization focused on engaging young people in rural areas through education, events, and community activities. The website serves as an information hub for members and interested parties, providing contact details, event information, and organizational news. It is affiliated with the national KLJB and the international MIJARC movement, positioning it as a regional player with broader connections. Technically, the website is built on Edith CMS and uses jQuery libraries alongside Matomo analytics for user tracking with respect to privacy preferences. The site is hosted on German servers (Goneo) and employs HTTPS for secure communication. The design is professional, mobile-optimized, and accessible, though some SEO and security best practices could be improved. From a security perspective, the site uses HTTPS and respects cookie consent for tracking. However, it lacks explicit privacy and cookie policies, security headers, and incident response contact information, which are areas for improvement. No critical vulnerabilities or suspicious elements were detected. Overall, the website is trustworthy and professional, serving its non-profit mission effectively. Strategic enhancements in privacy transparency and security hardening would further strengthen its posture.

K

Katholische Landbewegung Freiburg (KLB)

klb-freiburg.de

45

Katholische Landbewegung Freiburg (KLB) is a small non-profit organization dedicated to supporting Christian life and community in rural areas around Freiburg, Germany. The website provides information about their mission, events, spiritual offerings, and campaigns to preserve rural culture and environment. Their target audience includes rural community members and those interested in Christian faith and rural life. Technically, the site is built on Edith CMS, uses common JavaScript libraries like jQuery and Bootstrap, and integrates Matomo for analytics with some privacy controls. Security posture is moderate with HTTPS enforced but lacks explicit security headers and formal privacy policies. Contact information is limited but includes an email and a contact page. Overall, the website is professional, well-structured, and trustworthy for its niche audience.

K

Katholische Landfrauenbewegung Freiburg (KLFB)

kath-landfrauen.de

45

The Katholische Landfrauenbewegung Freiburg (KLFB) is a regional non-profit organization dedicated to supporting women and families in rural areas within the Erzdiözese Freiburg. The website serves as an informational and event platform, providing news, event listings, and educational content aligned with its mission. The organization positions itself as a community advocate with a focus on Christian values and rural development. Technically, the website is built on Edith CMS, leveraging jQuery, Bootstrap, and Matomo analytics, hosted on infrastructure associated with w-commerce.de. The site is accessible, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and some privacy considerations via Matomo's cookie disabling, but lacks explicit privacy and cookie policies and security headers. Overall, the site reflects a trustworthy and professional presence for a small non-profit entity.

E

Erzdiözese Freiburg - Bildungshäuser und Familienferienstätten

bildungshaus-neckarelz.de

55

Bildungshaus Neckarelz is a small, non-profit educational and hospitality organization based in Mosbach-Neckarelz, Germany, affiliated with the Erzdiözese Freiburg. The website offers detailed information about seminars, courses, accommodation, and conference facilities, targeting individuals and groups interested in personal and professional development in a welcoming environment. The business model focuses on education and hospitality services with a strong community orientation. Technically, the website is built on Edith CMS and uses common JavaScript libraries such as jQuery and AblePlayer, with Matomo analytics integrated respecting user consent. The site is hosted on fibcom.de nameservers and enforces HTTPS, providing a secure browsing experience. The design is professional, mobile-optimized, and accessible, with good SEO practices. From a security perspective, the site enforces HTTPS and respects tracking consent but lacks explicit security headers and formal privacy and cookie policies, which are compliance gaps. No incident response or vulnerability disclosure information is provided, limiting transparency in security management. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

F

Familienwerk Sölden e.V.

dorfhelferinnenwerk.de

49

Familienwerk Sölden e.V. is a German non-profit organization specializing in family care services, ensuring families receive support during temporary absences. The website presents a professional image with clear descriptions of services such as Familienpflege and Dorfhilfe, targeting families in southern Germany. The organization positions itself as a regional specialist with a focus on compassionate and professional care. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and caching for performance. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and incident response disclosures are recommended. Overall, the site is trustworthy and well-structured, though cookie consent mechanisms and explicit privacy compliance features could be enhanced.

R

Referat Kirche und Ländlicher Raum Erzdiözese Freiburg

landpastoral.de

43

The website 'Kirche im Ländlichen Raum' represents the Referat Kirche und Ländlicher Raum of the Erzdiözese Freiburg, a church-affiliated non-profit organization focused on supporting and fostering community life in rural areas of Germany. It provides information, news, and collaboration opportunities with various rural and church-related organizations. The site targets rural communities and church members, offering resources and event information to strengthen social and spiritual ties. Technically, the website is built on Edith CMS, uses modern JavaScript libraries such as jQuery and Bootstrap, and integrates Matomo for analytics with respect to user privacy. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, HTTPS is enforced, but the absence of explicit security headers and cookie consent mechanisms indicates room for improvement. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration data aligns well with the website's purpose and content, indicating legitimacy.

V

Verband Katholisches Landvolk e. V.

landvolk.de

50

Verband Katholisches Landvolk e. V. is a German non-profit organization representing Christian rural communities and agricultural interests. The website serves as an information hub for community engagement, events, family counseling, and advocacy on rural and agricultural topics. It targets a niche audience of rural Christians in Germany, providing relevant content and resources. The business model is non-profit and community-focused, with a small organizational size and consistent branding. Technically, the website is built on the REDAXO CMS platform, utilizing Bootstrap, jQuery, and Owl Carousel for UI components. It employs Matomo analytics with privacy-conscious settings disabling cookies and campaign parameters. The site is mobile optimized with good navigation and content quality, though accessibility and SEO are basic. Hosting details are not explicitly known. From a security perspective, the site uses HTTPS but lacks visible security headers and published security or incident response policies. No forms with data submission are active, reducing attack surface. Privacy compliance is partial with a privacy and cookie policy present but no explicit consent mechanism. No vulnerability disclosure or security.txt file is found. Overall, the security posture is moderate but could be improved with standard headers and policies. The overall risk is low given the non-profit nature and limited sensitive data handling. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security policies, and adding vulnerability disclosure mechanisms to improve trust and compliance.

The Bundesarbeitsgemeinschaft der Landwirtschaftlichen Familienberatungen und Sorgentelefone operates as a non-profit organization dedicated to providing counseling and support services to agricultural families in Germany. Their services include crisis management, mediation, financial and legal advice, and helpline support. The organization is well-established with regional member institutions and supported by reputable sponsors such as Rentenbank and the German Federal Ministry of Food and Agriculture (BMEL). The website reflects a professional and consistent brand image, targeting agricultural families and individuals seeking assistance.

E

Erzdiözese Freiburg

initiative-wertvolle-zukunft.de

45

Initiative Wert-volle Zukunft is a German non-profit initiative founded in 2009 under the Erzdiözese Freiburg. It focuses on charitable fundraising and promoting social values such as justice, peace, and community. The website targets donors and the faithful, providing donation options, project information, and contact details. Technically, the site uses Edith CMS, jQuery, Bootstrap, and Matomo analytics, hosted on professional infrastructure. Security posture is good with HTTPS and security headers, but lacks visible cookie consent and published security policies. Overall, the site is professional, trustworthy, and serves its non-profit mission effectively.

J

Jugend- und Familienministerkonferenz der Länder (JFMK)

jfmk.de

48

The Jugend- und Familienministerkonferenz der Länder (JFMK) website serves as the official online presence for the German governmental conference focused on youth and family policy coordination across federal states. The site provides information about the conference's mission, leadership, and activities, targeting government officials, policy makers, and families in Germany. The website is professionally designed with consistent branding and clear navigation, supporting its role as a trusted governmental resource. Technically, the site is built on WordPress using the Avada theme and several plugins including LayerSlider, Ultimate Member, Borlabs Cookie, and Yoast SEO. It is hosted with domaincontrol.com nameservers, likely GoDaddy, and uses HTTPS with good SSL configuration. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some security headers are not explicitly detected. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. No exposed sensitive data or vulnerabilities were found in the analyzed content. However, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which could be improved to enhance trust and security posture. Overall, the website is a secure, professional, and trustworthy governmental platform with good privacy compliance. Strategic recommendations include adding security headers, publishing security and incident response policies, and implementing a vulnerability disclosure process to further strengthen security and compliance.

The website nibis.de serves as the Niedersächsischer Bildungsserver, a public educational portal managed by the Niedersächsisches Landesinstitut für schulische Qualitätsentwicklung (NLQ). It provides comprehensive educational resources, materials, and information targeted primarily at teachers, students, and educational institutions within the German state of Niedersachsen. The site is well-positioned as a key regional educational resource, supported by official government branding and partnerships with related educational portals. Technically, the site employs a modern JavaScript stack including jQuery, Video.js, and Piwik (Matomo) for analytics, hosted behind Cloudflare for performance and security. The site is moderately optimized for mobile and accessibility, with a custom CMS powering content delivery. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding security headers and explicit cookie consent mechanisms. Privacy compliance is strong with a clear GDPR-compliant privacy policy, though cookie consent is lacking. Overall, the site demonstrates a high level of professionalism and trustworthiness appropriate for a government educational service.

T

Tag der Medienkompetenz

tag-der-medienkompetenz.de

45

The website 'Tag der Medienkompetenz' serves as the official platform for a biennial media literacy event held in Niedersachsen, Germany. It is supported by regional governmental institutions and targets educators and media professionals. The site provides detailed event information, workshops, and networking opportunities, reflecting a well-established presence since 2009. Technically, the site is built on WordPress with the Divi theme and includes modern plugins for SEO and cookie management, ensuring a good user experience and compliance with privacy regulations. Security posture is adequate with HTTPS and cookie consent but could be improved with additional security headers and explicit incident response policies. Overall, the site is professional, trustworthy, and well-aligned with its educational mission.

T

TV Plus Productions

tv-plus.de

53

TV Plus Productions is a German media production company specializing in TV content creation. The website is professionally designed using WordPress and Elementor, targeting German-speaking audiences interested in media and TV production services. The technical infrastructure is modern and leverages popular CMS and page builder technologies, ensuring good mobile optimization and user experience. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal policies such as privacy and cookie policies. No contact information or incident response details are present, which limits transparency and trust. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security best practices.

R

Radio38 GmbH & Co. KG

radio38.de

51

Radio38 GmbH & Co. KG operates a regional radio station serving the Braunschweig and Wolfsburg areas in Germany, providing local news, music, and community information. The website is professionally designed, mobile-optimized, and integrates multiple advertising and analytics technologies, including Google Tag Manager and Snowplow Analytics. GDPR compliance is well implemented with a comprehensive privacy policy and cookie consent mechanism. The business model is primarily advertising-supported regional broadcasting with digital streaming capabilities. Security posture is solid with HTTPS enforced and some security best practices observed, though additional security headers could enhance protection. No critical vulnerabilities or suspicious content were detected. Overall, the website reflects a legitimate and professional regional media company with good digital maturity.

R

Radio Hannover

radio-hannover.de

43

Radio Hannover is a regional media company operating a local radio station serving Hannover and its surroundings. The website provides live streaming, local news, event information, and advertising opportunities. It targets residents interested in local culture, news, and music. The business model is primarily advertising-supported broadcasting with community engagement through events and social media. The site is professionally designed, mobile-optimized, and integrates modern web technologies including Joomla CMS, jQuery, Bootstrap, and third-party widgets for social feeds and radio streaming. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Security posture is adequate with HTTPS and CAPTCHA protections, though it lacks explicit security policies and incident response contacts. WHOIS data indicates a legitimate domain registration consistent with the business profile. Overall, the website is trustworthy, functional, and well-positioned in its local media market.

W

WEYKUP! Künstleragentur - Künstlervermittlung für Bands, Musiker & DJ's

weykup.com

61

WEYKUP! Künstleragentur is a German-based artist booking and management agency with over 20 years of experience in the music business. The company specializes in booking musicians, bands, and DJs, offering services including event consulting, social media management, and networking within the German music scene. Their market position is that of a specialized boutique agency with a strong focus on quality and personalized service. Technically, the website is built on WordPress using Elementor and Yoast SEO, with modern plugins and good performance and mobile optimization. Security posture is adequate with HTTPS and cookie consent management, but lacks explicit security headers and published privacy or security policies. Overall, the website is professional and trustworthy, though it would benefit from enhanced privacy compliance and clearer contact information.

V

vomfeinsten Catering & Service GmbH

vomfeinstencatering.de

40

vomfeinsten Catering & Service GmbH is a medium-sized German catering company specializing in event, business, junior, and trade fair catering services. The company operates multiple locations in Germany and targets businesses and event organizers seeking high-quality, flexible catering solutions. Their website reflects a professional and consistent brand image with clear service offerings and contact channels. Technically, the site is built on WordPress using the Enfold theme and integrates modern tools such as Google Analytics with privacy considerations like IP anonymization. The hosting appears to be managed by a German provider, supporting regional compliance and performance needs. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. Overall, the site is trustworthy, well-structured, and compliant with GDPR requirements.

V

Vintage Foto Bulli

vintagefotobulli.de

59

Vintage Foto Bulli is a specialized event service provider based in Germany, offering vintage VW Bulli photobooth rentals primarily for weddings, corporate events, roadshows, and trade shows. Established in 2015 and operated by ad.letics GmbH, the company holds a niche market position with official Volkswagen licensing and a strong presence in Köln, Hamburg, and München. The website reflects a professional brand image with comprehensive service descriptions, customer testimonials, and active social media engagement. Technically, the site is built on WordPress using modern plugins and analytics tools, providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and incident response information. Overall, the site is trustworthy, compliant with GDPR, and well-positioned for its target audience.

T

TRÜFFEL GÜSE GMBH & CO. KG

trueffel-guese.de

42

Trüffel Güse GmbH & Co. KG is a small German retail company specializing in premium truffles and chocolates, offering a variety of gift packages and corporate presents. The company operates a physical store in Hannover and maintains an online presence with a website built on TYPO3 CMS. Their market position is strengthened by multiple European and World Chocolate Awards, indicating product quality and recognition in the confectionery niche. The target audience includes individual consumers and corporate clients seeking high-quality chocolate gifts. Technically, the website uses modern frameworks such as Bootstrap and jQuery, with Google Analytics and Tag Manager for user tracking, and implements basic GDPR-compliant cookie consent mechanisms. The site is mobile optimized and provides clear navigation and contact information, though it lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS enabled and IP anonymization in analytics, but missing explicit security headers and published security policies. Overall, the website is professional and trustworthy with room for improvement in security and compliance documentation.

Opito Labs GmbH is a specialized design studio combining extensive experience in IT, software development, and event technology. Their market position is that of a niche provider offering integrated hardware and software solutions for live streaming, event networking, lighting design, and technical event management. The company targets corporate clients, especially in automotive and large-scale event sectors, with a strong emphasis on reliability and intuitive technology. Technically, the website employs modern frameworks like Bootstrap and jQuery, with moderate performance and good mobile optimization. Security posture is moderate, with HTTPS implied but no visible security headers or explicit security policies. Privacy compliance is partial, with a cookie consent mechanism present but no formal privacy or terms of service pages. Overall, the business credibility is high due to clear contact information, client references, and professional presentation.

N

Nicezeit - Lindener Eiskonzept - Eisdiele Hannover

nicezeit.com

47

Nicezeit is a small artisanal ice cream business based in Hannover, Germany, specializing in handmade, natural, and dye-free ice cream produced since 2019. The company operates two physical retail locations and offers event catering services with specialized ice cream vehicles and stands. Their business model focuses on premium quality, regional ingredients, and unique flavor creations, targeting local consumers and event clients. The website is professionally designed using WordPress, integrating SEO and social media plugins, and provides clear business and contact information. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response disclosures. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the website and domain registration data support a trustworthy and legitimate business presence.

N

NEXT LEVEL SOLUTIONS

next-level-solutions.eu

51

NEXT LEVEL SOLUTIONS is a premium transportation and chauffeur service provider based in Germany, offering tailored VIP chauffeur, shuttle, valet, vehicle transfer, and event transport services across Europe. The company targets exclusive clientele including business and private customers, emphasizing excellence and comfort. Their website reflects a professional and consistent brand image with detailed service descriptions and team member profiles. Technically, the site is built on WordPress with modern plugins and frameworks, including Matomo for privacy-conscious analytics and Borlabs Cookie for GDPR-compliant consent management. Security posture is good with HTTPS enforced and no exposed sensitive data, though additional security headers and explicit security policies could enhance protection. The absence of public WHOIS data is due to EURid privacy policies common for .eu domains, and the website content supports legitimacy. Overall, the site is well-structured, user-friendly, and compliant with privacy regulations, making it a trustworthy digital presence for the business.

H

Henning Scheffen Photography

scheffen.de

48

Henning Scheffen Photography is a specialized photography business based in Hannover, Germany, focusing on professional portraits for business clients, celebrities, and editorial/commercial projects. The website showcases a well-curated portfolio emphasizing business portraits, celebrity photography, and commercial campaigns, positioning the company as a reputable local star photographer. The business targets professionals, corporate clients, and media entities seeking high-quality photographic services. Technically, the website is built on WordPress CMS with a modern and functional tech stack including SEO and GDPR compliance plugins. Hosting is provided by rzone.de, and the site uses HTTPS with a valid SSL certificate ensuring secure communications. The site is mobile-optimized, accessible, and performs moderately well, with good SEO practices implemented. From a security perspective, the website enforces HTTPS and includes cookie consent mechanisms aligned with GDPR. However, explicit security headers are not detected, and no incident response or vulnerability disclosure policies are present. No critical vulnerabilities or exposed sensitive data were found. The site uses Google Analytics via MonsterInsights for user tracking with moderate privacy compliance. Overall, the website is professional, trustworthy, and compliant with privacy regulations. Strategic recommendations include enhancing security headers, adding incident response contact information, and implementing a security.txt file to improve security posture and transparency.

G

Gilde Brauerei

gilde-brauerei.com

52

Gilde Brauerei is a historic brewery based in Hannover, Germany, with a rich tradition dating back to 1546. The company produces a range of beers and operates brewery gastronomy, tours, and an online fan shop. The website is built on WordPress with modern plugins for SEO and cookie consent, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and documented security policies. Privacy compliance is partial due to missing explicit privacy and terms of service pages. Overall, the website reflects a professional and trustworthy business with room for improvement in privacy and security transparency.

D

dean&david

deananddavid.com

49

dean&david is a well-established German retail food service company specializing in fresh salads, bowls, and natural food offerings. The company operates physical stores, delivery services, catering, and a mobile app for ordering, targeting health-conscious consumers seeking fresh and additive-free meals. The website is professionally designed using WordPress with modern plugins and SEO tools, supporting multilingual content and cookie consent mechanisms. The technical infrastructure is solid, though there is room for improvement in security practices such as enabling DNSSEC and implementing security headers. The security posture is moderate with HTTPS enabled and domain registration consistent with business claims. However, the absence of explicit privacy policies, terms of service, and incident response contacts indicates gaps in compliance and transparency. Overall, the website presents a trustworthy and professional image with good business credibility but should enhance privacy and security documentation to improve compliance and user trust.

C

Circus-Theater Roncalli

roncalli.de

67

Circus-Theater Roncalli is a German-based entertainment company specializing in circus theater performances, combining artistry, clowning, and live music. The website serves as a platform for ticket sales and tour information, targeting a general audience interested in cultural and live entertainment. The business appears established with a medium-sized presence in the hospitality sector. Technically, the website is built on WordPress with modern SEO and consent management tools, hosted behind Cloudflare DNS and CDN services. The site is mobile-optimized and provides a good user experience with clear branding and consistent content. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. Overall, the website is trustworthy and professional but would benefit from publishing explicit privacy and terms of service pages and providing direct contact information for enhanced credibility and compliance.

B

Billy Burrito

billy-burrito.de

40

Billy Burrito is a small, specialized mobile band offering live walk-act and marching band performances primarily in German-speaking countries. Their services target event organizers seeking energetic, creative musical entertainment without the need for technical setups. The website is well-structured, visually appealing, and provides comprehensive information about the band’s offerings and testimonials, supporting a positive market position in their niche. Technically, the site uses modern front-end frameworks like Bootstrap and integrates Google Analytics for user tracking, but lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance. Security posture is moderate with HTTPS enabled but missing several best practice headers. Overall, the site is functional and professional but could improve privacy and security transparency. The domain WHOIS data is limited but shows no suspicious patterns, supporting legitimacy. Strategic recommendations include implementing cookie consent, enhancing security headers, and publishing detailed privacy and security policies to improve compliance and trust.

B

bob6 - Das neue Eventmanagement Tool

bob6.de

65

bob6.de is a German website offering an event management software solution focused on participant management. The site promotes ease of use and provides a demo for prospective users. The business appears to be a small technology company targeting event organizers and managers. Technically, the website is built on WordPress using the Divi theme and employs Yoast SEO for search engine optimization. The site is accessible, mobile-optimized, and uses HTTPS, indicating a baseline level of technical maturity. However, the absence of privacy and cookie policies, lack of contact information, and minimal WHOIS data reduce the overall trust and compliance posture. Security headers are not detected, and no incident response or vulnerability disclosure information is provided, suggesting room for improvement in security practices. Overall, the website is functional and professional but would benefit from enhanced transparency and security measures.

A

agent.ally

agent-ally.de

62

agent.ally is a small, specialized digital agency based in Hildesheim, Germany, offering tailored IT support, software development, web design, and marketing services with a strong focus on social media. The company emphasizes personal and flexible client engagement, combining expertise in IT, design, and marketing to deliver user-centric digital experiences that enhance brand positioning and customer engagement. Technically, the website is built on WordPress with modern plugins and libraries, demonstrating good digital maturity and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms in place, though some security headers and policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

S

Sat.1 Norddeutschland GmbH

sat1regional.de

59

SAT.1 REGIONAL is a regional news media company providing news and video content focused on Northern Germany, including Hamburg, Schleswig-Holstein, Niedersachsen, and Bremen. It operates under the parent company ProSiebenSat.1 Media SE and targets residents interested in local news and events. The website offers livestreams, newsticker updates, and categorized news content, serving as a trusted regional media outlet. Technically, the site is built on WordPress with modern SEO and cookie consent plugins, hosted on Amazon AWS infrastructure, and optimized for mobile users. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the site is professional, trustworthy, and well-maintained, with no signs of blocking or malicious content.

T

TVN GROUP HOLDING GmbH & Co. KG

tvn.de

53

TVN GROUP HOLDING GmbH & Co. KG is a well-established German media company specializing in film and television production services, corporate media, live broadcasting, and innovative media solutions including VR/AR and 360° films. As part of the Madsack Mediengruppe, it leverages over 40 years of industry experience and offers a comprehensive portfolio of services to media professionals and corporate clients. The company maintains a strong market position with diversified competencies and a focus on technical and content innovation. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries such as jQuery, Bootstrap, and Slick Carousel. It integrates Matomo analytics and a consent management platform to ensure GDPR compliance. Hosting appears to be stable and professional, likely provided by Deutsche Telekom. The site is mobile-optimized and SEO-friendly, with good accessibility and performance characteristics. From a security perspective, the website enforces HTTPS and uses a consent management platform for privacy compliance. However, it lacks explicit security policy pages, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The overall security posture is solid but could be improved by adding security headers and formal policies. Overall, the website is professional, trustworthy, and compliant with privacy regulations. It effectively communicates the company's services and corporate identity, supporting a positive user experience and business credibility.

F

fdmedia GmbH

mhthemes.com

65

MH Themes, operated by fdmedia GmbH, is a specialized provider of premium WordPress themes established in 2012. The company targets WordPress users seeking high-quality, feature-rich themes, particularly in the magazine and editorial niche. Their business model centers on digital product sales with a focus on theme customization and support. The website demonstrates a mature technical infrastructure leveraging WordPress CMS, Cloudflare CDN and security services, and advanced analytics tools such as Mixpanel and Usermaven. The site is well-optimized for performance and mobile use, with a professional design and clear navigation.

P

Patronite Sklep

patronite-sklep.pl

53

Patronite Sklep is a Polish e-commerce platform specializing in selling merchandise and products related to popular content creators and authors. The website offers a variety of branded items such as clothing, mugs, and accessories, targeting fans and supporters of these creators. The business operates on a WooCommerce platform integrated with WordPress, leveraging modern web technologies and SEO tools to enhance user experience and visibility. The domain is relatively new, registered in 2022, aligning with the business's apparent startup phase. Social media integration with Facebook and Instagram supports community engagement and marketing efforts. Technically, the site is well-structured with responsive design and moderate performance, although some security best practices like DNSSEC and security headers are missing. Privacy compliance is partially addressed through a cookie consent mechanism, but lacks a publicly accessible privacy policy or terms of service. Overall, the site presents a professional and trustworthy e-commerce presence with room for improvement in security and compliance documentation.

D

DALU, s.r.o.

dalu.cz

54

DALU, s.r.o. is a Czech renewable energy company established in 2008, specializing in the design, installation, and servicing of photovoltaic and wind power plants for both businesses and households. The company positions itself as a stable and reliable provider in the Czech energy market, emphasizing quality, sustainability, and innovation. Their service portfolio includes comprehensive energy solutions, consulting, system monitoring, and recycling of solar panels. The website reflects a professional digital presence built on WordPress with the Divi theme, featuring clear branding and user-friendly navigation. Contact information is readily available, and GDPR compliance is addressed through dedicated policy pages and consent mechanisms. However, some security best practices such as security headers and incident response policies are not explicitly presented.