Security Directory

E.INFRA GmbH is a medium-sized German company specializing in electrotechnical and communication technology solutions. With over 200 employees and multiple regional offices, the company offers a broad range of services including plant construction, energy and switchgear systems, security technology, network technology, media technology, IoT and sustainability solutions, as well as maintenance and service. Their business model focuses on B2B services targeting organizations requiring complex electrical and communication infrastructure. The website is professionally designed, mobile-optimized, and provides comprehensive information about their offerings and corporate presence. Technically, the website employs modern JavaScript libraries such as jQuery, Bootstrap, and FontAwesome, with client-side validation and cookie consent mechanisms implemented. While the site performs moderately well and is mobile-friendly, there is room for improvement in accessibility and SEO optimization. Security-wise, the site uses HTTPS but lacks explicit security headers like CSP and HSTS, which are recommended to enhance protection. No incident response or vulnerability disclosure information is publicly available. The WHOIS data is unavailable, which reduces transparency and trust slightly; however, the professional presentation, multiple physical locations, and active social media presence support the legitimacy of the business. Privacy compliance is well addressed with a detailed privacy policy and cookie consent banner, indicating adherence to GDPR requirements. Overall, the website presents a trustworthy and professional image with moderate technical maturity and security posture. Strategic improvements in security headers, WHOIS transparency, and accessibility would further strengthen their digital presence and trustworthiness.

M

MKG Bank

mkg-bank.de

62

MKG Bank is a specialized financial institution serving as the official financing partner for Mitsubishi Motors in Germany. The company offers a range of automotive financing products including standard loans, balloon credits, and leasing options tailored for both private and business customers. Additionally, MKG Bank provides insurance services in partnership with established insurance companies, enhancing its value proposition to customers. The website reflects a medium-sized, well-established business with a strong market position in automotive finance, supported by its parent company MCE Bank GmbH. Technically, the website employs modern frameworks such as Bootstrap and jQuery, integrates Matomo analytics with privacy-conscious settings, and uses a comprehensive cookie consent management system. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though it lacks explicit security policy and incident response information.

L

LIQUI MOLY GmbH

liqui-moly.com

62

LIQUI MOLY GmbH operates a professional and well-branded website focused on automotive products such as motor oils, additives, and car care items. The company targets vehicle owners and automotive professionals with a broad product portfolio and multiple language versions, indicating a strong international presence. The website is built on the Magento platform, leveraging modern web technologies and includes a cookie consent mechanism for privacy compliance. However, no explicit privacy policy or terms of service pages were detected in the provided content. Security posture is moderate with HTTPS enabled but lacking visible security headers. WHOIS data for the domain is missing, which raises some concerns about domain registration transparency but does not detract from the overall legitimacy indicated by the website content and branding.

O

OpenScan.ai

wanexplorer.io

50

OpenScan.ai operates as a specialized blockchain explorer and analytics platform primarily focused on the Wanchain (WAN) blockchain and related EVM-compatible networks. The platform offers users and developers tools to explore transactions, blocks, tokens, NFTs, and DeFi activities, positioning itself as a niche service provider within the blockchain technology sector. Despite being a relatively new entrant founded in 2022, it leverages modern web technologies and maintains an active presence across multiple social media channels to engage its target audience of blockchain users and developers. Technically, the website is built using React.js and Bootstrap frameworks, with integrations of Highcharts for data visualization and Font Awesome for iconography. Hosting and DNS services are provided via Cloudflare, ensuring reliable performance and HTTPS security. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. The absence of a CMS suggests a custom-built platform tailored for blockchain data presentation. From a security perspective, the site enforces HTTPS and employs domain registration locks to prevent unauthorized changes. However, it lacks DNSSEC implementation and does not present common security headers, which are areas for improvement. Privacy and cookie policies are absent, indicating potential compliance gaps with GDPR and other privacy regulations. No contact information or incident response details are provided, limiting transparency and user trust in security matters. Overall, OpenScan.ai presents a functional and moderately professional blockchain explorer service with room for enhancement in privacy compliance, security hardening, and user trust signals. Strategic improvements in these areas would strengthen its market position and credibility within the blockchain ecosystem.

O

OpenScan.ai

velasblocks.com

51

OpenScan.ai operates as a specialized blockchain explorer and analytics platform primarily serving the Velas (VLX) blockchain ecosystem. The platform offers comprehensive blockchain data including transactions, blocks, tokens, NFTs, and developer tools such as APIs and contract verification. Its target audience includes blockchain developers, crypto traders, and enthusiasts seeking detailed insights into Velas blockchain activities. The business is relatively young, founded in 2022, and positions itself as a niche service provider within the blockchain technology sector. Technically, the website employs modern frontend technologies including React, Bootstrap, and Highcharts for data visualization. It is hosted on Cloudflare infrastructure, ensuring good performance and security at the network level. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some accessibility and SEO optimizations are basic and could be improved. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and important security headers, which are recommended to enhance security posture. There is no visible privacy policy, cookie consent mechanism, or incident response information, indicating gaps in compliance and transparency. No contact emails or phone numbers are provided, which may affect user trust and support accessibility. Overall, the website is functional, professional, and relevant to its niche but would benefit from enhanced privacy compliance, security best practices, and clearer contact and policy disclosures to improve trust and regulatory adherence.

C

Cloudflare, Inc

xdcscan.io

62

OpenScan.ai operates as a blockchain explorer dedicated to the XDC Network, providing users with comprehensive tools to explore transactions, addresses, tokens, NFTs, and DeFi activities. The platform targets blockchain users, developers, and investors interested in the XDC ecosystem. It offers a range of services including transaction tracking, token analytics, contract verification, and developer APIs, positioning itself as a niche but important player in the blockchain data services market. Technically, the website leverages modern web technologies such as React.js and Bootstrap, hosted and registered via Cloudflare, ensuring a reliable and secure infrastructure. The site demonstrates good performance and mobile optimization, with a clean and professional design that facilitates user navigation and engagement. From a security perspective, the site benefits from HTTPS enforcement, strong security headers, and domain transfer protections. However, it lacks publicly available privacy and cookie policies, as well as explicit incident response or vulnerability disclosure information, which are important for regulatory compliance and user trust. Overall, OpenScan.ai presents a solid technical and business foundation with moderate security maturity. To enhance trust and compliance, it should implement comprehensive privacy and cookie policies, provide clear contact and incident response channels, and enable DNSSEC for improved DNS security.

M

M&G plc

mandg.com

76

M&G plc is a well-established international leader in savings and investments, serving over five million customers globally. The company offers a broad range of financial services including savings products, investment management, and institutional client services. Their website reflects a mature business with a strong market position in the finance sector, targeting investors, intermediaries, and private clients. The presence of multiple regional and partner sites indicates a significant international footprint. Technically, the website is built on a modern stack including Sitecore CMS, jQuery, Bootstrap, and Google Tag Manager, hosted likely via Akamai CDN. The site demonstrates good performance, mobile optimization, and accessibility standards. SEO practices are well implemented with comprehensive meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms with opt-in for performance cookies. However, some security headers are missing, and no public incident response or vulnerability disclosure information is found. The WHOIS data is unavailable or protected, which is common for large enterprises but reduces transparency. Overall, the security posture is solid but could be improved with additional headers and published security policies. The overall risk assessment is low, with the website presenting a professional, trustworthy front for a major financial institution. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure and incident response contacts, and improving transparency around registrant data where possible.

D

Drescher & Cie AG

sustainability-congress.com

51

The Sustainability Congress website is operated by Drescher & Cie AG, a medium-sized finance sector company based in Germany, specializing in organizing investment conferences focused on sustainable finance. The site presents a professional and consistent brand image, targeting investors and finance professionals interested in sustainable investments. The business model revolves around event organization, media content, and partnerships within the sustainable finance ecosystem. Technically, the site is built on TYPO3 CMS, leveraging modern frontend technologies such as Font Awesome and Bootstrap, hosted by Vautron Rechenzentrum AG. The website is mobile-optimized and SEO-friendly, with good performance and accessibility standards. Security-wise, the site uses HTTPS with a good SSL configuration, though DNSSEC is not enabled. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. No critical vulnerabilities or security issues were detected. Overall, the site demonstrates a mature digital presence with strong business credibility and trust indicators.

D

DRESCHER & CIE AG

drescher-cie.de

48

DRESCHER & CIE AG is an established independent financial information service provider based in Germany, specializing in stock market and fund-related services since 1997. The company offers a broad range of services including capital market research, consulting, editorial content, event organization, and operates an online platform for webinars, podcasts, and media content. Their target audience primarily consists of professional investors and financial intermediaries. The website reflects a mature digital presence built on TYPO3 CMS with modern frontend technologies, providing a professional and accessible user experience. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates good compliance with GDPR and offers clear navigation and relevant content.

R

Raaberbahn AG

raaberbahn.at

61

Raaberbahn AG is a regional private railway company operating in Austria's Burgenland region with cross-border services. It provides passenger transportation, ticketing, customer service, and network access services. The company is a subsidiary or closely affiliated with GYSEV Zrt., a larger railway operator. The website is professionally designed using TYPO3 CMS and modern web technologies, offering comprehensive information and services to passengers, partners, and job seekers. Privacy and cookie policies are well implemented with user consent mechanisms. Security posture is good with HTTPS and secure forms, though some security headers could be improved. WHOIS data is not publicly available, which slightly reduces transparency but does not detract from the overall legitimacy given the official contact details and business context. Overall, the site is trustworthy, well-maintained, and serves its audience effectively.

P

PORR s.r.o.

porr.sk

48

PORR Slovakia (porr.sk) is a well-established construction company operating as part of the multinational PORR Group. The company provides a broad range of construction services including engineering, infrastructure, building construction, asphalt production, and specialized construction skills. The website reflects a mature business with over 18 years of domain age and consistent branding aligned with the parent company. Technically, the site uses TYPO3 CMS and modern web technologies, delivering a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, although some security headers and incident response policies are not publicly disclosed. Privacy compliance is strong, with GDPR-aligned cookie policies and data protection statements. Overall, the website is professional, trustworthy, and suitable for its target audience of construction clients and partners.

P

PORR Construct S.R.L.

porr.ro

55

PORR Construct S.R.L. is a Romanian subsidiary of the PORR Group, a leading European construction company with over 150 years of experience. The company specializes in building construction and civil engineering, delivering a wide range of infrastructure projects including roads, bridges, and public facilities. The website reflects a professional and well-established business with clear market positioning and a comprehensive service portfolio. Technically, the site is built on TYPO3 CMS with modern web technologies, offering good mobile optimization and accessibility. Security posture is adequate with HTTPS and cookie consent mechanisms, though security headers and incident response information are lacking. Overall, the site demonstrates strong business credibility and compliance with GDPR.

P

PORR S.A.

porr.pl

57

PORR Poland is a well-established construction company operating as part of the larger PORR Group. The company offers a wide range of construction services including infrastructure, civil engineering, building construction, rail construction, power plant construction, hydraulic engineering, and specialized equipment services. The website reflects a mature business with a strong market position in Poland and connections to European markets. Technically, the site is built on TYPO3 CMS with modern web technologies and includes comprehensive cookie consent mechanisms and analytics integration. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

P

PORR GmbH & Co. KGaA

porr.de

54

PORR GmbH & Co. KGaA operates a professional and comprehensive website focused on construction and engineering services in Germany. The company positions itself as a technology leader offering a wide range of services including government services, building construction, infrastructure, and environmental technology. The website is well-structured, multilingual, and targets business clients in the construction and infrastructure sectors. The digital infrastructure is based on TYPO3 CMS with modern web technologies and includes a detailed cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS and cookie management, though explicit security policies and incident response contacts are not published. Overall, the site reflects a mature enterprise-level business with strong branding and trust indicators.

P

PORR Schweiz

porr.ch

55

PORR Schweiz is a well-established, international construction company with over 150 years of experience and a strong presence in Switzerland and other European countries. The company offers a broad range of construction services including building construction, civil engineering, infrastructure, tunnel construction, and environmental technology. The website reflects a professional corporate identity aligned with its parent company PORR AG, showcasing a comprehensive service portfolio and multiple country-specific sites. Technically, the website is built on TYPO3 CMS with modern web technologies, providing good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some advanced security headers could be added. Privacy compliance is well addressed with a detailed privacy and cookie policy. Overall, the website projects high business credibility and trustworthiness.

P

PORR a.s.

porr.cz

56

PORR a.s. is a well-established large enterprise operating in the construction and infrastructure sector in the Czech Republic, with a strong international presence under its parent company PORR AG. The company offers full-service construction solutions including transport and engineering structures, building construction, and special competencies. The website reflects a professional corporate identity with comprehensive content, clear navigation, and multilingual support. Technically, the site is built on TYPO3 CMS with modern web technologies and demonstrates good performance and mobile optimization. Security posture is strong with HTTPS, cookie consent mechanisms, and privacy-conscious embedded content. No critical vulnerabilities or compliance gaps were detected. Overall, the site projects high trustworthiness and business credibility.

S

SCHIG mbH

schig.com

53

SCHIG mbH is a government-owned competence center for railway and mobility matters in Austria, operating under the Federal Ministry for Climate Protection, Environment, Energy, Mobility, Innovation and Technology. Founded in 1996, it has evolved from a financing agency to a proactive service organization offering solutions for sustainable mobility. The website reflects a professional government entity with comprehensive information on its services, tasks, and job offerings. Technically, the site is built on TYPO3 CMS with modern frontend technologies like Bootstrap and jQuery, providing good mobile optimization and accessibility. Security posture is moderate with no detected blocking or WAF, but lacks explicit security headers and incident response contacts. WHOIS data is missing, which reduces transparency but the site content and contact details support legitimacy. Overall, the site is well-structured, informative, and trustworthy for its target audience.

E

Earlybird GmbH

earlybird.at

51

Earlybird GmbH is a Vienna-based digital agency specializing in TYPO3 CMS web development, digital accessibility, intranet solutions, and election analysis services. The company positions itself as a professional partner for digital transformation projects, emphasizing quality, sustainability, and accessibility. Their market position is strengthened by certifications such as TYPO3 Association Gold membership and Certified WebAccessibility Expert status. Technically, the website is built on TYPO3 CMS with modern frontend technologies like Bootstrap and jQuery, optimized for mobile and accessibility. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and incident response policies are recommended. Overall, the website reflects a mature digital presence with strong business credibility and compliance awareness.

Allgäu Outlet is a regional retail business specializing in outlet sales of sportswear, fashion, and accessories from well-known brands. The company emphasizes value shopping with discounts up to 70% and promotes sustainability through a large photovoltaic installation. The website is built on the webEdition CMS platform and uses modern web technologies such as Bootstrap, FontAwesome, and CookieFirst for consent management. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with cookie consent implemented but lacks visible security headers and published security policies. No critical vulnerabilities or blocking mechanisms were detected, and the site is accessible without WAF interference. Overall, the business appears legitimate with a moderate trust level and good privacy compliance. Strategic improvements could focus on enhancing security headers, publishing terms of service, and providing clearer contact information.

Heinrich-Heine-Universität Düsseldorf (HHU) is a prominent public university in North Rhine-Westphalia, Germany, founded in 1965. The website serves as a comprehensive portal for students, faculty, staff, and the public, offering detailed information about academic programs, research centers, university governance, and services. The site targets a broad audience including prospective and current students, researchers, and administrative personnel. HHU positions itself as a key educational and research institution with a strong regional and national presence. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies such as Bootstrap for responsive design, jQuery for interactivity, and FontAwesome for icons. The site is mobile-optimized and accessible, with good SEO practices and a moderate performance profile. Analytics are handled via Matomo, indicating a privacy-conscious approach to user tracking. From a security perspective, the site enforces HTTPS and shows evidence of organizational security roles such as an Information Security Officer. However, explicit security headers are not detected, and there is no public vulnerability disclosure or security.txt file. Privacy policies are comprehensive and GDPR compliant, though a cookie consent mechanism is not clearly visible. Overall, the security posture is solid but could be enhanced with additional headers and transparency. The domain WHOIS data aligns well with the university's identity and history, supporting the legitimacy of the site. No suspicious patterns or privacy protections obscure ownership details. The site is trustworthy, professionally maintained, and free from adult or questionable content, making it safe for general audiences.

Heinrich-Heine-Universität Düsseldorf (HHU) is a well-established public university in Germany, founded in 1965, offering a broad range of educational and research services across multiple faculties. The website serves as a comprehensive portal for students, staff, and the public, providing detailed organizational information, academic resources, and campus services. The university maintains a strong digital presence with official social media channels and a modern, well-structured website built on TYPO3 CMS. Technically, the site uses contemporary web technologies including Bootstrap, jQuery, and FontAwesome, and integrates Matomo for analytics, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though improvements are recommended in security headers and cookie consent compliance. Overall, the site is professional, trustworthy, and well-aligned with the university's public institution status.

B

BNP Paribas

mabanqueentreprise.bnpparibas

73

BNP Paribas' Ma Banque Entreprise website serves as a secure corporate banking portal offering multiple authentication methods including Corporate Digital Key, Secure Browsing, and Certificate-based login. The site targets business clients, providing tools for account management, financial reporting, and fraud awareness. The branding and content align with BNP Paribas' position as a leading European financial institution. Technically, the site employs modern web technologies such as Bootstrap and jQuery, with good mobile optimization and moderate performance. Security measures include HTTPS enforcement and multi-factor authentication, though explicit security headers are not evident in the HTML source. Privacy compliance is supported by clear privacy and cookie policies, with GDPR adherence implied. Overall, the site demonstrates a strong business credibility and trustworthy user experience.

S

StorX Network

storx.tech

69

StorX Network operates a decentralized cloud storage platform leveraging blockchain technology to provide secure, private, and resilient data storage solutions. Positioned as a pioneer in the DePIN space, StorX offers a range of services including S3 compatible storage, backup solutions, and self-hosted cloud options. The company targets businesses and individual users seeking advanced data privacy and integrity. The website demonstrates a mature digital presence with modern technologies, strong branding, and extensive customer testimonials and media coverage. Technically, the site uses Bootstrap, jQuery, and integrates analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Microsoft Clarity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. WHOIS data shows privacy protection consistent with tech startups, with no suspicious patterns. Overall, StorX presents a credible and professional business with a strong market position in decentralized cloud storage.

S

Slagalica - Zaklada za razvoj lokalne zajednice

zaklada-slagalica.hr

46

Zaklada Slagalica is a Croatian non-profit foundation dedicated to the development of local communities through philanthropy, grants, and community projects. Established in 2008, it maintains a strong local presence with transparent donation practices and active engagement with civil society organizations. The website reflects a professional and consistent brand image, targeting NGOs, donors, and local stakeholders. Technically, the site is built on WordPress with modern plugins and frameworks, hosted on SiteGround, and optimized for mobile and SEO. Security posture is good with HTTPS and reCAPTCHA integration, though improvements in security headers and incident response transparency are recommended. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is trustworthy, well-maintained, and serves its community-focused mission effectively.

The Deutsche Diabetes Stiftung is a German non-profit foundation dedicated to diabetes research, prevention, education, and support. The website serves as an information hub for people affected by diabetes, healthcare professionals, and donors. It offers resources such as health checks, prevention tips, and news about foundation activities. The foundation maintains a transparent and professional online presence with clear contact details and donation options. Technically, the site is built on Drupal 7 with modern JavaScript libraries, providing a responsive and user-friendly experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response information are missing. Overall, the website is trustworthy, well-structured, and compliant with GDPR requirements.

C

CENIT AG

fastsuite.com

76

CENIT AG operates a professional website promoting FASTSUITE Edition 2, a specialized software solution for offline programming and simulation of industrial robots and machines. The company positions itself as an experienced provider with over 30 years in the niche market, targeting manufacturers and system integrators seeking digital factory solutions. The website is well-structured, mobile-optimized, and rich in content including customer testimonials, detailed use cases, and downloadable resources. Technically, the site is built on TYPO3 CMS with modern web standards and integrates analytics via Google Tag Manager. Security posture is moderate with HTTPS implied but lacks visible security headers and explicit privacy or cookie policies. The WHOIS data for the domain is unavailable or the domain is not found in the queried WHOIS database, which raises concerns about domain registration legitimacy. Overall, the site demonstrates strong business credibility and technical maturity but should improve transparency on privacy and security policies to enhance trust.

The European Association for the Study of Diabetes (EASD) is a reputable non-profit organization focused on advancing diabetes research, education, and clinical care. The website serves as a comprehensive portal for members and the diabetes research community, offering information on annual meetings, educational resources, membership, and research funding. The organization maintains a strong market position within the healthcare and academic sectors, targeting diabetes professionals globally. Technically, the website employs modern frontend technologies such as Bootstrap, AOS, and Swiper, ensuring a responsive and user-friendly experience across devices. The site is well-structured with clear navigation and professional design, supporting excellent content quality and accessibility. Privacy compliance is robust, featuring a detailed privacy policy, cookie consent mechanism, and GDPR adherence. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and a public vulnerability disclosure policy suggests room for improvement. WHOIS data is privacy-protected, which is typical for organizations of this nature and does not detract from the site's legitimacy. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing explicit incident response contacts to further strengthen trust and compliance.

L

LANACO

tehnoloskicentar.ba

49

LANACO Tehnološki centar is a prominent technology hub located in Banja Luka, Bosnia and Herzegovina, operated by LANACO, the largest private IT system integrator in the country. The center hosts a Tier 4 standard data center, conference facilities, and an educational center offering IT courses and seminars. The website reflects a professional and consistent brand image targeting businesses and IT professionals in the region. Technically, the site uses modern web technologies including Bootstrap and Google Analytics, with moderate performance and good mobile optimization. Security posture is moderate but lacks visible security headers and published privacy or cookie policies, indicating room for improvement in compliance and security best practices. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website is a reliable digital presence for LANACO's technology center but should enhance privacy and security disclosures to improve trust and compliance.

L

LANACO

ecoone.ba

47

EcoOne.ba is a professional business software website offering cloud-based ERP and accounting solutions primarily targeting small and medium enterprises in Bosnia and Herzegovina. The platform emphasizes accessibility, security, and ease of use, providing multiple packages tailored to different business needs. The website is well-structured, uses modern web technologies, and includes essential privacy and cookie policies, reflecting a mature digital presence. Security posture is adequate with HTTPS and data center security claims, though explicit security headers and incident response policies are not publicly documented. Overall, the site presents a trustworthy and professional image suitable for its target market.

H

Hessisches Landesamt für Naturschutz, Umwelt und Geologie

hlnug.de

58

The Hessisches Landesamt für Naturschutz, Umwelt und Geologie (HLNUG) is a government agency focused on environmental protection, nature conservation, and geology in the German state of Hessen. The website serves as an information hub offering environmental data, educational programs, publications, and tools to support citizens, municipalities, and professionals. It holds a strong market position as an authoritative source for environmental matters in Hessen. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery and Bootstrap for responsive design and user experience. It integrates Matomo analytics configured with privacy-respecting settings and provides a consent mechanism for social media data sharing. The site is hosted likely on government infrastructure, indicated by the domain's nameservers. From a security perspective, the site enforces HTTPS and employs privacy-conscious analytics and social media consent modals. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly implemented, and no incident response or vulnerability disclosure information is published. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR. It is well-structured, accessible, and serves its public service mission effectively. Strategic improvements in security headers and transparency around security policies could further enhance its security posture.

E

eKonferencije.com

ekonferencije.com

48

eKonferencije.com is a specialized platform focused on providing IT solutions for organizing scientific and professional conferences, seminars, and congresses. The platform offers services such as electronic paper submission, reviewer management, reporting, mass notifications, multimedia content, and participant feedback. It targets academic institutions, conference organizers, researchers, and authors primarily in the Serbian-speaking region. The business operates as a small-sized entity founded in 2012, with a niche market position in academic event management. Technically, the website employs a modern but somewhat dated technology stack including jQuery, Bootstrap, AngularJS, and FontAwesome. Hosting is provided by Bitlab Hosting as inferred from the nameservers. The site is mobile optimized and has a moderate performance profile. SEO and accessibility are basic but functional. The site uses HTTPS but lacks advanced security headers and DNSSEC, indicating room for security enhancements. From a security perspective, the site enforces HTTPS but does not implement DNSSEC or security headers such as CSP or HSTS. There is no visible privacy or cookie policy, nor incident response or vulnerability disclosure information, which are compliance gaps especially under GDPR. Contact information is present but limited. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website is functional and professional with good business credibility but requires improvements in privacy compliance and security posture to enhance trust and regulatory adherence. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and establishing incident response contacts.

S

SCHIG mbH

schig.at

53

SCHIG mbH is a government-owned Austrian company specializing in railway and infrastructure services, operating under the auspices of the Federal Ministry for Climate Protection, Environment, Energy, Mobility, Innovation and Technology. Founded in 1996, it has evolved into a forward-looking service organization offering sustainable mobility solutions. The company holds a strong market position as Austria's competence center for railway matters, providing services such as traffic services, infrastructure control, funding programs, and registry management. The website reflects a professional and comprehensive digital presence, built on TYPO3 CMS with modern web technologies, ensuring good performance and accessibility.

P

PORR Bau GmbH

porr.at

56

PORR Bau GmbH is a large, well-established Austrian construction company with over 150 years of experience, offering comprehensive construction and engineering services across Austria. The company operates under the parent entity PORR AG and maintains a professional digital presence with a well-structured website powered by TYPO3 CMS. The site features extensive service descriptions, project references, and multiple language options, targeting construction industry clients, investors, and job seekers. Technically, the website employs modern web technologies, including Google Analytics and embedded YouTube videos, with good mobile optimization and accessibility. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some advanced security headers could be added. Privacy compliance is robust, with clear GDPR-aligned policies and cookie management. Overall, the website reflects a high level of professionalism, trustworthiness, and business credibility.

V

Vereinigung der Österreichischen Industrie (Industriellenvereinigung)

iv.at

56

The Vereinigung der Österreichischen Industrie (Industriellenvereinigung) is Austria's largest voluntary and politically independent industrial interest association representing industry and industry-related service providers across the entire value chain. The website serves as a comprehensive platform for industry advocacy, policy positions, research publications, and member services, targeting Austrian industrial companies and policymakers. The organization holds a strong market position as a key industry voice in Austria. Technically, the website is built on a modern stack including JavaScript, jQuery, Bootstrap, and Owl Carousel, managed via Gentics CMS. It employs Matomo Analytics with privacy-respecting configurations and features a cookie consent mechanism. The site is mobile-optimized with good SEO and accessibility basics, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and respects user privacy with cookie consent and Do Not Track settings. However, it lacks visible security headers and does not publish a security policy or incident response contacts. No vulnerabilities or suspicious elements were detected. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. It demonstrates good privacy compliance and technical maturity, with room for improvement in security transparency and contact information availability.

D

Dr. Aichhorn GmbH

aichhorn-group.at

48

Dr. Aichhorn GmbH operates as a group focused on developing and optimizing companies within the investment goods industry, particularly in manufacturing high-pressure technology and sustainable forestry. The group includes subsidiaries specializing in high-pressure equipment for chemical and petrochemical industries, high-pressure pumps, and thermal separation apparatus. Their market position is strong in Europe with global operations in their niche sectors. The website presents a professional image with clear business descriptions and contact information, targeting industrial clients and partners. Technically, the website uses Bootstrap for responsive design and Typekit for fonts, with a cookie consent mechanism implemented to comply with GDPR. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. No CMS or hosting provider details are evident, and no analytics or tracking beyond cookie consent is detected. From a security perspective, the site uses HTTPS (assumed from URL), but no explicit security headers or policies are visible. The cookie consent banner is a positive privacy compliance indicator. No incident response or vulnerability disclosure information is provided, which could be improved. The WHOIS data aligns well with the business claims, indicating legitimacy. Overall, the website is safe, professional, and compliant with basic privacy requirements but could enhance its security posture and technical sophistication to improve trust and resilience.

The website 'Meldestelle Neuenhauser' serves as an internal whistleblowing and compliance reporting portal for the Neuenhauser Gruppe Holding SE & Co. KGaA, a medium-sized German corporate group. It provides channels for employees and stakeholders to report legal and compliance violations, particularly related to human rights and environmental obligations in the supply chain. The site emphasizes confidentiality, protection of whistleblowers, and legal compliance, reflecting a mature compliance culture. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies including Bootstrap and Font Awesome for UI, and integrates Google Analytics with IP anonymization for visitor statistics. The site is mobile-optimized and includes a comprehensive cookie consent mechanism in German, supporting GDPR compliance. Hosting is via domaincontrol.com nameservers, indicating a commercial hosting provider. From a security perspective, HTTPS is enforced and cookie consent is implemented properly. However, no advanced security headers or explicit security policies are published, and no incident response or vulnerability disclosure information is available. The site does not expose sensitive data and appears free of vulnerabilities in the visible content. Overall, the security posture is good but could be enhanced with additional headers and transparency. The overall risk profile is low with a trustworthy business presence and professional content. Strategic recommendations include adding explicit security policies, incident response contacts, and a security.txt file to improve transparency and readiness. The site is suitable for its compliance-focused audience and maintains good privacy standards.

R

Reframax

reframax.com.br

45

Reframax is a Brazilian company specializing in refractory solutions and industrial services including thermal insulation, electromechanics, and industrial painting. With over 25 years of experience and a client base exceeding 500 customers domestically and internationally, it holds a strong market position in the manufacturing and industrial sectors. The website reflects a professional and well-established business with comprehensive service offerings and a clear focus on quality and compliance. Technically, the site is built on WordPress with modern frameworks and plugins ensuring good performance, mobile optimization, and SEO. Security posture is solid with HTTPS, reCAPTCHA on forms, and no exposed sensitive data, although explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, compliant with privacy regulations, and provides clear contact channels.

R

Royal Bank of Canada

avionrewards.com

68

Avion Rewards is a loyalty program operated by the Royal Bank of Canada (RBC), offering customers the ability to earn points on debit and credit card purchases which can be redeemed for travel, shopping, and financial rewards. The website is professionally designed with consistent RBC branding and targets Canadian consumers who use RBC banking products. The program integrates with various partners to enhance rewards and savings opportunities. Technically, the website uses a modern stack including jQuery, Bootstrap, and multiple analytics and marketing tools, hosted likely on Akamai CDN for performance and reliability. Security posture is strong with HTTPS enforced and consent management implemented, though explicit security headers and incident response contacts are not clearly disclosed. The absence of WHOIS registration data is a notable anomaly, possibly due to privacy protection or data source limitations, which slightly impacts trustworthiness. Overall, the site is well-structured, mobile-optimized, and compliant with privacy regulations, making it a credible platform for RBC's loyalty program.

Royal Bank of Canada (RBC) is a leading global financial institution headquartered in Canada, offering a broad spectrum of financial services including personal and commercial banking, wealth management, capital markets, insurance, and investor services. The website reflects RBC's strong market position as one of the largest banks in Canada and globally by market capitalization, targeting a diverse audience from individual consumers to multinational corporations and governments. The site content is professionally presented with consistent branding and clear navigation, supporting RBC's corporate image and business objectives. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and various analytics and marketing tools such as Google Tag Manager, Bing Ads, and Conductrics. The site is mobile optimized and accessible, with good SEO practices and performance. Privacy and cookie policies are present with a consent mechanism, indicating compliance with GDPR and other privacy regulations. However, no explicit security policy or incident response information is publicly available. From a security perspective, the site uses HTTPS and employs best practices such as controlled script loading and consent management. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain registration transparency but is likely due to registry restrictions or privacy protection common for large enterprises. Overall, the security posture is strong but could be improved by publishing security policies and vulnerability disclosure information. The overall risk assessment is low, with the website demonstrating professionalism, trustworthiness, and compliance with privacy standards. Strategic recommendations include enhancing security header implementation, publishing incident response contacts, and establishing a vulnerability disclosure program to further strengthen trust and security culture.

M

mtms Solutions GmbH

ticketorganizer.eu

67

Ticketorganizer.eu is an e-commerce platform operated by mtms Solutions GmbH, specializing in selling tickets for events, concerts, festivals, and sports primarily in Austria and surrounding regions. The website offers a user-friendly interface with event filtering by country and city, supporting multiple languages. The platform integrates modern web technologies such as jQuery, Bootstrap, and Select2, and employs analytics tools like Google Tag Manager and Matomo with user consent mechanisms, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the website presents a professional and trustworthy front for ticket sales with good privacy compliance.

P

Program fonda za aktivno građanstvo u Hrvatskoj - ACF Hrvatska

acfcroatia.hr

43

The Program fonda za aktivno građanstvo u Hrvatskoj - ACF Hrvatska is a Croatian non-profit initiative focused on promoting active citizenship and inclusive communities through grant funding and support for civil society organizations. The website serves as an information hub for open calls, project results, and partnership development, positioning itself as a key national program fund manager. The site is well-branded, consistent, and targets Croatian citizens and NGOs engaged in civic activities. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and accessibility and GDPR compliance plugins. It demonstrates good mobile optimization, accessibility features, and SEO practices. Hosting and domain registration are consistent with the Croatian market and the organization's profile. From a security perspective, the site uses HTTPS with excellent SSL configuration and implements GDPR cookie consent mechanisms. However, it lacks explicit security policies, incident response contacts, and advanced security headers. No vulnerabilities or exposed sensitive data were detected in the content. Analytics usage is moderate with Google Analytics and Tag Manager scripts. Overall, the website presents a low-risk profile with good business credibility and compliance posture. Strategic improvements could include publishing security and incident response policies and enhancing security headers to further strengthen trust and resilience.

U

Universität Stuttgart

uni-stuttgart.de

62

The Universität Stuttgart is a leading technical university in Germany with a strong international reputation. The website reflects its mission to integrate engineering, natural sciences, humanities, and social sciences through top-tier research and education. The site targets prospective students, current students, researchers, entrepreneurs, employees, alumni, and media professionals, offering comprehensive information on study programs, research initiatives, and technology transfer. The university operates a large-scale digital presence with consistent branding and professional content quality. Technically, the website employs modern JavaScript libraries such as Bootstrap, jQuery UI, Fancybox, and Tippy.js, alongside Matomo analytics configured to disable cookies, indicating a privacy-conscious approach. The site is mobile-optimized, accessible, and SEO-friendly, with a custom CMS backend. Performance is moderate, with asynchronous script loading enhancing user experience. Security posture is solid with HTTPS enforced and standard security headers likely in place, though explicit Content-Security-Policy headers and incident response contacts are absent. Privacy compliance is good, with a comprehensive privacy policy and GDPR adherence, but lacks a visible cookie consent mechanism. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, professional, and well-maintained, supporting the university's stature. Strategic improvements include implementing a cookie consent banner, publishing a security policy and incident response contacts, and enhancing security headers to further strengthen the security posture.

D

Deutsches Zentrum für Diabetesforschung (DZD)

dzd-ev.de

64

The Deutsches Zentrum für Diabetesforschung (DZD) is a prominent German non-profit research organization dedicated to advancing diabetes prevention, treatment, and research. The website serves as a comprehensive platform for disseminating scientific findings, promoting clinical studies, and providing educational resources to researchers, healthcare professionals, and the public. It is supported by reputable institutions such as Helmholtz Munich and the German Federal Ministry of Education and Research, underscoring its authoritative position in the healthcare research sector. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including jQuery, Bootstrap, and Matomo analytics for user tracking. The site demonstrates good mobile optimization, accessibility, and SEO practices, providing a professional and user-friendly experience. Hosting and DNS infrastructure appear to be managed by trusted German research network providers, enhancing reliability. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers and incident response policies are not prominently published, representing areas for potential improvement. No critical vulnerabilities or suspicious activities were detected, and the domain registration data aligns well with the organization's identity, indicating a trustworthy digital presence. Overall, the DZD website reflects a mature, well-maintained digital asset that effectively supports its mission in diabetes research and public health education. Strategic enhancements in security transparency and direct contact information could further strengthen trust and compliance.

C

Cloudflare, Inc

xdc.network

61

OpenScan.ai is a specialized blockchain explorer platform focused on the XDC Network, providing users with comprehensive tools to explore transactions, addresses, tokens, NFTs, and DeFi activities. The platform targets blockchain users, developers, and investors within the XDC ecosystem, positioning itself as a key resource for blockchain data and analytics. The website leverages modern web technologies including React.js and Bootstrap, hosted and secured via Cloudflare services, ensuring a reliable and performant user experience. Security posture is solid with HTTPS enforcement and standard security headers, though there is room for improvement in DNS security and privacy compliance. The absence of privacy and cookie policies, as well as contact information, represents a compliance gap that should be addressed. Overall, the platform demonstrates a good level of technical maturity and business credibility within its niche.

D

DECHEMA Ausstellungs-GmbH

dechema-gmbh.de

62

DECHEMA Ausstellungs-GmbH is a specialized event organizer focused on trade shows for the process industries, notably ACHEMA and AchemAsia. It operates within the chemical technology and biotechnology sectors, serving industry professionals globally with a strong presence in Germany and Asia. The company is positioned as a leading organizer of major international trade fairs, providing platforms for industry networking, innovation showcase, and market development. Technically, the website is built on TYPO3 CMS with modern frontend technologies including Bootstrap and jQuery, and integrates Google Maps and Google Analytics with privacy-conscious configurations such as IP anonymization. The site is mobile-optimized, accessible, and SEO-friendly, hosted on a professional hosting provider (Webdiscount). Cookie consent and GDPR compliance are well implemented. From a security perspective, the site uses HTTPS with good SSL configuration and cookie consent mechanisms. However, it lacks publicly available security policies, incident response contacts, and security headers, which are recommended for enhanced trust and compliance. No vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and well-maintained, with strong business credibility and compliance posture. Strategic improvements in security transparency and incident response readiness would further strengthen its security posture and stakeholder confidence.

D

DECHEMA Ausstellungs-GmbH

achemasia.de

67

AchemAsia is a well-established international exhibition and innovation forum focused on sustainable chemical production in the Asian market, organized by DECHEMA Ausstellungs-GmbH. The website serves industry professionals, exhibitors, and visitors by providing comprehensive event information, exhibitor listings, and visitor services. The company leverages its 36 years of expertise to position AchemAsia as a gateway to China's process industry, emphasizing innovation and sustainability. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies such as jQuery, Bootstrap, GSAP, and Matomo Analytics for privacy-conscious user tracking. The site demonstrates good SEO practices, mobile optimization, and a professional design, contributing to an excellent user experience. From a security perspective, the site enforces HTTPS and implements a GDPR-compliant cookie consent mechanism. However, it lacks explicit security policies, incident response contacts, and security headers, which are recommended for enhanced security posture. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, professional, and compliant with privacy regulations, making it a reliable source for event information in the chemical industry sector.

D

DECHEMA Ausstellungs-GmbH

achema.de

66

ACHEMA is a globally recognized trade show and forum for the process industries, including chemical, pharmaceutical, biotech, energy, and environmental sectors. Organized by DECHEMA Ausstellungs-GmbH, it serves as a key platform for manufacturers and service providers from over 50 countries to showcase innovations and network. The website reflects a mature digital presence with comprehensive content, multimedia integration, and a professional design that supports its market leadership position. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and analytics tools, hosted on a third-party provider. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and policies could enhance protection. Overall, the site is trustworthy, compliant with GDPR, and well-optimized for user experience.

E

event IT ApS

event.it

57

event IT ApS is a Danish technology company specializing in providing a flexible and easy-to-use self-service platform for ticket sales and event registrations. Founded in 2011, the company targets event organizers and attendees primarily in Denmark, offering solutions for managing tickets and registrations for various events such as parties, conferences, concerts, and festivals. The website reflects a professional and consistent brand image with clear contact information and a focus on user-friendly event management services. Technically, the site employs modern web technologies including Bootstrap, jQuery, and Cookiebot for cookie consent management, alongside Google Tag Manager for analytics and marketing purposes. The site is secured with HTTPS and implements GDPR-compliant cookie consent mechanisms, demonstrating a commitment to privacy and regulatory compliance. However, the domain's WHOIS data indicates the domain expired recently, which could pose a risk if not renewed promptly. Security posture is adequate but could be improved by adding security headers and publishing formal security policies. Overall, event IT presents a trustworthy and professional online presence with room for enhancements in security and compliance documentation.

C

CHEFS CULINAR

cc-softwareundconsulting.de

55

CHEFS CULINAR operates a professional and comprehensive hospitality service platform under the CHEFS VALUE brand, offering consulting, training, concept development, and digital solutions tailored to the foodservice industry. The website reflects a mature digital presence with modern technologies, responsive design, and strong content quality. Security posture is solid with HTTPS and consent management, though some security headers could be improved. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. The business is positioned as a trusted, established player in the German hospitality sector with a large-scale operation and multiple partner integrations.