Security Directory

D

Decitre

decitrepro.fr

54

Decitre Pro operates as a specialized professional platform for book and media acquisitions, serving libraries, educational institutions, and business clients primarily in France. The company leverages a large catalog and expert booksellers to provide tailored acquisition services. The website is built on the Magento platform, integrating standard marketing and analytics tools such as Google Analytics, Google Tag Manager, and Optimizely. The site demonstrates good content quality and professional presentation, with clear navigation and relevant business information. Security posture is moderate with HTTPS implied but lacking explicit security headers and incident response documentation. Privacy compliance is well addressed with comprehensive policies and cookie consent mechanisms. The absence of WHOIS data limits domain trust assessment, but the website's professional nature supports legitimacy.

V

VI.BE

vi.be

66

VI.BE is a well-established Belgian support platform for artists and the music sector, serving a broad audience from beginners to professionals, locally and internationally. The website reflects a mature digital presence with comprehensive content including news, events, job listings, and project promotion. The organization is positioned as a key player in the Belgian music industry, supported by reputable partners and sponsors. Technically, the site uses modern web technologies including Bolt CMS, FontAwesome, and CookieFirst for consent management, delivering a fast, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although explicit security policies and incident response contacts are absent. Privacy compliance is well addressed with clear cookie consent and a privacy policy in Dutch. Overall, the site demonstrates high professionalism and trustworthiness, suitable for its target audience and business model.

D

Dutch Music Export

dutchmusicexport.nl

52

Dutch Music Export is a Dutch organization dedicated to promoting Dutch music internationally by supporting artists and music professionals in expanding their global reach. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies such as JavaScript, CSS, and HTML5. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enforced and some script hardening, but lacks security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Business credibility is moderate with consistent branding but no explicit contact or trust indicators. Overall, the site is functional and professional but would benefit from enhanced privacy, security, and contact transparency.

O

obshtini.bg

obshtini.bg

52

The website obshtini.bg serves as a centralized portal providing access to municipal normative acts for various Bulgarian municipalities. It primarily functions as a gateway linking to municipality-specific subdomains such as Sofia, Varna, Plovdiv, and others. The site targets residents and officials seeking local government legal documents. Technically, the site is built using Angular 9 with PrimeNG components, indicating a modern frontend framework, though some legacy scripts like jQuery are commented out. The site demonstrates basic mobile optimization and moderate performance but lacks advanced SEO and accessibility features. Security posture is moderate; HTTPS is assumed but no security headers were detected in the provided data, and no privacy or cookie policies are present, which impacts compliance. The WHOIS data is privacy protected due to GDPR, typical for domains related to government or public services in the EU, and the domain appears legitimate and active. Overall, the site is functional and safe but would benefit from enhanced security headers, privacy compliance, and contact transparency to improve trust and compliance.

Mercedes-Benz Österreich GmbH operates the official Mercedes-Benz website for Austria, offering a comprehensive portfolio of luxury vehicles including sedans, SUVs, coupes, and electric models. The company also provides financing, leasing, insurance, and digital connectivity services under the Mercedes me brand. The website reflects a strong market position as a leading premium automotive brand with a clear focus on customer engagement and digital experience. Technically, the site leverages modern frameworks such as Vue.js and is built on Adobe Experience Manager, ensuring a performant and responsive user experience. Security posture is robust with HTTPS, consent management, and monitoring tools like Datadog RUM, although some security headers could be explicitly verified. Privacy compliance is thorough, with detailed GDPR-aligned policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with corporate standards.

Mercedes-Benz Portugal, S.A. operates as the official Portuguese website and digital presence for the premium automotive brand Mercedes-Benz. The company offers a comprehensive range of services including vehicle sales, Mercedes me connectivity, financial services, leasing, mobility, renting, and after-sales assistance. The website reflects a strong market position in Portugal as a premium automotive provider, supported by detailed legal, privacy, and compliance disclosures. The parent company is Mercedes-Benz AG, a globally recognized automotive manufacturer headquartered in Germany. The site targets a general audience interested in luxury and performance vehicles, with a business model focused on direct sales and digital customer engagement. Technically, the website employs modern web technologies such as Vue.js 3, Google Tag Manager, Datadog RUM for real user monitoring, and is built on the Adobe Experience Manager CMS platform. The site is well optimized for performance and mobile responsiveness, with good SEO and basic accessibility compliance. Security measures include HTTPS enforcement, content security policies, and cookie consent mechanisms, reflecting a mature security posture. However, there is room for improvement in accessibility and explicit incident response disclosures. Overall, the security posture is strong with no detected vulnerabilities or suspicious content. The website complies with GDPR and provides comprehensive privacy policies and data protection officer contact information. The domain registration details are consistent with the brand's global presence, enhancing trustworthiness. Strategic recommendations include enhancing accessibility compliance, publishing vulnerability disclosure policies, and maintaining continuous security audits. This website represents a professional, secure, and compliant digital asset for Mercedes-Benz Portugal, supporting its business objectives and customer engagement effectively.

Mercedes-Benz South Africa Limited operates a comprehensive and professionally maintained website offering luxury vehicles, financing, leasing, and after-sales services tailored to the South African market. The company is a subsidiary of Mercedes-Benz AG, with a strong brand presence and detailed legal and privacy disclosures. The website employs modern web technologies including Vue.js and Adobe Experience Manager, ensuring a responsive and accessible user experience. Security practices include HTTPS, consent management, and monitoring via Datadog RUM, though explicit security headers and incident response policies are not clearly published. WHOIS data is unavailable, which is a minor concern but does not detract from the overall legitimacy and professionalism of the site.

M

Mercedes-Benz Canada

mercedes-benz.ca

73

Mercedes-Benz Canada operates a comprehensive and professionally designed website focused on luxury automotive products including sedans, SUVs, coupes, and electric vehicles. The site targets Canadian luxury vehicle buyers and supports the brand's premium market position with extensive vehicle model information, dealer locator services, and owner support. The technical infrastructure leverages Adobe Experience Manager CMS and Adobe Experience Cloud analytics, indicating a mature digital presence. Security posture is strong with HTTPS enforcement, security headers, and consent management for cookies, though explicit security policies and incident response information are not publicly detailed. Overall, the website reflects a high level of professionalism and trustworthiness consistent with a global luxury automotive brand.

A

AH Lasereinsatztechnik GmbH

ah-laser.de

57

AH Lasereinsatztechnik GmbH is a German manufacturing company specializing in advanced laser processing technologies including 2D and 3D laser cutting, water jet cutting, CNC bending, and welding. Founded in 1991, the company operates from Hardthausen am Kocher and serves industrial clients requiring precision manufacturing and integrated logistics. The website reflects a mature business with a broad service portfolio and a strong partner network. Technically, the site is built on the Neos CMS platform using modern JavaScript libraries and frameworks, delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response policies are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

G

Graz Tourismus

graztourismus.at

72

Graz Tourismus operates as the official tourism board for the city of Graz, Austria, providing comprehensive information and booking services for accommodation, sightseeing, and events. The website targets tourists and visitors interested in exploring Graz, positioning itself as a trusted source for travel planning in the region. The business model focuses on tourism promotion and visitor engagement, leveraging digital channels to enhance the city's attractiveness. Technically, the website employs modern web technologies including Bootstrap 5 for responsive design, Google Tag Manager for analytics, and Cookiebot for GDPR-compliant cookie management. The presence of Pimcore personalization scripts suggests a mature digital infrastructure aimed at delivering tailored user experiences. The site demonstrates good performance, mobile optimization, and accessibility standards. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers. Cookie consent mechanisms are in place, and privacy policies are comprehensive and GDPR compliant. However, there is no explicit security policy or incident response contact published, which could be improved to enhance transparency and readiness. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. The risk profile is low, with no detected vulnerabilities or suspicious activities. Strategic recommendations include publishing a dedicated security policy, adding incident response contacts, and considering a security.txt file to facilitate vulnerability disclosures.

Gemdat OÖ is a well-established IT service provider specializing in software and solutions for municipalities and public sector organizations in Upper Austria. With over 40 years of experience, the company holds a leading market position regionally, offering a broad portfolio including financial management, document management, personnel accounting, and IT security services. The website reflects a mature digital presence with modern technologies and a clear focus on customer needs. Security posture is strong, with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities. Privacy compliance is well addressed, including GDPR-aligned policies and consent banners. Overall, Gemdat OÖ presents a trustworthy and professional image suitable for its target audience.

The website ecmaps.de is an interactive regional map platform developed by hubermedia GmbH, focusing on tourism and local points of interest in Germany. It provides users with interactive maps, routing options, and detailed information about various categories such as tours, gastronomy, events, and accommodations. The platform integrates recognized mapping technologies like Leaflet and Google Maps API and leverages external services such as TrustYou for ratings. The site is primarily targeted at general audiences interested in regional tourism and outdoor activities. Technically, the site uses a mix of older JavaScript libraries and custom frameworks, with moderate performance and basic mobile optimization. Security-wise, the site enforces HTTPS but lacks modern security headers and uses outdated libraries, which could pose risks. Privacy compliance is partially addressed with a privacy policy linked externally, but no cookie consent mechanism is present. Overall, the site is functional and moderately professional but could benefit from technical and security enhancements.

D

destination.one

destination.one

57

destination.one is a German-based digital platform specializing in destination management for the tourism and hospitality sectors. The platform offers an all-in-one solution for guest information, booking integration, and content management, targeting destination managers and tourism organizations. The website is built on TYPO3 CMS, indicating a mature and flexible technical infrastructure. The site is well-optimized for mobile devices and includes GDPR-compliant cookie consent mechanisms, reflecting a good level of digital maturity. Security posture is strong with HTTPS enforcement and standard security headers, though there is room for improvement in incident response transparency and vulnerability disclosure. Overall, the website presents a professional and trustworthy digital presence suitable for its niche market.

I

Idego Group

idego.pl

11

Idego Group is a medium-sized technology company specializing in AI and data-driven business solutions. Founded in 2013, it serves multiple sectors including fintech, healthcare, e-commerce, and enterprise data management. The company offers consulting, software, platforms, and tailored AI solutions designed to improve operational efficiency and innovation for its clients. The website reflects a professional and consistent brand image with strong trust indicators such as client logos and testimonials. Technically, the site uses modern web technologies including Bootstrap and Cloudflare DNS, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and domain protection flags, though DNSSEC is not enabled and security headers are not evident. Privacy compliance is supported by a comprehensive privacy policy and whistleblower policy, but lacks a cookie consent mechanism. Overall, the website is well-designed, user-friendly, and trustworthy, with no signs of blocking or WAF interference.

SRG SSR is the Swiss public broadcasting organization providing comprehensive media services including radio, television, and online streaming across multiple languages. It holds a leading market position in Switzerland's media landscape, supported by public funding through media license fees. The website reflects a professional and consistent brand identity with a focus on culture, sport, education, and democracy. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes consent management via Usercentrics, ensuring GDPR compliance. Security posture is strong with HTTPS and anonymized analytics, though explicit security policies and incident response details are not publicly disclosed. Overall, the site is trustworthy, well-maintained, and serves a broad Swiss audience effectively.

S

Swiss Life

swisslife.ch

64

Swiss Life is a well-established financial services company based in Switzerland, with over 160 years of experience providing financial security, insurance, and pension solutions to individuals. The website targets individuals seeking self-determined financial security and offers a professional and consistent brand experience. The company operates in the finance sector and is positioned as a reputable enterprise with a strong market presence. The website is built on Adobe Experience Manager CMS and incorporates modern web technologies including Adobe Helix RUM for performance monitoring and OneTrust for cookie consent management. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Security posture is solid with HTTPS enabled and cookie consent implemented, but lacks explicit security headers and published security policies. No privacy policy or terms of service were found in the provided content, which impacts privacy compliance scoring. The domain registration data aligns well with the business claims, indicating high legitimacy and trustworthiness. Overall, the website is professional, secure, and credible, but could improve transparency around privacy and security policies.

O

OBI Italia

obi-italia.it

68

OBI Italia is a prominent retail and e-commerce company specializing in DIY, home improvement, and gardening products targeted at the Italian market. The website offers a comprehensive product catalog, promotions, and services such as home delivery and equipment rental, positioning itself as a market leader in Italy. The digital infrastructure is modern, leveraging Vue.js and various analytics and marketing tools, ensuring a responsive and user-friendly experience. Security posture is strong with HTTPS, security headers, and secure forms, though explicit security policies and incident response details are not publicly disclosed. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable platform for consumers.

A

Adler Historic Guesthouse

adlerbrixen.com

53

Adler Historic Guesthouse is a hospitality business located in Brixen, Italy, offering guesthouse accommodation services. The website is professionally designed using TYPO3 CMS and modern web technologies, providing a good user experience with mobile optimization and clear navigation. The business has a positive market position supported by strong customer ratings and active social media presence. However, the domain WHOIS data is missing or unavailable, which raises concerns about registration transparency. Security posture is generally good with HTTPS enabled, but lacks some security headers and formal privacy and cookie policies. Overall, the website is trustworthy and functional but would benefit from improved compliance and transparency.

E

ELLECOSTA METALL GMBH

ellecosta.it

11

ELLECOSTA METALL GMBH is a family-owned metal construction company based in Brixen, South Tyrol, Italy, with a history dating back to 1957. The company specializes in industrial metalwork, artistic metal creations, and grave-related metal products, serving architects, planners, artists, and private customers. Their market position is that of a trusted regional manufacturer known for combining traditional craftsmanship with modern technology. The website reflects a mature digital presence with a professional design, clear navigation, and multilingual support. Technically, the site uses modern web technologies including Google reCAPTCHA for form security and Iubenda for cookie compliance, running on a CMS likely to be Redaxo. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site is compliant with GDPR and provides comprehensive contact and business information, enhancing trustworthiness.

Vertical-Life operates a specialized digital platform focused on delivering real-time competition results for climbing events. Their service supports multiple climbing disciplines and competition formats, offering features such as seamless registration, judging interfaces, participant messaging, and series rankings. The platform targets climbing event organizers, judges, and athletes, positioning itself as a niche leader in climbing competition technology. Technically, the website is built with modern JavaScript frameworks (likely Vue.js), integrates Google services for analytics and advertising, and employs cookie consent mechanisms indicating GDPR awareness. Security posture is strong with HTTPS, security headers, and bot protection via reCAPTCHA, though explicit security policies and incident response contacts are absent. Overall, the site is professional, well-designed, and trustworthy, with minor gaps in privacy documentation and incident response readiness.

S

Südtirol Alto Adige

suedtirol.info

70

The website www.suedtirol.info is the official tourism portal for the South Tyrol (Südtirol Alto Adige) region in Italy. It provides comprehensive information about accommodations, events, regional products, and travel guidance for visitors. The site is well-branded with consistent regional identity and targets tourists seeking detailed and multilingual content about South Tyrol. The business model focuses on tourism promotion and facilitating bookings and event discovery. Technically, the site uses modern web technologies including Adobe Experience Manager CMS, Algolia search, Usercentrics consent management, and Google Tag Manager for analytics and marketing. The site is mobile-optimized, fast, and accessible with good SEO practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. However, explicit privacy policy and terms of service pages were not found in the provided content, which is a compliance gap. WHOIS data is privacy protected, common for official tourism sites, and no suspicious patterns were detected. Overall, the site is professional, trustworthy, and well-positioned in its market niche.

T

Tourismusgenossenschaft Sterzing Pfitsch Freienfeld

knoedelfest-sterzing.com

51

The website www.knoedelfest-sterzing.com represents a regional cultural event focused on the traditional Knödelfest in Sterzing, South Tyrol, Italy. It serves as an informational and promotional platform for the annual dumpling festival, highlighting the event's history, culinary offerings, and local tourism attractions. The site is well-structured with multilingual support and integrates modern web technologies including Google Analytics and a consent management platform to comply with privacy regulations. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the content and branding strongly suggest a legitimate tourism event. Security posture is adequate with HTTPS and cookie consent but lacks explicit security policies or incident response information. Overall, the site provides a good user experience with clear navigation and relevant content for its target audience of tourists and food enthusiasts.

W

Weihnachtsmarkt Sterzing in Südtirol - Glockenweihnacht

weihnachtsmarkt-sterzing.com

52

The website www.weihnachtsmarkt-sterzing.com serves as an official tourism and event promotion platform for the Sterzing Christmas Market in South Tyrol, Italy. It provides detailed information about the event, related programs, accommodation options, and regional tourism highlights. The site targets general audiences interested in cultural and holiday events, leveraging multilingual support (German, Italian, English) to reach a broad visitor base. The business model focuses on regional tourism promotion and event marketing, positioning itself as a key local resource for visitors. Technically, the site is built on ASP.NET Web Forms using the Consisto CMS platform, integrating modern JavaScript libraries and Google services such as Google Tag Manager and Google Analytics. The site implements a comprehensive cookie consent mechanism compliant with GDPR, indicating a mature approach to privacy. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, the site uses HTTPS and enforces cookie consent but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. However, the WHOIS data for the domain is missing or inaccessible, which reduces trust in domain registration transparency. No direct contact information or security contacts are published on the analyzed page. Overall, the website is professional, content-rich, and privacy-conscious, suitable for its tourism promotion purpose. The main risk lies in the lack of domain registration transparency and limited visible security policies. Strategic improvements in security headers, contact disclosures, and domain WHOIS transparency would enhance trust and compliance.

C

Consisto GmbH

sterzing-ratschings.com

52

The website www.sterzing-ratschings.com serves as a regional tourism portal promoting the Sterzing-Ratschings-Gossensass area in South Tyrol, Italy. It provides comprehensive information about local attractions, activities, and accommodations, targeting tourists interested in alpine vacations, skiing, hiking, and cultural experiences. The site is professionally designed with good navigation and mobile optimization, leveraging modern web technologies and a consent management platform compliant with GDPR standards. Technically, it is built on ASP.NET Web Forms and uses Consisto CMS, integrating Google Analytics and Tag Manager for analytics and marketing purposes. Security posture is generally good with HTTPS enforced and cookie consent implemented, though some security headers are not explicitly detected in the HTML. The absence of WHOIS data for the domain is a notable anomaly, raising questions about domain registration legitimacy, but the active and professional website presence mitigates some concerns. Overall, the site is a credible and well-maintained regional tourism platform with moderate technical maturity and privacy compliance.

E

Eco-Care Recycling Solutions GmbH

ecocare-recycling.com

41

Eco-Care Recycling Solutions GmbH operates in the plastic recycling sector, focusing on eco-efficiency concepts and the recovery of secondary raw materials from plastics. The company targets businesses requiring sustainable waste management and recycling solutions. Their website is professionally designed using the Contao CMS platform, featuring clear navigation and mobile optimization. However, the absence of WHOIS data and lack of visible contact information reduce trustworthiness. Security posture is moderate with no detected HTTPS confirmation or security headers, and privacy compliance is minimal with no cookie consent mechanism. Overall, the site presents a professional business front but requires improvements in security and transparency to enhance credibility.

CURANTO is a German container rental service specializing in providing containers for construction debris, bulky waste, and garden waste. The company targets both private and business customers, positioning itself as a reliable and cost-effective service provider with TÜV certification enhancing its trustworthiness. The website is professionally designed using modern web technologies such as Nuxt.js and Vue.js, hosted on maxcluster infrastructure, and optimized for mobile devices. Tracking and analytics tools like eTracker and Google Tag Manager are implemented with a cookie consent mechanism via Cookiebot, indicating basic privacy compliance. Security posture is adequate with HTTPS enabled, but lacks explicit security policies and some security headers. Overall, the domain registration and website content are consistent and legitimate, reflecting a medium-sized transportation sector business.

K

Kleine Zeitung GmbH

kleinezeitung.at

78

Kleine Zeitung GmbH operates a prominent regional news website serving Styria, Austria, providing current news, sports, culture, and regional events. The company has a long history dating back to 1904 and maintains a strong market position as a leading regional media outlet. Their business model combines advertising revenue with subscription services, notably the Kleine Pur subscription that offers an ad-light experience. Technically, the website employs modern JavaScript frameworks such as Vue.js and integrates multiple third-party analytics and advertising platforms, including Chartbeat, Cxense, and Tinypass, alongside a GDPR-compliant consent management system by Didomi. The site is well-optimized for mobile and SEO, with good accessibility features. Security-wise, the site enforces HTTPS, uses security headers, and manages cookie consent effectively, though it lacks a publicly available security policy or incident response contact. Overall, the site demonstrates a mature digital presence with strong trust signals and compliance with privacy regulations.

A

Amt der Steiermärkischen Landesregierung

steiermark.at

67

The website www.verwaltung.steiermark.at serves as the official administrative portal for the Steiermark regional government in Austria. It provides comprehensive information and e-government services to citizens and businesses within the region. The portal features detailed navigation to government departments, service offerings, news updates, and contact information, positioning itself as a central hub for public administration in Steiermark. The site targets a broad audience including residents, government employees, and stakeholders seeking official information or services. Technically, the website is built on a custom CMS (ico-cms) and employs modern web technologies such as HTML5, CSS3, JavaScript, jQuery, and FontAwesome. It integrates privacy-respecting analytics via Matomo alongside Google Analytics and Facebook tracking pixels, balancing data collection with user privacy. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. From a security perspective, the site enforces HTTPS and implements a detailed cookie consent mechanism compliant with GDPR. However, it lacks publicly visible dedicated security policies or incident response contacts. Security headers are not explicitly detected in the HTML content, suggesting room for improvement. No vulnerabilities or suspicious content were identified, and the domain registration aligns with official government credentials, indicating high legitimacy. Overall, the website demonstrates a strong professional and trustworthy presence suitable for a government entity. Strategic recommendations include publishing explicit security and incident response policies, enhancing security headers, and maintaining transparency in vulnerability disclosures to further strengthen trust and compliance.

S

Stadt Graz

graz.at

68

Stadt Graz operates the official city portal for the capital of Styria, Austria, providing comprehensive information and services related to municipal administration, citizen services, tourism, and local news. The website serves as a central hub for residents and visitors, offering access to city plans, webcams, political news, and community programs. It maintains a strong market position as the authoritative source for city-related information and services. Technically, the website is built on the ico-cms platform, leveraging modern web technologies including PHP, JavaScript libraries such as PDF.js, Three.js, and Bootstrap for responsive design. The site demonstrates good digital maturity with mobile optimization, accessibility features, and SEO best practices. Analytics tools like Matomo/Piwik and Google Analytics are used with a clear cookie consent mechanism, reflecting compliance with privacy regulations. From a security perspective, the site enforces HTTPS and uses session management cookies appropriately. However, explicit security headers are not clearly detected, and there is no publicly available security policy or incident response contact information. No vulnerabilities or suspicious content were identified, indicating a generally secure posture suitable for a government website. Overall, Stadt Graz's website is a professional, trustworthy, and well-maintained digital presence that effectively supports its public service mission. Strategic improvements in security header implementation and transparency around security policies would further enhance its security posture and user trust.

Z

Zeppelin Rental

zeppelin-rental.de

65

Zeppelin Rental is a large German company specializing in the rental of machinery, equipment, and temporary infrastructure solutions primarily for business customers in the construction and transportation sectors. The website presents a professional and well-structured digital presence, offering detailed product categories and rental assistance tools. The technical infrastructure is based on Drupal CMS with modern JavaScript libraries and includes compliance with GDPR through cookie consent mechanisms. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not published. Overall, the website is trustworthy and well-positioned in its market segment.

V

Viega

viega.de

72

Viega Deutschland operates a professional and comprehensive website focused on plumbing, heating, and building technology products and services. The company positions itself as an established leader in energy-efficient and hygienic building solutions, targeting professionals and businesses in the construction and building services sector. The website is built on a mature technical infrastructure leveraging Adobe Experience Manager and Adobe Analytics, with GDPR-compliant consent management via Usercentrics. Security posture is good with HTTPS and tracking controls, though explicit security policies and contact information for incidents are not publicly visible. Overall, the site is well-designed, user-friendly, and trustworthy, supporting Viega's market position as a quality manufacturer and service provider in the energy and manufacturing sectors.

BRUGG Pipes is a globally recognized specialist in flexible and rigid pipe systems, serving sectors such as energy, industrial manufacturing, and transportation. The company offers a comprehensive portfolio of pipe solutions for applications including district heating, cooling, industrial plants, tank stations, and cryogenic uses. As part of the BRUGG Group, it holds a strong market position with a focus on safety, quality, and environmental protection. The website reflects a mature digital presence with multilingual support and detailed product and service information. Technically, the website is built on TYPO3 CMS, integrating modern analytics and marketing tools such as Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and eTracker. It employs a cookie consent mechanism compliant with GDPR, ensuring user privacy and transparency. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some security headers could be enhanced. Security posture is solid with HTTPS enforced and no evident vulnerabilities or exposed sensitive data. However, the absence of a security.txt file and incident response contacts suggests room for improvement in transparency and readiness. The WHOIS data is unavailable, possibly due to privacy protection or recent domain registration, which slightly reduces trust but is mitigated by the professional website content and branding. Overall, BRUGG Pipes presents a professional and trustworthy online presence aligned with its industry leadership. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and improving incident response visibility to further strengthen trust and compliance.

E

ETAPART AG

etapart.com

63

ETAPART AG is a specialized company focused on providing innovative and energy-efficient hall heating solutions primarily for industrial, sports, and workshop halls. With over 30 years of experience, the company offers services including planning, installation, renovation, and maintenance of decentralized heating systems. The website is professionally designed, content-rich, and targets B2B customers in the energy sector within Germany. Technically, the site is built on TYPO3 CMS and integrates modern tools such as Google Tag Manager and reCAPTCHA for analytics and bot protection. Security posture is good with HTTPS enabled, but lacks some security headers and explicit privacy and cookie policies. WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy despite the professional online presence. Overall, the site is trustworthy and well-positioned in its niche but should address privacy compliance and domain registration transparency to enhance trust.

K

komptech.com

komptech.com

53

Komptech.com is a professional website representing a company specializing in environmental technology, particularly in waste management and biomass processing machinery. The company targets business clients in the transportation and energy sectors, offering industrial equipment and technology solutions. The website demonstrates a good level of digital maturity with a modern WordPress CMS, optimized performance, and SEO best practices. However, the absence of explicit privacy and cookie policies and lack of visible contact information limit its privacy compliance and user trust. Security posture is generally good with HTTPS and some security headers, but could be enhanced by adding more explicit security policies and incident response contacts. The WHOIS data is missing or protected, which reduces domain trustworthiness and suggests a need for further verification of domain registration details. Overall, the website is professional and safe, but improvements in privacy compliance and transparency are recommended.

B

Bernd Münstermann GmbH & Co. KG

muenstermann.com

50

Bernd Münstermann GmbH & Co. KG is a well-established German manufacturer specializing in custom machinery and solutions for thermoprocess technology, material handling, air purification, automation, and robotics. The company serves industrial clients across various sectors including insulation materials, catalysts, steel processing, and cable manufacturing. With a domain age dating back to 1997 and a subsidiary in the USA, Münstermann holds a strong market position as a leading German special machinery provider. The website reflects a professional and consistent brand image with comprehensive business information and reference projects. Technically, the site is built on Joomla CMS, uses modern JavaScript libraries like GLightbox, and integrates Matomo analytics for privacy-conscious user tracking. However, it lacks some security headers and a cookie consent mechanism, which are areas for improvement. The security posture is solid with HTTPS and domain transfer protection, but DNSSEC is not enabled. Overall, the site is accessible, well-structured, and trustworthy, supporting the company's credibility and business operations.

Q

Q-railing

q-railing.com

66

Q-railing is a manufacturing company specializing in railing systems, targeting architects, builders, and contractors. The company has an established market presence with a domain registered since 2004, indicating a mature business. Their website is built using modern technologies such as React and is hosted on Netlify, reflecting a contemporary digital infrastructure. The site includes GDPR-compliant cookie consent mechanisms and a comprehensive privacy policy, demonstrating attention to privacy regulations. However, no terms of service or explicit security policies are publicly available. Security posture is generally good with HTTPS enforced, but lacks some security headers that could enhance protection. Overall, the website is professional, trustworthy, and safe for general audiences.

V

Viessmann

viessmann.de

51

Viessmann is a well-established German company specializing in energy-efficient heating, cooling, and ventilation systems with a strong emphasis on renewable energy and sustainability. The website demonstrates a mature digital presence with comprehensive product and service information targeting both private customers and professional clients. Technically, the site uses modern web technologies including Adobe Experience Manager CMS, Google Tag Manager, and Usercentrics for consent management, indicating a high level of digital maturity. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security policies and vulnerability disclosures are absent. Overall, the site is professional, trustworthy, and aligned with industry best practices, supporting Viessmann's market position as a leader in climate and energy solutions.

V

VMZINC

vmzinc.com

67

VMZINC is a leading manufacturer and supplier of zinc building materials, specializing in roofing, facades, rainwater systems, and architectural ornaments. The company targets architects, roofers, and construction professionals globally, offering innovative and sustainable zinc solutions. Their website reflects a strong market position with comprehensive product information, technical support, and an international network. Technically, the website is built on the Kentico CMS platform and employs modern web technologies including Google Tag Manager, Microsoft Clarity, Facebook Pixel, and ReCaptcha V3 for security and analytics. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. From a security perspective, the site enforces HTTPS and uses ReCaptcha for form protection, but lacks visible security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data is a notable anomaly, suggesting possible privacy protection or registration inconsistencies. Overall, the website is professional, secure, and compliant with privacy regulations, though improvements in security headers and transparency around domain registration would enhance trust. The risk level is moderate with no critical issues detected.

K

KBB – Kulturveranstaltungen des Bundes in Berlin GmbH

kbb.eu

71

KBB – Kulturveranstaltungen des Bundes in Berlin GmbH is a prominent German cultural organization that manages and organizes major cultural events and festivals including the Berlinale, Berliner Festspiele with the Gropius Bau, and the Haus der Kulturen der Welt. The organization serves as a key cultural facilitator and partner, promoting arts and culture with a strong government affiliation. The website reflects a mature digital presence with a modern tech stack based on Next.js and Magnolia CMS, providing a rich user experience with detailed event information and multimedia content. Security posture is strong with HTTPS and cookie consent mechanisms in place, though some security headers could be enhanced. Privacy compliance is well addressed with comprehensive policies and GDPR adherence. Overall, the site is professional, trustworthy, and well-positioned in the cultural sector.

B

Berlinale Talents

berlinale-talents.de

63

Berlinale Talents is a well-established annual summit and networking platform affiliated with the Berlin International Film Festival, targeting creatives in film and drama series. The website effectively communicates its mission, upcoming events, and partner collaborations, positioning itself as a key player in the international film talent development space. The technical infrastructure leverages modern JavaScript libraries and Cloudflare DNS, ensuring reliable delivery and moderate performance. Security posture is solid with HTTPS and Cloudflare usage, though improvements in security headers and explicit privacy mechanisms are recommended. Overall, the site presents a professional and trustworthy digital presence with room for enhanced privacy compliance and security transparency.

L

L'OREAL

armanibeauty.com

73

ArmaniBeauty.com is an e-commerce platform representing the luxury beauty brand Armani Beauty, under the parent company L'OREAL. The website offers a wide range of beauty products including makeup, fragrances, skincare, and beauty services, targeting consumers interested in premium luxury cosmetics. The site is well-structured with clear navigation and rich content, supporting multiple regions and languages. Technically, it leverages Salesforce Commerce Cloud, modern JavaScript libraries, and includes cookie consent mechanisms, indicating a mature digital infrastructure. Security posture is generally good with HTTPS and service worker support, but lacks explicit security headers and a visible privacy policy, which are areas for improvement. The absence of WHOIS registration data for the domain is a concern, though the branding and structured data strongly suggest legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security practices.

W

WIKA Alexander Wiegand SE & Co. KG

wika.com

79

WIKA Alexander Wiegand SE & Co. KG is a well-established German company specializing in industrial measurement technology, offering a wide range of products including pressure gauges, temperature sensors, level and flow measurement devices, and calibration services. The company targets industrial sectors such as energy and manufacturing, providing both products and comprehensive services including IIoT solutions. The website reflects a mature digital presence with professional design, clear navigation, and extensive product and service information. Technically, the site uses modern frameworks like Bulma CSS, FontAwesome icons, and integrates Google Tag Manager and Consentmanager for analytics and privacy compliance. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security policy or incident response page is found. WHOIS data is unavailable, which slightly reduces transparency but the overall trustworthiness remains high based on website content and branding. Strategic recommendations include enhancing security headers, publishing a security policy, and verifying domain registration details for full trust assurance.

X

X-Net

x-net.at

60

X-Net GmbH is a medium-sized Austrian technology company specializing in IT and OT solutions for digital transformation. Their website presents a professional and comprehensive portfolio of services including IT system support, complete software and hardware solutions, digital management systems, and custom hardware development. The company targets business clients seeking to modernize and optimize their IT infrastructure. The website is built on a modern tech stack including React and Plone 6 CMS, offering good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS enforced and standard security headers present, although explicit security policies and incident response details are not published. Privacy compliance is well addressed with a comprehensive privacy and cookie policy and consent mechanisms. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website reflects a trustworthy and professional business presence with room for improvement in transparency of security policies and vulnerability disclosures.

F

Filme im Unterricht - Urheberrecht

filme-im-unterricht.de

56

The website 'Filme im Unterricht' serves as an educational resource providing information on the legal use of films in school settings, targeting teachers and educators. It offers sources and methods for contemporary media usage in education, positioning itself as a niche informational platform within the education sector. The site is built on the Wix platform, leveraging Wix's hosting and content management capabilities, with standard Wix scripts and assets ensuring basic technical functionality and moderate performance. Mobile optimization is good, but accessibility and SEO optimizations are basic. Security posture is moderate with HTTPS enabled but lacking advanced security headers and policies. No privacy or cookie policies were found, and contact information is absent, which impacts trust and compliance. Overall, the site is safe, free from adult or questionable content, and accessible without WAF or security challenges.

A

AITechly

aitechly.com

46

AITechly is a newly registered technology-focused website launched in 2023, offering a dashboard with user sign-in functionality. The site is built using React and Material-UI, indicating a modern front-end technology stack. However, the website content is minimal, primarily consisting of a sign-in form without additional business descriptions, policies, or contact information. The domain registration is transparent and consistent with a new business, registered via NameCheap without privacy protection. The lack of detailed business information and policies limits the site's trustworthiness and compliance posture. From a technical perspective, the website uses a modern JavaScript framework (React) and Material-UI for UI components, but lacks SEO optimization, accessibility features, and performance enhancements. No CMS or advanced hosting details are evident. Security posture is basic, with no detected security headers or advanced protections, and no visible HTTPS confirmation in the provided data. The sign-in form collects email and password but lacks visible anti-CSRF tokens or other security measures. Security evaluation reveals missing security headers and absence of privacy and cookie policies, which are critical for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided. The site does not use tracking or advertising technologies, which reduces privacy concerns but also limits marketing insights. Overall, the site scores moderately low on content quality, technical implementation, and privacy compliance, with business credibility also limited by lack of contact and policy information. Strategic recommendations include implementing HTTPS with strong SSL/TLS, adding comprehensive privacy and cookie policies, deploying security headers, improving accessibility and SEO, and providing clear business contact and security incident response information to enhance trust and compliance.

Turbine Kreuzberg is a technology consultancy and software development company founded in 2017, specializing in high-performance enterprise applications including commerce platforms, PIM, CMS, middleware, and search solutions. The company targets B2B clients seeking digital transformation and technology consulting services. Their market position is that of an established mid-sized technology service provider with a strong portfolio of clients and case studies. Technically, the website is built on modern frameworks such as Next.js and React, with a well-implemented cookie consent mechanism and integration of analytics tools like Google Tag Manager and HubSpot. Security posture is solid with HTTPS enforced, domain locks in place, and no evident vulnerabilities, though DNSSEC is not enabled and explicit security policies are not published. Overall, the site is professional, well-structured, and compliant with GDPR, with comprehensive privacy and legal documentation. The risk level is low, but improvements in security transparency and DNS security are recommended.

A

Alber AG/SpA

alber.it

51

Alber AG/SpA is a well-established Italian manufacturing company specializing in hosiery and tights, with origins dating back to the 1960s. The company operates internationally with a focus on quality, innovation, and customer service. Their website reflects a mature digital presence built on WordPress with extensive use of marketing and analytics tools, indicating a strong digital marketing strategy. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though improvements can be made in security headers and explicit privacy documentation. The domain registration data supports the legitimacy and longevity of the business. Overall, the website is professional and trustworthy but could enhance privacy and security transparency.

B

BARFUSS

barfuss.it

43

BARFUSS is a regional online magazine based in South Tyrol, Italy, delivering fresh and youthful content primarily in German. The website targets a general audience interested in regional news, culture, and lifestyle. Technically, the site uses modern JavaScript frameworks such as Frontity and React, with Matomo analytics for user tracking. The site is moderately optimized for mobile and SEO, with a good user experience and professional design. However, it lacks critical privacy and cookie policies, security headers, and explicit contact information, which impacts its overall security and privacy posture. The domain registration data is consistent with the website's regional focus, supporting its legitimacy. Overall, the site is safe for general audiences but requires improvements in privacy compliance and security best practices.

Hondrolife-shop-it.com is a website promoting Hondrolife, a premium dietary supplement aimed at improving joint health and cartilage regeneration. The site targets individuals suffering from joint pain, including athletes and elderly users, and offers the product via direct online sales and selected pharmacies. The website content is well-structured, professionally presented, and optimized for mobile devices, with a clear focus on product benefits and customer testimonials. However, the site lacks critical compliance elements such as privacy and cookie policies, contact information, and security policies, which impacts trust and regulatory adherence. Technically, the site uses basic HTML, CSS, and JavaScript with Microsoft Clarity for analytics, hosted behind Cloudflare DNS services, but lacks advanced security headers and DNSSEC protection. The WHOIS data raises concerns due to a domain creation date set in the future, which is inconsistent with the website's copyright date and undermines legitimacy. Overall, while the business presentation is solid, the security posture and compliance maturity require significant improvement to enhance trustworthiness and regulatory compliance.

Ö

Österreichische Forschungsförderungsgesellschaft FFG

ffg.at

65

The Österreichische Forschungsförderungsgesellschaft (FFG) is Austria's national funding agency dedicated to supporting business-related research, development, and innovation. The organization operates a professional and comprehensive website that provides detailed information about funding programs, initiatives, and services targeted at Austrian companies and research institutions. The site is well-structured, mobile-optimized, and built on Drupal 10, reflecting a modern technical infrastructure. Analytics tracking is implemented via etracker, and a cookie consent mechanism is active, indicating attention to privacy compliance, although no explicit privacy policy or terms of service were found in the analyzed content. Security posture is moderate with HTTPS implied and some best practices observed, but there is room for improvement in publishing security policies and incident response contacts. Overall, the domain registration data aligns well with the organization's profile, supporting its legitimacy and trustworthiness.