Security Directory

W

Wege-Zweckverband der Gemeinden des Kreises Segeberg

wzv.de

50

The Wege-Zweckverband der Gemeinden des Kreises Segeberg (WZV) operates as a regional public utility focused on sustainable waste management and municipal services within the Kreis Segeberg area in Germany. Their website provides comprehensive information on waste disposal schedules, recycling services, environmental education, and career opportunities, targeting local residents and municipalities. The organization positions itself as a responsible and engaged environmental service provider with a clear regional focus. Technically, the website is built on the Joomla CMS platform, leveraging modern web technologies such as Bootstrap for responsive design, FontAwesome for icons, and Leaflet for interactive maps. Accessibility is enhanced through the Eye-Able assistive technology integration. The site demonstrates good mobile optimization and structured navigation, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and employs CSRF tokens in forms, indicating a baseline security posture. However, the absence of explicit security headers and lack of visible incident response or vulnerability disclosure policies suggest areas for improvement. Privacy compliance is strong with a comprehensive GDPR-aligned privacy policy, though cookie consent mechanisms are not evident. Overall, the website is professional, trustworthy, and well-suited for its public service mission. Strategic enhancements in security headers, contact transparency, and cookie consent would further strengthen its security and compliance posture.

K

Karl-May-Spiele Bad Segeberg

karl-may-spiele.de

52

Karl-May-Spiele Bad Segeberg is a well-established cultural event organizer specializing in live outdoor theater performances based on Karl May's works. The website serves as a comprehensive platform for ticket sales, fan merchandise, and visitor information, targeting families and fans of western-themed entertainment. The business has a strong market position in Germany with a history dating back to 1952. Technically, the website is built on WordPress with WooCommerce for e-commerce functionality, enhanced by Yoast SEO and Borlabs Cookie for privacy compliance. The site demonstrates good digital maturity with modern technologies, responsive design, and SEO optimization, although some improvements in accessibility and security headers could be made. From a security perspective, the site uses HTTPS and cookie consent mechanisms effectively, with no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not present, which could be improved to enhance trust and compliance. Overall, the website is professional, trustworthy, and compliant with GDPR, providing a safe and user-friendly experience. Strategic recommendations include adding security headers, publishing a security policy, and enhancing accessibility features to further strengthen the security posture and user trust.

J

JadeBay GmbH

jade-bay.de

43

JadeBay GmbH is an inter-municipal development company serving the JadeBay region in Germany, focusing on economic promotion, workforce development, and innovation support. The website clearly communicates its mission and services to regional businesses, job seekers, and investors, positioning itself as a key regional development agency. Technically, the site employs a modern tech stack including Google Analytics with consent management, jQuery, and a CMS likely Redaxo. The site is mobile-optimized and well-structured with good SEO practices. Security posture is solid with HTTPS and Content-Security-Policy headers, though additional security headers and explicit security policies could enhance protection. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is professional, trustworthy, and aligned with its business objectives.

J

Jade-Weser-Park

jadeweserpark.de

42

The website jadeweserpark.de represents a small-scale business or organization based in Germany, as indicated by the domain and language usage. The site is built on WordPress using the Astra theme and Elementor page builder, reflecting a moderate level of digital maturity. The technical infrastructure is standard for small business websites, with modern technologies and a cookie consent mechanism implemented to comply with GDPR requirements. However, the site lacks explicit privacy policies, terms of service, and detailed business or contact information, which limits its transparency and user trust. Security posture is adequate with HTTPS enabled and cookie consent in place, but the absence of security headers and incident response information suggests room for improvement. Overall, the website is functional but basic, with moderate risks related to compliance and security best practices.

A

AWV Jade e.V.

awv-jade.de

48

AWV Jade e.V. is a well-established regional business association founded in 1919, representing over 420 member companies in the Jade economic region of Germany. The organization focuses on advocating for economic interests, providing legal advice, networking opportunities, and continuing education. Their website reflects a mature digital presence with modern WordPress infrastructure, active event management, and comprehensive content tailored to their target audience of regional businesses. Technically, the site uses standard and reputable plugins and libraries, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong, with clear policies and GDPR-aligned cookie management. Overall, the site projects professionalism and trustworthiness, supporting the organization's market position as a key regional economic voice.

K

Klimaschutz- und Energieagentur Niedersachsen GmbH

klimaschutz-niedersachsen.de

55

Klimaschutz- und Energieagentur Niedersachsen GmbH operates as a regional competence center focused on climate protection, energy efficiency, and renewable energy initiatives within Lower Saxony, Germany. The agency provides informational resources, consulting services, and supports various stakeholders including municipalities, businesses, and societal groups. Their market position is that of an authoritative regional agency supported by the Lower Saxony Ministry for Environment, Energy and Climate Protection. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the website employs modern JavaScript libraries such as jQuery, Foundation-sites, and AOS for animations, alongside RequireJS for module loading. It integrates Google Tag Manager for analytics and CookieFirst for consent management, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured navigation. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism. However, it lacks explicit security headers and a published security policy or incident response contact, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is minimal but consistent with a legitimate public agency domain. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and security posture.

Bürgerhaus Schortens is a local cultural center in Germany that provides a diverse range of cultural events including cabaret, exhibitions, markets, and concerts. It serves as a community hub for cultural engagement and group meetings, targeting local residents and culture enthusiasts. The website reflects a small non-profit organization with a clear focus on community and cultural enrichment. Technically, the website uses a variety of common web technologies such as jQuery, Bootstrap, and FontAwesome, likely running on the Redaxo CMS platform. The site is mobile-optimized and provides a good user experience with clear navigation and event information. Security-wise, the site implements cookie consent mechanisms and uses Google Analytics for tracking, but lacks explicit security policies or incident response information. The domain registration data is consistent with the website's public cultural mission, indicating legitimacy and trustworthiness. Overall, the website is professional, secure, and compliant with GDPR requirements, though it could improve by adding terms of service and explicit security policies.

S

SWING e.V.

inova-ilmenau.de

43

inovailmenau is a well-established, student-organized career forum hosted at TU Ilmenau, Germany, serving as a key platform for students and companies to connect. The website effectively communicates event details, organizational background, and partnership information, targeting students and alumni seeking career opportunities. Technically, the site is built on WordPress with a modern tech stack including jQuery, Ecwid for e-commerce, and AWS Cloudfront CDN for content delivery. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and some security headers present, but lacks advanced security policies such as CSP and incident response disclosures. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the domain registration data aligns well with the website content, indicating legitimacy and consistency.

S

SUNRISE Alliance

sunrise-alliance.eu

63

SUNRISE Alliance is a network representing smaller-sized universities located in non-metropolitan areas across Europe, aiming to provide a collective voice aligned with European values. The website serves as an informational and collaborative platform for these institutions, highlighting their strategic importance and fostering regional innovation and sustainability. The alliance targets academic institutions and stakeholders interested in regional educational development. Technically, the website is built on a modern WordPress platform with a well-integrated tech stack including Yoast SEO for search optimization, Google Tag Manager for analytics, CookieYes for cookie consent management, and OneSignal for push notifications. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate and could benefit from further optimization. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security policies, incident response information, and advanced security headers. No vulnerabilities or suspicious activities were detected in the analysis. Privacy compliance is partial due to the absence of a dedicated privacy policy and terms of service pages. Overall, the website is professional and trustworthy with a clear educational focus. To enhance trust and compliance, it is recommended to publish comprehensive privacy and security policies, improve security headers, and provide incident response contacts. These steps will strengthen the alliance's digital maturity and user confidence.

R

Home

regioit.de

54

The website www.regioit.de represents a German business with a focus on IT services or related technology sectors, as inferred from the domain and technical setup. The site uses the DNN CMS platform and integrates cookie consent management via Cookiebot, along with analytics and marketing tracking through eTracker and Facebook Pixel. However, the website lacks explicit privacy policy, terms of service, and contact information pages, which are critical for compliance and user trust. The technical infrastructure is moderately modern with HTTPS enabled and basic JavaScript libraries, but security headers are missing, indicating room for improvement in security posture. Overall, the site is accessible without WAF or blocking mechanisms, and content is safe for general audiences.

B

Bistum Münster

bistum-muenster.de

57

Bistum Münster is the second largest Catholic diocese in Germany, serving nearly two million Catholics with a broad range of spiritual, educational, and social services. The website reflects a mature digital presence built on TYPO3 CMS, featuring comprehensive content about church activities, pastoral care, education, and community support. The site is well-structured, mobile-optimized, and integrates social media channels to engage its audience effectively. GDPR and cookie compliance are well addressed, enhancing user trust. Technically, the site uses modern frontend libraries and frameworks such as Foundation, jQuery, and Slick Carousel, ensuring a responsive and accessible user experience. Hosting appears to be on a reputable German research network, supporting reliability and security. However, the site lacks explicit security policies and incident response contacts, which could be improved to strengthen its security posture. Security-wise, HTTPS is enforced, and no obvious vulnerabilities or exposed sensitive data were detected. The site uses some third-party scripts but does not appear to employ extensive tracking or advertising networks, aligning with its non-profit religious mission. The WHOIS data is limited but consistent with the organization's identity, supporting legitimacy. Overall, Bistum Münster's website is a professional, trustworthy, and content-rich platform that effectively serves its community and stakeholders. Strategic improvements in security transparency and policy publication would further enhance its credibility and resilience.

S

Stadtwerke Soltau GmbH & Co. KG

sw-soltau.de

58

Stadtwerke Soltau GmbH & Co. KG is a regional energy utility provider based in Soltau, Germany, offering a broad range of services including electricity, gas, heating, water, wastewater, solar energy, electromobility, internet, and house connection services. The company positions itself as a forward-thinking and innovative leader in the regional energy market, emphasizing sustainability and the energy transition. Their website reflects a professional and comprehensive digital presence with clear navigation, modern design, and extensive customer support options. Technically, the site is built on Joomla CMS with modern JavaScript libraries and hosted on AWS infrastructure, indicating a mature digital infrastructure. Security posture is solid with HTTPS, cookie consent mechanisms, and obfuscated emails, though some security headers and explicit security policies are missing. Overall, the site is trustworthy, GDPR compliant, and provides multiple contact channels. Recommendations include enhancing security headers, publishing incident response and vulnerability disclosure information, and continuing to maintain transparency and compliance.

M

mecodia GmbH

kommunenfunk.de

56

Kommunenfunk is a German-based digital citizen communication platform developed by mecodia GmbH, targeting municipalities and local governments to enhance citizen engagement through personalized communication channels such as email and messaging apps. The company positions itself as a niche provider with a focus on GDPR-compliant, audited data protection and seamless integration via API. The website reflects a professional and consistent brand image with clear contact information and a user-friendly interface. Technically, the site is built on WordPress with the Avada theme and uses Matomo analytics configured for privacy. Security posture is solid with HTTPS and privacy-respecting analytics, though it lacks explicit security policies and incident response information. Overall, the site is credible, well-maintained, and suitable for its target audience.

S

Soltau-Touristik

soltau-touristik.de

44

Soltau-Touristik operates as the official tourism and visitor information service for the city of Soltau, Germany, focusing on promoting local attractions, events, accommodations, and services to tourists and visitors. The website serves as a regional tourism authority hub, providing comprehensive information and booking options, targeting travelers interested in the Lüneburger Heide region. The business model centers on destination marketing and visitor engagement, supported by official certifications and a clear contact presence. Technically, the website is built on TYPO3 CMS and leverages modern front-end technologies such as jQuery, Bootstrap, and FontAwesome. It demonstrates good mobile optimization, accessibility features, and SEO practices. The site integrates Google Analytics and Tag Manager for user tracking, balanced with GDPR-compliant cookie consent mechanisms. Multi-language support is provided via Google Translate, enhancing accessibility for international visitors. From a security perspective, the site uses HTTPS with anonymized IP tracking in analytics, includes a cookie consent banner, and employs accessibility tools. However, it lacks explicit security headers and does not provide a public security policy or incident response information. No vulnerabilities or suspicious content were detected, indicating a mature security posture appropriate for its business type. Overall, the website is professional, trustworthy, and well-aligned with its business goals. It provides a safe and user-friendly experience for visitors, with clear contact details and official trust indicators. Strategic improvements could include enhancing security headers and publishing a security policy to further strengthen trust and compliance.

B

Breezy HR, Inc.

breezy.hr

62

Breezy HR, Inc. is a well-established technology company specializing in modern hiring software and applicant tracking systems designed to streamline recruitment processes for businesses. With a strong market position supported by over 17,000 customers and recognition from Gartner and G2, Breezy HR offers a comprehensive SaaS platform that covers job advertising, candidate management, offer management, and performance review cycles. The company operates under the parent organization Learning Technologies Group plc and is headquartered in Raleigh, North Carolina. Technically, the website is built on a modern Webflow CMS platform, leveraging a robust tech stack including AWS hosting, multiple analytics and marketing tools, and video hosting via Wistia. The site demonstrates excellent performance, mobile optimization, and SEO practices, providing a professional and user-friendly experience. Security measures include HTTPS enforcement, Content Security Policy headers, and ISO/IEC 27001 certification, reflecting a mature security posture. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms and GDPR adherence. Contact information is transparent and consistent across the site and structured data. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and accessible online presence. Overall, Breezy HR presents a secure, professional, and credible digital footprint suitable for its business domain.

V

Vivalink

vivalink.com

10

Vivalink is a healthcare technology company specializing in remote patient monitoring solutions, particularly for clinical trials and digital healthcare applications. Their offerings include wearable medical devices, a biometrics data platform, and software development kits to enable integration with clinical applications. The company targets healthcare providers, clinical trial sponsors, and digital health partners, positioning itself as a key player in the remote monitoring and decentralized clinical trial market. The website reflects a professional and well-branded presence with comprehensive service descriptions and customer testimonials. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies such as jQuery, Google Tag Manager, and Hotjar for analytics and user experience optimization. The site is mobile-optimized and employs standard SEO and accessibility practices, though some accessibility improvements could be made. Security-wise, the site enforces HTTPS, uses security headers, and implements cookie consent mechanisms, indicating a mature security posture. However, explicit security policies and incident response information are not publicly available. The WHOIS data for the domain is missing or unavailable, which is unusual for an active commercial website and slightly reduces trustworthiness. Despite this, the website content, branding, and business information strongly suggest a legitimate and established company. No signs of malicious activity or adult content were detected, and privacy compliance appears robust. Overall, Vivalink's website demonstrates a strong digital presence with good security and privacy practices, serving a specialized healthcare technology market. Further transparency in security policies and WHOIS data would enhance trust and credibility.

H

H1

h1.co

11

H1 is a leading healthcare data and analytics company focused on connecting life sciences, pharmaceutical companies, health plans, and digital health organizations with healthcare professionals globally. Their platform provides comprehensive data on over 11 million healthcare professionals, enabling clients to accelerate clinical trials, optimize medical affairs, and improve patient care. The company is positioned as a trusted partner with over 250 leading customers, including major pharma and healthcare organizations. Technically, the website is built on WordPress with integrations to HubSpot, Vimeo, and various marketing and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though a dedicated security policy and incident response contacts are not publicly available. Overall, the site is professional, well-branded, and compliant with privacy regulations such as GDPR.

A

AutoCruitment

autocruitment.com

39

AutoCruitment is a specialized healthcare technology company focused on patient recruitment for clinical trials. Their platform leverages direct-to-patient recruitment technology, sophisticated online screening, and AI-powered EMR data insights to accelerate clinical trial enrollment. The company positions itself as an industry leader with global capabilities, serving sponsors, CROs, research sites, and medical device companies. The website is professionally designed, mobile-optimized, and integrates multiple marketing and analytics tools, reflecting a mature digital infrastructure. Security posture is good with HTTPS and secure forms, though improvements in security headers and privacy compliance are recommended. The absence of WHOIS data suggests privacy protection, which is common in this sector but limits transparency. Overall, the site is trustworthy, professional, and well-aligned with its business objectives.

S

SunshineMD

sunshinemddata.com

53

SunshineMD operates a specialized healthcare data platform providing a near census of active US clinical trial investigators since 2013. Their service focuses on delivering documented investigator experience and enrollment performance data to pharmaceutical sponsors and CROs, enabling data-driven site selection and improved clinical trial outcomes. The company leverages authoritative data sources such as Open Payments and ClinicalTrials.gov, and validates its data accuracy through correlation with internal sponsor and CRO datasets. Technically, the website is built on WordPress with Elementor, integrating marketing and analytics tools like HubSpot and Google Analytics. The security posture is adequate with HTTPS and domain transfer protections, though improvements such as DNSSEC and security.txt publication are recommended. Privacy compliance is currently weak due to missing privacy and cookie policies. Overall, the website is professional, content-rich, and trustworthy, targeting clinical research professionals and sponsors.

W

Walgreens

walgreens.com

74

Walgreens is a leading US-based retail pharmacy chain offering a broad range of pharmacy, health, wellness, and photo services both in-store and online. The website serves as a comprehensive digital platform for customers to refill prescriptions, shop health products, and create photo gifts, reflecting a mature e-commerce presence. The site leverages enterprise-grade technologies including Adobe Experience Manager, Adobe Analytics, and Akamai CDN to deliver a performant and user-friendly experience. Privacy and cookie consent mechanisms are robust, indicating compliance with GDPR and other regulations. Security posture is strong with HTTPS enforcement and modern security headers, though explicit security policies and vulnerability disclosures are not publicly detailed. WHOIS data is unavailable, likely due to privacy protection or registry issues, but the website's branding and content strongly affirm its legitimacy. Overall, Walgreens.com demonstrates a high level of digital maturity, security awareness, and business credibility.

F

Florence

florencehc.com

73

Florence Healthcare operates a specialized SaaS platform designed to enable always-on, remote workflows for clinical trials. Their platform streamlines site document management and administration, linking sponsors, clinical sites, and CROs with AI-augmented automation to expedite trial startup, reduce risk, and save costs through digitization and remote monitoring. The company targets clinical trial stakeholders seeking efficient and compliant trial operations. Technically, the website is built on WordPress with the Avada theme and integrates multiple analytics and marketing tools such as Google Analytics, Crazy Egg, and LinkedIn Insight Tag. The site demonstrates good design quality, mobile optimization, and SEO practices, though accessibility could be improved. Security posture is moderate, with HTTPS usage and some privacy controls, but lacks explicit security headers and public security policies. WHOIS data is missing, raising concerns about domain registration legitimacy, though the professional web presence suggests operational business activity. Overall, the site is safe, professional, and credible but would benefit from enhanced transparency and security practices.

S

Simulations Plus, Inc.

simulations-plus.com

77

Simulations Plus, Inc. is a specialized technology company focused on providing advanced biosimulation software and consulting services that support drug discovery through commercialization. Their offerings integrate AI, machine learning, pharmacokinetics, and pharmacometrics to serve pharmaceutical, biotechnology, academic, and regulatory clients. The company positions itself as a niche leader with a medium-sized business footprint, founded in 2016, and maintains a professional and content-rich website that effectively communicates its expertise and services. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, Matomo Analytics, and marketing tools like Marketo and Hotjar. The site is well-optimized for SEO, mobile-friendly, and demonstrates good accessibility standards. Performance is moderate, with room for improvement in hosting and speed optimizations. From a security perspective, the site enforces HTTPS and implements basic security headers and cookie consent mechanisms. However, it lacks comprehensive security policies, incident response information, and vulnerability disclosure mechanisms. The absence of WHOIS registration data is a concern but does not negate the legitimacy of the business given the professional web presence and social media links. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in security transparency and WHOIS data visibility would enhance trust and compliance posture.

A

Adhere Tech

adheretech.com

64

Adhere Tech is a healthcare technology company specializing in medication adherence solutions designed to improve patient outcomes and clinical trial compliance. Their award-winning Aidia Smart Bottle and related patient-friendly tools position them as innovators in the medication adherence market. The company targets healthcare providers, pharmaceutical companies, and patients, offering both commercial and clinical trial solutions. The website reflects a mature digital presence built on WordPress with a professional design and clear navigation. Technically, the site uses modern web technologies and is hosted by GoDaddy, with HTTPS enabled and domain locking features in place. Security posture is solid but could be improved by enabling DNSSEC and additional security headers. Privacy compliance is addressed with visible privacy and cookie policies, including consent mechanisms. Overall, the site is safe, professional, and trustworthy with no adult or questionable content detected.

L

Labcorp

labcorp.com

73

Labcorp is a globally recognized life sciences and healthcare company specializing in laboratory diagnostics and drug development services. The company serves a broad audience including patients, healthcare providers, organizations, and biopharma companies, positioning itself as a leader in guiding vital healthcare decisions. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding consistent with its enterprise status. The inclusion of subsidiaries such as Invitae highlights its expansive market reach and diversified service offerings. Technically, the website leverages Adobe Experience Manager as its CMS, integrates Adobe Launch for tag management, and employs OneTrust for consent management, indicating a modern and compliant infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, supporting a positive user experience. Security posture is strong with HTTPS enforced and standard security headers implied, though explicit security policies and incident response details are not publicly disclosed. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR. The absence of WHOIS data is noted but likely due to privacy protection measures rather than suspicious activity. Strategic recommendations include enhancing transparency around security policies and incident response, and publishing vulnerability disclosure information to further strengthen trust and security culture.

G

GeneDx® 

genedx.com

67

GeneDx is a leading healthcare diagnostics company specializing in genomic testing, particularly exome and genome sequencing. The company targets healthcare providers and patients seeking genetic disorder diagnoses. Their website reflects a mature digital presence with comprehensive content, strong branding, and extensive use of modern web technologies and analytics tools. The site is well-optimized for SEO, mobile-friendly, and provides clear navigation and user experience. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers could be improved. WHOIS data is missing, which is unusual but the website's professional appearance and trust signals mitigate immediate concerns. Overall, GeneDx demonstrates a robust online presence aligned with its healthcare industry role.

L

Land Sachsen-Anhalt

sachsen-anhalt.de

58

The website www.sachsen-anhalt.de serves as the official state government portal for Sachsen-Anhalt, Germany. It provides comprehensive information about the state's ministries, public services, initiatives, news, and job postings. The portal targets citizens, businesses, and interested parties within the region, positioning itself as a trusted and authoritative source of governmental information and services. The business model is that of a government information portal, focusing on transparency and public engagement. Technically, the site is built on TYPO3 CMS with modern frontend technologies including Bootstrap and jQuery. Accessibility is a key focus, with tools like Eye-Able and ReadSpeaker integrated to assist users with disabilities. The site is mobile-optimized and demonstrates good SEO practices. Hosting is managed by Dataport AöR, a known IT service provider for public sector entities. From a security perspective, the site enforces HTTPS and uses security best practices such as secure cookies and accessibility features. However, explicit security headers like Content-Security-Policy are not clearly present, and there is no published security policy or incident response contact. No vulnerability disclosure or security.txt file is found, which could be improved to enhance transparency and security posture. Overall, the website is professional, trustworthy, and well-maintained with a strong focus on accessibility and user experience. Strategic recommendations include implementing a cookie consent mechanism, publishing security and incident response policies, and adding a vulnerability disclosure policy to further strengthen security and compliance.

S

Stadt Dorsten

schluesselposition.de

54

The website schluesselposition.de serves as the official career portal for the city of Dorsten, Germany, providing job listings and employer information for public sector positions. It targets job seekers interested in municipal and public administration roles, emphasizing the importance of each position within the city administration. The site is well-branded and consistent with the city's official identity, offering a professional and trustworthy user experience. Technically, the site is built on the Neos CMS platform using the Flow PHP framework, with modern JavaScript libraries such as jQuery, Slick Carousel, and SweetAlert2 enhancing interactivity. Hosting is provided by Hetzner, a reputable German hosting provider. The site includes Matomo analytics for privacy-conscious user tracking but lacks a cookie consent mechanism. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security policies or incident response contacts, which are recommended for enhanced security posture. No vulnerabilities or suspicious content were detected. Overall, the site is a reliable and professional municipal career portal with good content quality and technical implementation. Strategic improvements in privacy compliance and security best practices would further strengthen its trustworthiness and user confidence.

M

Mangold Consulting GmbH

mangoldconsulting.com

51

Mangold Consulting GmbH is a specialized consulting firm focused on economic and investment advisory related to Russia. The company, founded in 2013, targets business professionals and investors interested in the Russian market. The website is professionally designed using WordPress with the Divi theme and includes multilingual support, primarily in German. Technical infrastructure is modern and includes SEO optimization via Yoast, but lacks advanced security headers and DNSSEC. Security posture is adequate with HTTPS enabled and domain transfer protection, but could be improved with additional security policies and headers. Privacy compliance is limited due to absence of a privacy policy and terms of service. Overall, the website is functional and professional but would benefit from enhanced transparency and security documentation.

M

Miles IT

milesit.com

67

Miles IT is a professional managed IT services and software development company offering a broad range of technology solutions including managed IT, cybersecurity, custom software, web development, and digital marketing. The company targets businesses seeking comprehensive IT and digital transformation services. Their market position is supported by a large team of 500 IT professionals and over 20 years of experience, positioning them as a significant player in the managed services provider space. Technically, the website is built on WordPress with a modern tech stack including jQuery, HubSpot forms, Google Tag Manager, and Vimeo video embeds. The site is well-structured, mobile-optimized, and SEO-friendly, though some accessibility features could be improved. Performance is moderate with good design and user experience. From a security perspective, the site enforces HTTPS and uses several third-party marketing and analytics tools. However, it lacks visible security headers, explicit privacy and cookie policies, and incident response or vulnerability disclosure information. The absence of WHOIS data raises some concerns about domain registration transparency, though the website content and branding are professional. Overall, the website presents a strong business front with good technical implementation but has gaps in privacy compliance and security best practices. Strategic improvements in these areas would enhance trust and compliance posture.

M

Momentive

momentivesoftware.com

74

Momentive is a software company specializing in providing advanced software solutions tailored for nonprofit organizations. Their offerings include association management, fundraising, event management, learning management, volunteer management, career centers, certification management, data analytics, and accounting software. Positioned as a leading software provider in the nonprofit sector, Momentive aims to empower nonprofits to achieve their goals and maximize community impact. The website reflects a modern SaaS business model with a focus on user engagement and digital transformation for nonprofits. Technically, the website is built on WordPress with Elementor and integrates several third-party services such as HubSpot for marketing automation, Wistia for video hosting, and Osano for cookie consent management. The hosting infrastructure leverages Amazon AWS DNS services, indicating a reliable hosting environment. Security posture is strong with HTTPS enforced, security headers present, and cookie consent mechanisms in place. However, there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is professional, secure, and compliant with privacy regulations, making it a trustworthy platform for its target audience.

C

Zajímavá místa na Cestovinky.cz - Váš průvodce při cestování

cestovinky.cz

57

Cestovinky.cz is a Czech-language travel guide website providing rich content including destination guides, travel tips, photo galleries, videos, quizzes, and blogs. The site targets travel enthusiasts primarily in the Czech Republic and operates a content publishing business model monetized through advertising networks such as Google Adsense and OpenX. The website uses Drupal 10 CMS and integrates modern web technologies and analytics tools like Gemius and Google Tag Manager. Security posture is moderate with HTTPS enabled but lacks some security headers and explicit privacy or cookie policies. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and technical setup appear professional and legitimate. Contact information includes a company email and social media presence on Facebook. Overall, the site is safe, family-friendly, and well-structured for its audience.

C

cdr.cz

cdr.cz

58

cdr.cz is a well-established Czech IT news and media website founded in 1998, providing technology news, guides, and blogs primarily for Czech-speaking IT professionals and enthusiasts. The site operates on a Drupal CMS platform with a modern technology stack including Google Analytics, Google Tag Manager, and various advertising networks. The website is monetized primarily through advertising and uses multiple ad networks and tracking services. Security posture is good with HTTPS and some security headers, but lacks explicit privacy and cookie policies, which impacts privacy compliance. No direct contact information or security incident response details are provided publicly. Overall, the website is professional, content-rich, and trustworthy, but could improve transparency and compliance with privacy regulations.

A

Aira Communication, s.r.o.

jsmekocky.cz

58

Jsme kočky is a Czech online lifestyle magazine targeting women interested in health, fashion, relationships, and entertainment. Operated by Aira Communication, s.r.o., founded in 2016, it offers diverse content with a humorous and candid tone. The website leverages Drupal CMS and integrates multiple advertising and analytics technologies, including Google Analytics, Facebook SDK, and Gemius tracking, supported by a robust cookie consent mechanism via Didomi CMP. While the site is well-structured and professionally designed, it lacks explicit privacy policy and terms of service pages, which are critical for compliance and user trust. The absence of WHOIS data for the domain raises concerns about domain legitimacy, although the business information and content quality suggest a legitimate operation. Security posture is generally good with HTTPS enforced, but security headers and incident response policies are missing, indicating room for improvement.

A

Aira Group s.r.o.

aira.cz

61

Aira Group s.r.o. is a Czech-based technology service provider specializing in IT outsourcing, web development, online marketing, and custom application development. The company targets businesses seeking comprehensive IT and marketing solutions, positioning itself as a reliable partner with a portfolio of notable clients across various industries. The website reflects a professional and consistent brand image with detailed service descriptions and client references, indicating a medium-sized enterprise with a solid market presence in the Czech Republic. Technically, the website employs a modern tech stack including jQuery, bxSlider, Fancybox, Font Awesome, and integrates marketing and analytics tools such as Google Analytics, Facebook Pixel, and Google Tag Manager. Hosting leverages AWS Cloudfront CDN for widget delivery. The site is mobile-optimized with good SEO practices but could improve accessibility and security headers. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR. However, explicit privacy and terms of service pages are not clearly found, and WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency. No critical vulnerabilities or WAF blocking were detected, and contact information including a data protection officer contact is provided. Overall, the website presents a trustworthy and professional digital presence with moderate security and privacy compliance. Strategic improvements in security headers, explicit privacy policies, and WHOIS transparency would enhance trust and compliance.

E

ENSTA Alumni

ensta.org

60

ENSTA Alumni is a well-established French alumni association dedicated to graduates and students of ENSTA, focusing on fostering professional networking, career support, and promoting the school's disciplines. The website is professionally designed, content-rich, and provides multiple services including news, events, job offers, and member directories. Technically, the site uses a modern JavaScript stack with libraries such as jQuery, Bootstrap, and cookie consent management via tarteaucitron. Security measures include HTTPS, CSRF tokens, and hCaptcha for form protection, although HTTP security headers are not evident. The absence of WHOIS data limits domain trust assessment, but the website's content and structure indicate a legitimate and professional organization. Privacy compliance is well addressed with cookie consent and GDPR considerations.

T

Télécom Paris Alumni

telecom-paris-alumni.fr

61

Télécom Paris Alumni is a professional alumni association serving graduates of Télécom Paris, providing a comprehensive platform for networking, career development, events, and community engagement. The website offers access to an extensive alumni directory, job and internship listings, mentoring programs, and a mobile application to facilitate member interaction. The organization targets alumni, students, and companies connected to Télécom Paris, positioning itself as a key player in the educational and non-profit sectors in France. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Leaflet for mapping, and various user interface libraries. It integrates security features such as HTTPS, CSRF tokens, and hCaptcha for bot protection. Privacy compliance is well addressed with a detailed cookie and privacy policy, user consent mechanisms, and GDPR adherence. Analytics and marketing tools like Google Analytics and LinkedIn Insight are used with transparency. Security posture is strong with encrypted connections and secure form handling, though there is room for improvement by adding explicit security headers and publishing incident response policies. The absence of WHOIS data for the domain is a concern for domain legitimacy verification but does not detract significantly from the overall trustworthiness given the professional content and consistent branding. Overall, the website presents a secure, professional, and user-friendly platform for its community, with recommendations to enhance security headers and formalize vulnerability disclosure processes to further strengthen trust and compliance.

K

KEDGE Alumni

kedgebs-alumni.com

62

KEDGE Alumni operates as a large, well-established alumni network for KEDGE Business School graduates, providing career services, networking events, and professional development resources. The website is professionally designed, mobile-optimized, and uses modern web technologies including jQuery, Bootstrap, and Leaflet.js for interactive maps. Security measures such as HTTPS, CSRF tokens, and hCaptcha are implemented, enhancing the site's security posture. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. However, the absence of WHOIS data raises concerns about domain registration legitimacy, which should be further investigated. Overall, the site presents a trustworthy and professional platform for alumni engagement.

E

ESSEC Alumni

essecalumni.com

57

ESSEC Alumni operates as the official alumni network for ESSEC Business School, providing a comprehensive platform for graduates, students, faculty, and recruiters to connect, engage, and access career and lifelong learning services. The website is well-branded, professionally designed, and offers a variety of services including event management, job boards, mentoring, and community clubs. Technically, the site leverages modern web technologies such as Vue.js, Google Tag Manager, and Matomo analytics, ensuring a responsive and interactive user experience. Security posture is solid with HTTPS enforced and secure login mechanisms, although some security headers could be improved. Privacy compliance is evident with clear privacy and cookie policies and GDPR considerations. However, the absence of WHOIS data for the domain introduces a trust concern that should be addressed. Overall, the site is a credible and valuable resource for the ESSEC community.

E

emlyon alumni

emlyonforever.com

61

emlyon alumni is a professional community platform dedicated to the members of emlyon business school, providing networking, career support, events, and mentoring services. The website is well-branded, bilingual (French and English), and offers a variety of resources to alumni and partners. Technically, it uses modern web technologies including Vue.js, Google Analytics, and Google Maps API, indicating a mature digital infrastructure. Security posture is adequate with HTTPS and SSO authentication, though some security headers and explicit policies are not evident. The absence of WHOIS data reduces transparency but the site content and branding suggest legitimacy. Overall, the platform supports a medium-sized educational community with a focus on engagement and career development.

E

ESCP Alumni

escpalumni.org

51

ESCP Alumni is a well-established international alumni association for ESCP Business School graduates, offering a broad range of services including networking, career development, events, and community engagement. The website reflects a professional and consistent brand image, targeting alumni, students, and professionals connected to the school. The association maintains multiple international offices, indicating a large and global presence. Technically, the website employs modern web technologies such as jQuery, Bootstrap 5, and various JavaScript libraries for UI and user interaction. It uses HTTPS with hCaptcha for bot protection and cookie consent management, demonstrating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site enforces HTTPS, uses CSRF tokens, and integrates anti-bot measures. However, HTTP security headers are not explicitly detected and could be improved. No vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website is trustworthy, secure, and professionally managed. The lack of WHOIS data is due to privacy protection, which is reasonable for this type of organization. Strategic recommendations include enhancing HTTP security headers, publishing a security policy, and adding a vulnerability disclosure channel to further strengthen security posture.

P

Ponts Alumni

ponts.org

55

Ponts Alumni is a well-established non-profit alumni association for graduates of the École Nationale des Ponts et Chaussées in France. The organization provides a comprehensive range of services including networking, career support, business partnerships, events, and publications to its members worldwide. The website reflects a professional and consistent brand image targeting alumni, students, and partners. Technically, the site employs modern JavaScript libraries and frameworks, uses secure HTTPS connections, and integrates anti-bot measures such as hCaptcha. Privacy and cookie policies are clearly presented with GDPR compliance and user consent mechanisms. Security posture is strong with secure forms and CSRF protections, though some security headers could be improved. The WHOIS data is privacy protected, which is justified for this type of organization. Overall, the site is trustworthy, well-maintained, and serves its community effectively.

H

HEC Alumni

hecalumni.fr

53

HEC Alumni operates as the official alumni network for HEC Paris, serving over 80,000 graduates worldwide. The website provides a comprehensive platform for networking, career development, events, and lifelong learning, targeting alumni, students, and recruiters. The digital infrastructure leverages modern web technologies including Vue.js, Google Analytics, and various social media integrations, reflecting a mature digital presence. Security posture is strong with HTTPS and security headers implemented, though explicit security policies and incident response contacts are absent. The lack of WHOIS data introduces some uncertainty regarding domain registration legitimacy, but the website's professional content and affiliation with HEC Paris support its credibility. Overall, the site is well-designed, user-friendly, and compliant with privacy regulations, making it a trusted resource for its community.

O

Open Research Office Berlin

open-access-berlin.de

51

The Open Research Office Berlin operates as a coordination and support entity for open science initiatives in Berlin, hosted by the Universitätsbibliothek der Freien Universität Berlin and supported by the Senatsverwaltung für Wissenschaft, Gesundheit und Pflege. It focuses on promoting open access, providing information, advice, and networking opportunities to scientific and cultural heritage institutions in Berlin. The website reflects a well-structured public service organization with a clear mission and target audience in the academic and governmental sectors. Technically, the website is built on a modern CMS platform (Infopark CMS Fiona) with Ruby on Rails integration, employing standard web technologies such as HTML5, CSS3, JavaScript, and jQuery. The site is mobile-optimized, SEO-friendly, and performs moderately well. Hosting appears to be managed by institutional providers linked to the Freie Universität Berlin and DFN, ensuring reliability. From a security perspective, the site uses HTTPS with proper CSRF protections but lacks explicit security headers and a cookie consent mechanism, which are recommended for enhanced security and compliance. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by a privacy policy, though cookie consent is missing. Contact information is primarily via a contact form, with no direct emails or phone numbers displayed. Overall, the website is trustworthy, professional, and serves its public mission effectively. Strategic improvements in security headers, cookie consent, and incident response disclosures would further strengthen its posture.

T

The Conference Forum

dpharmconference.com

57

DPHARM Conference is a well-established annual event focused on modernizing clinical research and clinical trial operations. It targets senior clinical operations executives, R&D professionals, patient advocates, and technologists, providing a platform for thought leadership and innovation in the pharmaceutical industry. The conference is organized by The Conference Forum, a recognized entity in the healthcare events sector with a domain age consistent with its claimed history. The website presents professional content, including detailed speaker profiles, sponsors, and event information, reflecting a strong market position in healthcare conference organization. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and various JavaScript libraries for UI and analytics. It is hosted on Amazon AWS with CloudFront CDN, ensuring reliable performance and moderate loading speeds. The site is mobile optimized and uses HTTPS with good SSL configuration, though DNSSEC is not enabled. Analytics and tracking tools such as Google Analytics, Microsoft Clarity, and LinkedIn Insight Tag are used, indicating moderate user tracking. From a security perspective, the site follows several best practices including HTTPS enforcement and form protection via Google reCAPTCHA. However, it lacks published privacy and cookie policies, incident response contacts, and vulnerability disclosure information, which are important for compliance and trust. No critical vulnerabilities or suspicious content were detected. Overall, the security posture is good but could be improved with enhanced transparency and policy disclosures. The overall risk assessment is low, with the site appearing trustworthy and professional. Strategic recommendations include publishing comprehensive privacy and cookie policies with consent mechanisms, enabling DNSSEC, and providing clear incident response and vulnerability disclosure channels to enhance compliance and user trust.

T

The Conference Forum

patientsaspartnerseu.com

58

Patients as Partners EU is a specialized conference and multimedia platform operated by The Conference Forum, focusing on advancing patient involvement in clinical research to improve medicine development outcomes. The website serves pharma R&D professionals, patient advocates, and clinical research stakeholders by providing event information, editorial content, podcasts, and webcasts. The platform positions itself as a niche leader in patient engagement within healthcare research, supported by reputable sponsors and industry experts. Technically, the site employs modern JavaScript libraries and tracking tools, hosted on AWS infrastructure with Cloudfront CDN, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS and form protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is lacking as no explicit privacy or cookie policies are found. Overall, the site is professional, trustworthy, and safe for general audiences.

B

BiblioJobs

bibliojobs.eu

47

BiblioJobs is a specialized online job board focused on employment opportunities within libraries, archives, and information institutions, primarily serving the German-speaking market. The platform offers a comprehensive listing of job vacancies, categorized by institution type and job type, targeting professionals in the library and archival sectors. The website is built on WordPress, utilizing common web technologies such as jQuery, Bootstrap, and FontAwesome, providing a responsive and user-friendly experience. While the site is well-structured and professionally presented, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance given its European audience. Security-wise, the site uses HTTPS and some basic security headers but could improve by implementing additional headers and publishing security policies. Overall, BiblioJobs presents a credible and niche-focused service with moderate technical maturity and a good business credibility profile.

C

CAMPUSERVICE GmbH

campuslocation-frankfurt.de

59

CAMPUSERVICE GmbH operates a professional event location service website leveraging the Goethe University Frankfurt campus as a unique venue. The site targets event organizers and private clients seeking diverse event spaces in Frankfurt. The business model focuses on venue rental and associated event services such as catering and technical support. The website is built on WordPress with modern plugins and SEO optimizations, featuring multimedia content including videos and images to enhance user engagement. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy and terms policies are missing. Contact is primarily via a web form, with no direct emails or phone numbers published. WHOIS data is minimal but not suspicious, aligning moderately with the business claims. Overall, the site is professional and trustworthy but could improve privacy transparency and security headers.

Společnost mladých agrárníků České republiky, z. s. is a Czech non-profit organization dedicated to representing young agricultural professionals and rural youth. The organization provides educational seminars, news updates, event calendars, and membership opportunities to support and develop the agricultural community. Their market position is that of a specialized non-governmental entity focused on youth engagement in agriculture within the Czech Republic. Technically, the website is built on Cube CMS 8.5.2, utilizing modern frameworks such as Bootstrap 4 and jQuery, with additional libraries like SmartMenus for navigation and Facebook SDK for social media integration. The site is mobile-optimized with good navigation and content structure, although performance is moderate. Cookie consent and privacy policies are implemented, reflecting GDPR compliance. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms. However, no explicit security headers were detected in the provided data, and the WHOIS information is missing, which reduces domain trustworthiness. There are suspicious hidden external links embedded in the HTML, likely for SEO spam purposes, which should be addressed. No incident response or vulnerability disclosure policies are present. Overall, the website is professional and serves its intended audience well but would benefit from improved security headers, WHOIS transparency, and removal of suspicious hidden links to enhance trust and security posture.

P

Profi Press s.r.o.

dzkt.cz

45

DZKT.cz is a professional event and media platform focused on garden and municipal technology exhibitions in the Czech Republic. Organized by Profi Press s.r.o., the website promotes national contracting exhibitions featuring professional machinery with active demonstrations. The business holds a stable market position within the media and event organization sector, targeting professionals and users interested in municipal and garden technology. The website is content-rich, well-structured, and uses modern web technologies including WordPress with Oxygen Builder, supported by analytics tools such as Matomo and Google Tag Manager. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates a mature digital presence with good privacy compliance and trustworthy business information.

P

Profi Press SK, s.r.o.

dnipola.sk

45

The website dnipola.sk represents a well-established Slovak agricultural exhibition platform organized by Profi Press SK, s.r.o. It serves as a comprehensive information hub for the Celoslovenské dni poľa event, showcasing agricultural varieties, protection, nutrition, machinery, and livestock. The site targets agricultural professionals, exhibitors, and visitors interested in farming innovations and related media. The business holds a medium market position with a focus on event organization and agricultural media publishing. Technically, the site is built on WordPress with Oxygen Builder, leveraging modern JavaScript libraries and analytics tools like Matomo and Google Tag Manager. The website is mobile-optimized and SEO-friendly with good content quality and navigation clarity. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and vulnerability disclosures. Overall, the domain registration and business information are consistent and trustworthy, supporting a positive legitimacy score.