Security Directory

J

JOAB Försäljnings AB

joab.se

41

JOAB Försäljnings AB is a leading Nordic company specializing in truck superstructures, including liftdumpers, hooklifts, garbage trucks, fixed platforms, truck cranes, and innovative shift systems. The company has a strong market position with a history dating back to 1963, offering comprehensive services from development to after-sales support. The website reflects a mature digital presence built on WordPress with modern SEO and tracking technologies, providing a professional user experience and clear business information. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data for the www subdomain is a notable anomaly but does not detract from the overall legitimacy of the business as presented online.

A

Amec shpk

amec.al

49

Amec shpk is a specialized mechanical construction and steel fabrication company based in Albania with over 27 years of experience. The company offers a range of services including assembly & welding, bending, painting, machining, oxy & plasma cutting, and laser cutting, serving various industrial sectors such as energy technology, healthcare, and welding industry. The website is built on WordPress using Elementor and modern frontend libraries, providing a professional and mobile-optimized user experience. Contact information and social media presence are clearly presented, enhancing business credibility. However, the site lacks formal privacy and cookie policies, security headers, and vulnerability disclosure information, which are areas for improvement.

S

SCANTEC GmbH

ecotec-scantec.com

51

SCANTEC GmbH is a German technology company specializing in AI-driven solutions for the circular economy, particularly focusing on improving waste fraction separation and recycling efficiency. Their product portfolio includes Smartscan, Deepscan, Composcan, and Scansuite, which provide advanced image analysis and data reporting tools to municipalities and waste disposal companies. The company is relatively new, founded in 2022, and operates primarily in the German market with multilingual support for English-speaking audiences. Technically, the website is built on WordPress using the Enfold theme, enhanced with plugins such as Borlabs Cookie for GDPR-compliant cookie management and WPML for multilingual capabilities. The site demonstrates moderate performance and good mobile optimization but lacks some advanced SEO and accessibility features. Hosting appears to be managed via Cronon GmbH with name servers at rzone.de. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks DNSSEC and visible security headers, which are recommended for enhanced protection. No exposed sensitive data or vulnerable libraries were detected. The domain registration details are consistent with the business claims, indicating legitimacy and transparency. Overall, the website presents a professional and trustworthy image with good content quality and business credibility. However, improvements in security headers, DNS security, and explicit contact information would strengthen its security posture and user trust.

EVGE is a European non-profit association established in 2004 that organizes communities across Germany, Austria, Czech Republic, and Slovakia to certify waste disposal specialist companies. The website serves as an informational platform presenting press releases, certification standards, and training events. Technically, the site is built on WordPress with a modern theme and standard libraries, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit incident response policies. Privacy compliance is limited, with no cookie consent mechanism or detailed privacy policy beyond a basic imprint page. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

B

Betriebs-Berater / BB IN-HOUSE

bb-inhouse.de

45

BB IN-HOUSE is a German digital media publication providing biweekly curated legal and economic news targeted at corporate executives and decision makers. The website is professionally designed using WordPress with a child theme and integrates GDPR-compliant cookie consent via Usercentrics. The technical infrastructure includes modern JavaScript libraries, Google Tag Manager for analytics, and Adition for advertising. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The domain registration data is consistent and transparent, supporting legitimacy. Overall, the site presents a trustworthy and professional media platform serving a niche market.

Y

YouthWatch

youthwatch.sk

42

YouthWatch is a Slovak non-profit organization dedicated to enhancing the quality of youth work and youth policy through trend monitoring, innovation, and development programs. Their services include educational workshops, lectures, and consulting aimed at youth workers, educators, and policymakers. The website is professionally designed using WordPress and Elementor, with a focus on accessibility and mobile optimization. The technical infrastructure is modern and hosted on Websupport with DNSSEC and HTTPS enabled, ensuring a secure browsing experience. However, the site lacks explicit privacy and cookie policies, incident response contacts, and security headers, which are areas for improvement. Overall, the domain registration and website content are consistent and legitimate, reflecting a stable and trustworthy organization.

N

NaZemi

nazemi.cz

45

NaZemi is a well-established Czech non-profit organization founded in 2005, focusing on sustainability, transformative education, and community engagement. Their website reflects a mature digital presence with clear navigation, multilingual support, and a professional design. They offer educational programs, facilitation services, community spaces, and an e-commerce platform for publications. Technically, the site is built on WordPress with WooCommerce and uses modern frameworks like Bootstrap, supported by privacy-conscious analytics such as Matomo and Google Tag Manager with consent management. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. Contact information and privacy policies are clearly presented, supporting trust and compliance. Overall, the site is credible, secure, and user-friendly, serving a niche audience interested in sustainability and education.

K

KulturKirche2025 – Die Kirchen in der Kulturhauptstadtregion Chemnitz 2025

kulturkirche2025.de

45

KulturKirche2025 is a cultural initiative centered on churches in the Chemnitz region, aligned with the European Capital of Culture 2025 program. The website serves as a platform to promote cultural exhibitions, spiritual events, and community projects, targeting visitors, pilgrims, and local cultural participants. The business model is non-profit and community-focused, emphasizing cultural heritage and spiritual engagement. Technically, the site is built on WordPress with modern plugins such as Advanced Custom Fields Pro and WPML for multilingual support. The infrastructure is hosted on rzone.de nameservers, indicating a professional hosting environment. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks explicit security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is accessible, well-structured, and provides relevant cultural content but would benefit from enhanced privacy and security documentation.

E

EVS/ESC Galaxy

evsgalaxy.net

46

EVS/ESC Galaxy is a niche educational platform dedicated to providing resources, brochures, and international training courses for EVS and ESC coordinators. The website serves a specialized audience involved in European voluntary service coordination, offering curated content and tools to support their activities. The business operates primarily in the education and non-profit sectors, with a small organizational size and a founding date consistent with the domain registration in 2017. The site is hosted by WEDOS Internet, a Czech hosting provider, aligning with the regional focus of the content. Technically, the website is built on WordPress with a modern theme and plugins, including jQuery and Page Builder Framework. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. The absence of advanced security headers and DNSSEC indicates room for improvement in security hardening. No analytics or tracking scripts were detected, suggesting minimal user tracking. From a security perspective, the site uses HTTPS with a valid SSL certificate, but lacks security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No contact or incident response information is provided, limiting transparency and user trust. The domain WHOIS data is consistent and legitimate, with no privacy protection or suspicious patterns. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security best practices, and clearer contact information to improve trust and regulatory adherence.

O

on-collect solutions AG

on-collect.de

39

on-collect solutions AG operates a legaltech cloud platform specializing in debt collection and receivables management, primarily serving companies in the energy sector in Germany. The company combines software as a service with consulting and legal expertise to optimize the entire customer lifecycle in receivables management. Their platform integrates seamlessly with ERP systems and offers automated processing, digital file management, and comprehensive reporting. The website positions on-collect as a pioneer in legaltech with over 200 customers using their SaaS solution. Technically, the website is built on WordPress with Elementor and Bootstrap, leveraging modern JavaScript libraries and Matomo for privacy-conscious analytics. The site is mobile-optimized and demonstrates good SEO practices, though some accessibility features could be enhanced. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, but lacks some security headers and formal security policies. Overall, the security posture is good but could be improved by adding explicit privacy and cookie policies, incident response information, and security headers. The domain WHOIS data is consistent with the business claims, supporting legitimacy. No blocking or WAF challenges were detected, allowing full content analysis. Strategic recommendations include enhancing privacy compliance, publishing security and incident response policies, and implementing security headers to strengthen trust and compliance with GDPR and related regulations.

E

e-rechtsanwälte.eu

e-rechtsanwaelte.de

42

e-rechtsanwälte.eu is a specialized legal consultancy firm focusing on energy law, IT law, internet law, and data protection, primarily serving energy suppliers and medium-sized industries in Germany. The website presents a professional image with clear navigation and a modern design, leveraging WordPress with Elementor and Bootstrap frameworks. The firm offers a range of legal services including contract law, insolvency law, and organizational liability. Technically, the site uses HTTPS, Matomo analytics with cookies disabled, and a cookie consent mechanism, indicating a moderate level of digital maturity. However, the absence of a published privacy policy and terms of service pages suggests room for improvement in compliance transparency. Security posture is generally good with no visible vulnerabilities or exposed sensitive data, but the lack of security headers is a minor concern. Overall, the website is trustworthy and professional, though enhancing privacy and security disclosures would strengthen its compliance and user trust.

A

arvenio marketing GmbH

creedle.io

47

creedle.de is a German-based digital platform focused on creating a Christian digital ecosystem called creedle. The platform aims to make Jesus digitally visible by connecting Christians, churches, and seekers through multiple applications (creedlec) integrated into a central search engine. The project started in 2022 with a roadmap to complete the first system version by 2027. The business is positioned as a niche technology provider in the Christian digital content space, supported by arvenio marketing GmbH and partnerships with organizations like the Deutsche Bibelgesellschaft. Technically, the website is built on WordPress using the Avada theme and Fusion Builder, with modern plugins for multilingual support and cookie consent. Security posture is strong with HTTPS and security headers, though privacy and incident response policies are missing. Overall, the site is professional, well-branded, and trustworthy, but could improve compliance documentation and explicit contact information.

F

Fakuma Internationale Fachmesse für Kunststoffverarbeitung

fakuma-messe.de

55

Fakuma is a leading international trade fair specializing in industrial plastics processing, held in Friedrichshafen, Germany. The website provides comprehensive information about the event, including exhibitor and visitor details, news, and multimedia content. The site is professionally designed using WordPress with modern performance optimizations and SEO best practices. The technical infrastructure includes popular plugins such as WP Rocket for caching and Borlabs Cookie for GDPR-compliant cookie consent management. Security posture is solid with HTTPS enforced and some security headers implied, though explicit security policies and incident response contacts are not published. Overall, the website is trustworthy and well-positioned in its niche, serving industry professionals and exhibitors effectively.

M

Motek Messe - Internationale Fachmesse für Produktions- und Montageautomatisierung

motek-messe.de

55

Motek Messe is an established international trade fair organizer specializing in production and assembly automation, hosting events in Stuttgart, Germany. The website serves as a comprehensive platform for exhibitors and visitors, providing detailed event information, ticketing, and industry news. The business holds a strong market position within the manufacturing sector, partnering with related events such as Bondexpo to offer a broad industry platform. Technically, the site is built on WordPress with modern optimization plugins like WP Rocket and Borlabs Cookie for consent management, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although explicit privacy and security policies are missing. Overall, the site demonstrates professionalism and trustworthiness, supported by consistent branding and active social media presence.

P

P. E. Schall GmbH & Co. KG

stanztec-messe.de

53

Stanztec is a specialized trade fair focused on stamping technology, organized by P. E. Schall GmbH & Co. KG in Germany. The event targets industry professionals and exhibitors, providing a platform for showcasing innovations in miniaturization, functional integration, and material efficiency. The website is well-structured, professionally designed, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, it leverages WordPress with modern plugins and caching mechanisms, hosted on Anexia infrastructure. Security posture is strong with HTTPS enforcement and security best practices, though explicit cookie consent and security policies could be improved. Overall, the site is trustworthy, with clear contact information and social media presence, supporting its legitimacy and business credibility.

O

Optatec Internationale Fachmesse für optische Technologien, Komponenten und Systeme

optatec-messe.de

55

Optatec is a well-established international trade fair specializing in optical technologies, components, and systems, held in Frankfurt, Germany. The website serves as a comprehensive platform for exhibitors and visitors, providing detailed information about upcoming events, exhibitor directories, and industry news. The business operates in the manufacturing sector, focusing on photonics and optical technology industries, targeting professionals and companies in these fields. The site is professionally designed with consistent branding and good content quality, supporting its market position as a key industry event. Technically, the website is built on WordPress with a modern tech stack including performance optimizations like WP Rocket and cookie management via Borlabs Cookie. It uses structured data (JSON-LD) for SEO and social media integration, and is hosted on Anexia servers. The site is mobile-optimized and performs well, with good SEO practices implemented. From a security perspective, the site uses HTTPS with good SSL configuration and security headers. Cookie consent is implemented, but explicit privacy policies, terms of service, and incident response information are not found, representing areas for improvement. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, the website is trustworthy and professional, with a strong business credibility score. Strategic recommendations include publishing clear privacy and security policies, adding incident response contacts, and enhancing accessibility features to further improve compliance and user trust.

C

Control Internationale Fachmesse für Qualitätssicherung

control-messe.de

55

Control Internationale Fachmesse für Qualitätssicherung is a leading international trade fair focused on industrial quality assurance technologies, procedures, products, and system solutions. The event is organized by P. E. Schall GmbH & Co. KG and targets professionals and companies involved in quality assurance across manufacturing sectors. The website provides comprehensive information for exhibitors and visitors, including event dates, exhibitor directories, news, and special features. The company maintains a strong market position as a premier platform for quality assurance innovations and networking. Technically, the website is built on WordPress with a modern tech stack including WP Rocket for performance optimization, Borlabs Cookie for consent management, and Slider Revolution for dynamic content. The site is hosted on Anexia servers, uses HTTPS with excellent SSL configuration, and is mobile-optimized with good SEO practices. The presence of structured data and multilingual support enhances its digital maturity. From a security perspective, the site enforces HTTPS, implements cookie consent, and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and some security headers. No vulnerabilities or suspicious activities were detected. Privacy compliance is partial, with cookie consent but no explicit privacy or terms of service pages found in the analyzed content. Overall, the website is professional, trustworthy, and well-maintained, serving its business purpose effectively. Strategic improvements in privacy documentation and security transparency would enhance its compliance and trustworthiness further.

E

ELBE DECKEN

elbedecken.de

37

ELBE Decken is a specialized German manufacturer and supplier of prestressed concrete floor slabs, operating under the umbrella of Heidelberg Materials, a major global construction materials company. The company offers a broad product range and comprehensive services including manufacturing, delivery, consulting, planning, and project support. Their market position is strong within Germany, targeting construction professionals such as builders, architects, and investors. The website reflects a professional and well-branded digital presence with clear navigation and relevant content tailored to their audience. Technically, the site is built on WordPress with modern plugins and themes, optimized for SEO and mobile use, and hosted by Goneo. Security measures include HTTPS, Google reCAPTCHA, and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the site is trustworthy, compliant with GDPR, and provides sufficient contact and business information.

J

Jochum Betonpumpen GmbH

jochum-betonpumpen.de

59

Jochum Betonpumpen GmbH is a German-based company specializing in concrete pumping services, offering a range of solutions including mobile stationary pumps, truck mixers, and scalable conveyor belts. The company targets construction firms and contractors, emphasizing punctuality, reliability, and flexible service delivery. The website reflects a mature digital presence built on WordPress with modern plugins and a clear focus on user experience and GDPR compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response policies are absent. Overall, the site is professional and trustworthy, supporting the company's established market position.

H

Himmlische Herbergen e.V.

himmlische-herbergen.de

50

Himmlische Herbergen e.V. operates a well-established online platform dedicated to Christian group accommodations across Germany and parts of Europe. The website offers a comprehensive search and filter system for various types of guesthouses, hotels, and self-catering accommodations, targeting Christian groups, families, youth groups, and seminar attendees. The organization positions itself as a niche leader in the hospitality sector with a strong non-profit orientation and a focus on community and spiritual hospitality. Technically, the website is built on WordPress 6.8.3 with modern plugins such as Borlabs Cookie for privacy compliance and Instagram Feed integration for social engagement. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, and the site maintains comprehensive privacy and cookie policies aligned with GDPR requirements. The absence of direct contact emails or phone numbers suggests reliance on contact forms and social media channels for communication. Overall, the site reflects a mature digital presence with strong trust indicators and professional content. Strategically, the organization should focus on enhancing security headers, expanding direct contact options, and continuing to maintain compliance and transparency to strengthen user trust and operational resilience.

The website www.informationsportal.de is an official information portal operated by ITSG GmbH, providing comprehensive guidance to employers in Germany about their social security reporting obligations. It serves as a government-related resource offering question-answer catalogs, glossaries, brief profiles, and a document library to assist employers in compliance. The portal targets German employers and is positioned as a niche authoritative source in the social security domain. Technically, the site is built on WordPress with modern plugins such as Yoast SEO Premium and Borlabs Cookie for privacy compliance. It uses Matomo for analytics, ensuring user data is anonymized and GDPR compliant. The site is well-structured, mobile-optimized, and employs HTTPS with appropriate security headers, although some advanced headers could be added for enhanced security. No direct contact emails or phone numbers are published; contact is primarily via a form. No explicit security or incident response policies are published, which could be improved. Overall, the site demonstrates a good security posture, strong privacy compliance, and professional content quality, making it a trustworthy resource for its audience.

E

Elementare Vielfalt

periodensystem.de

47

The website www.periodensystem.de is a specialized educational platform offering a free interactive periodic table of elements aimed at students and professionals in chemistry-related fields. It is positioned as a niche resource within the German education sector, providing accessible and app-free learning tools. The site is powered by TYPO3 CMS and leverages modern JavaScript libraries to enhance user experience. Hosting is provided by SchlundTech, a reputable German hosting provider, ensuring reliable infrastructure. The site demonstrates good technical maturity with responsive design and SEO optimization. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent managed via Usercentrics, although some security headers are missing and no explicit security policies or incident response contacts are provided. Overall, the site is trustworthy, safe, and professionally maintained, with room for improvement in transparency and security documentation.

E

EKS Beton

eks-beton.de

54

EKS Beton is a well-established German company specializing in the production and delivery of high-quality concrete products. With over four decades of experience, it operates multiple strategically located concrete plants in the Frankfurt region and offers a mobile concrete plant service to meet diverse construction needs. The company emphasizes quality, reliability, sustainability, and customer convenience, including a dedicated ordering app. Technically, the website is built on WordPress with modern plugins and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the site reflects a professional and trustworthy business with clear contact information and partner affiliations.

U

Unternehmensgruppe Glöckle

gloeckle-bau.de

63

Unternehmensgruppe Glöckle is a well-established German construction and real estate company founded in 1908, offering comprehensive services from project development to turnkey construction and sales. The company targets both residential and commercial clients, positioning itself as a full-service provider in the construction sector with a strong regional presence. The website reflects a professional and consistent brand image, with good content quality and clear navigation tailored to its audience. Technically, the site is built on WordPress with modern plugins for SEO, forms, and GDPR compliance, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. Overall, the site is trustworthy and business credible, though improvements in privacy policy visibility and security disclosures are recommended.

A

Amodes GmbH

amodes.de

50

Amodes GmbH is a specialized small business based in Germany focusing on advanced mobile desludging and ecological water body services. Their offerings include mobile sludge dewatering, ecological water services, equipment rental, and other related environmental solutions. The company targets municipalities and environmental service providers seeking efficient and eco-friendly sludge treatment solutions. The website is professionally designed using WordPress with the Enfold theme and integrates SEO and cookie consent plugins, reflecting a moderate to high level of digital maturity. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are absent. Overall, the site is trustworthy and business-appropriate with clear contact details and customer references.

CDM Smith is a large, employee-owned professional engineering and construction firm specializing in environmental, infrastructure, energy, and transportation sectors. The company emphasizes delivering smart solutions and legendary service to clients globally. Their website reflects a mature digital presence with comprehensive service descriptions, employee testimonials, and a strong focus on sustainability and innovation. Technically, the site uses modern web technologies including jQuery, Moment.js, Google reCAPTCHA, and Adobe Experience Platform integrations, with Sitecore CMS underpinning content management. Security posture is strong with HTTPS enforced, secure forms, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. The absence of WHOIS data is a minor concern but does not detract significantly from the site's legitimacy given the professional presentation and consistent branding. Overall, the website is well-designed, accessible, and trustworthy, supporting CDM Smith's market position as a reputable engineering services provider.

B

Betriebs-Berater

betriebs-berater.com

50

Betriebs-Berater is a German professional publication specializing in tax, business law, accounting, and labor law content targeted at tax advisors, accountants, and legal professionals. The website offers newsletters, articles, and event information, operating under a subscription-based model. It is likely owned or affiliated with Rudolf Müller Verlag GmbH, as indicated by multiple links to ruw.de, a known publishing group. The site is well-branded and consistent, with a professional design and good content quality.

Z

ZENIT - English

zenit.org

60

ZENIT is a well-established religious news agency providing multilingual coverage of Catholic Church affairs and related religious topics. Founded in 1997, it operates as a non-profit media organization funded primarily through reader donations. The website offers news articles, documents, and newsletters targeting a general audience interested in religious news. Technically, the site is built on WordPress with modern plugins and frameworks such as Yoast SEO, Bootstrap, and integrates Google Analytics, Tag Manager, and HubSpot for marketing and analytics. The site is hosted behind Cloudflare, ensuring good performance and security. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks DNSSEC and explicit security policies or incident response information. Privacy compliance is basic with cookie consent implemented via Iubenda. Overall, the website is professional, trustworthy, and serves its niche effectively, though improvements in security transparency and DNS security are recommended.

H

HBS IT GmbH

hbs-it-gmbh.de

54

HBS IT GmbH is a professional IT services company based in Germany, specializing in digital transformation, IT infrastructure, Industrial Internet of Things (IIOT), and web development. The company targets businesses seeking tailored IT solutions to support their digital future. Their market position is that of a regional expert with a focus on delivering customized and transparent IT services. The website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the website is built on WordPress with Elementor and optimized using WP Rocket. It employs modern web technologies including jQuery and Font Awesome, hosted on servers associated with rzone.de. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be improved. Performance is moderate, supported by caching and lazy loading techniques. From a security perspective, the site enforces HTTPS and includes security headers, although explicit security policies and incident response information are not published. Cookie consent is managed via Borlabs Cookie, indicating GDPR compliance. No critical vulnerabilities or security issues were detected in the analysis. The domain WHOIS data aligns with the website's geographic and business claims, supporting legitimacy. Overall, HBS IT GmbH presents a trustworthy and professional online presence with solid technical and privacy compliance foundations. Strategic improvements could include publishing detailed security policies, enhancing accessibility, and adding a vulnerability disclosure mechanism.

M

Magistrat der Stadt Hanau

demokratie-leben-hanau.de

48

The website www.demokratie-leben-hanau.de represents a government-affiliated non-profit partnership focused on promoting democracy, diversity, and tolerance in Hanau, Germany. It serves as a platform to coordinate local civil society actors, government bodies, and political stakeholders to foster community engagement and support projects aligned with these values. The site provides comprehensive information on funding opportunities, ongoing projects, events, and contact details, reflecting a well-structured and community-oriented business model. Technically, the website is built on Joomla CMS with modern frontend technologies such as Bootstrap 5 and jQuery, ensuring responsive design and moderate performance. Hosting is provided by SchlundTech, a reputable German hosting provider. The site employs HTTPS with a valid SSL configuration and includes CSRF tokens in forms, indicating attention to security best practices. However, some HTTP security headers appear to be missing, which could be improved. From a security and compliance perspective, the site demonstrates good GDPR compliance with clear privacy and cookie policies and consent mechanisms. Contact information is transparent and professional, but there is no explicit security policy or incident response information available. No vulnerabilities or suspicious content were detected, and the site maintains a safe content rating suitable for general audiences. Overall, the website is trustworthy, professionally maintained, and fulfills its role as a local government and civil society communication platform. Strategic recommendations include enhancing security headers, adding explicit security policies, and maintaining up-to-date software to further strengthen its security posture.

P

Penta-Tec

penta-tec.com

48

Penta-Tec is a specialized provider of CNC control software and hardware solutions, offering an all-in-one CAD, CAM, and CNC machine operation package tailored for machine and plant builders in the CNC sector. The company targets both beginners and professionals, emphasizing flexibility and ease of use. Their market position is that of a niche player with over 25 years of expertise, providing customized solutions that balance standardization and individualization. The website reflects a professional and consistent brand image with clear contact information and GDPR-compliant privacy practices. Technically, the website is built on WordPress with a modern theme and plugins, including Yoast SEO and Google Analytics integration with IP anonymization. The site is mobile-optimized and performs moderately well, though some accessibility features could be improved. Security-wise, HTTPS is enforced, and basic best practices are followed, but explicit security headers and incident response information are lacking. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is missing or indicates the domain may not be registered, which raises concerns about domain legitimacy despite the professional website presence. No WAF or blocking mechanisms are detected, and the site content is safe for general audiences. Overall, the website scores well in content quality and privacy compliance but is penalized for missing WHOIS data and incomplete security disclosures. Strategic recommendations include verifying domain registration, enhancing security headers, publishing incident response and vulnerability disclosure policies, and improving accessibility compliance to strengthen trust and security posture.

R

RAKETEN CREATIVE

raketen.info

60

RAKETEN CREATIVE is a small German web development company specializing in creating small to medium-sized websites, webshops, and web applications. The company emphasizes reliability, modern technology, and a customer-friendly approach, serving both direct clients and white-label customers. Their portfolio showcases diverse projects, indicating a focus on creative and professional web solutions. Technically, the website is built on WordPress with the Avada theme and uses popular plugins such as Slider Revolution and WP Rocket, indicating a mature digital infrastructure with good performance and mobile optimization. Security-wise, the site uses HTTPS and obfuscates email addresses to reduce spam, but lacks published privacy and cookie policies, and no advanced security headers were detected. The WHOIS data is malformed and unavailable, which limits domain trust verification, but the website content and contact information suggest a legitimate business. Overall, the site is professional and functional but would benefit from improved privacy compliance and security transparency.

B

Bundesforum Lernort Bauernhof

forum-lernort-bauernhof.de

49

The Bundesforum Lernort Bauernhof is a German nationwide non-profit network established in 2006 that coordinates organizations, associations, ministries, and individuals dedicated to farm-based educational initiatives. The website serves as an information hub promoting the farm as an experiential learning environment, emphasizing sustainable development education for children and youth. The organization focuses on networking, material development, certification, and advocacy to integrate farm education into school curricula across Germany. Technically, the website is built on WordPress with the Divi theme and uses modern web technologies including jQuery and Font Awesome. It features a cookie consent mechanism but lacks a dedicated privacy policy page and explicit contact information. Security posture is generally good with HTTPS enabled, but security headers are not evident and no vulnerability disclosure or incident response information is provided. WHOIS data for the domain is missing, which raises concerns about domain registration transparency and trustworthiness. Overall, the site is professional and content-rich but would benefit from improved privacy and security disclosures.

I

i.m.a - information.medien.agrar e.V.

ima-shop.de

59

The website ima-shop.de operates as an online shop for i.m.a - information.medien.agrar e.V., a non-profit organization providing educational materials related to agriculture, nature, and nutrition. The platform targets educators, farmers, and consumers, offering a range of informational media and teaching resources. The business model is focused on e-commerce distribution of educational content, positioning itself as a niche provider in the agricultural education sector within Germany. The site demonstrates consistent branding and good content quality aligned with its mission.

B

BirdLife Norge

fuglevennen.no

61

Fuglevennen.no is a Norwegian non-profit website dedicated to birdwatching, nature education, and conservation. It is a collaborative effort primarily published by BirdLife Norge and supported by academic institutions such as the Naturmuseum og botanisk hage ved UiA and Skolelaboratoriet i realfag ved UiB. The site offers bird species information, community activities, a biannual magazine, and educational resources targeting nature enthusiasts and the general public interested in ornithology. The website is well-branded, content-rich, and maintains a consistent professional appearance aligned with its mission. Technically, the website uses a modern technology stack including jQuery, Bootstrap, Font Awesome, and Matomo analytics configured to disable cookies, reflecting a moderate level of digital maturity and privacy awareness. The site is mobile-optimized, accessible, and provides a good user experience with clear navigation and relevant content. However, there is no detected CMS or hosting provider information, and performance is moderate. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or security policies beyond a basic cookie policy. No forms appear to collect sensitive personal data except for login and question submission forms. The absence of WHOIS data for the domain is a notable concern, reducing the trustworthiness score, although the strong organizational affiliations mitigate this somewhat. There are no signs of vulnerabilities or malicious content. Overall, Fuglevennen.no presents a trustworthy and professional platform for birdwatching and nature education in Norway, but it would benefit from enhanced security headers, clearer privacy compliance measures, and verification of domain registration details to improve trust and compliance.

E

EZV Energie- und Service GmbH & Co. KG Untermain

ezv-energie.de

45

EZV Energie- und Service GmbH & Co. KG Untermain is a regional energy and telecommunications provider based in Germany, specializing in supplying 100% green electricity, broadband internet, telephony, and e-mobility solutions. The company emphasizes local renewable energy generation including photovoltaic, wind, and hydropower, targeting private and business customers in the Untermain region. Their business model focuses on direct customer engagement supported by online services and regional partnerships. The website reflects a medium-sized enterprise with consistent branding and good content quality.

I

intolight

intolight.de

65

Intolight is a specialized creative agency based in Germany, focused on designing and implementing interactive installations and exhibitions for clients including museums, events, and trade shows. The company positions itself as a niche player with expertise in immersive and interactive digital experiences, supported by a portfolio of notable clients such as Netflix and Thyssenkrupp. Technically, the website is built on WordPress using the Avada theme and several modern plugins, demonstrating a mature digital infrastructure with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent managed via Borlabs Cookie, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, reflecting a well-managed digital presence for a small but important business in the creative technology sector.

U

ULMATEC GmbH

ulmatec.de

47

ULMATEC GmbH operates a professional website focused on modular extraction and filtration systems for industrial applications. The company positions itself as a specialized provider in the manufacturing sector, offering tailored solutions to business clients. The website is built on a modern WordPress CMS with Elementor page builder and includes multiple marketing and analytics integrations, indicating a mature digital presence. However, the WHOIS data for the domain www.ulmatec.com is missing or indicates the domain is not registered, which raises concerns about domain legitimacy despite the professional appearance of the site. Security posture is moderate with HTTPS enabled but lacks visible security headers and formal privacy or cookie policies. Overall, the website is safe and professional but would benefit from improved transparency and domain registration verification.

M

Messer Medical

messermedical.hu

42

Messer Medical is a Hungarian healthcare service provider specializing in oxygen therapy and sleep therapy equipment and services. The company targets patients with chronic oxygen deficiency and medical professionals requiring high-quality therapeutic devices. The website reflects a medium-sized business with a national presence, supported by contracts with the National Health Insurance Fund of Hungary since 2004. The site uses WordPress with a professional theme and common plugins, providing a good user experience and mobile optimization. However, it lacks critical privacy and cookie policies, which impacts compliance and user trust. Security posture is moderate with HTTPS enabled but missing security headers and incident response contacts. Overall, the website is professional and trustworthy but requires improvements in privacy compliance and security best practices.

S

Stiftung Gesundheit

arzt-auskunft.de

57

Stiftung Gesundheit operates the Arzt-Auskunft platform, a comprehensive German healthcare provider search service established in 1997. The platform enables patients to find doctors, clinics, therapists, and pharmacies nearby, offering features such as online appointment booking and information on barrier-free practices. The website is well-positioned in the German healthcare information market with a large user base and a strong reputation as a non-profit entity. Technically, the website employs modern frontend technologies including Vue.js, Bootstrap, jQuery, and Choices.js, ensuring a responsive and user-friendly experience across devices. Hosting is managed via Schlundtech, a reputable provider. The site demonstrates good SEO and accessibility practices, though performance is moderate. From a security perspective, the site uses HTTPS and deferred script loading, but lacks explicit security headers and a visible security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive GDPR-compliant privacy policy, though no cookie consent mechanism was observed. Overall, the website presents a low-risk profile with high trustworthiness and professionalism. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing incident response details to further strengthen security posture and compliance.

B

Blechexpo Internationale Fachmesse für Blechbearbeitung

blechexpo-messe.de

55

Blechexpo is a leading international trade fair specializing in sheet metal processing and related joining technologies, held in Stuttgart, Germany. The website serves as a professional platform to provide information about upcoming events, exhibitor details, and industry news. It targets professionals and companies within the manufacturing sector, particularly those involved in cold forming, cutting, joining, and related technologies. The business model revolves around organizing and hosting trade fairs that facilitate industry networking and innovation showcasing. Technically, the website is built on WordPress with a modern tech stack including jQuery, WP Rocket for performance optimization, Borlabs Cookie for consent management, and WPML for multilingual support. The site demonstrates excellent mobile optimization, SEO practices, and fast performance, indicating a mature digital infrastructure. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms. However, it lacks explicit published privacy policies, terms of service, and security incident response information, which are important for compliance and trust. No critical vulnerabilities or WAF blocking were detected, and no sensitive data exposure was found. Overall, the website is professional, trustworthy, and well-maintained, but could improve privacy and security transparency by publishing relevant policies and contact points. Strategic recommendations include adding privacy and terms pages, publishing security policies, and enhancing security headers to further strengthen trust and compliance.

E

Effektus AS

styreweb.com

58

StyreWeb, delivered by Effektus AS, is a Norwegian SaaS provider specializing in comprehensive IT solutions for membership organizations and associations. The company offers a robust platform including membership registers, accounting, event management, newsletters, integrated websites, GDPR compliance tools, and mobile applications. With a strong market presence since 2006 and thousands of customers, StyreWeb positions itself as a trusted partner for simplifying association management. The website reflects a professional and user-friendly design with clear navigation and extensive customer testimonials, reinforcing its credibility in the Norwegian market. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and integrates Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing. Cookie consent is managed via CookieYes, indicating attention to privacy compliance. The site is mobile-optimized and SEO-friendly, leveraging Yoast SEO plugin and structured data for enhanced search visibility. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses consent mechanisms but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy, which impacts overall trustworthiness despite the professional presentation. Overall, StyreWeb demonstrates a mature digital presence with strong business credibility and privacy compliance but should address domain registration transparency and enhance security policies to improve trust and resilience against potential threats.

T

Textilfabrik 7.0

t7-management.de

40

Textilfabrik 7.0 is a collaborative German textile industry project focused on developing sustainable, future-proof textile production technologies and infrastructure in Mönchengladbach. It is supported by research institutes and industry associations, aiming to create jobs and advance digital and sustainable manufacturing methods. The website is built on WordPress with a modern theme and standard libraries, showing moderate technical maturity and good content quality. Security posture is adequate with HTTPS but lacks advanced security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced compliance and security practices.

A

AI dětem, z.s.

tiny.school

42

Tiny is a Czech non-profit educational AI application developed by AI dětem, z.s., designed to assist teachers with formative assessment and provide personalized mentoring to children. The platform offers individualized feedback and tailored educational content, primarily targeting primary and secondary school students and educators. Supported by academic institutions such as ČVUT and Univerzita Karlova, and funded in part by Google.org Impact Challenge, Tiny positions itself as an innovative AI-driven educational tool in the Czech and Slovak markets. The business model focuses on pilot school partnerships and content collaboration to expand its offerings. Technically, Tiny is built on a modern WordPress CMS with Elementor and integrates various JavaScript libraries and Google Analytics for tracking. The website is well-structured, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. However, some security best practices such as security headers and cookie consent mechanisms are missing, which could be improved to enhance user trust and compliance. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. The lack of visible security policies and incident response information suggests room for improvement in transparency and readiness. WHOIS data is unavailable due to TLD registry restrictions, but the website content and affiliations indicate legitimacy and trustworthiness. Overall, Tiny demonstrates a strong educational mission with solid technical implementation and good business credibility. Strategic enhancements in security policies, privacy compliance, and incident response transparency would further strengthen its position and user confidence.

C

Chatboti ve škole

chatveskole.cz

43

Chatboti ve škole is a Czech non-profit educational platform launched in 2024, providing a practical database of AI chatbot prompts and AI assistants tailored for educators and students. The website offers comprehensive guides, methodological materials, and a curated collection of AI assistants to support teaching and learning processes. It targets educators, school leadership, and students aged 13 and above, aiming to facilitate the integration of AI technologies in education to save teachers' time and enhance students' critical thinking skills. The platform also promotes responsible AI use with legal and ethical considerations. Technically, the website is built on WordPress with Elementor and Yoast SEO, ensuring good SEO and mobile responsiveness. It uses modern web technologies and integrates Google Analytics for user insights. Security-wise, the site uses HTTPS with a good SSL configuration but lacks explicit security headers and published security policies. Privacy compliance is partial, with no visible privacy or cookie policies on the main page. The domain registration is consistent with the business purpose and geographic focus, registered with a reputable Czech registrar in 2024. Overall, the site is professional, content-rich, and trustworthy, but could improve privacy and security transparency.

V

Verband der Ersatzkassen e.V. (vdek)

vdek-kliniklotse.de

70

The vdek-Kliniklotse website is an official healthcare information portal operated by the Verband der Ersatzkassen e.V. (vdek), providing a comprehensive search platform for hospitals across Germany. It leverages official quality reports to offer patients and their families detailed information about hospital services, specialties, and quality metrics. The site also offers additional resources such as checklists for hospital stays and links to related vdek services like care and doctor locators. The target audience is primarily German-speaking patients seeking reliable healthcare information. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, and FontAwesome, ensuring good mobile responsiveness and accessibility. It uses Matomo analytics with user consent, reflecting a privacy-conscious approach. The site is well-structured with clear navigation and professional design, although no CMS or hosting provider details are explicitly identified. From a security perspective, the site uses HTTPS and implements a detailed cookie consent mechanism with categories for necessary and statistical cookies. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data indicates a consistent and legitimate domain registration aligned with the business entity. Overall, the website presents a trustworthy, professional, and privacy-compliant platform with good content quality and technical implementation. Strategic improvements could include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and compliance.

V

Verband der Ersatzkassen e. V. (vdek)

gesunde-lebenswelten.com

43

Gesunde Lebenswelten is a professional health promotion initiative operated by the Verband der Ersatzkassen e. V. (vdek), representing six major German statutory health insurance funds. The website serves as a platform to present and support various health promotion and prevention projects targeting vulnerable groups such as residents and staff of care homes, people with disabilities, migrants, families, and older adults. The organization positions itself as a leading non-profit entity in the healthcare sector in Germany, focusing on sustainable health equity and community-based interventions. Technically, the website is built on WordPress with the Avada theme and uses modern plugins like Yoast SEO and Matomo for analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security best practices like explicit security policies and incident response contacts are missing. The WHOIS data is notably absent, which raises some concerns about domain registration transparency. However, the professional content, consistent branding, and affiliation with a reputable organization mitigate these concerns. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements. Strategic recommendations include publishing a dedicated security policy, providing incident response contact details, and adding a vulnerability disclosure mechanism to enhance transparency and trust further.

S

SAGS ONLINE Webagentur Bayreuth

sags-online.de

57

SAGS ONLINE Webagentur Bayreuth is a specialized digital agency based in Bayreuth, Germany, with over 20 years of experience in online marketing, SEO, web design, and consulting services. The company positions itself as a primary provider of online services with a strong track record managing significant online marketing budgets. The website is built on WordPress with modern plugins and a premium theme, offering a professional and content-rich user experience. While the site is well-structured and optimized for SEO, it lacks explicit privacy and terms of service pages, which are important for compliance. Security posture is moderate with HTTPS enabled but missing security headers and direct contact details. Overall, the website is trustworthy and professional, serving a business audience primarily in Germany and expanding to Europe and the USA.

T

Tugra Tobacco GmbH & Co. KG

tugratobacco.de

47

Tugra Tobacco GmbH & Co. KG operates a professional e-commerce platform specializing in shisha, tobacco, and vape products, serving both retail customers and wholesale clients primarily in Germany. The website demonstrates a solid market position within the niche tobacco retail and wholesale sector, offering a broad range of products including shisha water pipes, tobacco, charcoal, and accessories. The business model focuses on online sales with a clear emphasis on serving both end consumers and business customers (Händler). The site content is well-structured, with comprehensive product categories and a user-friendly interface. Technically, the website leverages a modern technology stack including jQuery, Bootstrap, and the JTL-Shop CMS platform. It integrates third-party services such as Doofinder for search functionality, Mondu for payment processing, and Google Analytics 4 for user behavior tracking, all implemented with privacy considerations such as IP anonymization and consent management. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS with good SSL configuration and includes standard security headers. There is no evidence of exposed sensitive data or vulnerable libraries. However, the absence of a publicly available security policy or incident response information suggests room for improvement in transparency and preparedness. Privacy compliance is strong, with clear privacy and cookie policies and active consent mechanisms. Overall, the website presents a trustworthy and professional front for the business, with no signs of malicious activity or blocking by security mechanisms. The main recommendations include publishing a formal security policy, adding vulnerability disclosure information, enhancing accessibility features, and maintaining vigilance on third-party script security to further strengthen the security posture and user trust.