Security Directory

C

Chemische und Veterinäruntersuchungsämter (CVUA) Stuttgart

cvuas.de

61

The website www.cvuas.de serves as an official information portal for the Chemische und Veterinäruntersuchungsämter (CVUA) Stuttgart and associated government veterinary and chemical testing authorities in Baden-Württemberg, Germany. It provides comprehensive information on food safety, veterinary diagnostics, pesticide monitoring, and related public health services. The site targets a broad audience including consumers, professionals, and government stakeholders, positioning itself as a trusted regional government entity with a strong focus on consumer protection and animal health. Technically, the website employs standard web technologies including HTML, CSS, JavaScript, and Font Awesome icons. It uses HTTPS with a basic Content Security Policy to secure form actions. The site shows moderate performance and basic mobile optimization, with clear navigation and good content relevance. However, it lacks advanced security headers and cookie consent mechanisms, which are recommended for enhanced security and privacy compliance. From a security perspective, the site demonstrates a good baseline with HTTPS and CSP but could improve by implementing additional security headers and publishing incident response and vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is a professional, trustworthy government portal with good content quality and business credibility. Strategic improvements in security headers, privacy compliance, and mobile optimization would enhance its security posture and user trust.

M

Ministerium für Ernährung, Ländlichen Raum und Verbraucherschutz Baden-Württemberg

verbraucherinfo-bw.de

63

The website 'verbraucherinfo-bw.de' is an official consumer information portal managed by the Ministry of Food, Rural Areas and Consumer Protection of Baden-Württemberg, Germany. It provides statutory information on food and feed safety, including official control results and regulatory updates. The site targets consumers within the Baden-Württemberg region, offering transparency and compliance with legal obligations under German and EU law. The business model is public service and government information dissemination, with a medium-sized scope consistent with regional government operations. Technically, the site employs a modern JavaScript stack including jQuery and jQuery UI, with privacy-conscious analytics via Matomo. The hosting and DNS infrastructure appear stable and government-affiliated. The site is mobile-optimized and accessible, with good SEO basics and consistent branding. Performance is moderate but acceptable for a government portal. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms aligned with GDPR. However, explicit security headers are not detected, and no published security or incident response policies are found. No vulnerabilities or exposed sensitive data were identified in the HTML content. The privacy policy and cookie policy are comprehensive and GDPR compliant. Overall, the site presents a low-risk profile with strong trust indicators typical of government portals. Recommendations include enhancing security headers, publishing incident response information, and adding explicit contact details for security and data protection officers to improve transparency and compliance.

U

Untersuchungsämter-BW

ua-bw.de

62

The website www.ua-bw.de serves as the official information portal for the Untersuchungsämter-BW, a consortium of chemical and veterinary investigation offices in Baden-Württemberg, Germany. It provides authoritative information on food safety, animal health, and related regulatory activities, targeting both the general public and professionals. The portal features news updates, reports, job postings, and educational resources, positioning itself as a trusted government source in the region. Technically, the site employs standard web technologies including HTML, CSS, JavaScript, and Font Awesome icons. The design is professional and consistent, with clear navigation and categorized content. However, mobile optimization and accessibility are basic, and no modern CMS or advanced frameworks are detected. Performance is moderate, with no evident analytics or tracking scripts, indicating a privacy-conscious approach. From a security perspective, the site uses a Content-Security-Policy header restricting form actions to the same origin, which is a positive measure. However, other common security headers are missing, and HTTPS enforcement status is unclear from the data. There is no visible cookie consent mechanism or detailed privacy policy on the main page, which may present compliance risks under GDPR. No incident response or vulnerability disclosure information is provided. Overall, the website is a credible and authoritative government portal with good content quality and business credibility. Security and privacy compliance could be improved by implementing comprehensive security headers, HTTPS enforcement, cookie consent, and explicit privacy documentation. These enhancements would strengthen trust and regulatory adherence.

V

Verbraucherzentrale Baden-Württemberg

vz-bawue.de

59

Verbraucherzentrale Baden-Württemberg is a well-established regional consumer protection organization providing independent advice, information, and advocacy services to consumers in Baden-Württemberg, Germany. The website serves as a comprehensive portal offering educational content, consultation services, project information, and access to various consumer-related resources. It targets a broad audience including consumers, students, parents, seniors, and refugees. The organization positions itself as a trusted non-profit entity with a strong regional presence and multiple service offerings.

V

Verbraucherkommission Baden-Württemberg

verbraucherkommission.de

62

The Verbraucherkommission Baden-Württemberg is an official independent expert commission advising the Baden-Württemberg state government on consumer policy matters. Founded in 2005, it focuses on topics such as data protection, digital consumer protection, energy, finance, and agriculture. The website serves as an information portal for consumers and policymakers, providing updates, background information, and recommendations. Technically, the site uses a government-specific CMS with modern JavaScript libraries and Matomo analytics, hosted likely by a state IT provider. Security posture is generally good with HTTPS and cookie consent, but the presence of a 500 internal server error on the main content page indicates backend issues that need resolution. No direct contact emails or phone numbers are publicly listed, and no explicit security or incident response policies are found. Overall, the domain registration and website content are consistent and legitimate, reflecting a trustworthy government entity.

V

Verbraucherzentrale

fakeshop-finder.de

60

Verbraucherzentrale.de operates as a leading German consumer protection organization providing educational resources and tools such as the Fakeshop-Finder to help consumers identify fraudulent online shops. The website is well-structured, professionally designed, and targets German consumers seeking trustworthy information on online shopping safety. Technically, the site is built on Drupal 10 with modern JavaScript libraries and integrates Matomo analytics for user tracking while maintaining GDPR compliance through clear privacy and cookie policies. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. WHOIS data is minimal but the strong branding and government affiliation support legitimacy. Overall, the site is a trustworthy, high-quality resource for consumer protection.

M

MEHRWERK GmbH

mehrwerk.net

57

MEHRWERK GmbH is a German-based technology company specializing in software-based business process optimization, with a strong focus on process mining and data analytics. The company positions itself as a reliable partner for businesses seeking to enhance operational efficiency through advanced analytics and business intelligence solutions. Their website reflects a professional B2B service model, targeting corporate clients interested in digital transformation and process improvement. The company maintains an active digital presence with multiple social media channels and promotes related partner platforms such as mpmX for process mining.

L

Lasten ja nuorten säätiö

nuori.fi

71

Lasten ja nuorten säätiö is a Finnish non-profit foundation dedicated to strengthening the future confidence of children and youth across Finland. Established in 2011, the foundation operates nationwide and reaches tens of thousands of young people annually through various support and educational programs. The website reflects a professional and consistent brand image, providing clear information about its mission, donation methods, and multilingual support. Technically, the site is built on WordPress with modern web technologies including jQuery and Google Tag Manager, hosted on infrastructure inferred from its nameservers. Security posture is solid with HTTPS enforced and standard security headers present, though DNSSEC is not implemented and no explicit incident response contacts or vulnerability disclosure policies are published. Privacy compliance is well addressed with comprehensive privacy and cookie policies and GDPR adherence. Overall, the domain registration data aligns well with the organization's identity, enhancing trust and legitimacy.

K

KölnTourismus GmbH

koelntourismus.de

61

KölnTourismus GmbH operates as the official tourism organization for the city of Cologne, Germany, providing comprehensive visitor information, event promotion, and cultural guidance. The website serves tourists and visitors with relevant content about sightseeing, museums, and local events, positioning itself as a trusted and authoritative source for tourism in the region. The business model focuses on promoting the city's attractions and facilitating visitor engagement. Technically, the website is built on TYPO3 CMS, a robust and widely used content management system, hosted on Schlund Technologies infrastructure. The site demonstrates good mobile optimization, accessibility, and SEO practices. Cookie consent is managed via Cookiebot, indicating compliance with GDPR requirements. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses a consent management platform, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious content were detected. The domain registration data aligns well with the website's claims, supporting legitimacy. Overall, the website presents a professional and trustworthy front for KölnTourismus, with minor gaps in privacy and security documentation. Strategic improvements in security headers, privacy policy publication, and incident response transparency would enhance the site's security posture and compliance standing.

S

Stadtportal koeln.de

koeln.de

65

The website www.koeln.de serves as the official city portal for Cologne, Germany, providing comprehensive information about the city, including events, sightseeing, and leisure activities. It targets residents and visitors, positioning itself as a trusted government-related information hub. The site employs a modern WordPress CMS infrastructure with popular plugins such as Rank Math SEO and Cookiebot for privacy compliance. Hosting appears to be regional, consistent with the domain's geographic focus. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers and policies could be improved. No critical vulnerabilities or blocking mechanisms were detected, and the site maintains a professional and trustworthy appearance suitable for its audience.

S

Stadtentwässerungsbetriebe Köln, AöR

steb-koeln.de

58

Stadtentwässerungsbetriebe Köln, AöR is a municipal water management and wastewater service provider operating in Cologne, Germany. The organization focuses on wastewater treatment, flood protection, and environmental water body maintenance, serving a broad audience including residents, property owners, and job seekers. Their market position is that of a key public service entity with a medium-sized operational scale. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its target groups. Technically, the website employs modern web technologies including React, jQuery, and Matomo analytics, complemented by a robust consent management platform (Usercentrics) ensuring GDPR compliance. Hosting appears stable with reputable nameservers. The site is mobile-optimized and uses HTTPS with good security practices, although some security headers could be improved. From a security perspective, the site demonstrates a solid posture with encrypted connections, privacy-focused analytics, and cookie consent mechanisms. However, it lacks explicit security policies and incident response contacts, which could enhance trust and preparedness. No vulnerabilities or suspicious elements were detected in the content or WHOIS data. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It effectively supports the organization's mission and public service role, with recommendations to enhance security headers and publish formal security policies for further maturity.

S

Stadt Frankfurt am Main

deinhausderdemokratie.de

65

The website deinhausderdemokratie.de is an official government platform operated by the Stadt Frankfurt am Main to promote the Haus der Demokratie project near the Paulskirche. It serves as an information and citizen participation portal, offering educational content, event information, and opportunities for public engagement in democratic processes. The site targets a broad audience including underrepresented groups, emphasizing inclusivity and accessibility. Technically, the site is built on modern frameworks such as Next.js and uses AWS infrastructure, ensuring good performance and scalability. Security practices include HTTPS enforcement, session management, and user content moderation, though explicit security headers and incident response policies could be improved. Privacy compliance is strong with GDPR adherence, cookie consent, and transparent data handling. Overall, the site is professional, trustworthy, and well-aligned with its civic mission.

M

mainziel.de

mainziel.de

56

mainziel.de is an official municipal traffic and mobility information platform for Frankfurt am Main, providing comprehensive multimodal transport data including live public transport, bicycle routes, parking, and event-related traffic updates. The platform is built on TYPO3 CMS and uses modern web technologies such as jQuery, OpenLayers, and Matomo analytics configured with privacy protections. The website is well-designed, mobile-optimized, and offers a good user experience with clear navigation and relevant content for residents and visitors. Security posture is moderate with HTTPS and privacy-respecting analytics, but lacks explicit security headers and published security policies. No privacy policy or terms of service were detected in the provided content, though cookie consent is managed via Cookiebot. WHOIS data indicates municipal hosting consistent with the website's purpose, supporting legitimacy. Overall, the site is trustworthy and serves as a valuable public service resource.

S

Stadt Frankfurt am Main

ffm.de

67

The website www.ffm.de is the official citizen participation platform of the City of Frankfurt am Main, Germany. It provides a comprehensive set of services including current participation projects, a defect reporting system (Mängelmelder), an ideas platform, and detailed information about city projects. The platform targets residents of Frankfurt and aims to facilitate transparent and inclusive civic engagement. The business model is a public service operated by the city administration, supported by a technical partner, init AG Berlin, hosting the platform in an ISO 27001 certified data center in Germany. The website is well-branded, professionally designed, and offers excellent content quality and navigation.

M

Metropolregion Hannover Braunschweig Göttingen Wolfsburg GmbH

metropolregion.de

41

Metropolregion Hannover Braunschweig Göttingen Wolfsburg GmbH is a regional development organization focused on networking people, companies, science, and municipalities within the metropolitan region of Germany. The website serves as a platform to facilitate cooperation, project development, and information dissemination in key sectors such as mobility, healthcare, and real estate. The organization positions itself as a regional leader fostering innovation and collaboration across multiple domains. Technically, the website is built on WordPress using Oxygen Builder, integrates modern consent management via Usercentrics, and employs Google Tag Manager and GetResponse for analytics and marketing. The site is mobile-optimized with good SEO practices and consistent branding. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit privacy, terms, and security policies. Overall, the website reflects a professional and trustworthy regional government entity with moderate digital maturity and compliance.

G

Gingco Communication GmbH & Co. KG

die-region.de

58

Die-Region.de is an official regional portal serving the Braunschweig-Wolfsburg area in Germany, providing comprehensive information on local businesses, job offers, leisure activities, and cultural events. The website targets residents, visitors, job seekers, families, and students, positioning itself as a central hub for regional engagement and information dissemination. It is supported by regional partners and stakeholders, enhancing its credibility and reach. Technically, the site is built on TYPO3 CMS, a robust and widely used content management system, complemented by modern frontend technologies such as Swiper.js for interactive elements and Matomo for privacy-conscious analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience across devices. From a security perspective, the website enforces HTTPS, implements key security headers, and provides a cookie consent mechanism compliant with GDPR. However, it lacks explicit security policy pages, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and security posture. Overall, the site is trustworthy, professionally maintained, and compliant with relevant privacy regulations, making it a reliable resource for its audience. Strategic improvements in security transparency and contact information could further strengthen its position.

I

Infrastruktur Akademie

infrastruktur-akademie.de

62

Infrastruktur Akademie is a German-based educational and networking platform focused on sustainable infrastructure development, particularly in the energy and transportation sectors. The organization offers seminars, events, and lectures tailored to practitioners and professionals in the infrastructure field, fostering a regional community for knowledge exchange and professional growth. The website is well-structured, professionally designed, and targets infrastructure experts, beginners, and experienced professionals from various organizations and municipalities. Technically, the website is built on WordPress using modern themes and plugins such as Astra and Beaver Builder, with Borlabs Cookie managing GDPR-compliant cookie consent. The site employs HTTPS with good SSL configuration and integrates Google Analytics and Google Tag Manager for analytics and marketing purposes. Mobile optimization and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site demonstrates good practices including HTTPS enforcement and cookie consent mechanisms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not clearly detected and could be improved. No vulnerabilities or exposed sensitive data were found. The domain registration data is consistent with the website content, indicating a legitimate and trustworthy entity. Overall, the website presents a low-risk profile with strong compliance to privacy regulations and a professional online presence. Strategic recommendations include enhancing security headers, adding explicit security policies, and providing clearer direct contact information to improve trust and incident response readiness.

W

weber.digital GmbH

weber.digital

55

weber.digital GmbH is a German-based digital agency specializing in digital transformation, product development, and digital marketing services. Established in 2015, the company targets businesses seeking to modernize and innovate their digital presence. The website reflects a professional and consistent brand image, with comprehensive privacy and cookie policies indicating GDPR compliance. Technically, the site uses modern web technologies including custom fonts and JavaScript libraries like Swiper.js, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and domain lock statuses, though additional HTTP security headers and a published security policy would enhance trust. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.

BORGIS a.s. is a Czech company established in 1997, operating from Prague. The website provides minimal corporate information including company registration details and a link to a whistleblowing platform, indicating a focus on corporate governance or compliance-related services. The site is basic in design and content, targeting a general audience likely consisting of stakeholders or business partners. Technical infrastructure is simple, relying on standard HTML and CSS, hosted likely by Active24 as inferred from registrar and nameserver data. No advanced CMS or frameworks are detected, and the site lacks modern performance or accessibility optimizations. Security posture is weak with no visible security headers or HTTPS confirmation in the provided data, and no privacy or cookie policies are published, indicating compliance gaps. The WHOIS data is consistent and shows a long-established domain, supporting the legitimacy of the business. Overall, the website serves as a basic informational portal with limited digital maturity and security features.

B

Bojangles Franchise

bojanglesfranchising.com

44

Bojangles Franchise operates a professional website promoting its breakfast and chicken franchise opportunities, targeting experienced entrepreneurs interested in the hospitality sector. The brand emphasizes its Southern heritage and offers franchise training and support. The website is built on WordPress with Elementor and integrates multiple analytics and tracking tools such as Google Analytics, Facebook Pixel, and Hotjar. The site is well-designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content. However, the absence of WHOIS data and lack of explicit privacy, cookie, and security policies indicate areas for improvement in transparency and compliance. Security posture is generally good with HTTPS enabled, but could benefit from enhanced security headers and published incident response information.

C

CONVOTIS GmbH

convotis.ch

76

CONVOTIS GmbH is a large German IT services company specializing in digital transformation through its three main business areas: Business IT, Platform IT, and Managed IT. The company supports over 1,000 employees across 26 locations in 8 countries, serving more than 2,400 customers globally. Their offerings include business applications such as SAP and HR services, cloud and security solutions, digital workplace management, and advanced platform integration with AI and data analytics. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to business clients. Technically, the site is built on WordPress with Elementor and integrates modern marketing and analytics tools like HubSpot and Google Tag Manager, ensuring good SEO and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data for the domain is a notable anomaly that slightly impacts trust but does not detract from the overall professionalism and legitimacy of the business. Strategic recommendations include publishing formal security and incident response policies and enhancing HTTP security headers to further strengthen trust and compliance.

T

TeeGschwendner

teegschwendner.de

66

TeeGschwendner operates a professional e-commerce platform specializing in premium loose teas and related accessories, targeting primarily the German-speaking market. The website presents a well-structured, content-rich experience with clear navigation and multilingual support. The business model combines physical retail stores with an online shop, leveraging trusted third-party services such as Trusted Shops and PAYBACK to enhance customer trust and loyalty. Technically, the site uses modern JavaScript libraries, Google Tag Manager for analytics, and Usercentrics for consent management, hosted on servers associated with Intersolute. Security posture is strong with HTTPS enforced and consent mechanisms in place, though explicit security headers and policies are not publicly visible. Privacy compliance is partially demonstrated through cookie consent but lacks visible privacy policy and terms of service pages in the provided content. Overall, the domain registration data aligns well with the website content, indicating legitimacy and consistency.

B

bedrop - Shop für Propolis, Geleé Royal & Manuka Honig | Hier kaufen – bedrop.de

bedrop.de

72

Bedrop.de is an e-commerce website specializing in natural bee products such as Propolis tinctures, Gelee Royal capsules, pollen, and Manuka honey. The site targets consumers interested in natural health supplements and bee-derived products, positioning itself in a niche market within Germany. The business operates on the Shopify platform, leveraging a modern tech stack including jQuery, Alpine.js, and various marketing and analytics tools like Klaviyo, Yotpo, and Facebook Pixel. The website demonstrates good technical maturity with mobile optimization and SEO best practices. Security posture is solid with HTTPS, Shopify Payments integration supporting 3DS, and a comprehensive cookie consent mechanism, although it lacks published privacy and security policies. Overall, the site is professional and trustworthy but could improve transparency by publishing privacy, terms, and incident response information.

F

FRED & FELIA

fredfelia.com

69

FRED & FELIA operates a premium e-commerce platform specializing in high-quality wet dog and cat food, emphasizing natural ingredients and sustainable packaging. The company targets German-speaking pet owners seeking premium pet nutrition. The website is built on Shopify, leveraging modern e-commerce technologies and integrates multiple marketing and analytics tools with user consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. The WHOIS data is missing, which raises some legitimacy concerns, but the professional site design, trust badges, and customer reviews support business credibility. Overall, the site presents a low-risk profile with room for improvement in transparency and security documentation.

L

LERROS

lerros.com

71

LERROS operates a professional e-commerce platform specializing in men's fashion apparel primarily targeting the German market. The website offers a broad range of products including plus sizes and accessories, supported by fast delivery and easy returns. The company maintains a consistent brand presence with active social media channels and comprehensive privacy and cookie policies, indicating a mature digital presence. Technically, the site is built on Shopify using a modern theme and integrates multiple marketing and analytics tools such as Klaviyo and Facebook Pixel, ensuring robust marketing and customer engagement capabilities. Security posture is strong with HTTPS enforced and multiple security headers present, although explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS registrant data introduces some uncertainty regarding domain registration transparency, but the operational website and professional presentation mitigate major concerns. Overall, LERROS presents as a credible mid-sized retail business with a solid technical foundation and good compliance practices.

L

LI Press

longislandpress.com

62

LI Press is a regional online news media organization serving Nassau and Suffolk County readers with news, sports, and entertainment content. Positioned as a key local news source, it offers newsletters and maintains active social media channels to engage its audience. The website is built on WordPress and integrates multiple analytics and advertising technologies, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS and security headers implemented, though the absence of published security policies and incident response information suggests room for improvement. The missing WHOIS data introduces some uncertainty about domain registration transparency, but the website's content and business presence support its legitimacy. Overall, LI Press presents a professional and trustworthy digital presence with standard media industry practices.

N

Najzamestnávateľ

najzamestnavatel.sk

54

The website 'Najzamestnávateľ' serves as an informational and promotional platform for an annual employer attractiveness survey in Slovakia. It targets companies, clients, and partners interested in participating or collaborating in the survey. The site uses modern web technologies including Angular 16 and Material Design components, and integrates Google Tag Manager and YouTube APIs for analytics and media content. The design is professional and mobile-optimized, providing a good user experience with clear navigation. However, the content quality is basic, focusing mainly on informational text and contact forms without extensive business details or trust signals. Security posture is moderate with HTTPS likely enabled but lacking explicit security headers and published security policies. Privacy compliance is limited, with no privacy policy or terms of service found, though a cookie consent mechanism is present. Contact information is minimal, relying on a contact form without direct emails or phone numbers. Overall, the site is safe for general audiences and does not contain adult or questionable content.

A

Alma Career Slovakia s.r.o.

profesiadays.sk

59

Profesia Days is a major career event organizer in Slovakia, operated by Alma Career Slovakia s.r.o., a subsidiary of Alma Career. The website promotes the largest festival of job opportunities in Slovakia, providing career counseling, job offers, and workshops tailored to job seekers and employers. The site is well-branded and targets the Slovak market with a professional and consistent presentation. Technically, the website is built on WordPress with modern JavaScript libraries and includes SEO optimizations and mobile responsiveness. Security measures include HTTPS, Google reCAPTCHA, and cookie consent management, though explicit privacy and security policies are missing. Overall, the website is trustworthy and professionally maintained, with room for improvement in compliance documentation and security transparency.

A

Alma Career Slovakia, s.r.o.

sosrdcom.sk

50

The website www.sosrdcom.sk represents a social inclusion program operated by Alma Career Slovakia, s.r.o., under the brand 'Výpomoc so srdcom'. The program focuses on improving employment opportunities for people with health disadvantages in Slovakia, leveraging pilot projects and cooperation with employers. The site is professionally designed using WordPress and Elementor, featuring Slovak and English language options, and provides resources, testimonials, and contact mechanisms to support its mission. Technically, the site uses modern web technologies, including Google reCAPTCHA for form security and Yoast SEO for optimization. Security posture is good with HTTPS and secure form handling, though explicit security policies and incident response contacts are absent. Privacy compliance is partial, with cookie consent present but no visible privacy policy. WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, the site is trustworthy, well-structured, and serves a clear social purpose.

The website www.dielne.sk serves as a specialized platform focused on protected workshops and social enterprises in Slovakia, facilitating companies to fulfill their legal employment obligations under Slovak law. It offers a searchable directory of 380 registered organizations, registration for new entities, and informational resources including a substitute fulfillment calculator. The platform is operated by Profesia, spol. s r.o., a member of the Alma Media group, indicating a credible backing and niche market positioning within the non-profit sector. Technically, the site employs a traditional web stack with Bootstrap 2.x, jQuery 1.8.0, and Select2 for UI components, alongside Cookiebot for cookie consent management and Google Tag Manager for analytics. While the site is functional and moderately optimized for mobile, it uses somewhat outdated libraries and lacks visible modern security headers, suggesting room for technical modernization and security hardening. From a security perspective, the site enforces cookie consent and uses HTTPS (assumed but not confirmed in data), but lacks explicit privacy policies, terms of service, and security incident response information. No critical vulnerabilities or WAF blocking were detected, but the absence of security headers and outdated libraries represent moderate risks. The WHOIS data aligns well with the business identity, supporting legitimacy. Overall, the website is a trustworthy and functional resource for its target audience but would benefit from enhanced privacy compliance, updated technical stack, and improved security practices to strengthen its posture and user trust.

P

Profesia, spol. s r. o.

edujobs.sk

56

Edujobs.sk is a specialized Slovak job portal focusing exclusively on employment opportunities within the education sector. Operated by Profesia, spol. s r. o., a reputable job portal company, it serves as a niche platform connecting educators and school staff with relevant job offers. The website features a comprehensive listing of pedagogical, non-pedagogical, and management positions across Slovakia, supported by advanced search and email alert functionalities. The platform is well-positioned in the Slovak market as a trusted resource for education employment.

K

Kynutá buchta

kynutabuchtabistro.cz

55

Kynutá buchta is a small hospitality business operating a bistro, café, and pastry shop in the Czech Republic. The website presents a traditional and family-inspired brand focused on quality baked goods and local coffee offerings. The business targets local customers and visitors seeking authentic Czech culinary experiences. The site is built on the Webnode platform and uses AWS Cloudfront CDN for hosting, with Google Tag Manager implemented for analytics. The website is mobile-optimized and provides a user-friendly experience with clear navigation and appealing visuals. However, it lacks explicit privacy, cookie, and terms of service policies, which are important for compliance and user trust. No direct contact emails or phone numbers are provided on the site, but social media links to Facebook and Instagram are present.

The website andelnj.cz represents a small local hospitality business operating a café, confectionery, and ice cream shop named U Bílého anděla located in Nový Jičín, Czech Republic. The business emphasizes local production of coffee, pastries, cakes, and ice cream, serving customers in a historic and picturesque setting. The website content is well-structured, informative, and targeted at local customers and visitors seeking quality café products. Technically, the site is built on the ClickEshop CMS platform, uses modern web technologies such as jQuery and Lightbox, and includes a cookie consent mechanism compliant with GDPR principles. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit security policies. No critical vulnerabilities or suspicious content were detected. Overall, the site is trustworthy and professionally presented, suitable for its business scope.

Penzion a Bistro U Kapra is a small hospitality business based in Třeboň, Czech Republic, offering accommodation and a bistro specializing in fish and local cuisine. The website presents a clear business focus with detailed descriptions of rooms, bistro offerings, and contact information, targeting tourists and local visitors. The domain is well-established since 2005, supporting business credibility. Technically, the website uses modern web technologies including HTTPS, Google reCAPTCHA, and Google Maps integration, hosted on WEDOS infrastructure. However, it lacks explicit privacy and cookie policies, and security headers are not evident, indicating areas for compliance and security improvement. Overall, the site is functional, safe, and professionally presented but could enhance trust and compliance by adding missing policies and security best practices.

H

Hudy.cz

hudy.cz

63

Hudy.cz is a well-established e-commerce retailer specializing in outdoor clothing, footwear, backpacks, and camping equipment. The website targets outdoor enthusiasts including hikers, campers, and climbers, offering a broad range of products segmented by gender and age groups. The business operates primarily in the Czech Republic and maintains a professional online presence with detailed product categories and promotional campaigns. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, and analytics tools such as Exponea and Smartsupp chat, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices and a consistent branding approach. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and published security policies, which could be improved. The absence of WHOIS data limits domain trust assessment, but the website content and technical setup suggest legitimacy. Overall, the site scores well in content quality and technical implementation but should enhance privacy compliance and business credibility by publishing clear contact and policy information.

H

hanibal.cz

hanibal.cz

77

Hanibal.cz is a Czech Republic-based e-commerce retailer specializing in outdoor clothing and equipment for activities such as hiking, climbing, and camping. The website targets a broad audience including men, women, and children interested in outdoor sports and adventures. It offers a comprehensive product catalog with expert advice and multiple physical store locations, positioning itself as a trusted specialist in the outdoor retail market. Technically, the website employs modern JavaScript frameworks, integrates multiple analytics and advertising services, and uses HTTPS with error monitoring via Sentry, indicating a mature digital infrastructure. Security posture is solid with encrypted connections and cookie consent mechanisms, though explicit security headers and detailed privacy policies are missing. The absence of WHOIS data limits domain trust assessment, but the professional presentation and operational contact details support legitimacy. Overall, the site is well-structured, user-friendly, and compliant with basic privacy standards, making it a reliable platform for outdoor gear shopping.

K

KUPKOLO.cz s.r.o.

kupkolo.cz

64

Kupkolo.cz is a Czech Republic based e-commerce retailer specializing in bicycles, cycling components, accessories, and related products. The website presents a professional and well-structured platform targeting cycling enthusiasts and customers seeking a wide range of cycling products. The company brand indicates over 20 years of operation and strong customer satisfaction, positioning it as a reputable player in the Czech cycling retail market. Technically, the site employs modern web technologies including Google Tag Manager, asynchronous JavaScript loading, and a GraphQL backend, supporting a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, though explicit security headers and privacy policies are not clearly visible, suggesting room for improvement in compliance and security best practices. The absence of WHOIS data for the domain reduces trust slightly, warranting further verification. Overall, the site is safe, professional, and well-optimized for its target audience.

S

SERDA d.o.o. Sarajevo

serda.ba

47

SERDA d.o.o. Sarajevo operates as a regional development agency focused on supporting regional growth, EU project management, and business environment improvements in Bosnia and Herzegovina. The website reflects a professional presence with clear information about ongoing projects, events, and contact details, targeting regional governments, businesses, and EU stakeholders. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Analytics, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced but lacks advanced security headers and visible privacy compliance mechanisms. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security policies to align with GDPR and best practices.

N

Nettimökki

nettimokki.com

64

Nettimökki is Finland's largest and most comprehensive online marketplace for vacation cottage rentals, offering over 6,300 listings across the country. The platform targets Finnish vacationers seeking cottages ranging from rustic laavus to luxury villas, providing extensive search capabilities by location, date, and guest count. The business model centers on connecting cottage owners with renters, offering tools for listing management and booking facilitation. Technically, the website employs modern JavaScript frameworks, Google Tag Manager, and a consent management platform to ensure compliance and analytics integration. The site is well-optimized for mobile and accessibility, with good SEO practices evident in metadata and structured content. Security posture is solid with HTTPS enforced and consent mechanisms in place, though some security headers and explicit privacy policies are missing. WHOIS data is notably absent or inconsistent, which raises concerns about domain legitimacy and registration transparency. Overall, Nettimökki presents a professional and trustworthy service with room for improvement in compliance documentation and domain registration clarity.

I

IntraEdge

intraedge.com

66

IntraEdge is a technology consulting firm specializing in global capability center setup, AI governance, cloud services, and corporate learning solutions. The company positions itself as an experienced partner for businesses seeking digital transformation and talent solutions, with a focus on AI governance through its Truyo AI platform. The website reflects a medium-sized enterprise with a professional and consistent brand presence, targeting business clients globally. Technically, the website is built on WordPress using modern themes and plugins, with good SEO and mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response disclosures. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data supports the legitimacy and maturity of the business. Strategic improvements in privacy compliance and security policies would enhance trust and compliance.

S

Showit

showit.co

61

Showit is a technology company providing a drag & drop website builder tailored for creatives and designers seeking creative freedom. The platform integrates with WordPress and offers customizable templates, positioning itself as a niche leader in creative website building. The website demonstrates a professional design and good user experience, targeting designers and creative professionals. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and integrates video and social media content, hosted on AWS infrastructure with domain registration via Amazon Registrar. Security posture is good with HTTPS and domain protection statuses, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is basic with a cookie consent mechanism but no visible privacy or terms pages. Overall, the site is trustworthy and well-established with a domain age consistent with the business history.

F

Follett

follett.com

67

Follett is a leading enterprise in the education and campus retail sector, providing comprehensive solutions including campus store management, academic programs, merchandise, and technology services. The company serves a broad audience including students, academic leaders, faculty, and campus auxiliary services, with a strong market presence evidenced by over 1,000 campus partners and 7.5 million students served. The website reflects a mature digital infrastructure built on WordPress with integrations of HubSpot marketing and analytics tools, indicating a moderate to advanced digital maturity. Security posture is generally good with HTTPS enabled and domain transfer protections in place, though improvements are recommended in DNSSEC deployment and security header implementation. Privacy compliance is currently weak due to the absence of visible privacy and cookie policies, which should be addressed to meet GDPR and other regulatory requirements. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives, but could benefit from enhanced transparency and security practices.

T

Teall Sports and Entertainment

teallse.com

58

Teall Sports and Entertainment is a medium-sized investment and operational company focused on innovative, high growth potential businesses in the sports, media, and entertainment sectors. Founded in 2020, it operates a portfolio of companies that enhance fan experiences through event production, merchandise solutions, sponsorship models, and technology integration. The leadership team has extensive industry experience, positioning the company as a niche player with strong market knowledge. Technically, the website is built on WordPress using WPBakery Page Builder, with integrations for Google Analytics and Tag Manager for user tracking and marketing insights. The site is mobile optimized and presents a professional design with good SEO and accessibility basics. However, some improvements in accessibility and security headers could enhance the technical posture. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism, reflecting good privacy compliance. No critical vulnerabilities or exposed sensitive data were detected. The absence of visible security policies or incident response contacts suggests room for improvement in transparency and security culture. Overall, the website and business appear legitimate and professional, though the lack of WHOIS data is a concern that warrants monitoring. Strategic recommendations include enhancing security headers, publishing terms of service and vulnerability disclosure policies, and improving accessibility features to strengthen compliance and trust.

N

netgo group

netgo.de

58

netgo group is a well-established German IT service provider specializing in comprehensive IT and software solutions that enable digital transformation for businesses across various industries. The company offers a broad portfolio including cloud infrastructure, IT security, software development, workplace solutions, and managed IT services. Recognized by multiple industry awards and certifications, netgo positions itself as a trusted partner for enterprises seeking to modernize and secure their IT environments. Technically, the website is built on the HubSpot CMS platform, leveraging modern analytics and marketing tools such as Google Tag Manager, Cookiebot, and Matomo, ensuring good digital maturity and privacy compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though the absence of explicit security policies and incident response contacts suggests room for improvement. Overall, the domain registration data aligns well with the website's claims, indicating legitimacy and consistency. The site is professionally designed, mobile-optimized, and user-friendly, supporting a high level of trust and business credibility.

G

Geoportal Baden-Württemberg

geoportal-bw.de

57

Geoportal Baden-Württemberg operates a regional government geospatial data portal providing access to geospatial data, thematic maps, and metadata services primarily for politics, administration, economy, science, and the public in Baden-Württemberg, Germany. The portal is well-positioned as a trusted regional government platform supporting the national GDI-DE and INSPIRE initiatives. Technically, the website is built on a modern Angular framework with Material Design components and uses OpenLayers for map rendering, indicating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS implied but lacks visible security headers and explicit security policies. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, the website is professional, trustworthy, and safe for general audiences, but could improve transparency and security practices.

L

LEO-BW

leo-bw.de

61

LEO-BW is a regional educational and cultural portal dedicated to providing comprehensive information about Baden-Württemberg's history, culture, and environment. It offers rich multimedia content, advanced search capabilities, and thematic modules targeting researchers, students, and the general public interested in regional studies. The website is positioned as an authoritative source for landeskunde (regional studies) in the German southwest, supported by partnerships with cultural and governmental institutions. Technically, the site is built on the Liferay CMS platform, utilizing modern JavaScript libraries such as jQuery, Bootstrap, and Metal.js. The infrastructure supports multilingual content and map-based search features, indicating a mature digital presence. Performance and mobile optimization are good, with accessibility features implemented. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and visible privacy or cookie policies, which are important for GDPR compliance. No incident response or vulnerability disclosure information is provided, representing areas for improvement. Overall, the website is trustworthy and professionally maintained, but it should enhance privacy compliance and security transparency to better align with modern standards and user expectations.

K

Keltenland BW

keltenland-bw.de

54

Keltenland BW is a small cultural and educational website dedicated to exploring the history and culture of the Celts in Baden-Württemberg, Germany. The site provides informative content aimed at a general audience interested in regional history and Celtic heritage. The business model is informational, focusing on cultural education without evident commercial transactions. Technically, the website is built on WordPress using the Avada theme and several plugins for SEO, accessibility, and cookie management, indicating a moderate level of digital maturity. The site is mobile-optimized and includes structured data for enhanced SEO performance. Security-wise, the website uses HTTPS and implements cookie consent mechanisms, but lacks published privacy policies, terms of service, and security incident response information, which are areas for improvement. Overall, the site is accessible, trustworthy for its niche, but would benefit from enhanced compliance and security documentation to improve user trust and regulatory adherence.

D

Digitalakademie@bw

digitalakademie-bw.de

60

Digitalakademie@bw is a government-affiliated digital academy initiative focused on supporting municipalities, counties, and the state of Baden-Württemberg in their digital transformation journey. The organization offers a variety of services including workshops, informational events, and projects centered around Artificial Intelligence and digital skills tailored for public administration. The website reflects a strong regional government presence and commitment to advancing digital governance and innovation in the public sector. Technically, the website is built on WordPress using the Divi theme framework, enhanced with modern JavaScript libraries such as jQuery and Leaflet.js for interactive maps. SEO is managed via Rank Math, and user privacy is respected through Borlabs Cookie consent management. Hosting appears to be provided by Deutsche Telekom infrastructure, aligning with the official nature of the site. The site is mobile-optimized, accessible, and performs moderately well. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The domain registration data is consistent with the website's government affiliation, enhancing trustworthiness. Overall, the site presents a professional, trustworthy, and well-maintained digital presence for a government digital academy, with recommendations to enhance security headers and publish formal security policies to further strengthen its posture.

R

Referat 72 – Digitalisierungsstrategie

digital-laend.de

71

digital.LÄND is the official digitalization strategy platform of the Baden-Württemberg state government, providing comprehensive information and resources related to digital transformation initiatives. The website serves as a central communication hub targeting citizens and businesses within the region, positioning itself as a trusted government source for digital strategy. The platform is supported by modern technical infrastructure including WordPress CMS, enhanced security via Wordfence, and privacy compliance through Real Cookie Banner Pro and Matomo analytics. The site demonstrates a mature digital presence with excellent SEO, accessibility, and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and active firewall protections. Privacy compliance is robust, featuring detailed cookie consent mechanisms and GDPR-aligned policies. Overall, the website reflects a professional, secure, and trustworthy government digital service.

M

Ministerium für Ernährung, Ländlichen Raum und Verbraucherschutz Baden-Württemberg

verbraucherportal-bw.de

59

The Verbraucherportal Baden-Württemberg is an official government consumer protection portal providing comprehensive information and services related to consumer rights, food safety, animal protection, research, and education. It serves the residents of Baden-Württemberg with authoritative content and links to partner organizations. The website employs modern web technologies including jQuery, Matomo analytics, and asynchronous script loading, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS enforced, though there is room for improvement in security headers and explicit privacy compliance mechanisms. No signs of WAF blocking or suspicious content were detected, and the WHOIS data aligns well with the official nature of the site. Overall, the portal is trustworthy and professionally maintained, though it would benefit from clearer privacy and cookie policies.