Security Directory

K

Kiel Institute for the World Economy

kielinstitut.de

58

The Kiel Institute for the World Economy is a prominent German research institute specializing in globalization and global economic affairs. It serves as a leading academic and policy-impact institution in Europe, offering extensive research, datasets, expert analysis, and public events. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content targeting researchers, policymakers, and the public interested in economic globalization. Technically, the site is built on TYPO3 CMS with Bootstrap framework and uses Matomo for analytics, indicating a privacy-conscious approach. Security posture is adequate with HTTPS and consent mechanisms but lacks explicit security policies and headers. Overall, the site is trustworthy and authoritative in its domain.

M

MaM multimedia, s.r.o.

cistysvet.sk

10

ČistýSvet.SK is a Slovak-based e-commerce retailer specializing in cleaning machines, industrial vacuum cleaners, air humidifiers, purifiers, and food dehydrators. The company operates under MaM multimedia, s.r.o., with a business history dating back to 2005. The website targets consumers and businesses seeking quality cleaning and home care equipment, offering a range of products with clear pricing and promotional offers. The platform is positioned as a trusted regional player with a focus on customer service and reliable delivery. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Tag Manager, and various JavaScript libraries for enhanced user experience such as PrettyPhoto and MagicZoomPlus. The site is moderately optimized for performance and mobile devices, with basic accessibility features and good SEO practices. The content is well-structured, professionally designed, and easy to navigate. From a security perspective, the site enforces HTTPS, uses Google reCAPTCHA for form protection, and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and a publicly available security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, ČistýSvet.SK demonstrates a solid business and technical foundation with good privacy compliance and trustworthy domain registration. Strategic improvements in security headers and incident response transparency would further enhance its security posture and customer trust.

B

BerlinerLuft. México S. De R.L. de C.V.

berlinerluft.mx

51

BerlinerLuft. México S. De R.L. de C.V. is a medium-sized manufacturing company specializing in HVAC equipment, components, and duct systems with a global footprint including production plants in Mexico and Brazil. The website presents a professional image with clear business descriptions, product portfolios, and case studies targeting B2B clients in the HVAC and industrial sectors. The digital infrastructure is built on WordPress with modern plugins and technologies, ensuring a responsive and user-friendly experience. Security posture is adequate with HTTPS and Google reCAPTCHA implemented, though it lacks advanced security headers and published security policies. Privacy compliance is limited due to absence of privacy and cookie policies. Overall, the website is trustworthy and functional but could improve in compliance and security transparency.

Incom GmbH operates a specialized communication and collaboration platform tailored for higher education institutions, particularly targeting design and art universities in Germany. The platform facilitates modern teaching concepts, enabling seamless interaction between educators and students, and extends the scope of academic courses both temporally and spatially. The business model is based on a cost-effective SaaS offering with included support and consulting services, positioning Incom as a niche player in the educational technology sector. The company has been established since 2005, reflecting a mature presence in its market segment. Technically, the website employs a modern yet straightforward technology stack including Bootstrap, jQuery, Font Awesome, and Matomo for privacy-conscious analytics. The platform is custom-built without reliance on common CMS solutions, hosted under a reputable registrar with stable DNS configurations. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be enhanced. Performance is moderate, suitable for the target audience. From a security perspective, the website enforces HTTPS with AES 256-bit encryption, avoids third-party advertising and tracking services like Google Analytics, and respects user privacy by not profiling visitors. However, it lacks DNSSEC and important security headers such as Content-Security-Policy and HSTS, which are recommended to strengthen its security posture. No incident response or security policy information is published, which could be improved to enhance trust. Overall, the website is professional, trustworthy, and safe for general audiences, with no adult or questionable content. The domain registration data aligns well with the business claims, showing consistency and legitimacy. Strategic recommendations include implementing DNSSEC, adding security headers, publishing security policies, and introducing cookie consent mechanisms to improve GDPR compliance and security maturity.

F

FIOR & GENTZ

fior-gentz.it

59

FIOR & GENTZ is a specialized orthopaedic technology company providing orthoses, therapy shoes, and related orthopaedic products primarily targeting healthcare professionals and patients. The company maintains a multilingual web presence with detailed product information, tutorials, and downloadable resources, supporting both B2B and B2C models. The website is built on TYPO3 CMS and incorporates modern web technologies with good mobile optimization and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response information are absent. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management. Overall, the website reflects a professional and trustworthy healthcare business with moderate technical maturity and good compliance practices.

F

FIOR & GENTZ

fior-gentz.fr

63

FIOR & GENTZ is a specialized healthcare company focused on orthopaedic technology, offering orthoses, therapeutic shoes, and related products. The company supports multiple languages, indicating a European market presence, primarily in France, Germany, and Italy. Their website is built on TYPO3 CMS, featuring modern design elements and good mobile optimization. The site includes educational resources and product catalogs, targeting both healthcare professionals and patients. Technically, the website uses HTTPS with good SSL configuration and integrates Google Analytics for user tracking with GDPR-compliant cookie consent mechanisms. However, WHOIS data is unavailable, which raises some concerns about domain registration transparency. No explicit security or incident response policies are published, which could be improved to enhance trust. Overall, the website is professional, secure, and compliant with privacy regulations, but would benefit from enhanced transparency in domain registration and security disclosures.

F

FIOR & GENTZ

fior-gentz.de

62

FIOR & GENTZ is a specialized orthopaedic technology company based in Germany, offering orthoses, therapy shoes, orthotic shoes, and orthosis construction services. The company targets healthcare professionals and patients requiring orthopaedic solutions, supported by educational resources such as online tutorials and product catalogs. The website is built on TYPO3 CMS, leveraging modern frontend frameworks and Cloudflare for DNS and likely CDN services, providing a moderate performance and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms in place, though security headers and explicit security policies are absent. The site uses Google Analytics and AdSense for marketing and analytics with GDPR-compliant cookie consent. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with no signs of blocking or malicious content.

eTwinning România is a national educational project co-funded by the European Commission under the Erasmus+ program. It facilitates inter-school collaborative projects for teachers and students across Europe using the European School Education Platform. The website serves as the official Romanian portal, coordinated by the Agenția Națională pentru Programe Comunitare în Domeniul Educației și Formării Profesionale (ANPCDEFP). It provides resources, news, professional development courses, and contact information for stakeholders. The site is well-branded, consistent, and targets educators and schools in Romania and Europe. Technically, it is built on WordPress with common plugins and integrates Google services such as Maps and Analytics. Hosting is provided by HostX, and the site uses HTTPS with a moderate security posture. However, DNSSEC is not enabled, and some security headers are missing. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Contact details are clearly provided, enhancing business credibility.

S

Sturm, Ruger & Co., Inc.

glenfieldfirearms.com

59

Glenfield Firearms is a brand operated by Sturm, Ruger & Co., Inc., a well-established American firearms manufacturer with over 75 years of history. The website focuses on promoting Glenfield rifles as reliable, affordable, and straightforward hunting tools, targeting hunters and firearm enthusiasts. The site provides product information, customer support resources, and links to related brands and accessories. Technically, the website uses modern web technologies including jQuery, Bootstrap, and SweetAlert2, with Google Tag Manager for analytics. The site is mobile optimized and presents a professional design with clear navigation. Security measures include an age verification overlay to restrict access to adults, but there is room for improvement in security headers and cookie consent mechanisms. The domain registration is consistent and legitimate, registered through Network Solutions without privacy protection, aligning with the brand's transparency. Overall, the website is credible and functional with moderate technical sophistication and basic privacy compliance.

R

Rescuetrade OHG

rescuetrade.com

54

Rescue Trade OHG is a German-based manufacturer and global distributor specializing in disposable medical bedding products such as blankets, pillows, sheets, and transport sheets. Established in 2004, the company positions itself as a pioneer in the disposable bedding market with a strong focus on hygiene and patient safety. Their products serve a broad audience including hospitals, emergency medical services, ambulances, fire departments, and other public institutions. The company emphasizes compliance with international medical device regulations, holding ISO 13485 certification and FDA registration, which underscores their commitment to quality and regulatory adherence. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, and various UI plugins to deliver a responsive and user-friendly experience. The site is well-structured with clear navigation and professional design, although some accessibility features could be enhanced. Performance is moderate with no major issues detected. However, the absence of explicit security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. From a security perspective, the site uses HTTPS and does not expose sensitive data in its HTML content. The contact form redirects users to a contact page rather than processing data directly, reducing immediate risk. Nevertheless, the lack of published incident response policies, vulnerability disclosure mechanisms, and security.txt files suggests limited transparency in security operations. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy and consistency with the business claims. This discrepancy warrants further investigation to confirm domain ownership and trustworthiness. Overall, Rescue Trade OHG presents a professional and credible online presence with strong business and regulatory credentials. The main risks lie in the missing WHOIS data and some gaps in security best practices. Addressing these issues would enhance trust and compliance, supporting the company’s market position as a reliable medical device manufacturer.

C

Conventus Congressmanagement & Marketing GmbH

conventus.de

50

Conventus Congressmanagement & Marketing GmbH is a well-established congress agency based in Jena, Germany, with over 25 years of experience in managing congresses and events. Their website reflects a professional service provider targeting organizations and professionals seeking comprehensive congress management, including digital and hybrid event solutions. The company maintains a consistent brand presence and offers a range of specialized services such as IT service, greenscreen studio, and congress technology. Technically, the website is built on TYPO3 CMS with Bootstrap and FontAwesome, hosted on AWS infrastructure, and includes modern analytics tools like Matomo and Facebook Pixel. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible HTTP security headers and a published security policy or incident response contacts. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and consistency. The website does not contain any adult or questionable content and is fully accessible without WAF blocking.

K

Kiel Institute for the World Economy

ifw-kiel.de

58

The Kiel Institute for the World Economy is a respected German research institute specializing in globalization and global economic affairs. It serves academics, policymakers, and the public by providing research publications, datasets, and hosting events. The website is built on TYPO3 CMS with Bootstrap and uses Matomo for analytics, reflecting a modern and professional digital infrastructure. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and vulnerability disclosure information. The domain WHOIS data is minimal but shows stable DNS configuration. Overall, the site is trustworthy, professional, and content-rich, suitable for its target audience.

C

Conventus GmbH

icem2026.com

10

ICEM 2026 is a professionally managed international conference focused on Emergency Medicine, scheduled for June 2026 in Hamburg, Germany. The website serves as an information hub and registration portal for attendees, exhibitors, and partners, leveraging a modern TYPO3 CMS platform with integrated GDPR-compliant cookie consent and spam protection via hCaptcha. The site demonstrates good technical maturity with moderate performance and mobile optimization. Security posture is solid with HTTPS and form protections, though security headers and explicit security policies could be improved. WHOIS data confirms domain legitimacy and appropriate registration history. Overall, the site is trustworthy and well-positioned to support the conference's business objectives.

R

Rescuetrade OHG

rescuetrade.de

53

Rescue Trade OHG is a German-based manufacturer and distributor specializing in medical disposable products, particularly single-use bedding sets, transfer sheets, and transport cloths for patient care. Established in 2004, the company serves a broad clientele including emergency services, hospitals, care facilities, and governmental agencies worldwide. Their products are certified under ISO 13485 and comply with FDA and MDR regulations, positioning them as a trusted provider in the healthcare sector. The website reflects a professional and consistent brand image with clear business information and downloadable resources for customers. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various UI plugins, delivering a responsive and user-friendly experience. While performance is moderate, the site is well-structured with good SEO practices and mobile optimization. However, no CMS or hosting provider details are explicitly detected. Security-wise, HTTPS is implied, and forms use validation scripts, but the absence of security headers and cookie consent mechanisms indicates room for improvement in compliance and security hardening. Overall, the security posture is adequate but could benefit from enhanced HTTP security headers and explicit privacy controls. The lack of an incident response contact or vulnerability disclosure reduces transparency. The domain WHOIS data is minimal but consistent with the business claims, supporting legitimacy. No WAF or blocking mechanisms were detected, allowing full content access and analysis.

Golden Hour Data Systems, Inc. is a specialized provider of compliance-centric revenue cycle management services tailored for air and ground medical transport providers. As a subsidiary of ZOLL Data Systems, the company leverages nearly three decades of EMS billing expertise combined with proprietary technology to maximize revenue capture and ensure compliance. The website reflects a professional and consistent brand presence, targeting EMS industry stakeholders with a clear focus on integrated RCM solutions. Technically, the website is built on the HubSpot CMS platform, utilizing modern frameworks such as Bootstrap and jQuery, and integrates multiple analytics and marketing tools including Google Analytics, Hotjar, and HubSpot Analytics. The site is mobile optimized and incorporates accessibility features via AccessiBe, demonstrating a commitment to usability and compliance. From a security perspective, the site enforces HTTPS and employs a cookie consent mechanism compliant with GDPR. However, it lacks DNSSEC and explicit security headers, and does not publish a dedicated security policy or incident response contact, which are areas for improvement. The domain registration data is consistent with the business claims, showing a long-established presence without privacy protection, enhancing trustworthiness. Overall, the website presents a secure, professional, and compliant digital presence suitable for its niche market, with recommendations to enhance security posture and transparency to further strengthen trust and compliance.

G

Gemeindewerke Ismaning GmbH

gwi-info.de

10

Gemeindewerke Ismaning GmbH is a municipal utility provider based in Germany, offering essential services including electricity, gas, water supply, wastewater management, and local swimming pool operations. The company serves both residential and commercial customers in the Ismaning region, positioning itself as a reliable regional energy supplier with a focus on customer service and sustainability. Their website reflects a professional and consistent brand image, providing comprehensive information and online services to their target audience. Technically, the website is built on Joomla CMS with modern web technologies such as Bootstrap and jQuery, ensuring good mobile optimization and accessibility. The site employs a cookie consent mechanism compliant with GDPR, and accessibility features are prominently implemented, enhancing usability for all users. Hosting appears to be managed by a reputable provider, and performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and uses cookie consent to manage user privacy. However, it lacks explicit published security policies and incident response contacts, which are recommended for enhanced trust and compliance. No critical vulnerabilities or suspicious patterns were detected, and the WHOIS data aligns well with the business claims, indicating a trustworthy domain registration. Overall, the website demonstrates a solid digital presence with good content quality, technical implementation, and privacy compliance. Strategic improvements in security transparency and technical optimizations could further strengthen their posture and user trust.

G

Gemeindewerke Ismaning GmbH

gemeindewerke-ismaning.de

54

Gemeindewerke Ismaning GmbH is a municipal utility provider based in Ismaning, Germany, offering essential services such as electricity, gas, water supply, wastewater management, and local swimming pool operations. The company targets both residential and commercial customers within its regional area, providing tailored energy tariffs and customer support. The website reflects a solid regional market position with a focus on community service and sustainability, including partnerships with local energy providers.

D

datamints.com GmbH

datamints.com

10

datamints.com GmbH is a well-established internet agency based in Penzberg, Germany, specializing in web design, online marketing, and software development with a strong focus on TYPO3 CMS and e-commerce platforms such as Shopware and OXID. The company targets businesses seeking comprehensive digital solutions and has a solid market position supported by over 20 years of experience and a client base including notable companies like Telekom and NTTDATA. Their service offerings cover strategy, design, programming, hosting, and campaign management, positioning them as a full-service digital partner. Technically, the website is built on TYPO3 CMS and integrates modern web technologies including Bootstrap, jQuery, and Leaflet. They employ Google Tag Manager and Matomo for analytics with a robust cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and implements cookie consent management, but lacks several recommended security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy, which slightly impacts the overall trust score. Overall, datamints.com GmbH presents a professional and trustworthy digital presence with strong business credibility and technical maturity. The main risk lies in the missing WHOIS data, which should be investigated further. Strategic improvements in security headers and formal security policies would enhance their security posture and trustworthiness.

W

Webkomplet, s.r.o.

mail-komplet.cz

45

Mail Komplet, operated by Webkomplet, s.r.o., is a Czech Republic-based company specializing in professional email marketing services, including bulk email sending and marketing automation. The website indicates a rebranding to Boldem, highlighting a strategic shift towards automated marketing solutions. The company targets businesses and marketers seeking efficient email campaign tools and boasts a portfolio of notable clients and partnerships. The business model is SaaS-based, focusing on technology-driven marketing solutions within the regional market. The website content is professionally presented with consistent branding and clear calls to action.

T

TAURIS

tauris.sk

50

TAURIS is a Slovak manufacturer specializing in meat and meat products, offering a broad range of items such as hams, sausages, salamis, and specialty products. The company targets Slovak consumers and business partners within the food manufacturing and retail sectors. The website reflects a medium-sized enterprise with a consistent brand presence and trust indicators including certifications and testimonials. Technically, the site employs a modern tech stack with Bootstrap, jQuery, and integrates multiple analytics and tracking tools controlled by a cookie consent mechanism. Security posture is solid with HTTPS and no exposed sensitive data, though security headers are absent and incident response information is not provided. Overall, the website is professional, user-friendly, and compliant with GDPR requirements for privacy and cookie policies.

M

Make: Community

makezine.com

60

Make: DIY Projects and Ideas for Makers is a well-established media platform and community dedicated to makers and DIY enthusiasts. Founded in 2004, it offers a rich collection of project guides, ideas, and community engagement opportunities, positioning itself as a leading brand in the maker media space. The website leverages WordPress CMS with modern plugins and integrates multiple social media channels to engage its audience effectively. Technically, the site uses a robust tech stack including Bootstrap, Google Fonts, and various advertising and analytics tools, hosted with GoDaddy and utilizing Cloudflare DNS services. Security posture is solid with HTTPS enabled and domain protections in place, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is currently limited, with no explicit privacy or cookie policies detected in the provided content. Overall, the site is professional, trustworthy, and safe for general audiences, with a moderate to good technical and security maturity level.

isoplus (Schweiz) AG is a Swiss-based company specializing in district heating systems, including high-quality heating pipes, heat transfer stations, control technology, and ceiling radiant panels. The company targets businesses and organizations in the energy and construction sectors, offering tailored heating solutions. The website reflects a professional and consistent brand presence with clear navigation and relevant business content. Technically, the site is built on WordPress with Bootstrap and jQuery, providing a moderate performance and good mobile optimization. However, some technical improvements are recommended, such as implementing security headers and properly configuring analytics tools. Security posture is adequate with HTTPS enabled but lacks advanced security headers and policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

I

Isoplus Suomi Oy

isoplus.fi

57

Isoplus Suomi Oy operates as a leading supplier of pre-insulated pipe systems for district heating and cooling in Finland. The company is positioned as a B2B provider targeting energy sector businesses requiring advanced pipe solutions. The website reflects a professional digital presence with clear branding and relevant business content, supporting its market position. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses SEO best practices including structured data and meta tags. The presence of Cookiebot indicates awareness of privacy compliance, although explicit privacy and terms pages are missing. Security posture is solid with HTTPS and security headers implemented, but could be improved with published security policies and incident response contacts. Overall, the website is trustworthy and well-maintained, with room for enhanced privacy transparency and contact accessibility.

I

ISOPLUS Group

isoplus.de

61

ISOPLUS Group is a large European manufacturer specializing in pre-insulated pipe systems for district heating, cooling, industry, solar thermal, bioenergy, agriculture, and CCS sectors. The company operates in over 30 countries with a workforce of approximately 1,600 professionals and is part of the Viessmann Generations Group. Their website is professionally designed, multilingual, and provides comprehensive information about their products, services, and corporate profile. Technically, the site is built on TYPO3 CMS, uses modern web technologies, and integrates Google Analytics and Tag Manager for user tracking. Security-wise, the site enforces HTTPS and implements a cookie consent mechanism, but lacks explicit security policies and incident response contacts. WHOIS data is privacy protected, which is justified for a business of this scale. Overall, the website demonstrates a mature digital presence with good privacy compliance and a strong business credibility profile.

E

Energie-Wende-Garching GmbH

ewg-garching.de

61

Energie-Wende-Garching GmbH is a local energy provider based in Garching, Germany, specializing in sustainable district heating using geothermal energy. The company positions itself as a green energy supplier focused on reducing CO2 emissions and providing environmentally friendly heating solutions to residents and businesses in the Garching area. Their website reflects a professional and well-structured digital presence with clear navigation, comprehensive customer support portals, and detailed business information. Technically, the site employs modern web standards including Bootstrap for responsive design, JSON-LD structured data for SEO, and optimized media formats such as WebP images. Security posture is strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data, although formal security policies and vulnerability disclosures are absent. Overall, the website demonstrates a mature digital infrastructure aligned with the company's sustainable energy mission, fostering trust and credibility among its audience.

B

Bundesverband Erneuerbare Energie e.V.

bee-ev.de

56

The Bundesverband Erneuerbare Energie e.V. (BEE) is a German national umbrella association representing various renewable energy sectors including wind, solar, biomass, hydropower, and geothermal. The organization acts as a non-profit advocacy group aiming to promote 100% renewable energy across electricity, heat, and mobility sectors. Their website provides news, publications, event information, and policy positions targeted at stakeholders in the renewable energy industry in Germany. The site is professionally designed, well-structured, and mobile-optimized, running on TYPO3 CMS with modern frontend technologies.

A

AFK Geothermie GmbH

afk-geothermie.de

58

AFK Geothermie GmbH is a German regional energy provider specializing in geothermal energy and district heating services. Their website offers information about their services including geothermal energy production, district heating network expansion, internet services bundled with heating connections, and customer support. The company targets residential and commercial customers within the energy sector, positioning itself as a reliable regional utility provider. The website is built on WordPress with modern plugins and demonstrates good digital maturity with mobile optimization and cookie consent mechanisms. Security posture is solid with HTTPS enabled and no exposed sensitive data, though security headers and explicit security policies are absent. Overall, the website is professional, trustworthy, and compliant with GDPR, but could improve by publishing security policies and enhancing security headers.

Z

ZOLL

zollonline.com

60

ZOLL Online is a secure web portal for ZOLL, a recognized healthcare technology company specializing in medical devices and software for resuscitation and critical care. The website serves primarily healthcare professionals and institutions, providing access to account management and support resources. The site leverages modern web technologies including Vue.js and Bootstrap, and integrates with the Okta identity platform for secure authentication, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses Okta for robust authentication, which are strong security indicators. However, the absence of visible security headers and cookie consent mechanisms suggests room for improvement in compliance and defense-in-depth strategies. The lack of publicly available WHOIS data reduces transparency but does not necessarily indicate malicious intent given the professional nature of the site. Overall, the website demonstrates a solid security posture and professional business presence, though enhancements in privacy compliance and security policy disclosures would strengthen trust and regulatory adherence. The domain's WHOIS absence warrants further verification to confirm legitimacy. Strategic recommendations include implementing security headers, cookie consent, and publishing security policies to enhance compliance and user trust.

B

BioCon Valley® GmbH

bioconvalley.org

48

BioCon Valley® GmbH operates as a regional cluster and network organization focused on the life sciences and healthcare sector in Mecklenburg-Vorpommern, Germany. The company supports industry stakeholders through network management, project initiation, internationalization, and public relations, positioning itself as a key player in the regional healthcare economy. The website reflects a professional and well-structured digital presence, leveraging TYPO3 CMS and modern frontend technologies to deliver content effectively. The site is GDPR compliant with a comprehensive privacy policy and cookie consent mechanism, enhancing user trust and regulatory adherence. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. WHOIS data is unavailable, which slightly impacts trust but the overall business credibility remains high due to certifications and consistent branding.

A

AGFW

fw703.de

46

AGFW is a German association dedicated to promoting energy efficiency in heating, cooling, and combined heat and power systems, with a strong focus on district heating and climate protection goals. The website provides technical guidelines, calculation tools, and supports climate-relevant projects, targeting municipalities and energy sector stakeholders. The organization is positioned as a reputable industry association with established standards and collaborations with academic and funding institutions. Technically, the website is built on TYPO3 CMS, leveraging Bootstrap and jQuery for frontend responsiveness and Google Tag Manager for analytics. The site is moderately performant, mobile-optimized, and implements a cookie consent mechanism aligned with GDPR requirements. However, some security headers and explicit security policies are not evident. From a security perspective, the site uses HTTPS and has implemented cookie consent with opt-in/out capabilities, but lacks visible incident response contacts and vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious content were detected. The WHOIS data is minimal but does not raise immediate concerns, though more registrant transparency would improve trust. Overall, the website is professional, trustworthy, and compliant with basic privacy and security standards. Strategic improvements in security headers, incident response transparency, and contact information would enhance its security posture and user trust.

A

AGFW - Der Energieeffizienzverband für Wärme, Kälte und KWK e.V.

fw704.de

48

AGFW is a German energy efficiency association specializing in heating, cooling, and combined heat and power systems. The website provides regulatory guidance, technical standards, and calculation tools to support subsidy applications under the KWKG legislation. The organization collaborates with regulatory bodies such as BAFA and expert committees to maintain up-to-date and practical resources for industry stakeholders. The website targets energy professionals and project developers seeking compliance and funding support. Technically, the site is built on TYPO3 CMS with Bootstrap and jQuery, integrating Google Tag Manager and Google Maps with user consent. The site is mobile-optimized and structured for good user experience, though some accessibility features are basic. Performance is moderate, and SEO is basic but functional. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks visible HTTP security headers and explicit incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR. Overall, the website is professional, trustworthy, and well-suited to its niche audience. Strategic improvements in security headers and incident response transparency would enhance its security maturity and trustworthiness.

A

AGFW e.V.

agfw-shop.de

9

AGFW e.V. operates a specialized e-commerce webshop focused on providing technical literature, brochures, guidelines, and industry statistics primarily for the energy sector, with a strong emphasis on district heating technologies. The platform targets professionals and members within this niche industry, offering differentiated pricing for members and non-members. The website is built on the Magento platform, utilizing common JavaScript libraries such as jQuery, Prototype.js, and Bootstrap, indicating a moderately modern technical infrastructure. Hosting is managed via Giordano Online, as inferred from the nameservers. Security posture is adequate with HTTPS enforced and form validation scripts present; however, the absence of security headers and cookie consent mechanisms suggests room for improvement in compliance and security best practices. Overall, the site presents a professional and trustworthy front with clear business focus but could enhance privacy compliance and security transparency.

A

AGFW - Der Energieeffizienzverband für Wärme, Kälte und KWK e.V.

agfw-regelwerk.de

61

AGFW is a German industry association specializing in standardizing minimum requirements across the heat and cold supply sector. The website serves as a professional portal providing access to technical rulebooks and regulatory documents primarily for members and subscribers. The organization positions itself as a key standard-setter in the energy sector, supporting operational companies with up-to-date technical guidelines. Technically, the site employs modern web technologies including Bootstrap, jQuery, and FontAwesome, with Google Analytics and Tag Manager integrated for analytics and marketing purposes. The site is hosted on servers associated with giordano-online.net and uses HTTPS with privacy-conscious configurations such as IP anonymization. Security posture is moderate with good practices like CSRF tokens and cookie consent, though lacking explicit security policies or incident response contacts. Overall, the website is professional, well-structured, and compliant with GDPR, targeting industry professionals and members. No blocking or WAF mechanisms were detected, and no adult or questionable content is present.

B

Bertelsmann Stiftung

transforming-economies.de

54

Transforming-economies.de is a professionally maintained blog platform operated by the Bertelsmann Stiftung, a large non-profit foundation based in Germany. The website focuses on the transformation towards a sustainable social market economy, providing research insights, policy analysis, and public engagement content primarily targeted at academics, policymakers, and the interested public. The platform leverages modern web technologies including WordPress, Vue.js, Bootstrap, and Yoast SEO to deliver a high-quality user experience with good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements are recommended in implementing security headers and cookie consent mechanisms. The website demonstrates strong business credibility with consistent branding and professional content, though lacks explicit terms of service and incident response policies. Overall, the site is safe, trustworthy, and well-positioned as a knowledge dissemination platform in the sustainability and economic transformation sector.

W

Wölfel-Gruppe

dbel.cloud

60

dBEL GmbH + Co. KG is a German-based company specializing in cloud-based acoustic planning software solutions. As a young subsidiary of the Wölfel Group, which has over 50 years of expertise in acoustics and building physics, dBEL leverages scientific data and expert knowledge to provide accessible, professional tools for a broad range of industries including HVAC, event planning, and architecture. The company positions itself as a knowledge platform enabling users to independently plan and optimize acoustic projects efficiently. Technically, the website is built on TYPO3 CMS with modern frameworks like Bootstrap and integrates analytics and consent management tools such as Google Tag Manager, Hotjar, and CCM19. Security posture is solid with HTTPS enforced and domain protections in place, though DNSSEC is not enabled. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website is professional, well-structured, and trustworthy, reflecting a mature digital presence aligned with its business goals.

CoCreatingFuture UG (haftungsbeschränkt) is a small German company specializing in holistic organizational transformation processes, leveraging the Theory U methodology. The company offers process facilitation, workshops, coaching, and transformation courses aimed at organizations, teams, and individuals seeking sustainable change. Their market position is that of an innovative service provider focused on deep transformation and co-creative future design. The website is professionally designed using WordPress with the Astra theme and includes clear navigation and contact information, reflecting a good level of digital maturity. Technically, the site uses modern web technologies and plugins but lacks some advanced security headers and cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements in security policy transparency and incident response readiness are recommended. Overall, the website is trustworthy and safe, with no adult or questionable content detected. Strategic recommendations include implementing cookie consent for GDPR compliance, adding security headers, publishing security policies, and enhancing incident response information to improve trust and compliance.

PEENE TRANS GmbH is a German logistics company specializing in bulk material transport for construction sites, including mixing plants, concrete industry, and large-scale projects. The company positions itself as a reliable partner offering just-in-time delivery with a modern fleet of tractor-trailers. Their website is built on TYPO3 CMS and uses a variety of modern front-end libraries to provide a responsive and user-friendly experience. The content is professionally presented in German, targeting construction industry clients and logistics partners. Contact information is comprehensive, including multiple emails and phone numbers for key personnel. The website includes a cookie consent mechanism and a privacy policy, indicating awareness of GDPR compliance. However, no explicit terms of service or security policies are published.

N

NEUWOBA - Neubrandenburger Wohnungsbaugenossenschaft eG

neuwoba.de

48

NEUWOBA - Neubrandenburger Wohnungsbaugenossenschaft eG is a large housing cooperative based in Neubrandenburg, Germany, providing modern, affordable, and community-oriented housing solutions. The organization operates multiple subsidiaries offering social care services, property management, and new construction projects. Their market position is strong within Mecklenburg-Vorpommern, supported by over 9,000 apartments and active community engagement. The website reflects a professional and comprehensive digital presence with clear navigation and relevant content targeting local residents and cooperative members. Technically, the website is built on TYPO3 CMS with modern front-end frameworks like Bootstrap and jQuery. It incorporates various UI libraries and ensures mobile responsiveness and good SEO practices. Cookie consent and privacy policies are implemented in compliance with GDPR. Analytics usage is moderate, primarily via Google Analytics, with user tracking controlled by consent mechanisms. From a security perspective, the site enforces HTTPS and uses secure forms but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or suspicious content were detected. The domain registration data aligns well with the business claims, indicating a trustworthy and legitimate online presence. Overall, NEUWOBA's website demonstrates a mature digital infrastructure suitable for its business needs, with room for improvement in security policy transparency and accessibility features. The risk profile is low, and the site is safe for general audiences.

L

LIEPS GmbH

neueins.tv

9

Neueins.tv is a regional television broadcaster and video production company serving Mecklenburg-Vorpommern, Germany. The website is professionally designed using TYPO3 CMS and offers a range of video content including news, interviews, and local events. The company, LIEPS GmbH, has been established since 2003 and maintains consistent branding and contact information across the site. The technical infrastructure includes modern web technologies and privacy-conscious embedding of YouTube videos. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks advanced security headers and has a recently expired domain registration which poses a risk to trust and availability. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent management. Overall, the site is functional, trustworthy, and serves its regional audience effectively.

B

BEW - Das Bildungszentrum für die Ver- und Entsorgungswirtschaft gGmbH

bew.de

56

BEW - Das Bildungszentrum für die Ver- und Entsorgungswirtschaft gGmbH is a well-established non-profit educational institution based in Germany, specializing in training and continuing education in environmental protection, waste management, energy, and related sectors. The organization offers a broad range of services including seminars, workshops, online live trainings, e-learning, and inhouse training, targeting professionals and organizations within the environmental and utility industries. Their market position is strong regionally, supported by certifications such as ISO 9001 and Ökoprofit, and a consistent brand presence across multiple digital channels. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including Bootstrap and jQuery, with integrated analytics via Matomo and Google Analytics. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. Security measures include HTTPS enforcement and Google reCAPTCHA on forms, alongside a comprehensive cookie consent mechanism. However, the site lacks explicit security policies and incident response contact information. The security posture is solid with no visible vulnerabilities or exposed sensitive data, but could be enhanced by implementing additional HTTP security headers and publishing a formal security policy. Privacy compliance is strong, with clear privacy and cookie policies in German, and GDPR compliance indicators. The business credibility is high, supported by detailed contact information, certifications, and a professional content presentation. Overall, BEW demonstrates a mature digital presence with a focus on education and sustainability, though improvements in security transparency and incident response readiness are recommended to further strengthen trust and compliance.

A

AGFW e. V.

agfw.de

53

AGFW e. V. is a well-established German industry association focused on promoting energy efficiency, combined heat and power, and district heating and cooling. With over 700 member companies and more than 50 years of experience, it serves as a technical and policy advocate, providing certifications, standards, and industry services. The website reflects a professional and consistent brand presence targeting energy sector stakeholders and professionals. Technically, the website is built on TYPO3 CMS with modern frontend technologies including Bootstrap and jQuery. It integrates Google Tag Manager and Google Maps APIs for analytics and location services. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Performance is moderate with room for improvement. From a security perspective, the site uses HTTPS (assumed from canonical URL), includes CSRF protection in forms, and implements a cookie consent mechanism compliant with GDPR. However, explicit security headers and incident response policies are not evident. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is trustworthy, professional, and compliant with privacy regulations. It effectively serves its business purpose but could enhance security posture by adding security headers and publishing incident response information.

F

Financial administrations of the federal states and the federal government, represented by the IT steering group

steuerchatbot.de

63

The website steuerchatbot.de is an official German government service providing a tax chatbot to assist citizens with tax-related questions. It is designed to offer general tax information without providing personalized tax advice, aiming to improve citizen service and reduce workload on tax offices. The service supports multiple languages and is accessible 24/7. The technical infrastructure uses modern web technologies including Bootstrap and JavaScript, embedding the chatbot via an iframe with backend services hosted by IBM Deutschland GmbH and translation services by DeepL GmbH. The site is well-structured, mobile-optimized, and presents comprehensive privacy and terms of use information in modals. Security practices include encrypted data transmission and limited data retention, though explicit security headers are not evident in the provided data. No cookie policy or consent mechanism was found. Contact information is clearly provided with official government addresses, emails, and phone numbers. Overall, the site demonstrates a good balance of usability, compliance, and trustworthiness appropriate for a government digital service.

W

Wölfel-Gruppe

woelfel.de

54

Wölfel-Gruppe is a well-established German engineering company specializing in services and products related to vibrations, acoustics, structural mechanics, and environmental protection. With over five decades of experience since its founding in 1971, the company serves diverse industrial sectors including energy, manufacturing, and transportation. Their offerings include consulting, expert reports, and tailored measurement and monitoring systems. The website reflects a mature digital presence built on TYPO3 CMS, featuring comprehensive content, clear navigation, and multilingual support. Technically, the site employs modern frameworks and integrates Google Tag Manager for analytics, indicating a moderate to advanced digital maturity. Security posture is good with HTTPS enforced, though some recommended security headers are not explicitly detected. Privacy compliance is strong with clear policies and consent mechanisms in place. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

P

Poljoprivredno gospodarstvo Šember

sember.hr

45

Poljoprivredno gospodarstvo Šember is a small, family-owned winery located in Jastrebarsko, Croatia, specializing in producing award-winning wines such as rajnski rizling, chardonnay, and crni pinot. The business leverages its regional heritage and vineyard location on the Plešivica hills to attract wine enthusiasts and visitors for tasting and tours. The website reflects a well-established presence with consistent branding and clear communication of its offerings. Technically, the site uses common web technologies including Bootstrap, jQuery, Google Analytics, and Google Maps API, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and reCAPTCHA integration, but lacks advanced security headers and explicit security policies. Privacy compliance is basic with cookie consent and terms of service present but no dedicated comprehensive privacy policy. Overall, the site is trustworthy and professional, suitable for its target mature audience interested in wine products and experiences.

L

LIEPS GmbH

lieps.de

66

LIEPS GmbH is a well-established advertising agency based in Neubrandenburg, Germany, offering a comprehensive suite of marketing, design, web development, print, and video production services. With nearly two decades of experience, the agency serves a diverse clientele including startups and established businesses, positioning itself as a full-service creative partner. The website reflects a professional and consistent brand image, showcasing client references and a broad portfolio of services. Technically, the website leverages modern web technologies including Bootstrap, jQuery, and TYPO3 CMS, supported by Cloudflare for DNS and CDN services. The site is mobile-optimized and incorporates standard SEO and accessibility features, although some advanced security headers could be improved. Analytics and marketing tools such as Google Analytics and Metricool are used with appropriate cookie consent mechanisms in place, indicating good privacy compliance. From a security perspective, the site enforces HTTPS and shows no signs of vulnerabilities or exposed sensitive data. However, there is room for enhancement in security headers and incident response transparency. The WHOIS data aligns well with the business claims, showing consistent domain registration and no privacy protection that would obscure legitimacy. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements in security headers and formal security policies would further strengthen its posture.

N

NK Slaven Belupo

nk-slaven-belupo.hr

46

NK Slaven Belupo is a Croatian football club with a professional online presence providing comprehensive information about the club, its teams, matches, and football academy. The website is built on Joomla CMS with modern frameworks and includes accessibility features and GDPR-compliant cookie consent. The site uses Google Analytics and Tag Manager for user tracking with consent mechanisms in place. Security posture is moderate with HTTPS enabled but lacks explicit security headers. WHOIS data is privacy protected, which is common and justified for this type of organization. Overall, the website is trustworthy, well-structured, and serves its target audience effectively.

P

Pučko otvoreno učilište Sveti Ivan Zelina

pou-zelina.hr

54

Pučko otvoreno učilište Sveti Ivan Zelina is a Croatian public educational and cultural institution serving the local community of Sveti Ivan Zelina. The website showcases a variety of cultural events, educational programs, exhibitions, and publications, positioning itself as a regional hub for cultural and educational activities. The institution appears well-established with a domain age since 2008 and consistent WHOIS data. Technically, the website is built on Joomla CMS with modern frontend frameworks like Bootstrap and UIkit, and integrates marketing tools such as MailerLite. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and explicit security policies. Privacy compliance is basic, with no dedicated privacy or terms of service pages found. Overall, the website is professional, trustworthy, and serves its community effectively.

K

Kazalište Trešnja

kazaliste-tresnja.hr

43

Kazalište Trešnja is a well-established theatre company based in Zagreb, Croatia, with a domain registered since 1999. The website serves as a comprehensive platform for theatrical performances, ticket sales, schedules, and ensemble information, targeting the general public interested in cultural events. The business operates as a small cultural institution with a consistent brand presence and clear contact information. Technically, the site is built on WordPress using modern libraries such as jQuery, Bootstrap, and Font Awesome, with moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and GDPR compliance evident through cookie consent mechanisms and privacy policies, although security headers are lacking. Overall, the site is professional, trustworthy, and safe for general audiences.

S

Stiftung der deutschen Wirtschaft für die Nutzung und Erforschung der Windenergie auf See

offshore-stiftung.de

44

The Stiftung OFFHORE-WINDENERGIE is a well-established German foundation founded in 2005, dedicated to promoting offshore wind energy in Germany and Europe. It operates as a non-profit organization providing networking, political advisory, educational, and project-related services to stakeholders in the energy sector. The website reflects a professional and content-rich platform targeting policymakers, industry participants, and the general public interested in renewable energy. Technically, the site uses modern front-end libraries and is built on the webEdition CMS, hosted on agenturserver infrastructure. Security posture is adequate with HTTPS and secure forms, but lacks some advanced security headers and cookie consent mechanisms. Overall, the site is trustworthy and authoritative within its niche.