Security Directory

T

THURZO – FUGGER

tfze.sk

57

THURZO – FUGGER is a cultural and educational exposition located in Banská Bystrica, Slovakia, focusing on the mining history of the region, particularly from the era of the Thurzovsko-Fuggerovská company. The website offers detailed information about the exposition, including augmented and virtual reality experiences, guided tours, and historical insights. It targets tourists, schools, and history enthusiasts, providing a rich, interactive experience. The business is relatively new, founded in 2022, and operates as a small entity within the hospitality and education sectors. Technically, the website is built on WordPress with modern plugins and uses Google Analytics for visitor tracking. It is hosted on Websupport with DNSSEC enabled and uses HTTPS, indicating a secure infrastructure. However, the site lacks visible privacy and cookie policies, which is a compliance gap. Contact information is clearly provided, including phone, email, and a contact form. Overall, the website is professional, trustworthy, and content-rich, but could improve privacy compliance and security headers.

V

Verkehrsverbund Tirol

vvt.at

63

Verkehrsverbund Tirol (VVT) operates as the regional public transportation platform for Tirol, Austria, coordinating, planning, financing, and ordering public transit services. The website reflects a mature, well-established organization celebrating 30 years of service, offering a broad range of ticketing options and mobility services tailored to the regional audience. Their market position is strong within the regional transportation sector, supported by comprehensive service offerings and active community engagement through news and social media channels. Technically, the website employs modern JavaScript libraries, consent management tools like Cookiebot, and integrates Google Tag Manager and Hotjar for analytics, indicating a digitally mature infrastructure. Security posture is robust with HTTPS enforced and consent mechanisms in place, though some security headers could be further enhanced. Privacy compliance is well addressed with clear policies and user consent options. Overall, the site is professional, trustworthy, and user-friendly, serving its public service mission effectively.

S

Schwazer Frauen

schwazerfrauen.at

44

Schwazer Frauen is a local non-profit advocacy group based in Schwaz, Austria, focused on promoting gender equality and combating violence against women and children. The organization collaborates with the city government and local experts to organize awareness campaigns, educational courses, and community support initiatives such as the Frauen-Nacht-Taxi for safe transportation. The website serves as an informational and promotional platform for these activities, targeting women and girls in the local community. Technically, the website is built on WordPress using the Avada theme and Yoast SEO plugin, indicating a moderate level of digital maturity. The site is mobile-optimized and includes multimedia content such as images and videos to engage visitors. Hosting appears to be managed through a local Austrian registrar and hosting provider, with HTTPS enabled for secure communications. From a security perspective, the site benefits from HTTPS but lacks several security headers that could enhance protection. No privacy or cookie policies are present, which represents a compliance gap with GDPR and related regulations. No explicit contact information or incident response channels are published, limiting transparency in security and privacy matters. Overall, the website is trustworthy and professional in its presentation and content but would benefit from improved privacy compliance and enhanced security practices to better protect users and demonstrate regulatory adherence.

B

BWH Hotels

bwhhotels.de

57

BWH Hotels is a hospitality brand focused on providing hotel branding and franchise services with a worldwide network. The website presents a professional image with consistent branding and a clear business focus on the hotel industry in Germany. The technical infrastructure is based on TYPO3 CMS, Bootstrap framework, and includes modern tracking and consent management tools such as Google Tag Manager, eTracker, and ConsentManager. The site is mobile optimized and performs moderately well. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and headers could be improved. No blocking or WAF challenges were detected, allowing full content access. Overall, the website is trustworthy and professional but lacks visible privacy and terms of service documentation.

M

Mercury Financial LLC

mercurycards.com

73

Mercury Financial LLC operates as a financial services provider specializing in business credit cards and related financial management tools. The company targets small to medium-sized businesses, offering digital account management through a mobile app and online platform. The website demonstrates a modern technical infrastructure leveraging Angular framework and integrates multiple third-party services for analytics, consent management, and fraud detection. Security posture is generally strong with HTTPS enforcement and bot protection via hCaptcha, though explicit security headers are not evident. Privacy compliance is supported by a comprehensive privacy and security policy and an active cookie consent mechanism. However, the absence of WHOIS registration data raises concerns about domain legitimacy, which should be further investigated. Overall, the website presents a professional and trustworthy front for its financial services, but improvements in transparency and contact information availability are recommended.

Henley Business School is a well-established, triple-accredited educational institution specializing in business education including Masters, MBAs, executive education, apprenticeships, and undergraduate degrees. The website reflects a professional and consistent brand image targeting students and business professionals seeking advanced education. The technical infrastructure incorporates multiple modern analytics and marketing tools such as Google Tag Manager, Hotjar, and Facebook Pixel, indicating a mature digital presence. Security posture is generally good with HTTPS enabled and no visible sensitive data exposure; however, the absence of explicit security headers and privacy policies suggests room for improvement. Overall, the website is trustworthy and professionally maintained, but enhancing privacy compliance and security transparency would strengthen its risk profile.

C

Concept Interactive Inc.

schoolbundle.ca

60

SchoolBundle, a product line of Concept Interactive Inc., provides a Unified Communications Platform tailored for K-12 educational institutions. Their platform integrates mobile, voice, web, and social media communication tools into a single, user-friendly interface designed to enhance community engagement and streamline communications. The company positions itself as a niche provider focused on the education sector, offering services such as web solutions, mass engagement, community suites, and accessibility solutions. The website reflects a professional and consistent brand image with clear contact information and customer testimonials, supporting its credibility in the market. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies including Google Analytics, Hotjar, and ShareThis for analytics and marketing. The site is mobile optimized and accessible, with good SEO practices evident in meta tags and structured content. Performance is moderate, with no critical technical issues detected. Security posture is solid with HTTPS enforced and secure form handling, though the absence of explicit security headers and cookie consent mechanisms suggests room for improvement. From a security perspective, the site shows no signs of vulnerabilities or exposed sensitive data. However, the lack of a published security policy, incident response information, and vulnerability disclosure reduces transparency. The WHOIS data for the domain is not publicly available, indicating privacy protection which is common for Canadian domains but limits registrant transparency. Overall, the site is trustworthy and professional, with a moderate to high security maturity level. Strategically, the company should focus on enhancing privacy compliance by implementing cookie consent and publishing security policies. Improving WHOIS transparency where possible and adding incident response contacts would further strengthen trust. The platform’s focus on accessibility and integrated communications positions it well for growth in the education technology market.

I

Inclusion Winnipeg

inclusionwinnipeg.org

53

Inclusion Winnipeg is a Canadian non-profit organization dedicated to advocating for the inclusion and equal citizenship of people with disabilities in Winnipeg and surrounding areas. It is part of a larger national and international federation, Inclusion Canada and Inclusion International, respectively. The website provides information about membership, advocacy services, events, and volunteer opportunities, positioning the organization as a regional leader in disability inclusion advocacy. The site is professionally designed, mobile-optimized, and uses modern WordPress technologies and plugins to deliver content effectively. Technically, the website is built on WordPress with Oxygen Builder and optimized using WP Rocket. It integrates accessibility tools such as the ACSB app and uses Font Awesome for icons. Performance is moderate with good mobile responsiveness and SEO optimization. Analytics are handled via Fathom Analytics, indicating a privacy-conscious approach to user tracking. From a security perspective, the site enforces HTTPS and uses performance plugins that may enhance security. However, it lacks published privacy and cookie policies, security headers, and incident response information, which are areas for improvement. The domain registration is privacy-protected but consistent with the organization's profile and age, indicating legitimacy. Overall, Inclusion Winnipeg's website is a trustworthy and professional platform for its advocacy mission but should enhance privacy compliance and security transparency to improve user trust and regulatory adherence.

E

ebase Software

ebasefm.com

56

ebase Software provides a comprehensive suite of facility management software solutions designed to streamline operations such as work orders, asset management, facility inspections, and more. The company targets facility management professionals and organizations seeking to enhance operational efficiency through digital tools. The website demonstrates a professional and consistent brand presence with a focus on simplifying facility management processes. Technically, the site is built on WordPress using Elementor and related plugins, indicating a modern and maintainable infrastructure. Performance and mobile optimization are good, though accessibility could be improved. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but lacks advanced security headers and published security policies. The absence of WHOIS data raises concerns about domain legitimacy, though the active and professional website mitigates some risk. Privacy and cookie policies are missing, which impacts compliance and trust. Overall, the site is functional and professional but would benefit from enhanced transparency and security documentation.

The website aesopcanada.com serves as a login portal for Frontline Absence Management, a service focused on managing employee absences primarily within educational institutions. The business is positioned as an established provider in the education sector, with a domain age dating back to 2008, supporting its legitimacy. The site offers basic content focused on user authentication and links to corporate resources, reflecting a SaaS business model targeting educational organizations and their staff. Technically, the site employs legacy JavaScript libraries such as jQuery 1.2.6 and jQuery UI, hosted on infrastructure indicated by AWS DNS nameservers. While HTTPS is enforced and a Thawte SSL certificate is referenced, the site lacks modern security headers and uses outdated libraries, which may expose it to vulnerabilities. Performance and mobile optimization are basic, with limited SEO and accessibility features. From a security perspective, the site demonstrates some best practices like HTTPS and masked password inputs but lacks comprehensive security policies, incident response information, and cookie consent mechanisms. The WHOIS data aligns well with the business claims, showing consistent registration details and no privacy protection, enhancing trustworthiness. However, the absence of updated security controls and privacy compliance features suggests room for improvement. Overall, the website is functional and moderately trustworthy but would benefit from modernization of its technical stack, enhanced security headers, explicit privacy and cookie policies, and improved user experience to strengthen its security posture and compliance standing.

R

RiffReporter

riffreporter.de

65

RiffReporter is a German cooperative media platform dedicated to independent journalism, focusing on topics such as climate, environment, science, society, and technology. The website presents itself as a professional and well-branded journalistic outlet with a clear target audience of general readers interested in in-depth analyses and reports. The business model revolves around cooperative journalism, providing direct reporting and analysis without intermediary publishers. Technically, the site is built on modern web technologies including React and Next.js, hosted with Cloudflare DNS and CDN services, and uses Matomo for analytics, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS, employs standard security headers, and shows no signs of vulnerabilities or exposed sensitive data. However, it lacks explicit privacy and cookie policies and does not provide clear contact information or security incident response details, which are areas for improvement. Overall, the site is trustworthy and professional but could enhance its compliance and transparency aspects.

K

Krefelder Textweber

krefelder-textweber.de

58

Krefelder Textweber is a small literary group based in Germany, focused on writing and sharing poems and short stories since 2010. Their website serves as a platform to announce events and share their literary work, targeting a general audience interested in cultural and literary activities. The site is hosted on IONOS MyWebsite platform, indicating a modest but functional technical infrastructure. The website is mobile optimized and offers clear navigation, though it lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and privacy compliance elements such as privacy and cookie policies. No contact emails or phone numbers are explicitly provided, which may affect user trust and engagement. Overall, the site is functional and relevant for its niche but requires improvements in security and privacy compliance to enhance trust and regulatory adherence.

M

Mediothek Krefeld

mediothek.blog

61

Mediothek Krefeld operates as a modern media library serving the local community in Krefeld, Germany. The website functions as a blog and information portal providing book reviews, media tips, community projects, and event information. The organization positions itself as a cultural and educational institution with a focus on engaging local readers and library users. The business model is non-profit and community-oriented, with a clear emphasis on education and media access.

M

multimaps360

multimaps360.de

45

multimaps360 is a specialized service provider offering interactive 360° panorama tours, virtual walkthroughs, and drone aerial photography primarily targeting municipalities, tourism organizations, cultural sites, and businesses. The company leverages modern digital marketing tools to enhance visibility and engagement for its clients. The website is built on WordPress using the Divi theme and incorporates LiteSpeed caching and Matomo analytics, reflecting a moderate level of technical maturity and privacy awareness. Security posture is solid with HTTPS enabled, though improvements are recommended in security headers and cookie consent implementation. Overall, the site is professional, content-rich, and accessible, supporting a small-sized business with a clear niche in digital media and marketing.

B

Brevo

newsletter2go.de

67

Brevo operates as a technology company specializing in email marketing and newsletter services, integrating the Newsletter2go brand to serve German-speaking markets. The website provides login access and account creation for users, targeting businesses and marketers seeking efficient email marketing solutions. The company positions itself as an established player in the SaaS email marketing space with a professional and consistent brand presence. Technically, the website is built on WordPress with modern JavaScript frameworks such as React and uses SEO best practices including structured data and canonical URLs. Performance and mobile optimization are good, though accessibility is basic. Security posture is solid with HTTPS enforced and secure login forms, but lacks some security headers and explicit privacy/cookie policies. WHOIS data is missing, which slightly reduces trust but the professional site and branding mitigate concerns. Overall, the site is safe, business-focused, and well-implemented with room for improvement in privacy compliance and security headers.

B

Bundesverband Soziokultur e.V.

utopolis.online

47

Utopolis.online is a German non-profit cultural initiative operated by Bundesverband Soziokultur e.V., focusing on promoting socio-cultural activities in urban neighborhoods through artistic and community engagement projects. The website serves as an information hub for the UTOPOLIS program, showcasing project results, providing a toolbox of methods, and sharing news and events. The platform targets cultural practitioners, local communities, and stakeholders interested in neighborhood development through culture. Technically, the site is built on WordPress with modern plugins and frameworks, including Matomo for privacy-conscious analytics. The site is well-structured, mobile-optimized, and integrates cookie consent mechanisms, reflecting good privacy compliance. Security posture is adequate with HTTPS and domain transfer protection, though DNSSEC is not enabled and security headers are missing, representing areas for improvement. No contact emails or phone numbers are explicitly provided, which may limit direct communication. Overall, the site is trustworthy, professionally maintained, and aligned with its non-profit mission.

S

Steve Zeidler

froodmat.com

42

The website froodmat.com serves as the professional portfolio for photographer Steve Zeidler, showcasing his photography work primarily in Germany and Switzerland. The site targets photography enthusiasts and potential clients seeking commercial and personal photography services. The business model is focused on portfolio presentation and commissions, positioning itself as a niche professional photographer with a small business footprint. The website is built on the Koken CMS platform and employs modern web technologies including jQuery, Google Analytics, and Matomo for visitor tracking. The design is professional and mobile optimized, providing a good user experience with clear navigation and relevant content. However, the site lacks critical privacy and cookie policies, as well as contact information, which impacts its compliance and trustworthiness.

M

Mobiteam GmbH

mobiteam.de

46

Mobiteam GmbH is a specialized German web design and development agency based in Berlin, founded in 2012. The company offers custom web design, eCommerce solutions, online marketing, consulting, and technical maintenance services primarily targeting corporate and business clients. They have a strong market position supported by awards and positive client testimonials. Technically, the website is built on WordPress with modern plugins and analytics tools, optimized for mobile and SEO. Security posture is good with HTTPS and cookie consent but lacks explicit security policies and incident response information. Overall, the domain registration and business information are consistent and trustworthy. Strategic recommendations include publishing privacy and security policies and enhancing incident response transparency.

M

Memento Park

mementopark.hu

39

Memento Park is a cultural and historical tourist attraction located in Budapest, Hungary. It offers visitors a unique experience centered around the communist dictatorship era through its Statue Park, cinema, exhibitions, and guided tours. The website serves as an informational and booking platform targeting general audiences interested in history and cultural tourism. Technically, the site is built on WordPress using the Foundation framework and integrates third-party services such as FareHarbor for bookings and Google Analytics for tracking. The site is mobile optimized and presents a professional design with clear navigation. Security-wise, the website enforces HTTPS and avoids exposing sensitive data, but lacks some security headers and explicit incident response or security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and legitimate, with room for improvement in security and privacy practices.

B

Budapest Brand Nonprofit Zrt.

budapestbrand.hu

45

Budapest Brand Nonprofit Zrt. operates a comprehensive city branding and cultural promotion website focused on Budapest, Hungary. The organization aims to foster a sense of community and pride among Budapest residents and visitors through articles, podcasts, campaigns, and events. The website is well-structured, content-rich, and professionally designed, reflecting a mature digital presence for a nonprofit entity founded in 2020. Technically, the site leverages WordPress CMS with Bootstrap and AngularJS components, integrating multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and cookie consent mechanisms are recommended. Privacy compliance is supported by a comprehensive GDPR-aligned privacy policy, but cookie consent is lacking. Overall, the site is trustworthy, with consistent branding and active social media engagement, positioning it as a key cultural and governmental communication platform for Budapest.

R

Regio Augsburg Wirtschaft GmbH

region-a3.com

51

Regio Augsburg Wirtschaft GmbH operates the website region-a3.com as a comprehensive web portal dedicated to the economic region of Augsburg (A³). The site provides valuable information, success stories, and offers targeted at professionals, entrepreneurs, and investors within the region. It positions itself as a regional economic development and promotion platform, supporting innovation, sustainability, real estate, and workforce development. The website is professionally designed, mobile-optimized, and uses modern WordPress technologies including Elementor and WP Rocket for performance and user experience. Technically, the site employs a mature infrastructure with SEO best practices, structured data (JSON-LD), and multiple tracking and marketing tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. Security posture is strong with HTTPS enforced and security headers implied, although explicit security policies and incident response contacts are not published. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service pages detected. The WHOIS data for the domain is missing or inaccessible, which is inconsistent with the active and professional website presence. This reduces trust slightly but does not indicate immediate risk. Overall, the site is safe, trustworthy, and serves its business purpose well, though improvements in privacy transparency and WHOIS registration clarity are recommended.

C

Chor des Bayerischen Rundfunks

br-chor.de

68

The website www.br-chor.de represents the official online presence of the Chor des Bayerischen Rundfunks, a prestigious choral institution affiliated with Bayerischer Rundfunk in Germany. It offers detailed information about concerts, ticketing, media content including livestreams and recordings, and educational initiatives. The site targets classical music enthusiasts and cultural audiences primarily in Bavaria and Germany. The business model centers on cultural promotion and audience engagement through performances and media distribution. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Usercentrics CMP for privacy compliance. It employs jQuery and other libraries for enhanced user experience and responsiveness. Security posture is strong with HTTPS enforced and consent management implemented, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is professional, trustworthy, and compliant with GDPR regulations, reflecting a mature digital infrastructure suitable for a cultural institution.

D

Devitec ApS

devitec.dk

55

Devitec ApS is a Danish IT solutions provider specializing in custom software development, system integration, data analysis, and process monitoring primarily for process and food production industries. Established in 2008, the company positions itself as a niche provider focused on delivering tailored IT applications that improve operational efficiency and reduce costs for its clients. The website content is primarily in Danish and targets a professional B2B audience within Denmark. Technically, the website is built using basic HTML, CSS, and JavaScript without modern frameworks or CMS platforms. The site lacks mobile optimization and accessibility features, indicating a need for modernization. Performance is moderate, with no advanced analytics or tracking scripts detected, reflecting a minimalistic digital footprint. From a security perspective, the site lacks important security headers, DNSSEC is not enabled, and there is no visible HTTPS enforcement or HSTS headers, which lowers the security posture. Privacy compliance is addressed through linked privacy and cookie policies hosted on Iubenda, indicating awareness of GDPR requirements. However, there is no visible incident response or security policy information, and no terms of service page is present. Overall, the website is functional and provides essential business information but would benefit from technical and security improvements to enhance trust and compliance. The domain registration is consistent and long-standing, supporting the legitimacy of the business. Strategic recommendations include improving security headers, enabling DNSSEC, enforcing HTTPS, enhancing mobile responsiveness, and publishing security and incident response policies.

S

Symphonieorchester des Bayerischen Rundfunks

br-so.de

70

The Symphonieorchester des Bayerischen Rundfunks (BRSO) operates a professional and comprehensive website focused on classical music concerts, ticket sales, educational outreach, and media content distribution. The orchestra enjoys a strong market position in Germany and internationally, supported by a reputable parent company, Bayerischer Rundfunk. The website targets classical music enthusiasts, families, students, and the general public interested in orchestral music. Technically, the site is built on WordPress with modern plugins and technologies, ensuring good performance, mobile optimization, and SEO compliance. Security posture is solid with HTTPS, consent management, and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, professional, and compliant with GDPR, providing a positive user experience and clear business credibility.

M

Münchner Rundfunkorchester

rundfunkorchester.de

70

The Münchner Rundfunkorchester website serves as a comprehensive digital platform for the Munich-based classical orchestra, providing detailed information on concerts, ticketing, educational initiatives, and media releases such as CDs and DVDs. The organization positions itself as a key cultural institution within the Bavarian region, targeting classical music enthusiasts, families, and educational groups. The website reflects a professional and consistent brand image aligned with the Bayerischer Rundfunk network. Technically, the site is built on WordPress with modern plugins like Yoast SEO and Usercentrics for consent management, ensuring GDPR compliance and good SEO practices. The site is mobile-optimized and accessible, with moderate performance and use of contemporary JavaScript libraries such as Swiper.js for interactive elements. Hosting details suggest a stable and professional infrastructure. From a security perspective, the site uses HTTPS and implements a consent management platform with captcha protection on forms, indicating a good baseline security posture. However, the absence of explicit security headers and published privacy or terms of service documents suggests areas for improvement. No vulnerabilities or suspicious content were detected. Overall, the website is trustworthy, professionally maintained, and compliant with key privacy regulations, though it would benefit from enhanced transparency through published policies and improved security headers. The risk level is low, and the site effectively supports the orchestra's business and cultural objectives.

U

urbnups UG (haftungsbeschränkt)

urbnups.com

68

urbnups UG (haftungsbeschränkt) operates a travel and experience discovery platform that enables users to find, save, and share unique local moments and travel destinations. The company targets travelers and local explorers seeking authentic experiences, positioning itself as a niche community-driven platform with mobile app support. The website is well-designed, mobile-optimized, and uses modern web technologies such as React, Next.js, and Material-UI, hosted on Hetzner with Cloudflare DNS. Security is robust with HTTPS, security headers, and no detected vulnerabilities. Privacy policies are comprehensive and GDPR compliant, though direct contact emails and phone numbers are not publicly listed, relying on contact forms instead. Social media presence on Instagram, Facebook, and LinkedIn supports community engagement. Overall, the platform demonstrates a mature digital infrastructure and trustworthy business presence.

O

Olive Digital Consultancy Ltd.

olivedc.co.uk

45

Olive Digital Consultancy Ltd. is a small UK-based digital consultancy firm focused on helping clients leverage and monetize their digital assets. The website is currently a 'coming soon' placeholder with minimal content, highlighting services such as web design, SEO, and digital marketing targeted primarily at businesses in the West Midlands region. The company appears to have been founded in 2017 and is registered in England and Wales. Technically, the website uses standard web technologies including Normalize.css, Google Fonts, Font Awesome icons, and integrates Mailchimp for email subscriptions and Google Analytics for visitor tracking. The site is basic in design and mobile optimization, with no detected CMS or hosting provider information. Performance is moderate with basic SEO and accessibility features. From a security perspective, the site uses HTTPS implied by canonical tags and external form submission URLs, but lacks visible security headers such as CSP or HSTS. No privacy, cookie, or terms of service policies are present, indicating compliance gaps. The WHOIS lookup failed due to domain naming issues, preventing verification of domain registration details and reducing trustworthiness. Overall, the website presents a moderate risk profile with room for improvement in security posture, privacy compliance, and domain legitimacy verification. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, verifying domain registration, and enhancing technical and content quality to build trust and compliance.

B

Budapesti Vállalkozásfejlesztési Közalapítvány

bvk.hu

56

Budapesti Vállalkozásfejlesztési Közalapítvány is a well-established non-profit foundation founded in 1995, serving as a bridge between Budapest's city governance and local micro, small, and medium enterprises. The organization offers microfinancing products, business development services including mentoring and training, and promotes smart city initiatives to foster innovation and cooperation. Their market position is strong within the local government ecosystem, supported by certifications such as EUBIC by EBN. Technically, the website is built on WordPress with modern plugins and scripts, optimized for SEO and mobile use, and presents content professionally with clear navigation and accessibility features. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the site is trustworthy, compliant with GDPR, and provides comprehensive contact information.

B

Budapest Brand Nonprofit Zrt.

budapestinfo.hu

72

Budapestinfo.hu is the official tourism website for Budapest, managed by Budapest Brand Nonprofit Zrt. It provides comprehensive information about the city's attractions, events, cultural programs, and the Budapest Card, which offers tourists discounts and benefits. The site targets tourists and visitors seeking authoritative and up-to-date travel information. Technically, the website employs modern web technologies including Vue.js, Laravel backend, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is well-optimized for mobile and desktop, with fast loading times and clear navigation. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.

B

Budapest Főváros Önkormányzata

enbudapestem.hu

58

Énbudapestem is an official digital news and cultural portal operated by the Budapest municipal government, providing residents and visitors with timely news, cultural insights, and community updates about Budapest. The website is well-branded with consistent use of Budapest city logos and links to the official Budapest.hu domain, establishing strong trust and legitimacy. Technically, the site is built on modern web technologies including Next.js and React, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS enforced and standard security headers present, although explicit incident response and vulnerability disclosure information are absent. Privacy compliance is good, with accessible privacy and cookie policies and a consent mechanism in place. Overall, the website presents a professional, trustworthy, and user-friendly platform for Budapest-related content.

B

Bundesverband Soziokultur e.V.

soziokultur.de

45

Bundesverband Soziokultur e.V. is a German non-profit umbrella organization supporting socio-cultural institutions with programs, advocacy, and resources focused on sustainability, democracy, and cultural participation. The website is built on WordPress with a modern tech stack including Leaflet maps, Slick carousel, and Matomo analytics, reflecting a mature digital presence. Security posture is solid with HTTPS and cookie consent, though security headers and explicit incident response policies are absent. Overall, the site is professional, content-rich, and trustworthy, serving a specialized cultural audience effectively.

D

Datenschutz Pöllinger GmbH

datenschutz-poellinger.de

56

Datenschutz Pöllinger GmbH is a specialized German company providing comprehensive data protection consulting, information security, and IT security services. They combine expert advisory with proprietary software solutions for data protection management, targeting businesses needing GDPR compliance and security certifications such as ISO 27001 and TISAX. The company also offers training and whistleblower system implementations, positioning itself as a trusted partner in the data protection ecosystem. Technically, the website is built on the auctores CMS platform, leveraging modern JavaScript libraries like jQuery and Slick Carousel, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforced and nonce usage in scripts, though some security headers and incident response details are missing. Overall, the site is professional and trustworthy, though it lacks explicit privacy and cookie policies, which impacts compliance scoring.

G

Gödöllő Város Önkormányzata

godollo.hu

52

Gödöllő Város Önkormányzata operates as the official municipal government website for the city of Gödöllő, Hungary. It provides residents and visitors with essential information about local governance, public services, news, and community resources. The website is positioned as a trusted source for municipal data and citizen engagement, reflecting the city's identity and growth near Budapest. Technically, the site is built on WordPress using the Astra theme and Elementor page builder, incorporating modern SEO practices and accessibility features. The presence of structured data and cookie consent mechanisms indicates a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers could enhance protection. Privacy compliance is well addressed with clear policies and consent management. Overall, the site demonstrates a professional, trustworthy, and user-friendly platform for local government communication.

The website for domain vhs-aichach-friedberg.de is currently non-functional, displaying a TYPO3 'Page Not Found' error due to missing site configuration. There is no accessible content, business information, or user engagement features available. The site appears to be hosted on GoDaddy infrastructure as indicated by the nameservers. Due to the lack of content and configuration, the website does not provide any privacy, cookie, or terms of service policies, nor does it offer contact information or security-related disclosures. Technically, the site uses TYPO3 CMS but is not properly configured, resulting in a poor user experience and no SEO value. Security posture cannot be fully assessed but is likely poor given the absence of HTTPS confirmation and security headers. Overall, the website is not currently serving its intended purpose and presents a high risk for trust and credibility.

R

Regio Augsburg Wirtschaft GmbH

regio-augsburg-wirtschaft.de

51

Regio Augsburg Wirtschaft GmbH (A³) is a regional economic development organization representing the city of Augsburg and the surrounding districts. The company focuses on promoting the Augsburg economic region, supporting local businesses, attracting new investments, and fostering skilled workforce development. The website is professionally designed, well-structured, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, it leverages WordPress with Elementor, enhanced by performance and privacy plugins such as WP Rocket and Borlabs Cookie. Security posture is good with HTTPS and consent mechanisms, though lacks some security headers and published policies. The absence of WHOIS data reduces domain registration trust but does not detract from the professional business presentation. Overall, the website is a credible and effective platform for regional economic promotion.

S

Stadt Aichach

sisischloss.bayern

64

The Sisi-Schloss Aichach website represents a government-operated cultural heritage site focused on the historic water castle in Aichach-Unterwittelsbach, Germany. It provides detailed visitor information, exhibitions related to Kaiserin Elisabeth, and cultural events. The site targets tourists and local visitors interested in history and culture. The business model is public sector cultural tourism, with Stadt Aichach as the owner and operator. Technically, the website uses a moderate technology stack including jQuery, ikiss CMS, and accessibility tools. It is mobile optimized and includes SEO and accessibility features. Performance is moderate, with room for improvement in security headers and DNSSEC implementation. Security posture is basic but adequate, with HTTPS enabled and cookie consent mechanisms in place. However, the absence of DNSSEC and security headers suggests potential areas for enhancement. No incident response or security policy information is publicly available. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. The domain registration aligns well with the official city ownership, reinforcing legitimacy. Strategic improvements in security and transparency could further strengthen the site's posture.

A

Aachener Krimitage

aachener-krimitage.de

44

Aachener Krimitage is a regional cultural event organizer specializing in literary festivals focused on crime and suspense literature in Aachen, Germany. The website provides detailed event information, partner and sponsor details, and contact information primarily targeting fans of crime literature and cultural event attendees. The business model revolves around organizing events, ticket sales, and collaboration with local partners and sponsors. Technically, the website is built on Joomla CMS using the Helix Ultimate template framework and Bootstrap, hosted by Cloudpit. The site is mobile-optimized and performs moderately well with good SEO practices. Security posture is solid with HTTPS enforced and a cookie consent mechanism in place, though it lacks security headers and a privacy policy page. Overall, the domain registration is consistent with the website's purpose and location, indicating legitimacy. The site is safe for general audiences with no adult content detected.

Nogajski.de is a German small business website offering professional photography and web design services, boasting over 20 years of experience in photography and over 10 years in web development. The site targets individuals and businesses seeking quality visual and web solutions. The business operates in a niche local market with a clear focus on service delivery. Technically, the website employs common JavaScript libraries such as jQuery, lazySizes for image optimization, WOW.js for animations, and Piwik/Matomo for analytics, hosted on kasserver.com. The site is moderately optimized for mobile devices and performance, with basic SEO and accessibility features. Security posture is moderate but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance. The WHOIS data is limited but does not raise immediate concerns, though more registrant details would improve trust. Overall, the website is professional and functional but could benefit from enhanced security and privacy compliance measures.

B

Buchjournal

buchjournal.de

57

Buchjournal is a well-established media publication serving the German book trade sector, offering a leading customer magazine with a large readership. The website provides book reviews, bestseller lists, and literature news, targeting literature enthusiasts and book retailers. The business model revolves around subscription and advertising revenue, positioning Buchjournal as a key player in its niche market. Technically, the site is built on Drupal 10, leveraging modern analytics (Matomo) and advertising tools (Revive Adserver), hosted by Anexia. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security-wise, the site enforces HTTPS, includes cookie consent mechanisms, and respects Do Not Track signals, though it lacks explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and compliant with GDPR, with room for improvement in security transparency and policy disclosures.

BÜCHERBAUKASTEN K. Motzet Verlagsgesellschaft mbH operates a specialized book catalog publishing service targeting independent bookstores in Germany. With a 50-year history, the company offers customized book catalogs and curated book recommendations, positioning itself as a niche player in the retail and media sectors. The website is built on WordPress and uses legacy JavaScript libraries, indicating moderate digital maturity. While the site provides clear contact information and cookie consent mechanisms, it lacks modern security headers and uses outdated software versions, which pose potential security risks. Overall, the business demonstrates credibility and a consistent brand presence but should modernize its technical infrastructure to enhance security and performance.

B

Bibliotheek.nl

bibliotheek.nl

58

Bibliotheek.nl serves as the national portal for public libraries in the Netherlands, providing access to a wide range of library services including physical and digital collections, membership information, educational resources, and community engagement opportunities. The platform supports a large network of 133 library organizations with 800 branches, positioning itself as a key public service in Dutch education and culture. The website is well-structured, user-friendly, and targets a broad audience from children to adults interested in reading, learning, and community activities. Technically, the website is built on Adobe Experience Manager CMS, leveraging modern web technologies such as JavaScript and CSS. It demonstrates good mobile optimization, accessibility, and SEO practices. The site uses HTTPS exclusively, ensuring secure communications, and implements cookie consent mechanisms aligned with GDPR requirements. Analytics are handled via Matomo, indicating a privacy-conscious approach to user tracking. From a security perspective, the site maintains a solid posture with HTTPS and secure form handling but lacks explicit security headers and a public security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's public service nature, confirming legitimacy and consistency. Overall, Bibliotheek.nl is a trustworthy, professional, and well-maintained public service website with strong content quality and compliance. Opportunities exist to enhance security transparency and incident response readiness to further strengthen trust and resilience.

O

OCLC, Inc.

hostedwise.nl

67

OCLC, Inc. is a globally recognized non-profit cooperative serving libraries and educational institutions by providing shared technology services, bibliographic databases, and resource sharing solutions. The organization holds a leading market position in the library technology sector, offering key services such as WorldCat, library management, and digital content solutions. The website reflects a mature digital presence with comprehensive content tailored to library professionals and institutions worldwide. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, and Visual Website Optimizer, integrated within an Adobe Experience Manager CMS environment. Performance and mobile optimization are adequate, supporting a good user experience. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, though explicit security and incident response policies are not publicly detailed. WHOIS data is privacy protected, which is justified given the organization's size and nature. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission and audience.

S

Sommerleseclub NRW

sommerleseclub.de

44

Sommerleseclub NRW is a regional educational initiative focused on promoting summer reading among children and families in North Rhine-Westphalia, Germany. It is supported by local public libraries and government cultural institutions, providing a structured summer reading program with creative and team-based activities. The website serves as an informational and engagement platform for participants and libraries, featuring online logbooks, registration information, and creative resources. The project is well-positioned as a trusted non-profit educational program with strong regional government backing. Technically, the website employs modern web technologies including Vue.js and HLS.js for video streaming, hosted on a professional hosting provider's infrastructure. The site is mobile-optimized with good SEO and accessibility basics, although some improvements could be made in accessibility and cookie consent compliance. Security posture is solid with HTTPS and CSRF protections, but lacks explicit security headers and incident response contacts. Overall, the security posture is good with no visible vulnerabilities or exposed sensitive data. Privacy compliance is adequate with a comprehensive privacy policy but missing cookie consent mechanisms. The business credibility is high due to government support and transparent contact information. No advertising or tracking scripts were detected, enhancing user privacy. Strategic recommendations include implementing cookie consent banners, adding terms of service and vulnerability disclosure pages, enhancing security headers, and publishing incident response contacts to improve trust and compliance further.

podcast.de is a German-language podcast directory and media portal established since 2004, offering a comprehensive platform for podcast discovery, news, tips, and related services. The website targets podcast listeners and creators primarily in Germany, providing millions of free audio and video downloads along with editorial content. Technically, the site uses modern web technologies such as Vue.js and Matomo analytics, hosted on Schlundtech servers, ensuring a stable and moderately performant user experience with good mobile optimization. Security posture is solid with HTTPS and CSRF protections, though lacking explicit security headers and published security policies. Privacy compliance is limited due to missing visible privacy and cookie policies. Overall, the site is professional, trustworthy, and well-positioned in the German podcast media market.

K

Kulturbüro der Stadt Krefeld

kubik-krefeld.de

41

KUBIK Krefeld is a cultural education portal operated by the Kulturbüro der Stadt Krefeld, providing a curated online catalog of educational offers from municipal and independent cultural providers. The website targets residents and visitors interested in cultural learning opportunities, including families, children, and educators. It serves as a local government-supported platform to promote cultural engagement in Krefeld. Technically, the site is built on WordPress with a custom theme and uses jQuery and Modernizr for frontend functionality. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and nonce usage for AJAX forms, but lacks security headers and a cookie consent mechanism. No direct contact information or social media links are provided, which slightly impacts business credibility. Overall, the site is trustworthy and professionally maintained, though improvements in privacy compliance and security headers are recommended.

W

WFG Wirtschaftsförderungsgesellschaft Krefeld mbH

kreativkrefeld.de

51

KREATIVKREFED is a regional online platform operated by WFG Wirtschaftsförderungsgesellschaft Krefeld mbH, focused on connecting creative professionals and businesses in Krefeld, Germany. The website offers a directory of creative service providers, job listings, event announcements, and a magazine with relevant articles. It targets creative industry stakeholders seeking networking, business opportunities, and support. The platform positions itself as a key regional resource for creative impulses and business development in the creative sector. Technically, the website is built on WordPress, leveraging common plugins for privacy (Borlabs Cookie), anti-spam (Honeypot), and email protection. It uses jQuery and Swiper.js for interactive elements and is optimized for mobile devices with good SEO practices. The site enforces HTTPS and employs a custom GDPR-compliant recaptcha mechanism, reflecting a mature digital infrastructure. From a security perspective, the site demonstrates good practices including HTTPS, cookie consent management, and anti-spam measures. However, it lacks explicit security headers and published security or incident response policies. No vulnerabilities or suspicious content were detected. Privacy compliance is strong, with a comprehensive privacy policy and cookie management. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy regulations. It serves its target audience effectively with relevant content and functional features. Strategic improvements could include publishing a security policy, adding security headers, and providing direct contact information for incident response.

B

Borgmann Automobilhändler GmbH

borgmann-krefeld.de

55

Borgmann Automobilhändler GmbH operates as a medium-sized automobile dealership based in Krefeld, Germany, specializing in new and used vehicle sales and servicing for Volkswagen Group brands including VW, Audi, Skoda, Seat, Cupra, as well as GWM commercial vehicles. The company targets local customers seeking passenger cars, transporters, and motorhomes, positioning itself as a trusted regional dealer with comprehensive service offerings. The website reflects this business focus with clear branding, relevant content, and a professional presentation. Technically, the website is built on the TYPO3 CMS platform, leveraging modern frontend libraries such as jQuery, FontAwesome, Owl Carousel, and Bootstrap components. Hosting is provided by SchlundTech, a reputable German hosting provider. The site is mobile-optimized and incorporates SEO best practices including structured data and meta tags. Cookie consent is managed via Cookiebot, ensuring compliance with GDPR and providing users with granular control over cookie categories. From a security perspective, the site enforces HTTPS and integrates standard tracking tools like Google Analytics and Facebook Pixel responsibly with user consent. While explicit security headers are not fully confirmed, no critical vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contact is noted as an area for improvement. Overall, the site demonstrates a solid security posture appropriate for its business scale. The domain WHOIS data aligns with the website's business claims, showing consistent hosting and domain usage without suspicious patterns. No WAF or blocking mechanisms interfere with content accessibility, allowing full analysis. The site maintains a high level of trustworthiness and professionalism, making it a reliable digital presence for the Borgmann Automobilhändler GmbH. Strategic recommendations include enhancing security headers, publishing terms of service and security policies, and maintaining up-to-date third-party libraries to further strengthen compliance and security posture.

The Freunde und Förderer der Mediothek Krefeld e.V. is a small non-profit association dedicated to supporting and promoting the Mediothek Krefeld library through cultural and literary activities. The website serves as a hub for event announcements, book recommendations, and community engagement, targeting readers and local supporters. The organization maintains a consistent and professional online presence with clear contact information and social media integration. Technically, the site is built on the Jimdo Creator CMS platform, leveraging Jimdo's hosting and standard JavaScript libraries, ensuring moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and explicit incident response policies. Privacy compliance is addressed with accessible privacy and cookie policies, aligning with GDPR requirements. Overall, the site is trustworthy, content-rich, and well-maintained, suitable for its community-focused mission.

PolyPublisher Marketplace is a specialized platform associated with RiffReporter, targeting media publishers who require access to marketplace services. The website primarily serves as a login portal and access application point for publishers. The business operates within the media sector in Germany and appears to be a small-sized entity founded in 2020. Technically, the site uses modern JavaScript modules, Material-UI for UI components, and Matomo for analytics, hosted with Cloudflare DNS services. The website is mobile optimized with basic accessibility and SEO features but lacks comprehensive privacy and cookie policies. Security posture is moderate with clientTransferProhibited domain status but lacks DNSSEC and explicit security headers, which are recommended for improvement. Overall, the site is professional but minimalistic, focusing on core login functionality without extensive content or marketing features.