Security Directory

N

nextbike GmbH

nextbike.de

57

nextbike GmbH operates a leading bike-sharing platform active in over 300 cities worldwide, primarily targeting urban commuters and residents. The company offers app-based bike rentals with flexible tariffs including base rates and subscription models. The website reflects a mature digital presence with strong branding, comprehensive content, and clear user guidance. Technically, the site is built on WordPress with modern frontend components and includes robust SEO and mobile optimization. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, nextbike presents a trustworthy and professional online presence aligned with its transportation sector business model.

B

Budapest Főváros Önkormányzata

budapest.hu

61

Budapest.hu is the official city government portal for Budapest, Hungary, providing residents, businesses, and visitors with comprehensive information about municipal services, city developments, green initiatives, cultural events, transportation, utilities, and business-related matters. The website is well-branded and consistent with the official identity of Budapest's local government, supported by a domain registered since 1997, indicating a long-standing and legitimate presence. Technically, the site leverages modern web technologies including the Next.js React framework, Google Fonts, and SVG icons, delivering a responsive and user-friendly experience optimized for mobile devices. SEO practices are well implemented with appropriate meta tags and Open Graph data. Performance is moderate, with preloading of key assets and deferred JavaScript loading. From a security perspective, the site enforces HTTPS and includes some security headers, though additional headers like X-Frame-Options and Content-Security-Policy could enhance protection. No vulnerabilities or exposed sensitive data were detected in the analyzed content. However, the site lacks explicit privacy and cookie policies, as well as a vulnerability disclosure or incident response contact, which are important for compliance and security transparency. Overall, Budapest.hu presents a trustworthy and professional government portal with good technical implementation and business credibility. The main areas for improvement include publishing comprehensive privacy and cookie policies with consent mechanisms, enhancing security headers, and providing clear contact information for security incidents and general inquiries.

N

nextbike business

nextbike.net

61

Nextbike business operates as a European market leader in bike-sharing, providing tailored mobility solutions including both station-based and stationless systems. The company is positioned under the parent company TIER Mobility and targets urban mobility customers and business clients across Europe. The website content is professionally presented in German, with strong SEO and structured data implementation, reflecting a mature digital presence. Technically, the site is built on WordPress with common plugins and libraries, offering good mobile optimization and user experience. However, the absence of visible privacy and cookie policies, security headers, and WHOIS registration data introduces concerns regarding compliance and domain legitimacy. Security posture is moderate but could be improved with enhanced headers and explicit policies. Overall, the site is functional and professional but requires improvements in privacy compliance and security transparency to strengthen trust and regulatory adherence.

R

run.events GmbH

runevents.net

68

run.events GmbH is a German-based technology company founded in 2021 that offers an AI-powered event management platform designed to streamline the entire event lifecycle from planning to post-event analysis. The platform targets event organizers, agencies, venues, and associations, providing services such as agenda management, marketing automation, ticketing, on-site check-in, attendee tracking, and event analytics. The company positions itself as a cost-effective and secure alternative to traditional event management tools, emphasizing AI-driven insights and European data privacy compliance. Technically, the website is built using modern JavaScript frameworks (Astro), hosted likely on Microsoft Azure, and integrates multiple analytics and marketing tools including Google Analytics, Microsoft Clarity, HubSpot, and LinkedIn Insight Tag. The site is well-optimized for mobile devices, fast loading, and features a professional design with clear navigation. From a security perspective, the site enforces HTTPS, uses clientTransferProhibited domain status, and implements cookie consent mechanisms aligned with GDPR. However, DNSSEC is not enabled, and some recommended security headers are not explicitly detected. No critical vulnerabilities or exposed sensitive data were found. Overall, run.events demonstrates a mature digital presence with strong business credibility and a good security posture. Strategic improvements include enabling DNSSEC, publishing a security.txt file, and enhancing security headers to further strengthen trust and compliance.

G

Classic Car Auctions | Gooding Christie’s

goodingco.com

64

The domain www.goodingco.com appears to be unregistered or inactive as indicated by the WHOIS raw output stating 'No match for "WWW.GOODINGCO.COM"'. The website content is inaccessible or non-existent, with the provided HTML content truncated and lacking meaningful data. Consequently, no business information, contact details, or security policies are available for analysis. The technical infrastructure and digital maturity cannot be assessed due to the absence of accessible content. Security posture evaluation is not possible, and no vulnerabilities or compliance gaps can be identified. Overall, the domain does not present any trust indicators or business credibility, and the risk assessment is high due to the lack of active presence.

M

mmtro.com (1×1)

mmtro.com

52

The website mmtro.com presents an extremely minimal digital presence, consisting solely of a blank page with a single 1x1 pixel image and no textual or interactive content. The domain is registered since 2012 with a reputable registrar and hosted on Amazon AWS infrastructure, indicating a legitimate registration but the website itself lacks any meaningful business information or user engagement features. There are no privacy, cookie, or terms of service policies, nor any contact or social media information, which significantly limits trust and compliance posture. Technically, the site lacks modern SEO, accessibility, and security best practices such as DNSSEC and security headers. The security posture is basic with no visible vulnerabilities but also no advanced protections. Overall, the site appears inactive or a placeholder, resulting in a low AI score and limited business credibility.

A

Acquire

acquire.io

70

Acquire is a technology company founded in 2012, offering a unified customer support platform that integrates live messaging, video calling, workflows, call deflection, and email management. The company targets businesses seeking to enhance their customer service capabilities through a SaaS model. The website is professionally designed with consistent branding and clear navigation, reflecting a mature digital presence. Technically, the site leverages modern tools such as Webflow CMS, Cloudflare DNS, Google Analytics, Google Tag Manager, and Marketo for marketing automation, indicating a well-integrated digital infrastructure. Security-wise, the site uses HTTPS and has domain status protections but lacks DNSSEC and explicit security headers. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service in the analyzed content. Overall, the site presents a high level of professionalism and trustworthiness, though improvements in security and privacy disclosures are recommended.

P

portfolio institutional

portfolio-institutional.co.uk

61

Portfolio Institutional is a UK-based branch of Portfolio Verlag, delivering specialized financial media content aimed at institutional and semi-institutional investors across the UK and Europe. The website offers a broad range of services including news, in-depth analysis, expert opinions, interviews, roundtables, and event coverage, supported by a professional magazine subscription service. The site is well-positioned in the niche financial media market, leveraging its parent company's reputation and focusing on ESG, private markets, and pension-related content. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates Google services for analytics and advertising. It demonstrates good mobile optimization, accessibility, and SEO practices. Security-wise, the site enforces HTTPS, uses reCAPTCHA for forms, and provides cookie consent mechanisms, though explicit security headers and incident response policies are not clearly documented. The WHOIS data is unavailable due to domain registration anomalies, but the website's professional presentation and active content suggest legitimacy. Overall, the site maintains a strong digital presence with room for enhanced security transparency and incident response readiness.

Berghof Wartenfels is a small, family-run hospitality business located in the Franconian Forest region of Germany. The company operates a restaurant, guesthouse, holiday home rentals, and cooking courses, emphasizing regional cuisine and cultural heritage. The website reflects a well-structured, content-rich presentation targeting local and visiting customers interested in authentic Franconian hospitality experiences. The business maintains an active social media presence and provides clear contact information, supporting customer engagement and trust. Technically, the website uses a custom PHP backend with a Bootstrap frontend enhanced by common JavaScript libraries such as jQuery, Masonry, and Jarallax. The site is mobile-optimized and offers a moderate performance level. However, there is room for improvement in SEO and accessibility features. No CMS or advanced analytics tools are detected, indicating a relatively simple but functional technical infrastructure. From a security perspective, the site uses HTTPS (inferred from URL scheme though not explicitly confirmed), but lacks visible security headers and published security policies. No forms or data collection mechanisms are present, reducing attack surface but also limiting user interaction. Privacy compliance is partial, with a privacy policy available but no cookie consent mechanism. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. Overall, the website presents a trustworthy and professional image consistent with a small regional hospitality business. Security posture and privacy compliance are adequate but could be strengthened. The site is safe for general audiences with no adult or questionable content detected.

G

Gasthof Pressecker Hof Familie Reuther

pressecker-hof.de

50

Gasthof Pressecker Hof is a family-operated hospitality business located in the scenic Frankenwald region of Germany, offering restaurant services, guesthouse accommodations, and event hosting. The website reflects a small but professionally managed business with a clear focus on local tourism and traditional Franconian cuisine. The digital infrastructure includes modern tracking and consent management tools such as Cookiebot and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the website is accessible, well-structured, and compliant with GDPR requirements, supporting a trustworthy online presence for the business.

C

Colourbox

colourbox.es

59

Colourbox is a large-scale e-commerce platform specializing in royalty-free stock media including photos, videos, and vectors. The website targets a general audience primarily in Spanish-speaking regions, offering over 26 million media assets with all rights included for various uses such as print, web, and social media. The company maintains a professional market position with a comprehensive digital presence and social media engagement. Technically, the website leverages modern web technologies such as React, Font Awesome Pro icons, Google Fonts, and Amazon Cloudfront CDN for content delivery, ensuring moderate performance and good mobile optimization. Security posture is strong with HTTPS enforced and secure payment integration via Stripe, although explicit security headers like Content-Security-Policy are not clearly declared. Privacy compliance is robust with clear privacy and cookie policies and GDPR adherence. Overall, the website is professional, trustworthy, and safe for general audiences.

C

Colourbox

colourbox.dk

57

Colourbox is a Danish-based stock media platform offering millions of stock images, videos, and vectors with simple licensing and pricing models. The website targets businesses and individuals seeking creative digital assets for online and offline communication. The company maintains a professional market position with exclusive and editorial content, supported by active social media channels on Facebook, LinkedIn, and Pinterest. Technically, the website leverages modern web technologies including React, Font Awesome Pro icons, Google Tag Manager, and Amazon Cloudfront CDN to deliver a performant and responsive user experience. However, the absence of explicit privacy and cookie policies and missing WHOIS data represent gaps in compliance and transparency. Security posture is generally good with HTTPS enforced but could be improved by adding security headers and incident response contact information. Overall, the site is safe for general audiences and demonstrates a solid business and technical foundation.

S

Skyfish

skyfish.com

57

Skyfish is a technology company specializing in Digital Asset Management (DAM) systems tailored for visual content. Their platform simplifies and secures communications processes for over 2,000 organizations, offering features such as GDPR-compliant photo consent, AI-powered auto-tagging, Active Directory integration, and public media galleries. The company targets businesses and organizations that require efficient and secure management of digital images and media assets. Their business model is SaaS-based, providing subscription plans with free trials and demos to attract customers. Technically, Skyfish operates a modern WordPress-based website enhanced with Elementor and Yoast SEO plugins, hosted likely on ISO27001 certified Amazon AWS infrastructure. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital presence. They employ Cookiebot for cookie consent and Google Tag Manager for analytics, indicating attention to privacy and marketing needs. From a security standpoint, Skyfish demonstrates strong compliance with GDPR and ISO27001 standards, storing data securely within the EU and using bank-level encryption. However, the absence of explicit security headers and incident response contact details suggests room for improvement in security transparency and readiness. The missing WHOIS domain registration data raises concerns about domain legitimacy, though the professional website and trust indicators mitigate immediate suspicion. Overall, Skyfish presents a credible and professional business with a solid technical foundation and good privacy compliance. Strategic enhancements in security disclosures and domain registration transparency would further strengthen their trustworthiness and security posture.

F

flessio - Thomas Soo & Dominik Strauß GbR

flessio.de

54

flessio - Thomas Soo & Dominik Strauß GbR is a small German IT service provider founded in 2013, specializing in tailored and creative IT solutions for businesses. Their offerings include WLAN solutions, system integration, video surveillance, hosting, web development, and maintenance contracts. The company positions itself as a competent regional IT partner based in Ravensburg, Germany, targeting business clients and event organizers. The website is professionally designed using WordPress with the Enfold theme and Yoast SEO plugin, providing good content quality and clear navigation. Social media presence on Twitter, Facebook, and Instagram supports brand visibility. Technically, the site uses modern web technologies but includes external scripts from suspicious domains, which could pose security risks. Security posture is moderate with HTTPS enabled but lacks advanced security headers and explicit incident response policies. Privacy compliance is partial, with a comprehensive privacy policy but no cookie consent mechanism. Overall, the website is trustworthy and functional but could improve security and privacy practices.

E

Ecosia GmbH

ecosia.co

73

Ecosia GmbH operates Ecosia.org, a green search engine dedicated to environmental sustainability by using 100% of its profits to plant trees worldwide. The company positions itself as the largest tree-planting movement via search engine technology, targeting environmentally conscious users globally. Their business model focuses on generating revenue through search advertising and dedicating all profits to climate action projects, with transparent monthly financial reporting to build trust. Technically, the website employs modern JavaScript frameworks (likely Vue.js), integrates Google Tag Manager for analytics, and uses a robust consent management platform (Didomi) to ensure privacy compliance. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. From a security perspective, Ecosia enforces HTTPS, implements standard security headers, and manages cookie consent effectively. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. The absence of WHOIS data due to privacy protection is consistent with privacy-conscious business practices and does not detract from the site's legitimacy. Overall, Ecosia.org demonstrates a strong security posture, excellent content quality, and high business credibility, making it a trustworthy platform for users seeking an eco-friendly search engine alternative.

U

urbnups UG (haftungsbeschränkt)

urbnups.app

68

urbnups UG (haftungsbeschränkt) operates a travel and experience discovery platform focused on providing users with local insider tips, popular attractions, and personal recommendations. The platform supports community sharing of unique moments and offers AI solutions for business partners. The company is positioned as a niche player in the travel and local experience market, targeting travelers and local experience seekers primarily in Germany. The business was founded in 2021 and maintains a small company size with a consistent and professional online presence. Technically, the website is built using modern web technologies including React, Next.js, and Material-UI, hosted by Hetzner Online GmbH. The site is optimized for mobile devices, loads quickly, and incorporates privacy-conscious analytics via Matomo. The presence of comprehensive privacy and cookie policies indicates a good level of GDPR compliance. However, direct contact information such as company emails or phone numbers is not publicly listed, relying instead on a contact form. From a security perspective, the site enforces HTTPS, uses standard security headers, and shows no visible vulnerabilities or exposed sensitive data. The domain registration is transparent and consistent with the business age and profile, enhancing trustworthiness. There is no published security policy or incident response information, which could be improved to strengthen security posture. Overall, urbnups presents a trustworthy, well-implemented digital platform with good privacy and security practices. Strategic improvements in security transparency and direct contact information could further enhance trust and compliance.

B

Bayerischer Rundfunk

br-klassik.de

62

BR-KLASSIK is a digital platform operated by Bayerischer Rundfunk, a major German public broadcaster, focusing on classical music, jazz, and cultural content. The website offers rich multimedia content including radio, television, podcasts, concert videos, and cultural news, targeting classical music enthusiasts and culturally interested audiences primarily in Germany. The site is professionally designed with consistent branding and clear navigation, supporting a high-quality user experience across devices. Technically, the site uses modern JavaScript libraries and analytics tools, with good mobile optimization and accessibility features. Security posture is strong with HTTPS and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is good, linking to comprehensive parent company policies, but lacks an explicit cookie consent mechanism. WHOIS data confirms the domain's legitimacy and consistency with the broadcaster's identity. Overall, the site is trustworthy, professional, and well-positioned in the media sector.

K

Klassik Radio

klassikradio.de

57

Klassik Radio operates as a German-based classical music streaming and radio broadcasting service, offering curated music channels, live concert events, and premium ad-free subscriptions. The website is professionally designed with excellent content quality and user experience, targeting classical music enthusiasts and general audiences interested in cultural music content. Technically, the site leverages modern frameworks such as Next.js and React, with mobile optimization and SEO best practices well implemented. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response details are absent. Overall, the domain and website present a trustworthy and mature digital presence in the media sector.

The website 'European Fugger Road' is a cultural tourism platform dedicated to showcasing the historical mining empire of the Fugger family across several European regions. It serves as an informational and promotional resource for tourists and history enthusiasts, highlighting key mining centers, museums, and exhibitions. The site is operated by Regio Augsburg Tourismus GmbH and partners with multiple regional tourism organizations. Technically, the site is built on the Contao CMS platform, utilizing Bootstrap and jQuery for responsive design and interactivity. It features a cookie consent mechanism and uses Matomo analytics, reflecting a moderate level of digital maturity. Security-wise, the site enforces HTTPS and includes CSRF protection cookies but lacks explicit security headers and published security policies. No critical vulnerabilities or suspicious content were detected. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though it could improve by publishing security and incident response policies and enhancing security headers.

Sisi’s Road is a cultural tourism website managed by Regio Augsburg Tourismus GmbH, promoting a historic travel route linked to Empress Elisabeth. The site targets tourists interested in cultural and historical destinations across Bavaria, Austria, Hungary, Italy, Greece, and Switzerland. The business operates as a small regional tourism entity with a focus on cultural heritage and travel packages. Technically, the website is built on the Contao Open Source CMS platform, utilizing jQuery and responsive image maps for interactive navigation. The site is multilingual and includes a cookie consent mechanism compliant with GDPR. Performance is moderate with good mobile optimization, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses CSRF protection cookies. However, it lacks DNSSEC and explicit security headers, and no incident response or security policies are published. Analytics are handled via Matomo with user consent. The domain registration is consistent with the business entity and shows no suspicious patterns. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in security headers, accessibility, and incident response transparency would enhance its posture and compliance.

V

Via Julia

viajulia.de

49

Via Julia is a cultural and tourism project centered on the historic Roman road from Günzburg to Salzburg, Germany. It promotes sustainable regional development and tourism through a marked long-distance cycling route and related cultural initiatives. The website serves as an informational platform for tourists and cycling enthusiasts, providing route details, historical context, and event listings. The project appears to be a small-scale, non-profit initiative with a niche audience focused on cultural heritage and outdoor activities. Technically, the website is built on Drupal 7 with an older jQuery version and uses Matomo for analytics, respecting Do Not Track settings. The site is mobile optimized and has a clear navigation structure, though some modernization of the tech stack is advisable. Security posture is moderate with HTTPS enabled but lacking security headers and cookie consent mechanisms. No sensitive data collection forms or contact emails are visible, reducing risk exposure. Overall, the security posture is adequate for the site's scope but could be improved by implementing security headers, updating libraries, and adding privacy compliance features. The domain registration aligns with the website's geographic and thematic focus, supporting legitimacy. No suspicious or malicious indicators were found. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security and incident response policies, upgrading the CMS and JavaScript libraries, and improving security headers to strengthen trust and resilience.

The website viaclaudia.org is registered to Via Claudia August e.V., a German non-profit organization likely involved in transportation or cultural heritage given the name. However, the website content is currently inaccessible due to a TYPO3 CMS site configuration error, resulting in a 'Page Not Found' error. This prevents any meaningful content or business information from being presented to visitors. The domain is well-established, created in 2001, and registered with a reputable registrar without privacy protection, indicating legitimacy. Technically, the site uses TYPO3 CMS but lacks proper configuration and visible security headers or policies. No privacy, cookie, or terms of service policies are present, and no contact information is available on the error page. No WAF or security challenge mechanisms are detected, and no analytics or advertising scripts are present. The content safety rating is safe as no adult or questionable content is found. Overall, the site suffers from critical accessibility and content issues that severely limit its usability and trustworthiness.

S

Stadt Neuburg an der Donau

neuburg-donau.de

47

The website www.neuburg-donau.de serves as the official municipal portal for the city of Neuburg an der Donau, Germany. It provides comprehensive information about city administration, public services, local government activities, events, and economic development. The site targets residents, local businesses, visitors, and government officials, positioning itself as a key information hub for the municipality. The business model is that of a public sector entity delivering essential government services and citizen engagement platforms. Technically, the website employs modern web technologies including JavaScript, CSS, and integrates a consent management platform to comply with cookie regulations. Accessibility features are present, and the site is mobile optimized with good SEO practices. The CMS appears to be custom or proprietary, typical for government websites. Performance is moderate with no major issues detected. From a security perspective, the site enforces HTTPS and uses a consent manager for cookie compliance. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident in the provided HTML snippet. There is no visible privacy policy or incident response information, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. The domain WHOIS data is limited but does not raise immediate concerns. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic recommendations include publishing a detailed privacy policy, enhancing security headers, and providing clear contact information for data protection and incident response. These steps will improve compliance, security posture, and user trust.

S

Bavarian shipping at Lake Starnberger See, Ammersee, Tegernsee and Königssee

seenschifffahrt.de

53

The website www.seenschifffahrt.de serves as the official online presence for Bavarian shipping services across four major lakes: Königssee, Tegernsee, Starnberger See, and Ammersee. It targets general audiences interested in regional transportation and tourism services. The site is built on TYPO3 CMS, indicating a moderate level of technical maturity and content management capabilities. The design and navigation are professional and user-friendly, supporting a positive user experience. However, the site lacks critical privacy and cookie policies, which are essential for GDPR compliance, especially given its European location. Security posture is basic, with no evident security headers or incident response information, suggesting room for improvement in protecting user data and enhancing trust. Overall, the site is functional and relevant but requires enhancements in privacy, security, and contact transparency to elevate its compliance and credibility.

B

Ausflugsziele, Reisetipps & Sehenswürdigkeiten in Bayern - Bayerisch-Schwaben

bayerisch-schwaben.de

52

The website www.bayerisch-schwaben.de serves as a regional tourism portal focused on promoting travel destinations, sightseeing spots, and accommodation options in the Bavarian region of Germany. It targets tourists and visitors seeking travel tips and local activities. The site is built on TYPO3 CMS and integrates modern digital marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Cookiebot for cookie consent management. The website demonstrates good content quality, professional design, and clear navigation, optimized for mobile devices. From a security perspective, the site uses HTTPS and implements a comprehensive cookie consent mechanism compliant with GDPR. However, explicit privacy policy and terms of service pages were not detected in the provided content, and no direct contact information or security policy details are available. Security headers were not explicitly identified, suggesting room for improvement in hardening the website's security posture. Overall, the domain appears legitimate and consistent with its business purpose, with no signs of blocking or WAF interference. The extensive use of third-party tracking and advertising services is balanced by transparent cookie consent. The website is safe for general audiences, with no adult or questionable content detected. Strategic recommendations include publishing clear privacy and security policies, enhancing security headers, providing direct contact information for incident response, and continuing to maintain GDPR compliance to strengthen trust and security culture.

H

Historic Highlights of Germany e.V.

historicgermany.travel

53

Historic Highlights of Germany e.V. operates a professional cultural tourism website promoting 17 heritage cities in Germany. The site targets tourists interested in history, culture, and authentic German experiences. The business model is non-profit focused on heritage promotion, with a clear market niche and consistent branding. Technically, the site uses WordPress with the Avada theme and common plugins, including Borlabs Cookie for consent management and Google Tag Manager for analytics. The site is multilingual and mobile optimized, offering a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and cookie consent, but lacks some advanced security headers and DNSSEC. No privacy policy or terms of service were detected, which is a compliance gap. WHOIS data confirms legitimacy with consistent registration details and domain age. Overall, the site is trustworthy and professionally maintained but could improve privacy compliance and security hardening.

L

Landratsamt Aichach-Friedberg

wittelsbacherland.de

49

The website wittelsbacherland.de serves as the official regional tourism portal for the Wittelsbacher Land area, managed by the Landratsamt Aichach-Friedberg, a local government entity in Germany. It provides comprehensive information on culture, nature, family activities, gastronomy, and events, targeting tourists and local residents. The site is well-branded, professionally designed, and offers rich content in German, including accessibility features and a cookie consent mechanism compliant with GDPR. Technically, the site is built on WordPress using the Divi theme, enhanced with Bootstrap and jQuery, and employs Matomo and Google Analytics for visitor tracking with privacy considerations. Security posture is good with HTTPS enabled and cookie consent implemented, though some security headers could be improved. Contact information is clear, but no explicit security or incident response policies are published. Overall, the site is trustworthy, compliant, and serves its purpose effectively.

A

Augsburger Land

augsburger-land.de

47

Augsburger Land operates a regional tourism website focused on promoting leisure activities, cultural events, and travel information for the Augsburg region in Germany. The site targets tourists and visitors seeking information on hiking, cycling, museums, and local attractions. The business model is primarily informational and promotional, supporting regional tourism efforts. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, indicating a modern and flexible infrastructure. The site employs Cookiebot for cookie consent management, demonstrating awareness of privacy regulations. The design is professional, mobile-optimized, and accessible, with good SEO practices evident from meta tags and structured data. From a security perspective, the site uses HTTPS and integrates a consent mechanism for cookies, but lacks visible advanced security headers and published security policies. No contact information or incident response details are provided, which limits transparency. No vulnerabilities or suspicious patterns were detected in the content or WHOIS data. Overall, the website presents a trustworthy and professional front for regional tourism, with moderate technical maturity and privacy compliance. Strategic improvements in privacy policy publication, security headers, and contact transparency would enhance trust and compliance.

A

Augsburg Marketing

augsburg-city.de

38

Augsburg City is a well-established city marketing platform operated by Augsburg Marketing, focusing on promoting shopping, cultural events, leisure activities, and tourism in Augsburg, Germany. The website serves as a comprehensive guide for residents and visitors, offering event calendars, shopping tips, and city vouchers. It maintains a strong market position as a key local resource for city-related information and promotion. Technically, the website uses modern web technologies including JavaScript, SVG graphics, and Matomo analytics for privacy-conscious user tracking. Hosting is provided by Schlund Technologies, and the site demonstrates good mobile optimization, accessibility, and SEO practices. The site is fully accessible without any WAF or security challenges. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks publicly visible security policies or incident response contacts, which could be improved. No vulnerabilities or exposed sensitive data were detected. The domain registration data aligns well with the website's purpose and location, indicating legitimacy. Overall, Augsburg City presents a professional, trustworthy, and user-friendly online presence with strong compliance to privacy regulations. Strategic improvements in security transparency and incident response readiness would further enhance its security posture.

L

Landkreis Augsburg

landkreis-augsburg.de

67

The website www.landkreis-augsburg.de serves as the official online presence of the Landkreis Augsburg local government authority in Germany. It provides comprehensive information about various municipal and state administrative functions, targeting residents and stakeholders within the Augsburg district. The site offers key public services information, including social, environmental, health, and cultural sectors. The business model is that of a public sector entity focused on governance and citizen services. Technically, the website is built on TYPO3 CMS, a robust open-source content management system widely used in government portals. It employs modern web technologies including Bootstrap for responsive design, Matomo for privacy-conscious analytics, and Cookiebot for GDPR-compliant cookie management. Hosting and DNS are managed via Cloudflare, enhancing performance and security. Accessibility features such as skip links and ReadSpeaker integration demonstrate a commitment to inclusive design. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms to comply with privacy regulations. While explicit security headers are not fully visible in the HTML, no critical vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contact suggests room for improvement in transparency and readiness. Overall, the security posture is solid but could benefit from enhanced header implementation and formalized policies. The website is trustworthy and professional, with consistent branding and clear navigation. No adult or questionable content is present, making it safe for general audiences. The WHOIS data aligns with the website's governmental nature, showing no privacy protection and consistent domain registration details. The AI scoring reflects a well-implemented, secure, and compliant government website with minor areas for enhancement.

R

Romantische Straße

romantischestrasse.de

51

Romantische Straße is a well-established German tourism organization promoting the country's oldest and most popular holiday route, spanning 29 towns over 460 kilometers. The website serves as an information hub for travelers interested in nature, culture, art, culinary experiences, and hospitality along this scenic route. It offers key services including tourist information, interactive maps, bus service bookings via the Romantic Road Coach, and an online shop for related products. The site targets tourists and cultural travelers primarily within Germany and internationally via its English version. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Borlabs Cookie for GDPR compliance. It integrates Google Analytics and Google Tag Manager for tracking and marketing purposes. The site demonstrates good mobile optimization and SEO practices, though accessibility features could be enhanced. Performance is moderate, with a rich media presence including interactive SVG maps and sliders. From a security perspective, the site uses HTTPS with anonymized IP tracking for analytics and implements a cookie consent mechanism. However, it lacks visible security headers and published privacy or security policies, which are recommended for compliance and trust. No WAF or blocking mechanisms were detected, and no vulnerabilities were apparent in the provided content. Overall, Romantische Straße presents a professional and trustworthy online presence with strong business credibility in the tourism sector. Strategic improvements in privacy documentation, security headers, and accessibility would further enhance its security posture and compliance standing.

S

Stadt Augsburg

wassersystem-augsburg.de

53

The website for Das Augsburger Wassersystem serves as an official informational and educational platform managed by the city of Augsburg, Germany. It highlights the UNESCO World Heritage status of the Augsburg Water Management System, providing detailed content about its history, key objects, tours, events, and educational resources. The site targets tourists, local citizens, and cultural heritage enthusiasts, positioning itself as a trusted source for information on this unique urban water landscape.

The website kaelberhalle.de represents a small hospitality business operating as a traditional brewpub in Augsburg, Germany. The business focuses on providing restaurant and brewery services to local and visiting customers. The site is built on WordPress with Elementor and uses modern SEO and tracking plugins, indicating a moderate level of digital maturity. The presence of GDPR-compliant cookie consent and a comprehensive privacy policy demonstrates attention to privacy compliance. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and incident response policies are absent. Overall, the site is professional and trustworthy but could benefit from enhanced security practices and legal completeness.

H

Haus Sankt Ulrich

haus-sankt-ulrich.de

36

Haus Sankt Ulrich is a specialized hospitality business operating as a conference and city hotel in Augsburg, Germany, affiliated with the Diözese Augsburg. The website presents a professional image with clear descriptions of accommodation, conference facilities, and gastronomy services targeting business travelers, groups, and individual guests. The business occupies a niche market position combining religious affiliation and architectural heritage with hospitality services. Technically, the website uses legacy JavaScript libraries and custom CMS or framework, hosted on Amazon AWS infrastructure. While the site is functional and well-structured, it lacks modern security headers and uses an outdated jQuery version, which poses security risks. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professionally maintained but could improve technical and security aspects.

M

MiloTree

milotree.com

65

MiloTree is a technology company founded in 2015 that offers a SaaS platform designed to help bloggers and online business owners sell digital products and grow their email lists and social media followings. The website is built on WordPress using modern themes and plugins, with a focus on SEO and user experience. The technical infrastructure includes integrations with major analytics and marketing tools such as Google Analytics, Facebook Pixel, Pinterest Tag, and Microsoft Clarity, indicating a mature digital marketing approach. Security posture is solid with HTTPS enabled and domain registration protections in place, though some improvements like enabling DNSSEC and adding security headers could enhance security further. Privacy compliance is weak due to the absence of visible privacy and cookie policies, which is a risk area for GDPR and other regulations. Overall, the website is professional and trustworthy but should improve privacy transparency and contact availability to strengthen compliance and user trust.

RateGain is a well-established SaaS company specializing in travel and hospitality software solutions, focusing on hotel software for commercial teams to address digital marketing, guest engagement, distribution, direct bookings, and revenue management challenges. The company positions itself as a leading SaaS provider in the hospitality sector with a large-scale operation and a domain age consistent with its business history. The website is built on WordPress with Elementor and integrates multiple marketing and analytics tools, reflecting a mature digital infrastructure. Security posture is good with HTTPS and domain protection statuses, though improvements such as enabling DNSSEC and publishing explicit security and privacy policies are recommended. Overall, the site is professional, trustworthy, and safe for general audiences.

Freizeitreitstall Schammelsdorf is a small, local equestrian leisure and therapy service provider based in Germany. The website presents a professional and consistent brand image focused on riding lessons, pony school, riding therapy, and related services. The business targets local families, children, and riding enthusiasts. Technically, the site is built on WordPress with common plugins and uses Cookiebot for GDPR-compliant cookie management. Hosting is provided by kasserver.com, and the site is served over HTTPS with moderate performance and good mobile optimization. Security posture is solid with HTTPS and CAPTCHA protections, though some security headers could be improved. Privacy compliance is strong with clear cookie consent and a comprehensive privacy policy. No critical vulnerabilities or suspicious patterns were detected. Overall, the site is trustworthy and professionally maintained, suitable for its business purpose.

Ferienwohnungen Neumann is a small hospitality business offering centrally located holiday apartments in Bamberg, Germany. The website targets tourists and business travelers, including travel and construction groups, providing easy access to local attractions and amenities. The business model focuses on short-term apartment rentals with booking facilitated through an external platform. The website is built on WordPress with common plugins and themes, showing moderate technical maturity but using outdated software versions. Security posture is basic with HTTPS enabled and a cookie consent banner present, but lacking security headers and updated software. Privacy compliance is limited due to absence of a privacy policy and terms of service. Overall, the website is functional and professional but could improve in security and compliance aspects.

H

Hotel Bamberg Inn

hotel-bamberg-inn.de

55

Hotel Bamberg Inn is a small hospitality business located in Hallstadt near Bamberg, Germany. It offers affordable and conveniently located accommodation options including single, double, triple rooms, and apartments. The hotel targets business travelers and tourists seeking cost-effective lodging with amenities such as free WiFi, parking, and 24-hour coffee service. The website reflects a professional and consistent brand image with clear contact information and GDPR compliance mechanisms in place. Technically, the site uses modern tools like Google Tag Manager and a consent management platform, hosted likely on a specialized CMS platform (Sitehub). Security posture is good with HTTPS and CAPTCHA on forms, though some security headers and explicit policies could be improved. Overall, the site is well-structured, mobile-optimized, and trustworthy with no signs of malicious content or blocking mechanisms.

H

Hotel Alt Bamberg

hotel-alt-bamberg.de

56

Hotel Alt Bamberg is a small hospitality business located in the historic city center of Bamberg, Germany. It offers 36 modern double rooms with amenities such as free WiFi, a Greek restaurant on site, and convenient services like 24-hour check-in and bike terraces. The hotel is part of the Friedrich Hotels group and targets tourists, business travelers, cyclists, and groups seeking comfortable accommodation with local charm. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive contact options including a secure contact form with captcha. Technically, the website uses modern web technologies including Google Tag Manager for analytics and a consent management platform to ensure GDPR compliance. The site is hosted securely over HTTPS with no visible blocking or WAF challenges. However, security headers are not explicitly detected and could be improved. Privacy policies and cookie consent mechanisms are clearly linked and implemented, reflecting a strong commitment to data protection. From a security perspective, the site demonstrates good practices such as encrypted connections and user consent management but lacks explicit incident response or security policy disclosures. No vulnerabilities or suspicious patterns were detected. Overall, the website and domain registration data are consistent and legitimate, supporting a trustworthy online presence for the hotel. The overall risk assessment is low, with recommendations focusing on enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to sustain a strong security posture.

H

Hotel Rosenhof

hotel-rosenhof.com

59

Hotel Rosenhof is a small hospitality business located near Bamberg, Germany, offering comfortable accommodation with 36 double rooms and modern amenities. The hotel targets tourists, business travelers, families, and groups, providing services such as breakfast buffet, meeting rooms, and event hosting. The website is professionally designed, mobile-optimized, and includes clear contact information and GDPR-compliant privacy and cookie policies. Technically, the site uses modern web technologies including Google Tag Manager and a consent management platform, with embedded Google Maps and SVG icons enhancing user experience. Security posture is good with HTTPS enforced and CAPTCHA on contact forms, though security headers are not explicitly detected. The absence of WHOIS data raises concerns about domain registration transparency, which slightly impacts trustworthiness. Overall, the website presents a credible and professional online presence for the hotel business.

H

Hotel National Bamberg

hotel-national-bamberg.de

53

Hotel National Bamberg is a historic, family-run 3-star hotel located near the Bamberg train station in Germany. Established in 1886, it offers a blend of comfort, tradition, and elegance with a focus on business travelers, tourists, families, and groups. The hotel provides accommodation, conference facilities, breakfast services, and promotes local cultural experiences. Technically, the website is built on a modern stack with CMS features, uses Google Tag Manager for analytics, and implements GDPR-compliant consent management. Security posture is good with HTTPS and CAPTCHA on forms, though it lacks explicit security policy pages and some security headers. Overall, the site is professional, trustworthy, and well-optimized for users.

M

Markt Rattelsdorf

markt-rattelsdorf.de

58

Markt Rattelsdorf operates an official municipal website serving residents and visitors with digital services, information, and community resources. The site is built on TYPO3 CMS and employs modern frontend technologies such as Bootstrap and FontAwesome, providing a responsive and accessible user experience. The website offers key services including online citizen services, official announcements, and digital maps, positioning itself as a local government service portal with a clear focus on community engagement. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in explicit security policies and headers. Overall, the site demonstrates a trustworthy and professional digital presence appropriate for a small government entity.

M

Markt Marktgraitz

marktgraitz.de

60

Markt Marktgraitz operates an official municipal website providing comprehensive information and services for residents and visitors. The site is built on TYPO3 CMS and uses modern web technologies to deliver a user-friendly experience. It offers detailed navigation covering community news, local government, citizen services, and cultural information. The website demonstrates good digital maturity with mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. Privacy compliance is strong, reflecting GDPR adherence. Overall, the site is trustworthy and professionally maintained, serving as a reliable resource for the local community.

G

Gemeinde Kemmern

kemmern.de

58

Gemeinde Kemmern operates an official municipal website providing comprehensive information and services for residents and tourists in the Kemmern area of Germany. The site offers tourism highlights, local news, event calendars, and citizen services, positioning itself as a key digital touchpoint for the community. The business model is focused on government service delivery and community engagement, with a clear target audience of local citizens and visitors. Technically, the website is built on TYPO3 CMS, leveraging modern frontend technologies such as Bootstrap, FontAwesome, and OpenLayers for mapping. The site is mobile-optimized, accessible, and SEO-friendly, with structured data implemented for enhanced search engine understanding. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers, a published security policy, and vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected, but improvements in security best practices are recommended. Overall, the website is professional, trustworthy, and suitable for its government service role. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and adding vulnerability disclosure mechanisms to improve transparency and resilience.

M

Markt Ebensfeld

ebensfeld.de

65

Markt Ebensfeld operates as a municipal government entity serving the local community in the Landkreis Lichtenfels region of Germany. The website provides comprehensive information about local government services, tourism, and community resources, targeting residents and visitors. The business model focuses on public service delivery and digital citizen engagement through online portals and information dissemination. The site is positioned as an official government resource with trust indicators such as the Kommunales IT-Siegel and links to official Bavarian government portals. Technically, the website is built on the Weblication CMS platform, employing standard web technologies with moderate performance and good mobile optimization. However, it lacks advanced technical frameworks or modern JavaScript libraries. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, but it lacks security headers and incident response information. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is trustworthy and professional but could improve in privacy and security transparency.

F

FactFinder

fact-finder.com

62

FactFinder is a mature eCommerce technology company specializing in AI-powered product discovery, personalization, and search solutions. With over 20 years of experience and a customer base exceeding 2,000 B2B and B2C shops worldwide, the company positions itself as a leader in enhancing online shopping experiences through intelligent automation and tailored recommendations. Their platform integrates advanced AI with human expertise to optimize conversions and customer loyalty. Technically, the website employs modern frameworks such as Foundation 5, GSAP for animations, and integrates multiple analytics and marketing tools including Google Tag Manager, Google Analytics, and Pardot forms. The site is well-optimized for mobile and accessibility, with a professional design and clear navigation. Security-wise, HTTPS is enforced, anti-clickjacking measures are in place, and GDPR compliance is supported via a consent management platform and business email validation on forms. However, explicit security headers like Content-Security-Policy are not detected, and no public security or incident response policies are found. The WHOIS data is missing or unavailable, which is unusual for a commercial entity but the website content and business information appear legitimate. Overall, the site demonstrates a strong digital maturity and security posture with room for improvement in explicit security header implementation and transparency around incident response.

F

FactFinder

loop54.com

62

FactFinder is a well-established eCommerce technology company specializing in AI-powered product discovery, personalization, and merchandising solutions. The website highlights the strategic acquisition of Loop54 and the evolution of its product into Infinity, enhancing their AI capabilities and market offering. The company targets B2B and B2C online retailers seeking advanced search and recommendation technologies to improve customer experience and sales conversion. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and consent management tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and anti-clickjacking measures, though some security headers could be improved. Privacy compliance is well addressed with GDPR-consent mechanisms and a comprehensive privacy policy. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional presentation and business signals. Overall, the site demonstrates a high level of professionalism, technical competence, and business credibility.

M

Re:Think Online Video Schulungen | Bequeme Erfüllung der Sensibilisierungspflichten für Unternehmen in den Bereichen Datenschutz (DSGVO), IT-Security, KI-Compliance, Arbeitssicherheit und viele weitere.

make-your-self.de

55

The website onlinevideoschulungen.de is an e-learning platform specializing in online video training courses aimed at helping companies fulfill their sensitization and compliance obligations in areas such as data protection (GDPR), IT security, AI compliance, and occupational safety. The platform leverages WordPress with the Divi theme, WooCommerce for e-commerce functionality, and LearnDash LMS for course management, indicating a mature but standard technical infrastructure. Hosting appears to be provided by a German hosting provider, consistent with the German language and target audience. However, the website lacks visible privacy and cookie policies, security policies, and incident response contacts, which are critical for compliance and trust in this sector. The domain WHOIS data is minimal and shows an unusual status, which slightly reduces trustworthiness. Overall, the website presents professional content and a good user experience but requires improvements in privacy compliance and security posture to enhance trust and regulatory adherence.

K

KI Verordnung ist Pflicht

kivo-ist-pflicht.de

58

KI Verordnung ist Pflicht is a specialized German consultancy focused on AI compliance, particularly addressing the European AI Act (KI-VO). The company offers expert services including risk analysis, compliance checks, documentation, and employee training to ensure legal and regulatory adherence for businesses deploying AI technologies. Their market position is that of a niche expert provider with a multidisciplinary team including IT security, data protection, and AI software development experts. Technically, the website is built on WordPress using the Divi theme and Forminator plugin, hosted by webgo.de, and demonstrates moderate performance with good mobile optimization and SEO practices. Security posture is strong with HTTPS, security headers, and no evident vulnerabilities, though cookie consent mechanisms and terms of service pages are missing. Overall, the business presents a trustworthy and professional front with clear contact channels and certifications. Strategic recommendations include adding cookie consent, terms of service, and incident response contacts to enhance compliance and trust.