Security Directory

C

CAS Software AG

customer-centricity-forum.de

58

The Customer Centricity Forum 2025 website is a professionally designed event platform hosted by CAS Software AG, focusing on customer centricity, CRM, AI, and CPQ trends. The site targets professionals and businesses interested in digital transformation and customer relationship management. It provides event information, galleries, and contact details primarily via email. Technically, the site uses modern JavaScript frameworks such as Vue.js and jQuery, along with Photoswipe for image galleries and Matomo for analytics, indicating a mature digital infrastructure. The site is built on WordPress and is optimized for mobile devices with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers are not evident. Privacy compliance is strong with clear privacy and cookie policies. No critical vulnerabilities or suspicious elements were detected. Overall, the site is trustworthy and professionally maintained, supporting CAS Software AG's market position in the technology sector.

C

CAS Software AG

cas-mitgestalter.de

59

CAS Software AG operates a professional job portal focused on attracting talent for its CRM and software development business based in Karlsruhe, Germany. The company positions itself as a market leader in CRM solutions for the mid-market segment, emphasizing employee empowerment and a collaborative culture. The website reflects a mature digital presence with modern technologies such as Vue.js and Video.js, and integrates Matomo for analytics, indicating a commitment to data privacy. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and cookie consent mechanisms are recommended. Overall, the site is trustworthy, well-branded, and serves its business purpose effectively.

S

Stadt Baden-Baden

wir-im-rathaus.de

41

The website wir-im-rathaus.de serves as the official recruitment and employer branding portal for the city administration of Baden-Baden, Germany. It targets prospective employees interested in municipal jobs, offering information on open positions, career starts, and the benefits of working for the city. The site is well-branded with official logos and consistent messaging emphasizing meaningful, fairly paid, flexible, and family-friendly employment opportunities. Technically, the site is built on WordPress with the Avada theme and uses modern plugins such as Yoast SEO and Borlabs Cookie for privacy compliance. Analytics are handled via Matomo with consent mechanisms in place. Security posture is good with HTTPS enforced and no visible vulnerabilities, though there is room for improvement by publishing dedicated security policies and incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

B

Baden-Baden

baden-baden.com

53

Baden-Baden.com is the official tourism portal for the city of Baden-Baden, Germany, providing comprehensive information on local attractions, events, accommodations, dining, and wellness offerings. The website targets tourists and visitors seeking detailed travel and leisure information about the region. Technically, the site is built on the Neos CMS platform using the Flow PHP framework, with modern web technologies including JavaScript and CSS. It features a cookie consent mechanism compliant with GDPR, uses hCaptcha for bot protection, and integrates analytics tools such as Google Analytics and Facebook Pixel. Security posture is generally good with HTTPS enforced, though some security headers are not evident in the provided data. The absence of WHOIS registration data is a notable anomaly, reducing domain trustworthiness despite the professional presentation and official branding. Overall, the site is well-structured, accessible, and provides a positive user experience for its target audience.

S

Salz & Pfeffer

internetagentur-stuttgart.de

40

Salz & Pfeffer is a specialized online marketing agency based in Stuttgart, Germany, focusing on Google Ads, SEO, social media marketing, and web design. As a Google Partner, they provide tailored digital marketing solutions to businesses aiming to improve their online presence and growth. Their website reflects a professional and modern digital agency with a clear service portfolio and strong local market focus. The technical infrastructure is built on WordPress with common industry plugins and frameworks, ensuring a good user experience and mobile optimization. Security measures include HTTPS, reCAPTCHA on forms, and GDPR-compliant cookie consent, although some security headers could be enhanced. Overall, the site demonstrates a solid security posture with no critical vulnerabilities detected. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

W

WEISSER RING e. V.

weisser-ring.de

60

WEISSER RING e. V. is Germany's largest non-profit organization dedicated to supporting victims of crime and violence. The organization provides comprehensive services including local victim support, a free victim hotline, online counseling, prevention work, and volunteer engagement. With nearly 40,000 members and 400 local offices, it holds a strong market position in the victim support sector. The website is professionally designed using Drupal 10, optimized for mobile, and offers clear navigation and rich content relevant to its audience. Social media presence and external partnerships enhance its outreach. Security posture is solid with HTTPS and no evident vulnerabilities, though some improvements in security headers and privacy consent mechanisms are recommended. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate entity.

H

Hilfetelefon Gewalt an Männern

maennerhilfetelefon.de

66

Hilfetelefon Gewalt an Männern is a German government-supported non-profit organization providing confidential counseling and support services to men who have experienced various forms of violence. The website offers multiple contact channels including telephone, chat, and email, with clear accessibility and privacy features. It is well-branded and professionally designed, targeting men in need of help across Germany. The site is multilingual and includes government funding acknowledgments from several German federal states. Technically, the website is built on Drupal CMS, uses Matomo for privacy-conscious analytics, and incorporates modern web technologies including responsive design and accessibility enhancements. The site is served over HTTPS with no detected blocking or WAF interference, ensuring secure and reliable access. From a security perspective, the site enforces HTTPS and cookie consent mechanisms but lacks publicly visible security policies or incident response contacts. No vulnerabilities or suspicious external links were detected. Privacy compliance is strong with GDPR-aligned cookie management and anonymous counseling options. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity suitable for a government-backed support service. Strategic improvements could include publishing a dedicated security policy, incident response information, and vulnerability disclosure details to further enhance trust and security posture.

M

Ministerium fuer Inneres und Kommunales NRW

polizei.nrw

70

The website polizei.nrw is the official online presence of the Police of North Rhine-Westphalia, operated by the Ministry of the Interior and Municipal Affairs of NRW, Germany. It provides comprehensive information including press releases, crime prevention tips, traffic safety, and career opportunities. The site targets citizens, media, and stakeholders interested in police work and public safety in NRW. It holds a strong market position as a trusted government source with consistent branding and high content quality. Technically, the site is built on Drupal 10 with modern JavaScript libraries such as Splide for carousels and Shariff for social sharing. It uses Matomo analytics with DoNotTrack enabled, reflecting a privacy-conscious approach. The site is mobile-optimized and accessible, with features for easy language and sign language support. Performance is moderate, with room for improvement in security headers and DNSSEC. Security posture is good with HTTPS enforced and no visible vulnerabilities. However, security headers like CSP and X-Frame-Options are not detected and could be added. Privacy compliance is strong with a clear privacy policy and GDPR adherence, though a cookie consent mechanism is missing. Contact information is present but no direct emails or incident response contacts are found. Overall, the site is professional, trustworthy, and well-maintained, suitable for its government function. Recommendations include enhancing security headers, enabling DNSSEC, and implementing cookie consent to further improve compliance and security.

S

Stiftung Naturschutzfonds Brandenburg

naturschutzfonds.de

52

The Stiftung Naturschutzfonds Brandenburg operates as a regional non-profit foundation dedicated to practical nature conservation across Brandenburg, Germany. The website clearly communicates its mission to fund and implement conservation projects, secure protected lands, and engage the public through educational and volunteer initiatives. The foundation targets local governments, associations, agricultural entities, and private individuals interested in environmental protection. The site demonstrates a strong market position as a key player in Brandenburg's conservation efforts. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery and Leaflet for interactive maps, and uses Matomo for privacy-conscious analytics. The site is mobile-optimized, accessible, and well-structured with clear navigation and professional design. Cookie consent mechanisms are implemented in compliance with GDPR, enhancing user privacy. From a security perspective, the site enforces HTTPS and employs cookie consent best practices. However, it lacks explicit security policy documentation, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for improved transparency and readiness. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, professional, and compliant with privacy regulations, serving its audience effectively. Strategic improvements in security documentation and headers would further strengthen its posture.

M

Mein Erbe tut Gutes. Das Prinzip Apfelbaum

mein-erbe-tut-gutes.de

48

Mein Erbe tut Gutes. Das Prinzip Apfelbaum is a German non-profit initiative focused on educating and supporting individuals who wish to include charitable causes in their testament and inheritance planning. The website offers a variety of free services including informational brochures, online lectures, video tutorials, and an inheritance calculator. It is supported by a network of reputable partner organizations and foundations, enhancing its credibility and reach. The initiative targets individuals interested in philanthropy through legacy giving, providing practical and accessible resources to facilitate this process. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Borlabs Cookie for privacy compliance. It employs responsive design and accessibility best practices, ensuring a good user experience across devices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR and privacy standards.

W

Westfälisches Literaturbüro in Unna e.V.

liton.nrw

47

The website liton.nrw is a cultural non-profit platform operated by Westfälisches Literaturbüro in Unna e.V., providing a comprehensive online literature database focused on contemporary literary actors, institutions, and projects in North Rhine-Westphalia, Germany. It serves literary professionals, institutions, and the general public interested in the NRW literary scene. The platform is supported by the Ministry of Culture NRW and affiliated literary networks, positioning it as a key resource in the regional cultural landscape. Technically, the site is built on TYPO3 CMS with modern frontend technologies including jQuery, Bootstrap, and Owl Carousel. It features multiple search and filter forms enabling users to explore authors, institutions, and projects. The site demonstrates good mobile optimization, SEO practices, and a consistent branding approach. Hosting details are not explicitly identified, but the site uses HTTPS with a good SSL configuration. From a security perspective, the site enforces HTTPS and uses secure form submissions. However, it lacks several recommended security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by a clear privacy policy and cookie consent mechanism, though explicit security and incident response policies are not publicly available. Overall, the website presents a trustworthy, professional, and well-maintained platform with a strong cultural mission. Strategic improvements could include enhancing security headers, publishing detailed security policies, and expanding transparency around data protection and incident response.

The website fr.igraal.com is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct content access. This prevents extraction of meaningful business, contact, or policy information. The domain WHOIS data for this subdomain is unavailable, consistent with it being a subdomain rather than an independently registered domain. The page contains minimal HTML content focused solely on verifying the visitor is human before granting access. No privacy, cookie, or terms of service policies are visible, nor are there any contact details or business descriptions. The technical infrastructure relies on Cloudflare for security and DDoS protection, but the lack of accessible content limits further analysis. Security posture cannot be fully assessed due to the blocking mechanism, though the use of Cloudflare indicates some baseline protection. Overall, the site’s risk profile is elevated due to lack of transparency and accessibility, and a full security and compliance evaluation requires bypassing the WAF challenge.

C

Coupons.com

coupons.com

55

Coupons.com is a large, well-established online platform specializing in providing consumers with verified promo codes, printable coupons, and discounts for a wide range of retail brands. The website targets consumers seeking savings on everyday purchases and operates as a coupon aggregator and distributor. The site demonstrates a high level of digital maturity, utilizing modern web frameworks such as Next.js, and integrates multiple analytics and user experience tools including Google Analytics, Hotjar, and Datadog RUM. Privacy compliance is evident through a comprehensive privacy policy and an active cookie consent mechanism, reflecting adherence to GDPR standards. Security posture is generally strong with HTTPS enforced and no exposed sensitive data, though the absence of explicit security headers and WHOIS data transparency are areas for improvement. Overall, the website is professional, user-friendly, and trustworthy, serving a broad consumer audience with safe and relevant content.

P

Pepper Deals Ltd.

hotukdeals.com

47

hotukdeals.com is a leading UK-based e-commerce community platform operated by Pepper Deals Ltd., a subsidiary of Atolls GmbH. The site offers a vibrant community-driven environment where users share deals, discounts, and voucher codes, positioning itself as Europe's largest shopping rewards company. The platform targets savvy shoppers seeking to maximize savings through crowdsourced deals and affiliate partnerships. Technically, the website employs modern JavaScript frameworks such as Vue.js, uses service workers for performance, and leverages Amazon Cloudfront CDN for hosting, ensuring fast and responsive user experience across devices. Security posture is strong with HTTPS enforced and multiple security headers implemented, though explicit privacy and cookie policies are not readily found, indicating room for compliance improvement. The absence of WHOIS data limits domain registration trust verification, but the professional branding, verified social media presence, and active community engagement strongly support the site's legitimacy. Overall, hotukdeals.com presents a mature, well-maintained e-commerce community platform with solid technical and security foundations but would benefit from enhanced privacy transparency and incident response documentation.

D

Die Lausitz. Krasse Gegend.

krasse-lausitz.de

51

Die Lausitz. Krasse Gegend. is a regional promotional initiative focused on the Lusatia region in eastern Germany, emphasizing quality of life, structural transformation from coal mining to sustainable industries, and regional development. The website serves as an image campaign supported by government and regional partners, targeting investors, residents, and tourists. Technically, the site is built on Joomla CMS, uses modern JavaScript libraries, and integrates Matomo analytics with a strong cookie consent mechanism, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and cookie consent, though lacks explicit security policy and incident response details. Overall, the site is professional, trustworthy, and compliant with GDPR, with no critical vulnerabilities detected.

The website www.bsasoftware.com appears to be an active online presence with marketing and analytics integrations such as Google Analytics, HubSpot, and CallRail. However, the absence of WHOIS registration data raises significant concerns about the legitimacy and ownership of the domain. The website lacks critical business information including contact details, privacy policies, and terms of service, which diminishes trustworthiness. Technically, the site is built on WordPress and uses common web technologies but shows only basic implementation with limited content and minimal SEO or accessibility features. Security posture is weak with no evident security headers or advanced protections. Overall, the site presents a low trust profile and requires significant improvements in transparency, security, and compliance to be considered credible.

A

AllPaid

allpaid.com

51

AllPaid is a payment processing company established in 1999, providing merchant services and financial transaction solutions. The website presents a modern design using Bootstrap and Angular frameworks, hosted on AWS infrastructure. However, the site lacks critical compliance documents such as privacy and cookie policies, and does not provide visible contact information or social media links. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. The domain registration is consistent and trustworthy, indicating a legitimate business with a long operational history.

Grupo Parques Reunidos operates as a major global leisure park operator managing a diverse portfolio of amusement parks, aquariums, zoos, and water parks across multiple countries. The company employs various business models including ownership, management, and consultancy, positioning itself as a leader in the hospitality and entertainment sector. The website reflects a professional digital presence with clear navigation, multilingual support, and active social media engagement. Technically, the site is built on Adobe Experience Manager with integration of Google Tag Manager and OneTrust for cookie consent, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and explicit privacy policies, which are areas for improvement. The absence of WHOIS registration data is a notable anomaly that reduces trust slightly, though the overall business credibility remains high based on website professionalism and content quality. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and terms policies, and clarifying domain registration details to improve trust and compliance.

R

RADIO NRW

radionrw.de

44

RADIO NRW operates as Germany's largest local radio network, connecting 45 local radio stations across North Rhine-Westphalia. The company offers a comprehensive media and advertising platform, combining local proximity with broad reach, targeting advertisers and radio listeners in the region. The website is professionally designed, content-rich, and optimized for mobile devices, reflecting a mature digital presence. Technically, the site is built on WordPress with UIkit and jQuery, hosted likely by Deutsche Telekom, and uses Matomo analytics and Usercentrics for cookie consent. Security posture is adequate with HTTPS and consent mechanisms but lacks visible security headers and formal security policies. Privacy compliance is partial due to missing explicit privacy and terms of service pages. Overall, the site is trustworthy and well-positioned in the media sector with room for improvement in security and compliance documentation.

Life Radio GmbH & Co.KG operates a professional media website focused on radio broadcasting, podcasts, news, and events primarily serving the Austrian market. The website offers multiple streaming channels, podcast episodes, and promotional campaigns targeting a general audience interested in music and regional news. The company maintains a consistent brand presence across social media and digital platforms, supporting its market position as a regional media broadcaster. Technically, the website employs modern JavaScript frameworks and integrates third-party services such as Usercentrics for consent management and AdsWizz for advertising. The site is mobile-optimized with good SEO practices and a moderate performance profile. However, some technical improvements are recommended, including the implementation of security headers and enhanced accessibility features. From a security perspective, the site enforces HTTPS and uses a consent management platform, indicating GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies, incident response contacts, and WHOIS domain registration data introduces some trust concerns. The website does not appear to be blocked or protected by a WAF, allowing full content access. Overall, the website presents a professional and trustworthy media platform with room for improvement in security transparency and domain registration verification. Strategic recommendations include enhancing security headers, publishing incident response information, and verifying domain registration details to strengthen trust and compliance.

S

S-Communication Services GmbH

s-communication.de

61

S-Communication Services GmbH (S-Com) is a well-established creative agency affiliated with the Sparkassen-Finanzgruppe and parent company DSV-Gruppe. The company specializes in brand communication, digitalization, and enhancing customer experiences for Sparkassen financial institutions. With over 25 years of market experience and a large team of experts, S-Com positions itself as a key player in the financial services marketing and digital transformation sector. The website reflects a professional and consistent brand image, targeting Sparkassen and related stakeholders. Technically, the site is built on Adobe Experience Manager, uses modern JavaScript modules, and integrates various marketing and analytics tools, including Google Tag Manager and TrustCommander for cookie consent. Security is well addressed with HTTPS and a Content-Security-Policy header, although additional security headers could enhance protection. Privacy compliance is strong, with clear policies and consent mechanisms in place. However, explicit contact information and security incident response details are not publicly available on the homepage. Overall, the site is trustworthy, well-designed, and compliant with GDPR requirements.

C

Citizen Journal

citizenjournal.net

60

Citizen Journal is a small media and blog website launched in early 2024, providing well-researched long-form content across diverse topics such as health, business, tech, travel, and lifestyle. The site operates on WordPress with performance optimizations via WP Rocket and uses affiliate marketing through the Amazon Associates program. The technical infrastructure is modern but basic, with Cloudflare DNS and no detected WAF challenges. Security posture is moderate with HTTPS enabled but lacking DNSSEC and security headers. Privacy compliance is basic with presence of privacy and cookie policies but no explicit GDPR statements. Overall, the site is professional and trustworthy for general audiences.

R

Region Fulda

region-fulda.de

72

Region Fulda operates as a regional government portal providing information and services related to the Fulda region in Germany. The website emphasizes tradition and innovation, targeting residents and visitors interested in regional development and community events. The business model centers on public service and regional promotion, positioning itself as a key information hub within the government sector. Technically, the site is built on WordPress using the Divi theme, enhanced with multilingual support via Weglot and cookie consent management through Cookiebot. The infrastructure is modern and includes SEO optimizations and analytics tracking via Etracker. Security posture is strong with HTTPS and Content Security Policy headers implemented, though there is room for improvement in privacy compliance documentation and contact transparency. Overall, the site is professional, trustworthy, and well-structured, serving its public sector audience effectively.

T

TechHub Region Fulda e.V.

techhub-fulda.de

67

TechHub Region Fulda e.V. is a regional non-profit organization focused on fostering innovation and collaboration among technology companies in the Fulda region of Germany. The website serves as a platform to promote their key services including project groups (TechWorks), company visits and expert talks (TechInsights), thematic expert events (TechForum), and networking events (TechTalks). The organization targets technology professionals and companies seeking to share knowledge and resources to drive regional technological advancement. The website is professionally designed, content-rich, and provides clear navigation and contact information, supporting its role as a trusted regional network hub. Technically, the website is built on the com4site CMS platform and uses modern JavaScript libraries such as jQuery, Splide.js, and Swiper.js for interactive elements. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured content. Performance is moderate with no critical technical issues detected. Security posture is solid with HTTPS enforced and secure form handling, though the absence of security headers and cookie consent mechanisms suggests room for improvement. From a security perspective, the site shows no signs of vulnerabilities or exposed sensitive data. However, it lacks explicit security policies, incident response information, and vulnerability disclosure mechanisms, which are recommended for enhancing trust and compliance. Privacy compliance is good with a clear privacy policy and GDPR-compliant newsletter consent, but no cookie policy or consent banner is present. Overall, the website represents a credible and professional regional technology network with a solid digital presence. Strategic improvements in security headers, cookie consent, and incident response transparency would further strengthen its security posture and compliance standing.

R

RegioEntsorgung AöR

regioentsorgung.de

69

RegioEntsorgung AöR operates as a regional public authority focused on waste disposal and recycling services in Germany. The website provides comprehensive information about waste separation, collection services, service locations, customer support, and career opportunities. It targets residents and businesses within its service region, positioning itself as a trusted local waste management provider. The business model is centered on public service delivery with direct citizen engagement. Technically, the website is built on TYPO3 CMS, a robust and mature content management system. It employs responsive design, SVG icons, and modern JavaScript for interactive elements. The site includes a cookie consent mechanism compliant with GDPR, uses Google Analytics for tracking, and is optimized for mobile and accessibility standards. Performance is moderate, with good SEO and navigation clarity. From a security perspective, the site enforces HTTPS and implements cookie consent controls. However, it lacks explicit security policy documentation, incident response contacts, and security.txt files. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy and consistency with the business identity. Overall, the website demonstrates a solid digital presence with good privacy compliance and business credibility. Strategic improvements in security transparency and incident response readiness would enhance trust and resilience.

R

RIEGEL STREHL

riegel-strehl.de

68

RIEGEL STREHL is a specialized law firm based in Düsseldorf, Germany, focusing on construction law, real estate law, procurement law, and economic criminal law. The firm emphasizes reliable, dynamic, and result-oriented legal consulting with a personal and trustworthy client approach. Their market position is strengthened by extensive experience from international law firms and public administration, targeting clients needing expert legal services in selected fields. Technically, the website is built on the Jimdo Creator CMS platform, utilizing jQuery and bxSlider for interactive elements. The site is hosted on rzone.de servers and demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks advanced security headers and explicit incident response or vulnerability disclosure information. No critical vulnerabilities or suspicious content were detected, indicating a solid security posture for a small law firm. Overall, the website presents a professional and trustworthy digital presence with good privacy compliance and business credibility. Strategic improvements in security headers, incident response transparency, and terms of service documentation would enhance the site's security and compliance maturity.

Kulturgemeinde Alsdorf e.V. is a small non-profit cultural organization based in Germany, focused on organizing theater performances, literary breakfasts, and other cultural events for the local community. The website serves as a platform for event promotion, ticket sales, and membership information, positioning itself as a key cultural player in Alsdorf. The business model revolves around community engagement and event-driven revenue streams, supported by partnerships with local venues and ticketing services. Technically, the website is built on a modern stack including Bootstrap, jQuery, and FontAwesome, hosted by Pixelfarm with assets stored on S3. The site is mobile responsive and offers a good user experience with clear navigation and event information. Cookie consent mechanisms are implemented in compliance with GDPR, though no advanced analytics or tracking services are detected. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks explicit security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website content and hosting, indicating a legitimate and trustworthy domain registration. Overall, the website is professional, secure, and compliant with privacy regulations, serving its target audience effectively. Strategic improvements in security policy transparency and incident response readiness could further enhance trust and resilience.

S

Sparkassen Immobilien GmbH Aachen

s-immo-aachen.de

64

Sparkassen Immobilien GmbH Aachen operates as a leading real estate brokerage firm in the Aachen region, offering comprehensive services including property sales, rentals, valuations, energy consulting, and new development projects. The company leverages its strong regional expertise and partnerships, notably with Sparkasse Aachen for financing solutions, to maintain a dominant market position. The website reflects a mature digital presence built on WordPress with modern plugins and integrations, supporting a professional user experience and effective customer engagement. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. The site demonstrates good privacy compliance with a comprehensive privacy policy and cookie management. Overall, the business credibility is high, supported by multiple certifications and positive customer reviews.

E

Euregionales Medienzentrum

medienzentrum-aachen.de

51

The Medienzentrum Aachen operates as a regional center for digital education, focusing on providing educational resources and media competence support primarily to schools and educators in the Euregio Aachen region. The website reflects a small-sized educational institution with a clear mission to enhance digital literacy and media usage in education. Technically, the site is built on WordPress with standard plugins and libraries such as Bootstrap and jQuery, hosted likely by a regional provider (RegioIT Aachen). The site is moderately performant and well-optimized for mobile devices, with a good level of SEO and accessibility features. From a security perspective, the website enforces HTTPS and implements a GDPR-compliant cookie consent mechanism, including third-party integrations with Google and YouTube that use tracking cookies. While no explicit security policy or incident response information is published, the site follows basic security best practices. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the business location and shows no suspicious patterns, supporting the legitimacy of the domain. Overall, the website presents a professional and trustworthy digital presence for an educational institution. It is safe for general audiences and complies with relevant privacy regulations. Strategic recommendations include enhancing security headers, publishing a security policy or incident response contact, and considering a vulnerability disclosure policy to further strengthen trust and compliance.

L

Landkreis Aurich

jobs-landkreis-aurich.de

60

The website jobs-landkreis-aurich.de is a regional government-supported job portal serving the Aurich area in Germany. It provides job listings, apprenticeship and internship opportunities, and facilitates registration for both job seekers and employers. The platform is designed to support local employment and workforce development initiatives. Technically, the site uses a variety of JavaScript libraries to enhance user experience, including autocomplete and modal dialogs, and is hosted on servers associated with rzone.de. The site implements a cookie consent mechanism compliant with GDPR, indicating a focus on privacy compliance. Security posture is moderate with room for improvement in HTTP security headers and explicit security policies. No blocking or WAF mechanisms interfere with content access, allowing full analysis. Overall, the site is professional, trustworthy, and serves an essential public service function.

B

Breitbandnetz Landkreis Aurich

breitband-aurich.de

38

Breitbandnetz Landkreis Aurich is a public sector broadband infrastructure initiative focused on deploying high-speed fiber optic networks in under-served rural areas of the Aurich district in Germany. The project is implemented in partnership with Vodafone Deutschland GmbH and funded through federal and state programs. The website serves as an information portal for residents and businesses, providing updates on construction progress, FAQs, and contact options. Technically, the site is built on WordPress with a modern theme and plugins, including SEO and security tools such as Google reCAPTCHA and cookie consent mechanisms. Security posture is solid with HTTPS and privacy compliance, though some improvements in security headers and incident response transparency are recommended. Overall, the site is professional, trustworthy, and well-aligned with its public service mission.

T

Trägergesellschaft Kliniken Aurich-Emden-Norden mbH

anevita.de

46

The website www.anevita.de represents the Trägergesellschaft Kliniken Aurich-Emden-Norden mbH, a regional healthcare provider operating multiple hospitals and medical centers in the Ostfriesland region of Germany. The site provides comprehensive information about their clinics, medical services, and career opportunities, targeting patients and healthcare professionals. The business is positioned as a key regional healthcare provider with strong ties to medical education institutions. Technically, the website is built on TYPO3 CMS with Bootstrap and modern JavaScript libraries, offering good mobile optimization, accessibility, and SEO. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policy and incident response contact details. Overall, the site is professional, trustworthy, and compliant with GDPR, with no signs of blocking or WAF interference.

R

Rettungsdienst Landkreis Aurich gGmbH

rettungsdienst-aurich.de

58

Rettungsdienst Aurich is a regional emergency medical service provider operating in Landkreis Aurich, Germany, with over 40 years of experience. The organization offers critical services including emergency rescue, patient transport, emergency doctor transport, and intensive care transport across eight strategically located stations. Their website reflects a well-established business model focused on healthcare and transportation services for the local population. Technically, the website is built on WordPress with Elementor and Yoast SEO plugins, indicating a modern and maintainable infrastructure. The site is mobile-optimized and provides good user experience and navigation clarity. However, performance is moderate and accessibility features are basic. From a security perspective, the site uses HTTPS with a valid SSL certificate but lacks several security headers and does not publish privacy or cookie policies, which are important for GDPR compliance. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and security posture. Overall, the website is professional and trustworthy, but improvements in privacy compliance and security best practices are recommended to align with modern standards and regulatory requirements.

M

MKW – Materialkreislauf- und Kompostwirtschaft GmbH & Co. KG

mkw-grossefehn.de

56

The website represents MKW – Materialkreislauf- und Kompostwirtschaft GmbH & Co. KG, a government-affiliated waste management and environmental services provider for Landkreis Aurich, Germany. It offers a broad range of services including waste collection, container services, self-delivery at recycling centers, and environmental education. The site is well-positioned as a regional public service entity with clear communication and comprehensive service information. Technically, the website is built on Joomla CMS using modern frameworks like Helix Ultimate and Bootstrap, ensuring good mobile optimization and user experience. Security posture is solid with HTTPS, cookie consent mechanisms, and CSRF protections, although some security headers could be improved. Privacy compliance is strong with a detailed privacy policy and GDPR-compliant cookie banner. Overall, the site is professional, trustworthy, and serves its target audience effectively.

D

Deutsche Vereinigung für Datenschutz e.V.

datenschutzverein.de

43

The Deutsche Vereinigung für Datenschutz e.V. (DVD) is a well-established German non-profit organization dedicated to advocating for data protection as a fundamental human right. Founded in 1977, the DVD provides education, publishes the DANA magazine, and engages in advocacy efforts to protect citizens' privacy rights against modern data processing risks. Their target audience includes privacy-conscious citizens and civil society groups. The website reflects a professional and consistent brand image, with clear contact information and active content updates. Technically, the website is built on WordPress 6.8.1 using the Neve theme and standard plugins such as Contact Form 7 and a newsletter tool. Hosting appears to be provided by Your-Server.de, a known German hosting provider. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. No advanced analytics or tracking scripts were detected, indicating a privacy-respecting approach. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks explicit security headers and published security policies. No vulnerability disclosures or incident response contacts are provided. The site does not implement a cookie consent mechanism, which is a minor GDPR compliance gap. Overall, the security posture is solid but could be improved with additional headers and transparency. The overall risk assessment is low, with no signs of malicious activity or suspicious domain registration patterns. Strategic recommendations include adding cookie consent, security headers, and a vulnerability disclosure policy to enhance trust and compliance. The site is trustworthy, professional, and serves its non-profit mission effectively.

K

Klarna

sofort.de

68

Klarna is a leading European payment service provider that has integrated Sofortüberweisung into its platform, offering customers a seamless, secure, and familiar payment experience. The website clearly targets German-speaking online shoppers and merchants, emphasizing ease of use, security, and buyer protection. Klarna's market position is strong, supported by a comprehensive suite of payment options and a well-branded digital presence. Technically, the site uses modern web technologies including React and integrates analytics and tracking tools such as Google Analytics and FullStory, ensuring good performance and user experience across devices. Security is robust with HTTPS, multi-factor authentication, and buyer protection prominently featured, although explicit incident response and vulnerability disclosure policies are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with GDPR, with clear contact channels and comprehensive policy documentation.

Papoo Software & Media GmbH operates the Papoo CMS, a German-based, open source content management system focused on accessibility, SEO, and marketing integration. The company targets website owners and developers seeking a modern, mobile-friendly CMS with extensive features and customization options. The website demonstrates a mature technical infrastructure using PHP, MySQL, and modern frontend frameworks, with strong emphasis on SEO and accessibility. Security posture is solid with HTTPS, CSRF protections, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is comprehensive, with detailed policies and GDPR-aligned consent tools. Overall, the site is professional, trustworthy, and well-positioned in the CMS market.

J

Jspreadsheet

lemonadejs.com

61

LemonadeJS is a small technology company offering a lightweight, dependency-free reactive JavaScript library designed for modern frontend development. The company provides a suite of reusable components and plugins that integrate with popular frameworks such as React and VueJS. Their ecosystem includes commercial and open-source products, targeting JavaScript developers seeking efficient and flexible tools. The website is well-structured, professionally designed, and provides comprehensive technical documentation and examples. The technical infrastructure leverages modern web technologies and includes analytics via Google Tag Manager and Google Analytics. Security posture is moderate with HTTPS enforced but lacks published security policies, privacy policies, and security headers. The domain is well-established with consistent WHOIS data, supporting legitimacy. Overall, the website is trustworthy but could improve privacy compliance and security transparency.

J

Jspreadsheet CE

bossanova.uk

51

Bossanova.uk operates as the home for Jspreadsheet CE and related JavaScript UI components, offering both open-source and enterprise-grade spreadsheet and data grid solutions. The company targets developers and enterprises seeking flexible and powerful JavaScript components to integrate into web applications. Their product ecosystem includes collaborative spreadsheet tools and JavaScript plugins, positioning them as a niche technology provider in the web development space. The website is professionally designed with good content relevance and clear navigation, supporting a positive user experience.

I

Intrasheets

intrasheets.com

62

Intrasheets is a technology company offering a self-hosted, real-time collaborative spreadsheet solution designed for organizations requiring private data management and API integration capabilities. The product emphasizes data security, version control, and relational worksheet features, targeting developers and enterprises seeking flexible spreadsheet collaboration on their own infrastructure. The website is professionally designed with clear navigation and good content quality, supporting the business model with free trials and comprehensive documentation. Technically, the site leverages modern JavaScript libraries including Jspreadsheet, Jsuites, and LemonadeJS, hosted on AWS infrastructure, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and no exposed sensitive data, though improvements are recommended such as enabling DNSSEC and adding security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the domain registration is consistent with the business age and no suspicious patterns are detected, supporting a legitimacy score of 85 out of 100.

J

Jspreadsheet

jspreadsheet.com

62

Jspreadsheet is a technology company specializing in a JavaScript plugin that provides advanced spreadsheet and data grid controls for web applications. The company targets developers and businesses seeking Excel-like spreadsheet functionality embedded in their software. It holds a strong market position with usage by leading global companies and offers a professional product with extensions and framework integrations. The website demonstrates a mature technical infrastructure leveraging modern JavaScript frameworks, CDNs, and multiple analytics and marketing tools. The site is well-designed, mobile-optimized, and SEO-friendly, providing a rich user experience. Security posture is good with HTTPS and domain transfer protections, but lacks some advanced headers and published security policies. Privacy compliance is basic with cookie consent but no visible privacy policy. Overall, the risk is moderate with recommendations to enhance security headers and publish privacy and security policies to improve trust and compliance.

Z

Zukunftszentrum Brandenburg

zukunftszentrum-brandenburg.de

53

Zukunftszentrum Brandenburg is a government-supported initiative focused on assisting companies across various sectors in Brandenburg with digital and demographic transformation. Established around 2020, it offers consulting, educational workshops, and sector-specific support, particularly targeting small and medium enterprises in handcraft and care sectors. The website reflects a strong regional presence with partnerships involving federal and state ministries and research institutions. Technically, the site is built on WordPress with modern plugins for SEO and privacy compliance, delivering a well-structured, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though formal security policies and incident response contacts are absent. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR, making it a reliable resource for its target audience.

F

FREI DAY

frei-day.org

45

FREI DAY is an educational non-profit initiative based in Germany, focused on innovative learning formats that empower students to engage with future-oriented questions and projects. The website positions itself as a resource and community hub for educators, students, and schools, supported by the parent organization Schule im Aufbruch. The platform offers programs, workshops, and materials to facilitate the FREI DAY learning approach. Technically, the website is built on WordPress using Elementor and Gravity Forms, with modern analytics tools like Google Tag Manager and Hotjar integrated. The site demonstrates good design quality, mobile optimization, and SEO practices, although some accessibility features could be improved. Cookie consent is managed via a GDPR-compliant plugin, but explicit privacy and terms of service pages are not detected in the provided content. From a security perspective, the site enforces HTTPS and domain registration protections but lacks DNSSEC and published security policies or incident response contacts. No critical vulnerabilities or malicious content were detected. Overall, the site appears trustworthy and professionally maintained, suitable for its educational mission. Strategic recommendations include enabling DNSSEC, publishing comprehensive privacy and security policies, and enhancing accessibility and compliance documentation to strengthen trust and regulatory adherence.

W

Home -

wsh-hatten.de

41

The website www.wsh-hatten.de is a WordPress-based site using the Astra theme and Elementor page builder, optimized with WP Rocket and Yoast SEO. The site appears to be a small business or local entity with minimal content and lacks detailed business descriptions or contact information. The technical infrastructure is standard for WordPress sites, hosted on Alfahosting servers, with external resources loaded from common domains such as Google Fonts and Usercentrics for consent management. Security posture is weak due to the absence of security headers and explicit policies. No privacy, cookie, or terms of service policies are present, indicating low compliance with GDPR and related regulations. The site is accessible without WAF or security challenges, but lacks transparency and trust signals. Overall, the site scores low on business credibility and privacy compliance, with moderate technical implementation and basic content quality.

B

BRAINYOO Cloud Lernsoftware - die Lernkartei zum einfachen Auswendiglernen

brainyoo.de

62

BRAINYOO is a German-based educational software company specializing in cloud-based learning software and flashcard applications designed for students and learners across schools, vocational training, further education, and university levels. The company offers a SaaS model with a focus on effective e-learning solutions, positioning itself as a reputable provider in the education technology sector. The website demonstrates a professional digital presence with consistent branding and a clear value proposition targeting learners seeking efficient memorization tools. Technically, the website is built on WordPress with WooCommerce for e-commerce capabilities and Elementor for design. It integrates modern SEO and cookie consent tools such as Yoast SEO and Real Cookie Banner Pro, alongside Google Analytics and Google Tag Manager for analytics and marketing. The hosting infrastructure uses domaincontrol.com name servers, indicating a standard domain registrar setup. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, the site employs HTTPS with a good SSL configuration and uses Wordfence for protection. Cookie consent is managed compliantly with GDPR requirements. However, some advanced HTTP security headers are missing, and no explicit security policy or incident response information is publicly available. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website is safe, professional, and compliant with privacy regulations, serving a general audience without any adult or questionable content. The domain registration data is limited but does not raise concerns. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen trust and compliance.

W

Westermann

bildungausderzukunft.de

61

Bildung aus der Zukunft is an educational initiative affiliated with the Westermann Gruppe, focusing on digital education, AI, modern teaching methods, and school reforms. The platform offers a magazine with expert articles, webinars for school authorities, and organizes the Westermann Summit event series. The website is professionally designed, well-branded, and targets education professionals and institutions primarily in Germany. Technically, it is built on WordPress with a modern theme and plugins, hosted by hosting.de, and uses HTTPS with moderate performance and good mobile optimization. Security posture is solid with SSL and no visible vulnerabilities, though security headers and explicit policies are lacking. Privacy and cookie policies are managed centrally via the Westermann main domain, indicating compliance with GDPR. Overall, the site is trustworthy, professional, and serves as a credible resource in the education sector.

I

idealo.de

flights-idealo.co.uk

65

Flights-idealo.co.uk is a UK-targeted flight price comparison website operated by idealo internet GmbH, a well-established company in the online price comparison market. The platform aggregates flight offers from numerous airlines and travel agents, providing users with a comprehensive and user-friendly interface to find cheap flights quickly. The website is part of the idealo brand family, which operates multiple regional sites, enhancing its market presence and trustworthiness. Technically, the site employs modern web technologies including React, Apollo GraphQL, and styled components, ensuring a responsive and performant user experience. The use of HTTPS and consent management tools like Usercentrics demonstrates a commitment to security and privacy compliance. However, the WHOIS data for the domain is unavailable due to a domain registration error related to naming rules, which does not appear to impact the legitimacy or operation of the site. Security posture is good but could be improved by adding explicit security headers and publishing a security policy. Overall, the site is professional, trustworthy, and well-positioned in the flight comparison market.

RDN Agentur für Public Relations GmbH und RDN Verlags GmbH is a small German media and public relations company specializing in creative, multimedia services including website development, press work, social media management, and publishing. Their market position is that of a regional niche agency and publisher serving business clients seeking professional media and PR solutions. The website reflects a professional and consistent brand image with clear contact information and social media presence, supporting business credibility. Technically, the website uses modern Bootstrap 5.3.2 for responsive design and includes JavaScript for interactivity. The site is moderately performant and mobile-optimized but lacks advanced accessibility features and SEO optimization. No CMS or hosting provider details are evident. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site is accessible over HTTPS (assumed from URL), but no security headers were detected, and no explicit security policies or incident response contacts are provided. The site lacks a cookie consent mechanism despite having a GDPR-compliant privacy policy. No forms or data collection points were found on the homepage, reducing attack surface. WHOIS data is consistent with the business claims, showing no privacy protection and legitimate DNS configuration. Overall, the website presents a moderate security posture with room for improvement in security headers, cookie consent, and incident response transparency. The business credibility is strong, but technical and privacy compliance aspects could be enhanced to improve trust and compliance.