Security Directory

D

Dertouristik RO

dertour.ro

57

DERTOUR Romania operates as an online travel agency specializing in vacation packages, last minute deals, and exclusive hotel offers primarily targeting Romanian customers. The website is professionally designed with a clear focus on travel services, offering a wide range of destinations and booking options. The technical infrastructure leverages modern JavaScript frameworks, Google Tag Manager, and Usercentrics for consent management, indicating a mature digital presence. Security posture is solid with HTTPS enforcement, cookie consent, and no visible vulnerabilities, although explicit security policies and incident response information are not publicly available. Overall, the website presents a trustworthy and professional front for DERTOUR's travel services in Romania.

Q

Qobuz

qobuz.com

66

Qobuz is a well-established digital music service specializing in high-quality streaming and Hi-Res downloads, targeting audiophiles and music enthusiasts primarily in Finland and other international markets. The website demonstrates a mature digital presence with extensive content, clear subscription offerings, and a strong brand identity. Technically, the site employs modern web technologies, including SPA architecture, advanced analytics, and performance monitoring tools, ensuring a fast and responsive user experience across devices. Security posture is solid with HTTPS enforcement, content security policies, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is trustworthy and professionally maintained, though the lack of WHOIS transparency slightly reduces domain trustworthiness.

N

Napster

napster.com

65

Napster is a well-established global music streaming service offering over 110 million songs and official music videos with ad-free and offline listening options. The company also provides B2B branded music platform solutions, serving businesses seeking to launch their own music services. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site uses WordPress CMS with modern analytics and marketing tools such as Google Analytics, Amplitude, Braze, and Hotjar, alongside a consent management platform for GDPR compliance. Security posture is strong with HTTPS, security headers, and reCAPTCHA protections, though explicit security policies and incident response information are absent. The lack of WHOIS data limits domain trust assessment, but the overall digital footprint and branding indicate legitimacy. Strategic recommendations include publishing security policies, adding vulnerability disclosure mechanisms, and enhancing transparency on data retention.

S

SendOwl

sendowl.com

63

SendOwl is a mature and well-established digital commerce platform specializing in enabling businesses and individuals to sell digital products, subscriptions, memberships, and more. The platform offers a comprehensive suite of tools including payment links, storefronts, and checkout solutions, targeting a broad audience of digital sellers from solopreneurs to scale-ups. The website demonstrates strong market positioning with over $2 billion in transactions processed and a decade-long community focus. Technically, the website is built on modern frameworks such as Next.js and React, leveraging popular analytics and marketing tools like Google Analytics, Segment, and Facebook Pixel. The site is performant, mobile-optimized, and accessible, reflecting a high level of digital maturity. Hosting and CDN services appear to be provided by Cloudflare, ensuring reliability and security. From a security perspective, the site enforces HTTPS, employs multiple security headers, and integrates secure payment gateways. However, there is room for improvement in cookie consent mechanisms and publishing explicit security policies or incident response contacts. The absence of WHOIS data introduces some uncertainty regarding domain registration transparency, but the overall trustworthiness is supported by the professional website and business signals. Overall, SendOwl presents a low-risk profile with strong business credibility and technical robustness. Strategic recommendations include enhancing privacy compliance with explicit cookie consent, publishing vulnerability disclosure information, and improving transparency around incident response and data retention policies.

G

Google

womentechmakers.com

73

The Women Techmakers program is an initiative by Google aimed at advancing women in technology by providing visibility, community support, and resources. The website serves as a hub for program information, ambassador and member engagement, and various initiatives such as Black Women in Tech and She Builds AI. It is positioned as part of Google's broader developer outreach and diversity efforts, targeting women in tech globally. The program has a significant reach with thousands of ambassadors and tens of thousands of members worldwide. Technically, the website is hosted on Google's infrastructure, leveraging modern web technologies including Google Fonts, Google Analytics, and YouTube embeds. It is optimized for mobile devices, accessible, and designed with a professional and consistent branding approach. The use of structured data and comprehensive metadata enhances SEO and content discoverability. From a security perspective, the site enforces HTTPS and likely employs standard security headers, although explicit header data is not visible in the HTML. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear links to Google's centralized privacy and cookie policies, including consent mechanisms. However, no direct contact information or dedicated security incident response details are provided on the site. Overall, the website demonstrates a mature digital presence with high trustworthiness and professionalism. It effectively supports Google's mission to empower women in technology while maintaining strong technical and security standards.

G

Google

techequitycollective.com

73

Google's developers.google.com community page serves as a hub for developer networking, learning, and engagement with a focus on accelerating tech career pathways. The site is part of Google's extensive developer ecosystem, offering resources related to web and mobile app development, cloud computing, AI, and other cutting-edge technologies. As a subdomain of google.com, it benefits from Google's strong market position and brand recognition. Technically, the site employs modern web standards, Google Cloud hosting, and integrates Google Analytics and Tag Manager for performance and user insights. Security posture is robust, leveraging HTTPS and Google’s security infrastructure, with no visible vulnerabilities or exposed sensitive data. Privacy and cookie policies are linked to Google's comprehensive and GDPR-compliant central policies, enhancing user trust. Overall, the site is professional, well-branded, and trustworthy, targeting developers and tech professionals globally.

A

Adami

adami.fr

69

Adami is a French collective management organization dedicated to supporting artists-interpreters through rights management, financial aid, and career support. The website is professionally designed, multilingual (French and English), and targets artists and project holders in the cultural and media sectors. The business model revolves around collective rights management and funding artistic projects, positioning Adami as a key player in the French artistic ecosystem. Technically, the site is built on WordPress with modern JavaScript libraries and includes analytics and cookie consent tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of a published security policy and incident response details suggests room for improvement. The lack of WHOIS data limits domain trust verification, but the professional presentation and official social media presence support legitimacy. Overall, the site is safe, compliant with GDPR, and well-structured, serving its audience effectively.

A

ADAGP

adagp.fr

63

ADAGP is a well-established French collective rights management organization founded in 1953, specializing in the collection and distribution of authors' rights in the visual arts sector. The website presents a professional and comprehensive digital presence, targeting artists, rights holders, and users of artworks with a broad range of services including membership, authorization requests, and artistic support. The technical infrastructure is built on Drupal CMS with modern frontend technologies and integrates Google Tag Manager for analytics. Security posture is solid with HTTPS enforced, though improvements are recommended in security headers and explicit privacy compliance documentation. The absence of WHOIS data limits domain ownership verification but the website's content quality, contact transparency, and social media presence support its legitimacy. Overall, ADAGP's website is a trustworthy and authoritative resource in its domain.

L

La SCELF

scelf.fr

52

La SCELF is a French civil society organization representing French language editors, focusing on publishing and editorial services. The website is built on WordPress using the Divi theme and Yoast SEO plugin, indicating a moderate level of digital maturity. The site is accessible, uses HTTPS, and includes a cookie consent mechanism, but lacks visible privacy policies, terms of service, and explicit contact information. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trust. Security posture is moderate with HTTPS enabled but missing security headers and incident response information. Strategic recommendations include publishing privacy and security policies, improving security headers, and clarifying domain registration details to enhance trust and compliance.

P

PROCIREP

procirep.fr

53

PROCIREP is a French collective management organization representing cinema and television producers, focusing on rights management related to private copying and retransmission rights. Established since 1999, it operates alongside related entities such as ANGOA and the French ISAN agency, providing support and funding for audiovisual production. The website reflects a professional and consistent brand presence targeting French audiovisual producers and stakeholders. Technically, the site uses the SPIP CMS with standard web technologies and integrates Google Analytics with a compliant cookie consent mechanism. Security posture is adequate with HTTPS and consent management but lacks explicit security headers and published security policies. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements, though improvements in accessibility and security transparency are recommended.

T

Ticketware SE

ticketware.sk

45

Ticketware SE operates a specialized ticket sales software platform targeting cinemas, cultural centers, theatres, museums, and castles primarily in Slovakia and the Czech Republic. The company offers a comprehensive SaaS solution including online ticket sales, seat reservation, ticket printing, and entry control, serving over 450 clients with monthly sales exceeding one million tickets. The website reflects a mature business with a clear market position and a focus on cultural institutions. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics, Google Tag Manager, Facebook SDK, and reCAPTCHA for security and marketing. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS and reCAPTCHA but lacks security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanism. Overall, the website is trustworthy and professional but could improve transparency and security practices.

G

Galéria Dobrá hračka

dobrahracka.sk

43

Galéria Dobrá hračka is a Slovak interactive children's gallery offering a variety of educational and entertaining attractions where children can role-play professions such as police officer, firefighter, archaeologist, and more. The business targets families and children, providing both on-site experiences and an online booking system, complemented by an e-shop for related products. The website is built on WordPress with modern plugins like Elementor and Slider Revolution, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and standard security headers, though explicit security policies and incident response contacts are absent. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and safe for general audiences.

S

Spoločnosť TAKATA s.r.o.

poliankovo.sk

43

Poliankovo is a small hospitality and digital art business located in the High Tatras, Slovakia, operated by Spoločnosť TAKATA s.r.o. The company offers a unique combination of a digital gallery featuring modern technologies such as virtual reality and augmented reality, alongside a cafe serving Italian coffee and a gallery shop with souvenirs. The website is built on WordPress with Elementor and integrates modern web technologies, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks explicit privacy and security policies. No contact emails or phone numbers are provided, only a physical address in the footer. Overall, the website is professional and trustworthy, with room for improvement in privacy compliance and security headers.

T

Truefitt & Hill Prague

truefittandhill.cz

55

Truefitt & Hill Prague operates as a luxury men's grooming and barber service provider with a strong heritage dating back to 1805. The company offers premium grooming products and barber services, positioning itself as a world leader in the men's grooming industry with a presence in multiple global cities including Prague. The website is built on the Shoptet e-commerce platform, leveraging modern web technologies and integrating multiple analytics and marketing tools. Security posture is solid with HTTPS and consent-based cookie management, though explicit security policies and incident response details are absent. The domain WHOIS data is unavailable, which slightly impacts trust from a domain registration perspective. Overall, the website is professional, user-friendly, and compliant with privacy regulations, targeting gentlemen seeking luxury grooming experiences.

L

labor b designbüro

laborb.de

54

labor b designbüro is a small German digital agency specializing in digital brand strategy, design, and web development. The company serves a diverse clientele including international firms and notable institutions in arts, culture, and science. Their key services include brand development, corporate design, software and web application development, and strategic consulting. The website reflects a professional market position with a clear focus on delivering comprehensive digital experiences. Technically, the website employs modern web standards with HTML5, CSS3, and JavaScript, and integrates privacy-conscious Matomo analytics with cookies disabled. Hosting and DNS are managed via Cloudflare, ensuring reliable performance and security. The site is mobile-optimized and accessible, with good SEO practices. However, some security best practices such as security headers and explicit cookie consent mechanisms are missing. From a security perspective, the site benefits from HTTPS and CSRF token implementation, but lacks published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The domain WHOIS data aligns with the website's professional nature, showing no suspicious patterns or privacy protection that might obscure legitimacy. Overall, the website is trustworthy, well-designed, and compliant with GDPR in terms of privacy policy presence, though cookie consent could be improved. Strategic recommendations include enhancing security headers, adding cookie consent, and publishing security and vulnerability disclosure policies to strengthen trust and compliance.

S

Stadtmarketing Herne

cranger-kirmes.de

45

Cranger Kirmes is a major annual folk festival in North Rhine-Westphalia, Germany, organized by Stadtmarketing Herne. It is the largest family funfair in Germany, attracting millions of visitors with around 50 rides and various entertainment options. The website serves as an information portal for visitors, providing event details, schedules, ticketing options, and contact information. The site is well-branded, professionally designed, and targets families and general visitors interested in the event. Technically, the website is built on WordPress with WPBakery Page Builder and uses modern web technologies including lazy loading images and asynchronous scripts. It integrates analytics via Pirsch and manages advertisements with AdRotate. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Hosting details are not explicit, but the domain uses stable DNS providers. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. While no explicit security policies or incident response contacts are published, no vulnerabilities or exposed sensitive data were detected. Security headers could be enhanced for better protection. Overall, the site maintains a good security posture suitable for its business model. The domain WHOIS data aligns well with the website content, showing consistent registration and no privacy protection, which is appropriate for a public event. The site maintains transparency with clear contact details and social media presence, enhancing trustworthiness. No critical issues or blocking mechanisms were detected, allowing full content access and analysis.

S

Stadt Herne

inherne.net

46

inHerne.net is an established local online city magazine serving the community of Herne, Germany. It provides news, cultural content, and event information relevant to residents and visitors. The website is professionally designed using WordPress with a modern theme and plugins, offering a good user experience and mobile optimization. The content is well-structured, relevant, and trustworthy, supported by official city affiliation and contact information. Technically, the site uses standard web technologies and is hosted under a reputable registrar with a domain age consistent with its business history. Security posture is adequate with HTTPS enabled and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the site is reliable and serves its purpose effectively.

M

mediaprint infoverlag gmbh

total-lokal.de

46

mediaprint infoverlag gmbh operates the website total-lokal.de, providing regional and local informational brochures, news, and job listings across Germany. With over 50 years of experience, the company serves municipalities and local businesses by publishing both digital and print content focused on topics such as education, building, seniors, and local economy. The website is well-branded and targets residents and businesses seeking localized information. Technically, the site uses common JavaScript libraries and galleries, is mobile-optimized, and implements HTTPS with a DigiCert certificate, ensuring secure user interactions. Privacy compliance is addressed with a comprehensive privacy policy and a cookie consent mechanism. However, direct contact emails and phone numbers are not prominently displayed, relying mainly on contact forms. Security posture is solid but could be improved by adding explicit security policies and vulnerability disclosure information. Overall, the site is professional, trustworthy, and serves a niche media publishing market in Germany.

D

Dinslakener Flächenentwicklungsgesellschaft mbH (DIN FLEG mbH)

zukunft-trabrennbahn.de

50

The website Zukunft der Trabrennbahn is a municipal project platform managed by the Dinslakener Flächenentwicklungsgesellschaft mbH (DIN FLEG mbH) in cooperation with the city of Dinslaken, Germany. It focuses on the redevelopment of the former Trabrennbahn area into a residential neighborhood with community and green spaces. The site provides information, event updates, and opportunities for citizen participation, targeting local residents and stakeholders interested in urban development. Technically, the site is built on the Contao CMS platform, uses modern web standards, and includes multimedia content to engage visitors. Security posture is moderate with HTTPS usage but lacks explicit security headers and formal security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and well-aligned with its business purpose, though improvements in security and privacy transparency are recommended.

D

Das Abfallbündnis im Kreis Wesel

frag-mike.info

45

Frag Mike is a German local government initiative under the name 'Das Abfallbündnis im Kreis Wesel' focused on waste management, recycling, and environmental protection. The website serves as an educational and community engagement platform promoting proper waste disposal and recycling practices in the Kreis Wesel region. The business model is non-profit and government-oriented, targeting residents and workers in the local area. The site is professionally designed with consistent branding and clear navigation, supporting its mission effectively. Technically, the website is built on WordPress CMS with common plugins such as Contact Form 7 for user interaction, Rank Math for SEO, and Matomo for privacy-conscious analytics. The site is hosted under a registrar consistent with the domain's German origin and uses HTTPS with good SSL configuration. Mobile optimization and accessibility are well addressed, though DNSSEC is not enabled, which is a minor security gap. From a security perspective, the site enforces HTTPS, uses domain status locks to prevent unauthorized changes, and implements cookie consent mechanisms aligned with GDPR. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or suspicious content were detected. The privacy compliance is good, with clear privacy and cookie policies. Overall, Frag Mike presents a trustworthy, professional, and secure web presence for a local government environmental campaign. Strategic improvements could include adding security headers, publishing incident response and security policies, and enabling DNSSEC to enhance DNS security.

S

Stadt Dinslaken

familienkompass-dinslaken.de

63

The Familienkompass Dinslaken website serves as a centralized government-supported portal providing comprehensive family-related services and information for the Dinslaken region in Germany. It targets families, pregnant women, parents, and youth with a broad range of offerings from pregnancy support to education and health services. The site is funded by the Ministry for Children, Youth, Family, Equality, Refugees and Integration of North Rhine-Westphalia, reflecting its public service mission and local government affiliation. The portal offers a searchable database of offers and providers, enhancing accessibility to relevant social services. Technically, the website employs a modern but straightforward technology stack including HTML5, CSS3, JavaScript with libraries such as jQuery, Leaflet.js for mapping, and Matomo for analytics. The site is mobile-optimized, accessible, and well-structured, providing a good user experience. However, no explicit CMS or hosting provider information is available. Performance is moderate with no critical technical debt observed. From a security perspective, the site uses HTTPS and secure form submissions but lacks visible advanced security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial; a privacy policy page exists but no cookie consent mechanism is implemented despite usage of tracking via Matomo. Contact information is clearly provided, enhancing trust and credibility. Overall, the website is a trustworthy, well-maintained government portal with good content quality and user experience. Strategic improvements include implementing cookie consent, publishing security and incident response policies, and enhancing security headers to strengthen compliance and security posture.

D

Deutsche Bahn AG

bahnhof.de

63

bahnhof.de is the official platform operated by Deutsche Bahn AG providing comprehensive information about passenger train stations across Germany. It offers live departure and arrival times, station facilities, accessibility information, and local services to travelers. The website is well-positioned as a leading national transportation information portal, serving a broad audience of train passengers and mobility users. Technically, the site leverages modern web technologies including React and Next.js, ensuring fast performance and excellent mobile optimization. Privacy and cookie policies are well implemented, reflecting GDPR compliance. Security posture is strong with HTTPS and no visible vulnerabilities, though explicit security policies and incident response information are absent. Overall, bahnhof.de demonstrates a mature digital presence with high trustworthiness and professional content.

I

Innovation City Management GmbH

icm.de

53

Innovation City Management GmbH is a medium-sized German company specializing in sustainable urban development, energy management, and climate adaptation solutions. Their website presents a professional and well-structured digital presence focused on consulting and supporting municipalities, ministries, real estate, and energy providers in integrated city and district development. The company emphasizes practical and implementable solutions with references to successful projects and active social media engagement. Technically, the website is built on WordPress with modern plugins including Yoast SEO Premium and Matomo analytics, ensuring good SEO and privacy compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, well-optimized, and compliant with GDPR requirements.

B

BEST AöR – Bottroper Entsorgung und Stadtreinigung Anstalt des öffentlichen Rechts

best-bottrop.de

62

BEST AöR is a municipal public service provider specializing in waste disposal and city cleaning services for the city of Bottrop, Germany. The organization offers a comprehensive range of services including waste collection, recycling yard management, street cleaning, winter services, container rental, and customer support. The website reflects a well-established entity celebrating 25 years of service, targeting local residents and businesses with a strong emphasis on sustainability and community engagement through workshops and digital tools such as a dedicated mobile app. Technically, the website employs modern web technologies including jQuery, Vue.js, Google Fonts, and Google Maps API, hosted on a CMS platform called FLYcms. The site is mobile-optimized, accessible, and SEO-friendly, providing a smooth user experience. Privacy and cookie compliance are well implemented with a detailed cookie consent mechanism and a comprehensive privacy policy. Analytics are conducted via Matomo with anonymized data collection, aligning with GDPR requirements. From a security perspective, the site uses HTTPS and secure forms with CAPTCHA protections. However, explicit HTTP security headers are not detected, and no public security or incident response policies are published. No vulnerabilities or suspicious activities were identified in the content or WHOIS data. The domain and DNS setup are consistent with a legitimate municipal entity. Overall, BEST AöR demonstrates a strong digital presence with good security and privacy practices suitable for a public service organization. Strategic improvements could include enhancing HTTP security headers and publishing formal security policies to further strengthen trust and compliance.

V

Volkshochschule der Stadt Bottrop

vhs-bottrop.de

53

The Volkshochschule der Stadt Bottrop is a municipal adult education institution providing a wide range of educational programs including integration courses, vocational training, and cultural events. It serves the local population of Bottrop, Germany, and operates under the city's auspices. The website is built on WordPress with a modern tech stack including Bootstrap and jQuery, offering a responsive and user-friendly experience. Privacy compliance is well addressed with GDPR-aligned policies and a cookie consent mechanism. Security posture is adequate with HTTPS and secure login forms, though it lacks explicit security headers and incident response information. Overall, the site is professional, trustworthy, and focused on educational services.

R

Ruhr Tourismus GmbH

ruhr-tourismus.de

57

Ruhr Tourismus GmbH operates as a regional tourism promotion organization for the Ruhrgebiet area in Germany, providing comprehensive travel planning, cultural, event, and gastronomy information to tourists and visitors. The website is professionally designed with good content quality, clear navigation, and multilingual support, reflecting a mature digital presence. Technically, it leverages WordPress with modern plugins such as Yoast SEO and Borlabs Cookie for privacy compliance, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing, all served over HTTPS with moderate performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and explicit security policies could enhance protection. The domain registration is consistent with a legitimate business, though WHOIS details are minimal. Overall, the site is trustworthy, privacy compliant, and well-positioned as a regional tourism authority.

E

Emscher Lippe Energie GmbH

elecard.de

70

Emscher Lippe Energie GmbH operates the ELE Card platform, a regional loyalty program offering customers discounts and benefits across various sectors such as leisure, retail, and travel. The website is professionally designed, leveraging TYPO3 CMS and modern web technologies to provide a user-friendly experience. The company targets residents and customers in the Emscher Lippe region, positioning itself as a regional energy provider with added customer engagement services. Technically, the site uses reputable analytics and advertising tools including Matomo, Google Ads, and Facebook Pixel, all integrated with a robust cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS, security headers, and session management in place, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is trustworthy, compliant, and well-structured, supporting the company's business objectives effectively.

S

Stadt Bottrop

ratsinfo-bottrop.de

59

The Ratsinfosystem website is an official municipal portal operated by Stadt Bottrop, Germany, providing comprehensive public access to political information including committees, members, sessions, and archives. It serves citizens and mandate holders with a clear focus on transparency and accessibility. The site is built on the SD.NET RIM 4 platform, leveraging modern web technologies such as jQuery and CSS3, and includes a secure login mechanism for authorized users. Privacy and cookie policies are prominently linked, reflecting GDPR compliance. Security posture is strong with HTTPS enforced and CSRF protection on forms, though some security headers could be improved. Overall, the site is trustworthy, professionally designed, and well-maintained, with no signs of malicious content or blocking mechanisms.

S

Stadt Duisburg

meinduisburg.app

63

The website meinduisburg.app serves as the official municipal app portal for the city of Duisburg, Germany. It provides residents with comprehensive information about local services such as waste collection schedules, event calendars, children's city maps, and climate-related initiatives. The site targets private customers (citizens) and offers direct download links to the MEIN DUISBURG app on Apple and Android platforms. The business model is focused on delivering public services digitally to enhance citizen engagement and convenience. Technically, the website is built on TYPO3 CMS with Bootstrap 5 for responsive design. It integrates Matomo for analytics and Usercentrics for GDPR-compliant cookie consent management. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure suitable for a government entity. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It effectively serves its purpose as a municipal information hub, with recommendations to enhance transparency around security and incident handling to further strengthen user trust.

S

Stadtwerke Duisburg AG

stadtwerke-duisburg.de

62

Stadtwerke Duisburg AG is a well-established regional utility provider in Germany, offering essential services such as electricity, gas, water, and district heating to private customers in Duisburg. The company boasts a long history of over 170 years, positioning it as a trusted energy supplier in its market. The website reflects a professional and consistent brand image, targeting local consumers with relevant service information. Technically, the site is built on TYPO3 CMS and incorporates modern web technologies including jQuery, Bootstrap, and various tracking and marketing tools. The presence of a cookie consent mechanism via Usercentrics indicates attention to privacy compliance, although explicit privacy and terms of service documents were not found in the provided content. Security-wise, the site uses HTTPS and includes multiple third-party scripts for analytics and advertising, but lacks visible security headers and explicit security policies. Overall, the website is functional and professional but could improve transparency and security posture by publishing comprehensive privacy policies, terms of service, and security contact information.

L

Make Duisburg green again! | Let's DU it – Join us in transforming Duisburg into a sustainable urban paradise. Experience innovation and modern living in Europe's Hydrogen Capital.

lets-du-it.com

57

The website lets-du-it.com serves as a promotional platform for the city of Duisburg, Germany, emphasizing its transformation into a sustainable and innovative urban center, particularly highlighting its role as Europe's Hydrogen Capital. The site targets skilled workers, international talent, and innovators, offering information about economic sectors, quality of life, and job opportunities. Technically, the site is built on WordPress with a modern plugin stack including multilingual support and cookie consent management. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks DNSSEC and explicit security headers. Privacy compliance is limited due to the absence of a clear privacy policy. Overall, the site is professional and trustworthy but could improve in privacy transparency and security hardening.

The Regenagentur Duisburg is a municipal service established in 2022 by the Wirtschaftsbetriebe Duisburg to provide citizens with information and support regarding sustainable rainwater management. The agency focuses on promoting natural rainwater handling, offering advisory services, and managing a related funding program. The website serves as an informational and contact platform for residents of Duisburg, Germany, with clear communication channels and official branding. Technically, the website is built on TYPO3 CMS, employs Matomo for analytics, and uses modern front-end libraries such as AOS and Slick Slider. The site is mobile-optimized and performs moderately well, though there is room for improvement in SEO and accessibility. Hosting is managed via DomainControl nameservers, indicating a standard registrar setup. From a security perspective, the site enforces HTTPS and uses secure cookies for analytics. However, it lacks several recommended security headers and does not provide explicit security policies or incident response contacts. Privacy compliance is partially addressed with a comprehensive privacy policy linked externally, but no cookie consent mechanism is present. Overall, the website is trustworthy and professionally maintained, suitable for its public service role. Strategic improvements in security headers, privacy consent, and incident response transparency would enhance its security posture and compliance.

S

Stadtwerke Sommerkino

stadtwerke-sommerkino.de

63

Stadtwerke Sommerkino is a well-established open-air cinema event held annually in Duisburg, Germany, since 1996. It offers a curated selection of films in a unique industrial park setting, supported by prominent local sponsors such as Stadtwerke Duisburg and König Pilsener. The event targets film enthusiasts and local visitors, combining cultural entertainment with hospitality services like a beer garden. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses performance and privacy-enhancing plugins such as Autoptimize and Borlabs Cookie. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are absent. No vulnerabilities or suspicious activities were detected. Overall, the website reflects a professional, trustworthy, and user-friendly digital presence for a regional cultural event.

D

Duisburg Live

duisburglive.de

43

Duisburg Live is an official event calendar platform for the city of Duisburg, Germany, providing comprehensive listings of cultural, sports, and community events. The website is well-branded and professionally designed, targeting residents and visitors interested in local activities. It operates on TYPO3 CMS with modern frontend technologies and integrates Matomo for analytics. Security posture is adequate with HTTPS and no visible vulnerabilities, though it lacks explicit security headers and incident response policies. Privacy compliance is basic with a privacy policy and cookie policy present but no active cookie consent mechanism. Overall, the platform is trustworthy and serves as a key community resource.

E

EVENT FORUM Castrop-Rauxel

eventforum-castrop.de

49

EVENT FORUM Castrop-Rauxel operates as a regional event venue and organizer in the Ruhrgebiet area of Germany, offering multiple event locations including Stadthalle and Europahalle. The company provides comprehensive event planning support, ticket sales, and hospitality services, targeting event organizers and attendees in the region. The website reflects a professional and consistent brand presence with clear navigation and relevant content focused on event hosting and services. Technically, the website is built on WordPress using Elementor and integrates popular event management plugins such as The Events Calendar and Events Calendar Pro. It employs modern web technologies including Google Tag Manager and hCaptcha for security on forms. Hosting is provided by Alfahosting, a reputable German hosting provider. The site is mobile optimized and SEO friendly with structured data for events. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms compliant with GDPR. However, explicit security headers like CSP and X-Frame-Options are not evident, and no published security or incident response policies exist. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and security posture.

S

Stadtwerke Castrop-Rauxel GmbH

swcas.de

64

Stadtwerke Castrop-Rauxel GmbH operates as a regional energy utility provider focused on delivering renewable electricity, gas, heating, and electric vehicle charging solutions to residents and businesses in Castrop-Rauxel, Germany. The company emphasizes customer proximity, regional engagement, and environmental responsibility, positioning itself as a trusted local energy partner. Their website reflects a mature digital presence with integrated online calculators, customer portals, and comprehensive service information. Technically, the site is built on TYPO3 CMS with modern JavaScript and Bootstrap frameworks, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though formal security policies and incident response contacts are absent. Overall, the site demonstrates good GDPR compliance and business credibility, supported by certifications and clear contact details.

EUV Stadtbetrieb Castrop-Rauxel -AöR- is a municipal utility company serving the city of Castrop-Rauxel, Germany. The organization provides essential public services including waste disposal, street cleaning, winter services, infrastructure maintenance, environmental protection, and property tax collection. The website is designed to serve local residents and businesses with information and service portals. Technically, the site is built on TYPO3 CMS with common frontend libraries such as jQuery and Bootstrap, offering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, though it lacks published security policies and incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, reflecting its public sector nature.

G

GKD Recklinghausen

gkd-re.de

64

GKD Recklinghausen is a publicly governed IT service provider serving the Recklinghausen district and its municipalities in Germany. As a Zweckverband (public-law association), it offers modern IT solutions including software for municipal administration, consulting, training, and operates a TÜV-certified data center. The website reflects a professional regional public sector entity with clear service offerings and contact information. Technically, the site uses Drupal 9 CMS and Leaflet.js for mapping, indicating a modern and maintainable infrastructure. Security posture is moderate with HTTPS usage and TÜV certification but lacks visible security headers and cookie consent mechanisms. Overall, the site is trustworthy and well-positioned for its target audience but could improve privacy compliance and security transparency.

The website at it-castrop-rauxel.de is currently minimalistic, consisting solely of a blank page with a centered base64-encoded image and no textual or metadata content. There are no privacy policies, cookie notices, terms of service, or contact information available, which significantly limits the ability to assess the business or security posture. The domain is hosted on servers associated with kasserver.com, but no registrant or organizational data is provided to verify legitimacy or business claims. Technically, the site lacks HTTPS and security headers, which are critical for secure web presence. Overall, the site appears to be either under construction or abandoned, with very low digital maturity and security readiness.

S

Stadt Bochum

stadtliche-ausbildung-bochum.de

52

The website www.stadtliche-ausbildung-bochum.de serves as the official training and education portal for the city of Bochum, Germany. It provides comprehensive information about various apprenticeship programs, dual study courses, internships, and application procedures. As a large public sector employer, the city offers diverse career opportunities in administration, technical fields, social services, and firefighting. The site targets young people and prospective trainees seeking career development within the municipal government. Technically, the website is built on WordPress using the WPBakery Page Builder and the Salient theme, hosted by webgo.de. It employs Matomo analytics for privacy-conscious visitor tracking and implements GDPR-compliant cookie consent mechanisms. Security-wise, the site uses HTTPS with good SSL configuration and basic security best practices, though it lacks explicit security policies or vulnerability disclosure pages. Overall, the site is professional, trustworthy, and well-structured, supporting the city's role as a major employer and training provider. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility features.

W

WirtschaftsEntwicklungsGesellschaft Bochum mbH

bochum-smartcity.de

50

The website www.bochum-smartcity.de represents the Smart City Innovation Unit of Bochum, a municipal initiative focused on digitalizing city processes and fostering innovation within the city administration and affiliated enterprises. The site targets local citizens, city officials, and business partners, positioning itself as a key player in the digital transformation of Bochum. The business model is public sector-driven, emphasizing collaboration and modernization of municipal services. Technically, the website is built on WordPress with Elementor as the page builder, enhanced by Yoast SEO for search optimization and HubSpot for marketing analytics. Security measures include HTTPS, Wordfence plugin protection, and Google reCAPTCHA for form spam prevention. The site employs a comprehensive cookie consent mechanism compliant with GDPR, ensuring user privacy and transparency. Security posture is solid with encrypted connections and consent management, though explicit security headers could be improved. No vulnerabilities or suspicious activities were detected. The website is fully accessible without WAF or blocking mechanisms, indicating stable and open access. Overall, the site demonstrates a mature digital infrastructure aligned with public sector standards, providing a trustworthy and professional user experience. Strategic recommendations include enhancing security headers, publishing a formal security policy, and continuous monitoring of third-party integrations to maintain compliance and security.

M

Mein Mülheim | Heimaturlaub in der Stadt am Fluss

mein-muelheim.de

57

Mein Mülheim is a tourism-focused website promoting the city of Mülheim an der Ruhr, Germany, highlighting local attractions, weekend tips, and outdoor activities. The site targets general visitors and residents interested in exploring the city and its surroundings. The business model centers on local tourism promotion and community engagement. Technically, the website is built on TYPO3 CMS and employs Cookiebot for cookie consent management, indicating a moderate level of digital maturity. The site is mobile-optimized and presents good content quality with consistent branding. Security posture is moderate, with HTTPS implied and cookie consent implemented, but lacks explicit security headers and published security policies. Privacy compliance is basic, with no visible privacy policy or terms of service pages. Overall, the website is accessible, safe, and professional but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

K

Klima-Bündnis Services

stadtradeln.de

65

STADTRADELN is an established international campaign managed by Klima-Bündnis Services that promotes cycling as a means to improve climate protection, increase bicycle traffic, and enhance quality of life in municipalities. The website serves as a platform for participants and municipalities to register, track cycling activities, and access campaign information. The site is built on TYPO3 CMS with a modern, responsive design and integrates Matomo analytics configured to disable cookies, reflecting some privacy awareness. Security posture is good with HTTPS enforced and secure login mechanisms, though explicit security policies and privacy documentation are not found in the provided content. Overall, the website is professional, trustworthy, and well-positioned in its niche.

K

Kulturforum Witten

kulturforum-witten.de

42

Kulturforum Witten is a public cultural institution operating multiple cultural facilities and event venues in the city of Witten, Germany. It serves as a central hub for cultural activities including museums, libraries, music schools, and archives, supported by approximately 100 employees. The website reflects a well-established organization with a strong community and cultural focus, offering diverse programs and events. Technically, the site uses modern web technologies including Bootstrap, UIkit, and Matomo analytics, with good mobile optimization and accessibility features. Security practices include HTTPS, CSRF protection, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie consent. The domain WHOIS data is minimal but consistent with a legitimate public institution. Overall, the website is professional, trustworthy, and well-maintained.

S

Stadtmarketing Witten GmbH

stadtmarketing-witten.de

61

Stadtmarketing Witten GmbH operates a comprehensive tourism and local commerce website focused on the city of Witten, Germany. The company provides key services including tourist information, ticket sales for events, guided tours, and retail of souvenirs and vouchers. The website positions itself as the largest ticket provider in Witten for entertainment events such as concerts, festivals, and theater. The target audience includes tourists, local residents, and event attendees. The business model centers on service provision and retail within the hospitality and tourism sectors.

K

Kubus Software GmbH

vhs-wwh.de

42

The website www.vhs-wwh.de represents a regional adult education provider serving the Witten, Wetter, and Herdecke areas in Germany. It offers a broad portfolio of courses including languages, health, arts, and professional development, targeting lifelong learners and adults seeking continuing education. The business operates under the Kubus Software GmbH platform, leveraging TYPO3 CMS for content management and Matomo for privacy-conscious analytics. The site is well-structured with clear navigation and professional design, supporting a positive user experience. Contact information and legal pages such as privacy policy and terms of service are present, enhancing business credibility. Technically, the website uses a modern CMS and includes responsive design elements, with moderate performance and good SEO practices. Hosting is provided by kasserver.com, and the site is secured with HTTPS. However, there is no visible cookie consent mechanism, and security headers are not evident, which are areas for improvement. The presence of a demo login with credentials disclosed in a modal could pose a minor security risk if not properly managed. From a security perspective, the site demonstrates good baseline practices such as HTTPS and no exposed sensitive data. The use of Matomo analytics aligns with privacy best practices. Nonetheless, the absence of incident response contacts and security policies limits transparency in security readiness. No vulnerabilities or suspicious patterns were detected in the WHOIS data or site content, supporting a trustworthy profile. Overall, the website scores well in content quality, technical implementation, and business credibility, with moderate privacy compliance and security posture scores. Strategic improvements in cookie consent, security headers, and incident response transparency would enhance the security and compliance posture further.

S

SAS ICESI

woah.fr

60

WOAH.fr is a French technology website operated by SAS ICESI, offering a Google visibility administration solution aimed at businesses seeking to improve their search engine presence. The website presents a professional design with clear navigation and a login form for user access. The technical infrastructure includes modern web technologies such as Bootstrap, jQuery, and FontAwesome, hosted by IONOS SE. While the site is accessible and functional, it lacks visible privacy and cookie policies, and security features such as security headers and advanced form protections are not evident. Social media integration is present, enhancing business credibility. Overall, the website demonstrates a moderate security posture with room for improvement in compliance and security best practices.

E

eVision Technologies Ltd.

ev-portal.com

61

The website common.ev-portal.com hosts a professional B2B platform named PowerTask B2B, developed by eVision Technologies Ltd. The platform focuses on spare parts management software, offering services such as creation and management of spare parts catalogues, sales catalogues, electronic parts catalogs, order and stock management, and technical documentation support. The site supports multiple languages, indicating an international target audience primarily in the B2B sector for spare parts and technical documentation management. The business model revolves around providing software solutions to streamline spare parts sales and management processes. Technically, the website employs modern web technologies including Modernizr and jQuery, and supports Progressive Web App (PWA) features for enhanced user experience on mobile devices. The site is served over HTTPS, ensuring encrypted communication. However, no advanced security headers were detected in the provided data, and there is no visible privacy or cookie policy on the login page. The site demonstrates good design quality, mobile optimization, and basic accessibility features, but could improve SEO and security configurations. From a security perspective, the platform uses secure form inputs and includes a password recovery mechanism. The absence of explicit security headers and privacy policies represents a moderate risk. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data for the subdomain common.ev-portal.com is unavailable, which is expected as it is a subdomain, not a registered domain. This does not negatively impact the legitimacy of the main domain or the business. Overall, the website presents a moderate risk profile with good business credibility and technical implementation but requires improvements in privacy compliance and security best practices. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, enhancing accessibility, and providing clear contact and incident response information.