Security Directory

E

Erasmus Student Network

esn.org

60

Erasmus Student Network (ESN) is a well-established non-profit international student organization founded in 1997, dedicated to supporting and representing international students across Europe. The organization provides a broad range of services including cultural exchange opportunities, student representation, and various online platforms to facilitate student mobility and integration. ESN enjoys a strong market position supported by the Erasmus+ programme and European institutions, with a large network of local sections and corporate partners. The website reflects this maturity with comprehensive content, consistent branding, and a professional design tailored to its target audience of international students and volunteers. Technically, the website is built on the Drupal CMS platform, leveraging modern JavaScript libraries and Google Analytics for tracking. Hosting and DNS services are managed via Cloudflare, providing performance and security benefits. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and domain transfer protections in place, but could be improved by enabling DNSSEC and adding more security headers. Privacy compliance is adequate with a clear privacy policy, though cookie consent mechanisms are absent. Overall, the security posture is solid for a non-profit educational organization, with no critical vulnerabilities detected. The absence of explicit incident response or security policies and lack of direct contact emails or phone numbers for support are minor gaps. The website is safe for general audiences, with no adult or questionable content. Strategic recommendations include enhancing DNS security, implementing cookie consent, and publishing security policies to further strengthen trust and compliance.

C

Corporate Watch

corporatewatch.org

48

Corporate Watch is a UK-based non-profit media organization established in 1996, specializing in investigative journalism and research focused on corporate power, social justice, and environmental issues. The organization provides publications, training, and activist support, positioning itself as a niche player in the media sector dedicated to corporate accountability. The website is built on WordPress with WooCommerce integration for sales and donations, utilizing modern web technologies including Matomo for analytics and OpenPGP.js for secure communications. The site demonstrates good design quality, clear navigation, and mobile optimization, serving a target audience of activists, researchers, and socially conscious individuals. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though improvements are recommended such as enabling DNSSEC and adding security headers. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the website is trustworthy and professional, with clear contact information and recognized media certifications.

C

Campagna di pressione alle "banche armate"

banchearmate.it

56

The website "Campagna di pressione alle 'banche armate'" is a non-profit advocacy campaign promoted by notable Italian magazines such as Missione Oggi, Nigrizia, and Mosaico di Pace. It focuses on raising awareness and mobilizing public opinion against banks involved in arms trade. The campaign provides news, documents, and calls to action primarily targeting Italian-speaking citizens interested in ethical finance and peace activism. The website is built on WordPress using Elementor and Bootstrap, offering a good user experience with mobile optimization and clear navigation. However, it lacks formal privacy and cookie policies, and no security policy or incident response information is provided. The website uses HTTPS but does not implement advanced security headers, and a WordPress debug notice is visible, indicating a minor technical issue. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is not uncommon for non-profit organizations. Overall, the site is trustworthy and professional but could improve its privacy compliance and security posture.

C

Creative3Studio

creative3studio.com

47

Creative3Studio is a small IT services company based in India, specializing in WordPress design, website development, graphic design, ecommerce solutions, PHP development, mobile development, and online marketing. The company targets businesses and individuals seeking comprehensive digital solutions. The website is built on WordPress using the Astra theme and Elementor page builder, indicating a modern and flexible technical infrastructure. The site is mobile optimized and uses standard web technologies including jQuery and FontAwesome. Security posture is good with HTTPS enforced and use of Google reCAPTCHA on forms, but lacks advanced security headers and published security policies. The absence of WHOIS data and privacy/cookie policies are notable gaps that reduce overall trust and compliance. Contact information is clearly presented, and social media presence is active on Facebook, Twitter, and LinkedIn. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security transparency.

F

FOSAN

fosan.org

61

FOSAN is a non-profit scientific association based in Italy focused on research, training, and consultancy in food science and nutrition. The organization offers services including food development projects, scientific publications, educational courses, and membership benefits. The website is professionally designed using WordPress with modern SEO and slider plugins, providing good content quality and user experience primarily in Italian. Security posture is solid with HTTPS and secure forms, though security headers and explicit privacy policies are missing. The absence of WHOIS registration data limits domain trust verification but the website content and collaborations with reputable institutions support legitimacy. Overall, the site is a credible resource for professionals and researchers in the nutrition sector.

T

Themes Camp

themescamp.com

49

Themes Camp is a small technology business specializing in the development and sale of professional WordPress themes and web templates. Their website targets website managers and developers seeking easy-to-use, customizable themes without coding. The company has a moderate market presence with over 12,500 users and partnerships with major platforms like Elementor and ThemeForest. Technically, the website is built on WordPress using Elementor and several plugins, with good SEO and mobile optimization. Security posture is solid with HTTPS and asynchronous loading of analytics scripts, but lacks some security headers and published policies. The absence of WHOIS data raises legitimacy concerns, though the website content and branding appear professional. Contact is available via a form but lacks direct emails or phone numbers. Privacy and cookie policies are not found, indicating compliance gaps. Overall, the site is functional and trustworthy but would benefit from enhanced transparency and security documentation.

K

Kueez

kueezrtb.com

58

Kueez is a technology company specializing in providing innovative solutions for publishers and performance marketers. Their offerings include the Kueez Monetization Suite and an End2End Marketing Platform designed to drive profitable growth and scalable marketing performance. The company targets digital publishers and marketers seeking to optimize revenue and campaign effectiveness. The website demonstrates a professional and consistent brand presence with strong client logos and active content such as blogs and social media engagement. Technically, the site is built on Webflow with modern libraries and includes GDPR-compliant consent management, indicating a mature digital infrastructure. Security posture is generally good with HTTPS and secure forms, though explicit security headers and published security policies are absent. WHOIS data for the subdomain is unavailable, which is typical for subdomains but slightly reduces trust. Overall, the site is well-designed, functional, and business credible with moderate to high trustworthiness.

L

La Guida Nomade

laguidanomade.it

46

La Guida Nomade is an Italian online portal dedicated to conscious travelers seeking wellness, artisanal, agricultural, commercial, and tourism experiences that respect health, life, and the environment. The website serves as a niche directory and content platform, positioning itself as a reference point for sustainable and mindful travel in Italy. The business is small-sized, founded around 2018, and operates under the parent project La Grande Via. The portal offers categorized listings, blog content, and a contact form to engage users. Technically, the website is built on WordPress with WooCommerce for product listings, enhanced by popular plugins such as Yoast SEO, Revolution Slider, and WPBakery Page Builder. It uses modern web technologies including Google Analytics for tracking, Google Fonts, and FontAwesome icons. The site is moderately optimized for performance and mobile devices, with good SEO practices and structured data implemented. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA for form protection. However, it lacks explicit security headers like a full Content-Security-Policy and does not publish a security policy or incident response contacts. Privacy compliance is basic, with no visible privacy or cookie policies or consent mechanisms, which is a gap given GDPR requirements. Overall, the website is accessible, professionally designed, and content-rich, targeting a general audience interested in sustainable travel and lifestyle. The security posture is adequate but can be improved with better policy disclosures and headers. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

G

Golden Books srl Società Benefit

macrolibrarsi.it

65

Macrolibrarsi is a well-established Italian e-commerce platform specializing in natural and organic products including food, cosmetics, supplements, and books. Operated by Golden Books srl Società Benefit since 2000, it holds a leading position in Italy's ethical wellness market. The website offers a comprehensive product catalog with over 80,000 items, supported by strong customer service and clear business transparency. The company emphasizes sustainability and ethical business practices, targeting health-conscious consumers primarily in Italy and Europe. Technically, the site employs modern web technologies such as Bootstrap, jQuery, Google Tag Manager, and integrates trusted third-party services for reviews and personalization. It is mobile-optimized and SEO-friendly, providing a smooth user experience. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be enhanced. Overall, the site is trustworthy, compliant with GDPR, and demonstrates strong business credibility.

M

Münchener Hypothekenbank eG

meindarlehen.de

50

Münchener Hypothekenbank eG operates the website www.meindarlehen.de as a digital customer portal for mortgage loan management. The portal offers services such as personal data updates, payout requests, repayment options, contract adjustments, and membership management, targeting loan customers primarily in Germany. The website reflects an established financial institution with a medium-sized market presence and a focus on customer self-service through a modern web interface. Technically, the site is built on Drupal CMS, utilizing common libraries such as jQuery, Bootstrap, FontAwesome, and Slick Carousel for UI components. The site is mobile-optimized and accessible, with moderate performance characteristics. Security posture is good with HTTPS enforced and cookie consent managed via Cookiebot, but lacks explicit security headers and published security policies. Analytics are handled via Matomo, indicating a privacy-conscious approach. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

S

Stadtwerke Göttingen AG

stadtwerke-goettingen.de

55

Stadtwerke Göttingen AG is a regional energy utility company serving Göttingen and its surrounding areas with electricity, gas, district heating, and water services. The company emphasizes sustainability and innovation, offering additional services such as photovoltaic systems and e-mobility solutions under its brand neuwerk. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to residential and commercial customers. Technically, the site is built on TYPO3 CMS and integrates modern analytics and marketing tools with a strong focus on GDPR compliance through a consent management platform. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy and trustworthiness of the site.

R

Ristorante Fellini

fellini-goettingen.de

66

Ristorante Fellini is a family-run Italian restaurant based in Göttingen, Germany, offering traditional Italian pizzas and dishes with an online ordering platform powered by Shopify. The website targets local customers seeking authentic Italian cuisine with convenient online access. The business operates in the hospitality sector with a small-sized footprint and a focus on community engagement. Technically, the website leverages modern web technologies including Shopify's e-commerce platform, jQuery, Font Awesome for icons, and Cookiebot for cookie consent management, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website uses HTTPS and implements cookie consent, but lacks explicit security headers and formal privacy or terms of service documentation, which are areas for improvement. No WAF or blocking mechanisms were detected, and the WHOIS data is minimal but not suspicious. Overall, the website is functional and trustworthy for its business purpose but would benefit from enhanced security and compliance documentation.

V

Velo Voss

velo-voss.de

43

Velo Voss is a small, established bicycle retailer located in Göttingen, Germany, specializing in high-quality e-bikes and bicycles. The company offers personalized consultation, repair services, bike leasing options, and training opportunities. They are a Bosch-certified eBike expert, which enhances their credibility and market position. The website is professionally designed with good content quality, clear navigation, and mobile optimization. Technically, it is built on WordPress with modern plugins and SEO tools, hosted on a German hosting provider. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the website reflects a trustworthy and professional local business with a clear focus on customer service and quality products.

G

Göttinger Kulturstiftung

kulturstiftung-goettingen.de

57

The Göttinger Kulturstiftung is a small non-profit cultural foundation affiliated with the city of Göttingen, Germany. It focuses on supporting cultural activities through funding and public information. The website serves as an informational portal for cultural funding opportunities and donation options, targeting local cultural organizations and citizens. The business model is centered on non-profit cultural promotion with a clear local focus. Technically, the website is built on a custom CMS platform (NOLIS) using standard web technologies such as JavaScript and CSS. It features a responsive design with accessibility options like font resizing and contrast toggling. The site is well-structured with clear navigation and SEO-friendly metadata. Performance is moderate with no major issues detected. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks advanced security headers and does not publish explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were found. The WHOIS data confirms domain legitimacy and consistency with the organization's identity. Overall, the website is professional, trustworthy, and suitable for its target audience. Strategic improvements could include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to strengthen security posture and user trust.

A

AKB Stiftung

akb-stiftung.de

42

The AKB Stiftung website represents a small, regional non-profit foundation with a family heritage focus. The site content is minimal but clearly communicates the foundation's regional engagement and mission. The business model is typical for a non-profit foundation, relying on regional initiatives and likely donations or grants. The market position is niche and localized, with no evident commercial activities or services offered online. Technically, the website is built on WordPress using the Enfold theme and several plugins including Slider Revolution and MediaElement.js. The site is served over HTTPS, indicating a basic level of security. However, the technical implementation is basic with limited mobile optimization and no advanced SEO or accessibility features detected. The site lacks privacy and cookie policies, which is a compliance gap. From a security perspective, the site has HTTPS enabled but lacks security headers and does not disclose any security or incident response policies. There are no visible vulnerabilities or exposed sensitive data, but the absence of security best practices and policies suggests room for improvement. No analytics or tracking scripts are present, indicating minimal user tracking. Overall, the website is safe and appropriate for a general audience, with no adult or questionable content. The lack of contact information and compliance documentation reduces trust and business credibility. Strategic improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and compliance.

Landschaftsverband Südniedersachsen is a regional non-profit association based in southern Lower Saxony, Germany, dedicated to supporting cultural heritage, museum consulting, and funding regional projects. The website serves as an informational portal offering access to funding opportunities, museum advisory services, provenance research, and cultural project updates. The organization targets local governments, cultural institutions, and the general public interested in regional culture. Technically, the website is built on the Contao CMS platform, uses modern JavaScript libraries such as jQuery and Mmenu.js, and employs Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized and accessible, with a clear navigation structure and consistent branding. Security-wise, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and explicit security headers, representing areas for improvement. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional, trustworthy, and well-suited for its audience, with moderate technical maturity and a solid security posture.

Arbeit und Kultur Saarland gGmbH is a well-established non-profit organization dedicated to supporting cultural actors and projects in the Saarland region of Germany. The organization provides advisory services, project initiation, funding, and networking opportunities to foster a vibrant cultural scene. Their website reflects a professional and consistent brand presence with a focus on cultural events and community engagement. Technically, the site is built on the ProcessWire CMS with modern frameworks like UIkit and includes cookie consent mechanisms to comply with GDPR. Security posture is moderate with HTTPS usage and cookie consent but lacks visible advanced security headers or incident response policies. The domain registration data is minimal but consistent with a non-profit hosted on generic servers. Overall, the website is trustworthy, safe, and well-suited for its target audience.

The Gesellschaft für Medienförderung Saarland – Saarland Medien – mbH is a regional media promotion company based in Saarland, Germany, focusing on supporting film, games, and media location development. The website clearly communicates its business focus and upcoming liquidation status effective January 1, 2025. The target audience includes media professionals, filmmakers, game developers, and regional stakeholders. The business operates primarily as a public sector entity providing funding, networking, and promotional services within the media industry. Technically, the website is built on WordPress using Visual Composer, Bootstrap 4, and several common plugins such as Events Manager and Contact Form 7. The site is served over HTTPS with good SSL configuration, though it lacks advanced security headers and cookie consent mechanisms. Performance and mobile optimization are moderate to good, with basic accessibility and SEO features. From a security perspective, the site employs HTTPS and some security plugins but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy present but no cookie consent banner. Overall, the website is professional, trustworthy, and suitable for its business purpose, though improvements in security headers, privacy compliance, and incident response transparency are recommended to enhance its security posture and regulatory adherence.

P

PFPRO IT Services

pfproit.de

60

PFPRO IT Services is a small German IT company based in Saarbrücken, specializing in professional web development, IT consulting, and support services. Founded in 2008, the company offers a range of services including consulting, custom web application development, IT support, remote maintenance, and emergency IT services. They also provide a cloud-based industry solution called PFPRO Cloud R6 targeting sectors like gastronomy and entertainment. The website is well-structured, professionally designed, and targets both businesses and private users in the local region. The company maintains an active presence on LinkedIn, Xing, and GitHub, enhancing its professional credibility. Technically, the website employs a modern technology stack including Bootstrap, FontAwesome, jQuery, Owl Carousel, and Matomo for analytics, combined with Usercentrics for GDPR-compliant cookie consent management. The site is mobile-optimized and uses HTTPS with good SSL configuration. However, explicit security headers are not detected, and no dedicated security policy or incident response information is provided. The website demonstrates good privacy compliance and moderate user tracking through Matomo. From a security perspective, the site shows a solid baseline with HTTPS and consent management but lacks advanced security headers and documented incident response processes. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns well with the website's business claims, showing consistent registration information and domain age appropriate for the company's founding date. Overall, PFPRO IT Services presents a trustworthy and professional online presence with good technical implementation and privacy compliance. Strategic improvements could include enhancing security headers, publishing a security policy, and providing incident response contacts to further strengthen trust and security posture.

Z

Zweckverband eGo-Saar

vergabe.saarland

57

The website vergabe.saarland serves as the official electronic procurement platform for the Saarland region in Germany, operated by Zweckverband eGo-Saar. It provides public sector entities such as cities, municipalities, and state administration with a centralized platform to publish tenders and manage electronic submissions. The platform targets businesses and contractors interested in public procurement within Saarland, offering services like digital download of tender documents and electronic bid submission. The site is well-branded with official logos and maintains a professional appearance consistent with government standards. Technically, the website is built on WordPress 6.8.3 with common web technologies such as jQuery and Slick Carousel for UI components. Hosting is provided by plusserver.com, and the site uses HTTPS with a valid SSL certificate. Cookie consent is implemented with an opt-in mechanism for Google Analytics and Facebook Ads, reflecting a good level of privacy compliance. However, some security headers are missing or misconfigured, such as an empty Content-Security-Policy and lack of DNSSEC, which slightly reduce the security posture. From a security perspective, the site enforces HTTPS and uses clientTransferProhibited status on the domain to prevent unauthorized transfers. The WHOIS data aligns well with the website's governmental purpose, showing consistent registration details. No signs of malware, phishing, or suspicious activity were detected. The cookie consent mechanism and privacy policy indicate GDPR compliance, but no explicit security policy or incident response information is published. Overall, vergabe.saarland is a legitimate, regionally focused government procurement platform with good content quality and business credibility. Security practices are adequate but could be improved by enabling DNSSEC, configuring security headers properly, and publishing security policies. The site is safe for general audiences and does not contain any adult or questionable content.

The website www.lernsax.de/wws/9.php appears to be a minimal content page primarily embedding an iframe with a session-based PHP URL. There is no visible business branding, metadata, or descriptive content to ascertain the company's market position or services. The technical infrastructure includes basic JavaScript libraries such as jQuery and local scripts, hosted on nameservers associated with bringe.net. The site lacks HTTPS information and security headers, indicating a weak security posture. No privacy, cookie, or terms of service policies are present, and no contact or business information is available, limiting trust and compliance evaluation. Overall, the site appears to be an internal or restricted access portal rather than a public-facing business website.

G

GEOMAR Helmholtz-Zentrum für Ozeanforschung Kiel

geomar.de

50

GEOMAR Helmholtz-Zentrum für Ozeanforschung Kiel is a prominent German research institution specializing in oceanographic and climate research. The website serves as a comprehensive platform for scientific information, research programs, expeditions, and public outreach. It targets researchers, students, policymakers, and the general public interested in marine and climate sciences. Affiliated with the Helmholtz Association, GEOMAR holds a strong market position in the education and government research sectors. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries such as jQuery and Slick Slider, providing a responsive and accessible user experience. The site demonstrates good SEO practices and mobile optimization, though performance is moderate. Security posture is solid with HTTPS enforced and some security headers present, but could be improved by adding more comprehensive headers and visible incident response policies. Overall, the site is trustworthy and professional, with clear branding and consistent content quality. However, it lacks a visible cookie consent mechanism and explicit security contact information, which are areas for improvement. The domain registration data aligns well with the website content, reinforcing legitimacy and trustworthiness.

Fastenaktion der Diözese St.Pölten is a well-established non-profit organization founded in 1963, operating under the Diocese of St. Pölten in Austria. The organization focuses on supporting international development projects in health, education, pastoral care, and environmental responsibility through donations and volunteer efforts. The website serves as an information hub and donation platform, targeting parish communities and supporters interested in charitable development cooperation. Technically, the site is built on WordPress using the TwentySixteen theme, with modern accessibility and cookie consent features implemented. Hosting is inferred to be on Amazon Web Services, ensuring reliable performance and security. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although security headers could be improved. Privacy compliance is well addressed with a clear cookie consent mechanism and a GDPR-compliant privacy policy. Overall, the website presents a professional, trustworthy, and user-friendly experience aligned with its non-profit mission.

K

Katholische Aktion der Erzdiözese Wien

ka-wien.at

60

Katholische Aktion der Erzdiözese Wien is a small non-profit Christian organization affiliated with the Archdiocese of Vienna. It focuses on societal and ecological engagement to foster a more just and peaceful world, targeting socially conscious Christians and community members in Austria. The website provides information on their activities, volunteer opportunities, spiritual programs, and newsletters to keep their audience engaged. Technically, the website is built on the siteswift-CMS platform, utilizing modern JavaScript libraries such as jQuery, Swiper, and Magnific Popup. It implements cookie consent management via Klaro and uses Google Analytics for visitor tracking. The site is mobile-optimized and accessible, though SEO optimization is basic. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, but lacks advanced security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a clear privacy and cookie policy, including consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, with clear contact information and consistent branding. Strategic improvements could include enhanced security headers, publishing incident response contacts, and adding a vulnerability disclosure policy to strengthen security posture and trust.

K

Katholische Kirche Steiermark

graz-seckau.at

68

Katholische Kirche Steiermark operates as the official Catholic Diocese of Graz-Seckau, Austria, providing religious, educational, and community services. The website serves as a comprehensive portal for diocesan news, parish information, faith education, and community engagement. It holds a strong regional position as a trusted religious authority with a history dating back to 1218. Technically, the site is built on the siteswift-CMS platform, leveraging modern JavaScript libraries such as jQuery and Swiper.js, and integrates Google Maps and Matomo analytics. The site is mobile-optimized and accessible, with a clear navigation structure and professional design. Security posture is solid with HTTPS, security headers, and CSRF protections, though explicit security policies and incident response details are not publicly disclosed. Privacy compliance is well managed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is trustworthy, professional, and well-maintained, serving its target audience effectively.

K

Katholische Kirche Vorarlberg / Diözese Feldkirch

kath-kirche-vorarlberg.at

64

Katholische Kirche Vorarlberg / Diözese Feldkirch operates as a regional Catholic Church institution in Austria, providing religious services, community engagement, cultural heritage preservation, and educational programs. The website serves as a comprehensive portal for parishioners and the general public interested in church activities and spiritual resources. The organization positions itself as a trusted non-profit entity with a strong regional presence in Vorarlberg. Technically, the website is built on the siteswift CMS platform, utilizing modern JavaScript libraries such as jQuery, Photoswipe, and Swiper for enhanced user experience. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be improved. Security posture is solid with HTTPS enforced, CSRF protection in forms, and a GDPR-compliant cookie consent mechanism via Klaro. However, additional security headers and published security policies would strengthen the security framework. Overall, the website is professional, trustworthy, and well-aligned with its mission, though contact information and incident response details are not explicitly visible in the provided content.

K

Katholische Jungschar Österreichs

kaleidio.at

47

The website kaleidio.at represents a well-established non-profit organization, the Katholische Jungschar Österreichs, focused on organizing large-scale children's summer camps and community events in Austria and South Tyrol. It serves a broad audience of children and families, emphasizing child protection, community engagement, and pastoral care. The site is professionally designed with consistent branding and clear navigation, supporting its position as a leading event organizer in its sector. Technically, the site is built on TYPO3 CMS and leverages modern JavaScript libraries such as jQuery and Leaflet.js for interactive features. It integrates a GDPR-compliant cookie consent mechanism via the TRUENDO Privacy Center and uses Google Analytics with IP anonymization. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. From a security perspective, the site uses HTTPS with anonymized analytics but lacks explicit security headers and publicly available incident response or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies in German. Contact information is limited to an email address, with no phone or physical address explicitly provided. Overall, kaleidio.at is a trustworthy and professionally managed website for a non-profit organization with a clear mission and community focus. Strategic improvements in security headers, incident response transparency, and expanded contact details would enhance its security posture and user trust.

D

Dreikönigsaktion der Katholischen Jungschar Österreichs

kinderarbeitstoppen.at

47

The website www.kinderarbeitstoppen.at is a well-structured non-profit advocacy platform operated by Dreikönigsaktion der Katholischen Jungschar Österreichs, focused on combating child labor globally through awareness campaigns, educational materials, and political advocacy for supply chain legislation. The site targets a broad audience including activists, educators, and policymakers, positioning itself as a trusted voice in child labor issues within Austria and Europe. Technically, the site is built on TYPO3 CMS, leveraging modern JavaScript libraries and privacy-conscious analytics tools such as Matomo, alongside Google Tag Manager and Facebook Pixel for marketing and tracking. The presence of a comprehensive cookie consent mechanism and GDPR-compliant privacy policy reflects a mature approach to privacy and compliance. Security posture is strong with HTTPS enforced and no evident vulnerabilities, though some security headers could be improved. Overall, the site demonstrates good digital maturity and professionalism, with clear contact information and active social media engagement. The domain registration data aligns well with the website's claims, supporting legitimacy and trustworthiness.

The website jungscharshop.at is an e-commerce platform operated by the Catholic Jungschar organization in Austria, offering religious educational materials, games, and gifts targeted at youth groups and church communities. The site serves a niche market within the non-profit religious sector, focusing on supporting youth work through product sales. The technical infrastructure uses Bootstrap, jQuery, and Google Analytics, with basic mobile optimization and accessibility features. While the site is functional and professionally designed, some backend PHP warnings are visible, indicating code quality issues that could pose security risks. Cookie consent and privacy policies are implemented, reflecting GDPR compliance awareness, but explicit security policies and incident response information are absent. Overall, the site is moderately secure and trustworthy but would benefit from technical and security improvements.

D

Dreikönigsaktion, Hilfswerk der Katholischen Jungschar

dka.at

51

Dreikönigsaktion is a non-profit charitable organization affiliated with the Catholic youth group in Austria, focusing on providing aid and development assistance to over a million people in Africa, Asia, and Latin America. The website serves as an informational and fundraising platform, leveraging the TYPO3 CMS and modern web technologies to deliver content primarily in German to a general audience. The organization maintains a consistent brand presence and demonstrates a commitment to privacy through the implementation of a cookie consent mechanism and the use of privacy-respecting analytics tools like Matomo. Security posture is solid with HTTPS enforced, though there is room for improvement in security headers and explicit security policies. Overall, the website is professional, trustworthy, and well-positioned within its sector.

V

Vautron Rechenzentrum AG (Registrar)

die-zukunft.eu

51

Die-zukunft.eu is a German-language political media platform focused on fostering debates about the future of Europe and the European Union. It operates as a non-profit media outlet providing blog articles, podcasts, e-papers, and event information primarily targeting German-speaking European citizens interested in left-wing political discourse. The platform is positioned as a niche player in the political media landscape with a consistent brand and good content quality. Technically, the website is built on WordPress with modern plugins for SEO, page building, and privacy-respecting analytics (Matomo). The site is hosted by a reputable provider and uses HTTPS with a cookie consent mechanism compliant with GDPR. Security posture is good but could be improved by adding more HTTP security headers and a vulnerability disclosure mechanism. Overall, the website is safe, professional, and trustworthy with no adult or explicit content detected.

I

i-kiu - motion graphic backend gmbH

i-kiu.at

57

i-kiu - motion graphic backend gmbH is a Vienna-based digital agency specializing in tailored digital solutions including web design, development, and marketing services. With over 15 years of experience and a portfolio of more than 1,000 projects, the company serves businesses and non-profit organizations primarily in Austria. Their expertise spans TYPO3 and WordPress platforms, UI/UX design, branding, SEO, and AI optimization. The website reflects a mature digital presence built on WordPress with Elementor, incorporating modern web technologies and a cookie consent mechanism for GDPR compliance. Security posture is solid with HTTPS enforced, though improvements in security headers and explicit privacy policies are recommended. Overall, the site demonstrates good professionalism and trustworthiness with moderate user tracking via Google Analytics.

B

Berlin Buch

berlin-buch.com

57

Berlin Buch is a well-established biomedical and healthcare cluster located in Berlin, Germany, with a history dating back over 100 years in medical research and clinical care. The website serves as a portal to the cluster's institutes, companies, and services, targeting healthcare professionals, researchers, and the general public interested in health and biomedical innovation. The business model focuses on fostering collaboration and innovation within the life sciences sector, supported by reputable partners and EU funding. Technically, the website uses a modern but traditional tech stack including jQuery, Bootstrap, and Matomo analytics configured for privacy. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and security headers, and does not provide explicit security or incident response policies. Privacy compliance is partially met with a privacy policy and GDPR-respecting analytics, but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and serves its audience well, though improvements in security headers and privacy transparency are recommended.

C

Cluster Gesundheitswirtschaft Berlin-Brandenburg

healthcapital.de

58

HealthCapital is a regional cluster organization representing the healthcare and life sciences sector in the Berlin-Brandenburg area of Germany. The website serves as a platform to promote networking, innovation, and business development within this sector, targeting industry stakeholders, startups, researchers, and investors. It provides resources such as reports, event calendars, and newsletters to support its community. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes a GDPR-compliant consent management system. Security posture is solid with HTTPS enforced and minimal tracking, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

B

Berlin Partner

berlin-partner.de

47

Berlin Partner is a government-affiliated economic and technology promotion agency focused on supporting business growth, innovation, and investment in Berlin. The organization provides tailored business services, networking opportunities, and consulting to companies, investors, and scientific institutions in one of Germany's most dynamic economic regions. The website reflects a professional and consistent brand presence with multilingual support and a focus on accessibility and user experience. Technically, the site is built on TYPO3 CMS, hosted on Colt infrastructure, and employs modern frontend technologies including jQuery and Flexslider. Privacy compliance is addressed through an embedded consent manager and a comprehensive privacy policy. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though additional security headers and published policies could enhance trust. Overall, the website is well-maintained, trustworthy, and serves its target audience effectively.

C

Centre for the New Midlands CIC

thenewmidlands.org.uk

48

The Centre for the New Midlands CIC operates as an independent, not-for-profit think tank dedicated to generating and sharing innovative ideas to address social and economic challenges in the West Midlands region. The organization engages with residents and partners to foster evidence-based research and regional collaboration. Their digital presence is built on a modern WordPress infrastructure with a professional design and clear navigation, supporting their mission through events, reports, and thought leadership content. However, the absence of privacy and cookie policies, as well as missing WHOIS data, slightly detracts from their overall digital maturity and trustworthiness. Security posture is solid with HTTPS and no visible vulnerabilities, but could be improved with enhanced security headers and published policies. Overall, the website effectively supports the organization's goals but would benefit from improved compliance and transparency measures.

C

Constant Content

constant-content.com

66

Constant Content operates as a well-established content marketplace and custom content writing service provider, connecting businesses and brands with a network of freelance writers. The platform offers a wide range of content types including articles, product descriptions, blog posts, and whitepapers, serving a diverse clientele including large enterprises. The website demonstrates a professional and consistent brand presence with strong trust indicators such as client testimonials from reputable companies and a large catalog of content offerings. Technically, the site leverages modern web technologies and third-party analytics and marketing tools, hosted on a reliable CDN infrastructure. Security posture is adequate with HTTPS and secure form handling, though there is room for improvement in security headers and incident response transparency. Privacy compliance is supported by comprehensive privacy and terms pages, but lacks a visible cookie consent mechanism. WHOIS data is unavailable, which slightly impacts trust but does not outweigh the strong business signals present on the site.

I

ICM

icm.ch

48

ICM AG is an established Swiss company specializing in organizing international congresses focused on circular economy, particularly in vehicle, electronics, and battery recycling sectors. The company positions itself as a leader in this niche, providing a platform for industry experts and decision makers to network and share knowledge. The website reflects a professional and consistent brand image with good content quality and multilingual support. Technically, the site is built on WordPress with modern plugins and optimization tools, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS and basic security practices, though there is room for improvement in security headers and explicit security policies. Privacy compliance is partially addressed with cookie consent but lacks a dedicated privacy policy page. Overall, the site is trustworthy and well-maintained, supporting the company's business model effectively.

N

Noveltics Group LLC

novelticsconferences.com

61

Noveltics Group LLC is a small but focused event organizer specializing in international scientific and medical conferences across multiple continents including the USA, Europe, and Asia. Their portfolio includes diverse conferences in healthcare, technology, and science sectors, targeting professionals and academics. The website is professionally designed with clear navigation and detailed event listings, supporting their business model of conference hosting and ticket sales. Technically, the site uses modern frontend technologies like Bootstrap and jQuery and is hosted behind Cloudflare, ensuring good performance and security basics such as HTTPS. However, the absence of DNSSEC and security headers indicates room for improvement in security hardening. Privacy and cookie policies are missing, which is a compliance gap, especially for GDPR. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional and trustworthy but would benefit from enhanced security and privacy compliance measures.

B

Bharat Recycling Show

bharatrecyclingshow.com

50

Bharat Recycling Show is a dedicated trade show and conference platform focused on commodity recycling in India, covering sectors such as metals, e-waste, batteries, tyres, and construction waste. It serves as a flagship event bringing together industry stakeholders, policymakers, and sustainability leaders to showcase technologies and foster business opportunities. The website is built on WordPress with modern plugins and SEO optimizations, providing a professional user experience with good mobile responsiveness and clear navigation. Security posture is adequate with HTTPS and reCAPTCHA usage, though lacks some security headers and explicit privacy/cookie policies. WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional appearance and partnerships. Overall, the site is safe, business-focused, and well-structured but would benefit from improved transparency and security practices.

H

HAMMEL Recyclingtechnik GmbH

hammel.de

39

HAMMEL Recyclingtechnik GmbH is a German-based manufacturer specializing in recycling and shredding machinery, serving industrial clients and waste management sectors. The company offers a range of products including primary and secondary shredders, screening and sorting technology, processing plants, and services such as used equipment sales, rentals, and transportation. The website reflects an established medium-sized business with international reach and multilingual support. Technically, the site is built on Joomla CMS with Gantry 5 framework and uses popular plugins like Revolution Slider. The hosting is provided by kasserver.com, and the site uses HTTPS with good SSL configuration. Security posture is moderate but could be improved by implementing security headers and publishing security policies. Privacy compliance is limited, lacking cookie consent mechanisms and GDPR indicators. Overall, the website is professional, well-branded, and trustworthy, though it would benefit from enhanced privacy and security practices.

d & d Brandschutzsysteme GmbH is a German company specializing in comprehensive fire protection and detection solutions tailored to specific applications. Their offerings include planning, implementation, and maintenance of fire alarm systems, stationary fire extinguishing systems, and specialized solutions, including high-end flame and gas detection systems from Det-Tronics. The company targets industrial sectors such as recycling, data centers, server environments, and lithium-ion battery systems, positioning itself as a trusted service provider with a focus on quality and safety. Technically, the website is built on the Contao Open Source CMS platform, utilizing modern web technologies such as jQuery, Bootstrap, FontAwesome, and Usercentrics for cookie consent management. The site is mobile-optimized with good accessibility and basic SEO features. Analytics are implemented via Google Tag Manager and Google Analytics, with appropriate privacy compliance mechanisms in place. From a security perspective, the site enforces HTTPS and uses cookie consent tools but lacks explicit security headers and documented security policies or incident response contacts. No vulnerabilities or suspicious content were detected. WHOIS data confirms domain legitimacy with consistent registration details and no privacy protection, supporting trustworthiness. Overall, the website presents a professional and trustworthy digital presence for a small-sized specialized business in the energy and manufacturing sectors, with room for improvement in security policy transparency and technical security hardening.

E

Ethos Media Group srl

secsolution.com

76

Secsolution.com is a professional Italian B2B online magazine and information portal focused on security, cybersecurity, privacy, and related technologies. Operated by Ethos Media Group srl, it serves security professionals in Italy by providing news, articles, podcasts, training opportunities, and event promotion such as the Secsolution Forum. The website demonstrates a solid market position as a leading security information source in Italy with a consistent brand and quality content. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Analytics, with responsive design and good SEO practices. However, some security best practices such as HTTP security headers are missing, and the WHOIS data for the domain is unavailable, raising concerns about domain registration legitimacy. Privacy compliance is well addressed with GDPR-compliant cookie consent and a privacy policy. Overall, the site is professional and trustworthy but would benefit from enhanced security configurations and domain registration transparency.

E

essecome editore srls

securindex.com

57

Securindex.com is a well-established Italian online portal dedicated to the security industry, providing news, legislative updates, technological innovations, professional training, and direct contact with certified installers. The website targets professionals and stakeholders in the Italian security sector, positioning itself as a trusted media source with a comprehensive content offering including articles, videos, and newsletters. The business operates under essecome editore srls, a small-sized media company based in Milan, Italy, with a domain age dating back to 1998, indicating a mature and stable presence in the market. Technically, the website employs a modern tech stack including jQuery, Bulma CSS framework, FontAwesome icons, and integrates third-party services such as Google Tag Manager and LinkedIn Insight for analytics and marketing. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some advanced security headers are not explicitly detected. Hosting and domain registration are managed by reputable providers, with domain transfer and update protections in place. From a security perspective, the site enforces HTTPS and uses a robust cookie consent mechanism via Iubenda, ensuring GDPR compliance. However, DNSSEC is not enabled, and there is no visible security.txt or vulnerability disclosure policy, which are areas for improvement. No critical vulnerabilities or suspicious content were detected, and the site maintains a professional and trustworthy appearance. Overall, securindex.com presents a solid digital presence with good content quality, privacy compliance, and business credibility. Strategic recommendations include enabling DNSSEC, implementing a security.txt file, enhancing security headers, and continuous monitoring of third-party scripts to maintain and improve security posture.

T

TKH Security SRL

tkhsecurity.it

45

TKH Security SRL is a medium-sized Italian company specializing in intelligent electronic security systems, including video surveillance, access control, intrusion detection, and fire protection, with a focus on vertical markets such as transportation, energy, hospitality, and public infrastructure. The company operates primarily through distributors, system integrators, and qualified installers, leveraging over 25 years of experience and being part of the TKH Group N.V. The website reflects a professional digital presence with comprehensive product and solution offerings, supported by downloadable corporate reports and brochures. Technically, the site uses a Magento-based platform with modern JavaScript libraries and integrates cookie consent management and analytics tools, ensuring GDPR compliance. Security posture is solid with HTTPS and DNSSEC enabled, though some security headers could be improved. The domain registration data aligns well with the business claims, enhancing trustworthiness. Overall, the company presents a credible and professional image in the security technology sector.

C

Connectyca s.r.l.s.

thingsiot.it

58

ThingsIoT, operated by Connectyca s.r.l.s., is a specialized provider of M2M and IoT SIM card solutions offering multi-operator connectivity across more than 180 countries. The company targets businesses requiring reliable IoT connectivity and fleet management services. Their website demonstrates a professional digital presence with clear service descriptions, contact options, and compliance with privacy regulations. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Analytics, with good mobile optimization and moderate performance. Security posture is solid with HTTPS, DNSSEC, and reCAPTCHA integration, though some security headers could be improved. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

E

EL.MO. S.p.A.

elmospa.com

57

EL.MO. S.p.A. is a well-established Italian company specializing in security technology products and services, including intrusion detection, fire detection, video surveillance, access control, and home automation. The company targets private individuals, installers, and designers, offering a comprehensive product portfolio and related services such as system design and e-learning. The website reflects a mature digital presence with consistent branding and detailed content, supporting its market position as a trusted security solutions provider. Technically, the website employs modern web technologies including jQuery, UIkit framework, Google Tag Manager, and Iubenda for cookie compliance. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some improvements in accessibility could be made. The CMS identified is MYOB, and the hosting provider is not explicitly detected. From a security perspective, the site uses HTTPS and implements a granular cookie consent mechanism, indicating good privacy compliance aligned with GDPR. However, explicit security headers are not detected, and no dedicated security policy or incident response information is publicly available. No vulnerabilities or suspicious content were found, and the domain WHOIS data aligns well with the company's identity, supporting legitimacy. Overall, the website scores well on content quality, technical implementation, security posture, privacy compliance, and business credibility, making it a reliable and professional digital asset for EL.MO. S.p.A.

A

AddSecure

addsecure.it

70

AddSecure is a well-established provider of secure IoT connectivity and alarm transmission solutions, targeting businesses that require reliable and secure communication for critical systems. The company operates primarily in Italy with a strong backing from its parent company, AddSecure AB, based in Sweden. Their offerings focus on secure data transmission, alarm monitoring, and IoT connectivity, positioning them as a key player in the technology and telecommunications sectors. The website reflects a professional and business-oriented approach, with clear navigation and relevant content tailored to their target audience. Technically, the website is built on WordPress with modern plugins and frameworks such as React Phone Number Input and Yoast SEO Premium, ensuring good SEO and user experience. The site is mobile-optimized and uses performance-enhancing tools like Perfmatters. Security is robust with HTTPS enforced, proper security headers, and no visible vulnerabilities. Privacy compliance is strong, with comprehensive cookie and privacy policies and a consent mechanism in place. While the security posture is solid, the site lacks explicit incident response contact information and a vulnerability disclosure policy, which are recommended for enhanced trust and compliance. The absence of a Terms of Service page is noted but does not critically impact the overall credibility. The WHOIS data aligns well with the business claims, indicating legitimacy and consistency. Overall, AddSecure's digital presence is professional, secure, and compliant with GDPR, making it a trustworthy platform for its business clientele.

T

Touch Medical Media

touchneurologyime.org

60

Touch Medical Media operates the touchNEUROLOGY platform, providing accredited continuing medical education (CME) content focused on neurology. The website targets healthcare professionals and neurologists, offering educational activities, journal articles, and clinical updates designed to improve patient outcomes. The business is positioned as a reputable niche medical education provider with CME accreditation and a consistent brand presence. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and advertising integrations. Performance and mobile optimization are good, though accessibility could be improved. Security posture is solid with HTTPS enforced and domain transfer protection, but lacks DNSSEC and some security headers. Privacy compliance is partial, with a cookie consent mechanism but no explicit privacy policy or terms of service found on the analyzed page. Overall, the website is professional, trustworthy, and well-maintained, with room for improvement in security and privacy transparency.

T

Touch Medical Media Limited

touchoncologyime.org

59

Touch Medical Media Limited operates the touchONCOLOGY CME platform, providing accredited oncology and hematology continuing medical education content designed to improve patient outcomes. The website targets healthcare professionals and medical educators with a business model centered on online education and publishing. The platform is well positioned in the oncology CME niche with a consistent brand and strong digital presence. Technically, the site is built on WordPress with modern JavaScript libraries and integrates multiple marketing and analytics tools, including Google Tag Manager, Facebook Pixel, and Borlabs Cookie for consent management. The site demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is partial, with cookie consent implemented but no visible privacy policy or terms of service in the analyzed content. Overall, the website is professional, trustworthy, and safe for its intended audience.