Security Directory

NABU - Naturschutzbund Deutschland e.V. is a well-established German non-profit organization dedicated to nature conservation and environmental protection. The website focuses on public awareness campaigns such as the 'Bird of the Year 2026' featuring the Rebhuhn (partridge), highlighting endangered species and promoting biodiversity. NABU enjoys a strong market position in Germany with a large membership base and extensive volunteer network. The site offers rich content, educational resources, and engagement opportunities for the general public and conservation enthusiasts. Technically, the website is built on the IMPERIA CMS platform, utilizing modern web technologies including Bootstrap, jQuery, and privacy-respecting analytics tools like Matomo. The site is mobile-optimized, accessible, and SEO-friendly. Cookie consent is managed via Klaro, ensuring GDPR compliance. The infrastructure appears stable with European-based DNS and hosting. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms. However, explicit security headers are not visible in the HTML source, and no public security policy or incident response contacts are provided. No vulnerabilities or suspicious content were detected. The site integrates tracking pixels from major platforms (Meta, TikTok, Google Ads) with user consent. Overall, NABU's website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It effectively serves its mission to educate and engage the public in environmental conservation. Strategic improvements could include publishing a dedicated security policy and enhancing security header implementation to further strengthen its security posture.

L

Landesbund für Vogelschutz in Bayern e.V. (LBV)

botschafter-spatz.de

49

The website botschafter-spatz.de represents a non-profit environmental conservation project managed by the Landesbund für Vogelschutz in Bayern e.V. (LBV). It focuses on the protection and monitoring of building-nesting birds in Bavaria, such as sparrows, swallows, and swifts. The site provides educational resources, a reporting platform for bird nesting sites, and promotes citizen participation in urban nature conservation. The project is regionally significant and well-integrated with the LBV's broader conservation efforts. Technically, the website is built on the Contao Open Source CMS platform and leverages modern JavaScript libraries including jQuery and mmenu for responsive navigation. It is hosted on servers associated with kasserver.com and uses HTTPS with a good SSL configuration. The site includes cookie consent mechanisms and detailed privacy policies, reflecting compliance with GDPR requirements. Social media integration is present via Facebook and Instagram links. From a security perspective, the site employs HTTPS and cookie consent but lacks explicit security headers and incident response contact information. No vulnerabilities or suspicious content were detected in the provided HTML. The absence of a security.txt or vulnerability disclosure page suggests room for improvement in transparency and security posture. Overall, botschafter-spatz.de is a professionally maintained, trustworthy website serving a clear non-profit mission. Strategic recommendations include enhancing security headers, publishing incident response contacts, and maintaining up-to-date libraries to further strengthen security and compliance.

G

GeWaShop

gewashop.de

43

GeWaShop is a German-based small business specializing in providing simple, no-installation online shop systems that integrate seamlessly into existing websites. Their market position is niche-focused on ease of use and quick deployment, complemented by additional digital services such as website flat rates, mobile app creation, newsletters, and SEO. The website is professionally designed with good navigation and mobile optimization, leveraging modern web technologies including Contentserver24 CMS, Bootstrap, and FontAwesome. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks explicit security headers and documented incident response policies. Privacy compliance is addressed with a privacy policy and GDPR cookie consent, though terms of service and security policies are absent. Overall, the website is trustworthy and functional with moderate risk, suitable for its business scope.

A

atrego GmbH

atrego.de

51

atrego GmbH is a small, established German technology company specializing in professional web design, app development, software programming, and related digital services. Founded in 2001 and based in Halle (Saale), Germany, the company targets businesses seeking comprehensive online presence solutions including web hosting, SEO, and social media marketing. The website reflects a consistent and professional brand image with clear service offerings and customer engagement channels. Technically, the site uses a modern tech stack including Bootstrap, jQuery, FontAwesome Pro, and Google Analytics with a CMS platform named Contentserver24. The site is mobile optimized and SEO friendly, with structured data enhancing search visibility. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are absent. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements.

R

Reservix GmbH

reservix.com

68

Reservix GmbH operates a professional online ticketing portal primarily serving the German market. The platform offers a wide range of tickets for concerts, sports, musicals, and other events, targeting general consumers seeking convenient online ticket purchases. The website demonstrates a mature digital infrastructure with modern JavaScript frameworks such as React and integration of third-party services like Google Tag Manager and Usercentrics for GDPR compliance. Hosting is supported by Amazon AWS, ensuring reliable performance and scalability. Security posture is solid with HTTPS enforcement and consent-based tracking, although explicit security policies and headers could be improved. Overall, Reservix presents a trustworthy and user-friendly e-commerce platform with strong compliance and good market positioning.

A

ADticket

adticket.de

68

ADticket operates as a German online ticket sales platform specializing in concerts, festivals, comedy, sports, and classical events. The website presents a professional and user-friendly interface with a broad event catalog targeting general audiences interested in entertainment. The technical infrastructure leverages modern JavaScript frameworks including React and Swiper.js, hosted on Amazon AWS, and integrates a consent management platform (Usercentrics) for GDPR compliance. Security posture is solid with HTTPS enforced and basic security best practices implemented, though some security headers and explicit privacy policies are missing. Overall, the site is trustworthy and functional but could improve transparency and compliance documentation.

G

Gagasi FM

gagasiworld.co.za

57

Gagasi FM is a regional radio station based in KwaZulu-Natal, South Africa, offering a variety of radio shows, news, podcasts, and community events. The website serves as a digital platform for streaming live radio, accessing podcasts, and engaging with local news and entertainment content. The business targets local residents and listeners interested in regional culture and music, positioning itself as a key media player in the KwaZulu-Natal area. Technically, the website is built on WordPress with a modern tech stack including WPBakery Page Builder, jQuery, and various media and advertising plugins. Hosting is provided by xneelo (Pty) Ltd, a reputable South African hosting provider. The site is mobile optimized, uses HTTPS, and implements SEO best practices including structured data and meta tags, although some accessibility features could be enhanced. From a security perspective, the site uses HTTPS and reputable plugins but lacks several important security headers and DNSSEC is not enabled. There is no visible security policy or vulnerability disclosure mechanism, which could be improved to enhance trust and compliance. Advertising and tracking scripts are present but standard for media websites. Overall, the website is professional, content-rich, and trustworthy with a good business credibility score. Strategic improvements in security headers, cookie consent mechanisms, and incident response disclosures would strengthen the security posture and privacy compliance, further enhancing user trust and regulatory adherence.

Heart FM is a community-focused radio station based in Cape Town, South Africa, broadcasting on multiple FM frequencies and offering live streaming services. The station emphasizes authentic storytelling and community engagement, positioning itself as Cape Town's leading radio station with a strong digital and social media presence. The website is built on WordPress with modern plugins and technologies, providing a good user experience and mobile optimization. Security measures include HTTPS and reCAPTCHA, though some security headers and privacy compliance elements are missing. Overall, the site is professional and trustworthy, with room for improvement in privacy and security policy disclosures.

K

Kaya 959 95.9 | Home of the Afropolitan

kaya959.co.za

68

Kaya 959 is a South African radio station serving the Gauteng region with a strong digital presence including live streaming, podcasts, and event promotions. The website is professionally designed using WordPress and Elementor, integrating multimedia content and advertising networks to support its business model. The station targets a diverse audience interested in soul, R&B, kwaito, jazz, and other music genres. Technically, the site employs modern web technologies and SEO best practices, though some security headers could be improved. The security posture is solid with HTTPS and no visible vulnerabilities, but explicit security policies and incident response contacts are absent. Overall, the site demonstrates a mature digital infrastructure with moderate tracking and advertising integration.

D

Direct Hire

mcidirecthire.com

56

Direct Hire is a recruitment software company offering an integrated platform to streamline talent acquisition processes. Their website presents a professional and consistent brand image, targeting HR professionals and recruiters seeking efficient hiring tools. The company has been established since 2010, indicating a mature presence in the recruitment technology market. Technically, the website is built on WordPress with Elementor and Yoast SEO, leveraging modern web technologies and analytics tools such as Google Analytics and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enabled and domain registration protections in place, though improvements can be made by enabling DNSSEC and adding more HTTP security headers. Privacy compliance is well addressed with a comprehensive privacy and cookie policy and an active consent mechanism. However, no explicit contact emails or phone numbers are publicly listed, relying on contact forms instead. Overall, the website is trustworthy and professionally maintained, with room for enhanced security and compliance documentation.

B

Bitly, Inc.

futman.pub

70

Bitly, Inc. is a well-established enterprise technology company founded in 2003, specializing in branded link management and URL shortening services. The company targets businesses and marketers seeking to create, share, and analyze custom short links and QR codes. Bitly holds a strong market position as a trusted platform used by major global brands. The website demonstrates a mature technical infrastructure leveraging WordPress CMS, AWS hosting, and modern marketing and analytics tools such as Google Tag Manager, Optimizely, and ProfitWell. Accessibility and SEO optimizations are well implemented, supporting a global audience with multi-language support. Security posture is robust with HTTPS enforcement, domain status locks, and compliance with GDPR, CCPA, and SOC 2 Type 2 standards. However, DNSSEC is not enabled, and some security headers could be improved. Overall, the website is professional, trustworthy, and compliant with privacy regulations, reflecting Bitly's enterprise-grade service offering.

T

touchINFECTIOUS DISEASES

touchinfectiousdiseases.com

61

touchINFECTIOUS DISEASES is a specialized medical education and publishing platform focused on infectious diseases. It offers healthcare professionals access to clinical updates, journal articles, and online learning activities. The platform targets clinicians and researchers in infectious diseases, providing free sign-up for access to curated content. The website is professionally designed with consistent branding and clear navigation, supporting a good user experience and relevant content delivery. Technically, the site is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and various analytics and advertising integrations. Hosting and domain registration are managed via Cloudflare, ensuring reliable performance and security. Security posture is solid with HTTPS and domain transfer protection, though DNSSEC is not enabled and explicit security policies are absent. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service in the analyzed content. Overall, the site is trustworthy and well-positioned in its niche, though improvements in transparency and security documentation are recommended.

H

HDG Group

hdg-group.it

49

HDG Group is a small Italian company founded in 2022 specializing in integrated branding and communication strategies. Their website presents a professional image with a focus on helping brands find their voice across communication touchpoints. The company targets businesses seeking branding and marketing services. Technically, the website is built on WordPress using modern libraries such as jQuery and Swiper.js, with SEO optimization via Yoast and cookie compliance through Iubenda. Security posture is solid with HTTPS and DNSSEC enabled, though some security headers and explicit policies are missing. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a visible privacy policy or terms of service. Overall, the website is well-designed, mobile-optimized, and trustworthy, supported by consistent WHOIS data and partner domain references.

A

abcpremium GmbH

sapmerchandise.com

66

SAP Merchandise operates an e-commerce platform specializing in branded merchandise for SAP customers and employees, primarily serving the Europe, Middle East, Africa, and North America regions. The business model focuses on B2C retail with dedicated stores for general customers and SAP employees, supporting multiple languages. The company, abcpremium GmbH, founded in 2010, positions itself as a niche retailer within the SAP ecosystem, emphasizing climate neutrality and corporate branding. Technically, the website is built on Magento 2 with a modern tech stack including jQuery, RequireJS, and Amasty extensions. The site is hosted behind Cloudflare DNS and uses HTTPS with a clientTransferProhibited domain status, indicating a moderate level of domain security. Performance and mobile optimization are good, though accessibility and SEO optimizations are basic. Cookie consent and GDPR compliance mechanisms are implemented effectively. From a security perspective, the site enforces HTTPS and uses cookie consent but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. No published security policy or incident response contacts were found, which could be improved to strengthen trust and readiness. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its target audience effectively. Strategic improvements in security headers, DNSSEC, and transparency around security policies would enhance its security posture and business credibility.

Staufen AG is a leading international consulting firm specializing in operational excellence and lean management, serving primarily manufacturing and industrial sectors. The company is positioned as a top-tier consultancy with a broad portfolio of services including supply chain management, digital transformation, and leadership development. It is a subsidiary of Accenture, enhancing its market credibility and reach. The website reflects a mature digital presence with professional design, multilingual support, and comprehensive content tailored to its target audience of industrial clients and executives. Technically, the website is built on WordPress with modern SEO and multilingual plugins, ensuring good performance, accessibility, and mobile optimization. Security best practices such as HTTPS, security headers, and cookie consent mechanisms are implemented, though there is room for improvement in publishing explicit security policies and incident response information. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent. The WHOIS data is privacy protected, which is justified given the business type and regional privacy laws. Overall, the site demonstrates high professionalism and trustworthiness, supporting the company's market position. Strategically, the company should consider publishing a dedicated security policy and vulnerability disclosure to enhance transparency and trust. Additionally, providing clear incident response contacts would improve readiness and compliance visibility.

F

Forbes

forbes.at

58

Forbes.at is the German-language edition of the globally recognized Forbes business magazine, focusing on leadership, entrepreneurship, technology, investment, and lifestyle content. The website offers rich editorial content, event hosting, and newsletter subscriptions targeting German-speaking business professionals primarily in Austria. Technically, the site is built on the Contao Open Source CMS platform, leveraging modern JavaScript libraries such as jQuery and Swiper.js for interactive content presentation. The site is mobile-optimized and demonstrates good SEO practices with appropriate meta tags and Open Graph data. Security-wise, the site uses HTTPS with good SSL configuration and asynchronous script loading, but lacks visible security headers and explicit privacy or cookie policies, which are critical for GDPR compliance. Contact information is limited to a newsletter subscription form, with no direct emails or phone numbers found. Overall, the site is professional and trustworthy but could improve privacy compliance and security transparency.

U

Urban Brew Studios

urbanbrew.co.za

50

Urban Brew Studios is a well-established South African media production company specializing in television and audio studio facilities, content creation, and channel management. With over 25 years in the industry, it holds a leading position in the independent television production sector in South Africa. The company offers a broad range of services including high-end audio post-production, branded content, and facilities hire, targeting broadcasters, content creators, and advertisers. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses common web technologies such as jQuery and FontAwesome. The site is mobile optimized and performs moderately well. Security posture is adequate with HTTPS enforced but lacks comprehensive security headers and formal security policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy.

E

East Coast Radio

ecr.co.za

69

East Coast Radio (ECR) is a leading commercial radio station based in KwaZulu-Natal, South Africa, offering music, news, and community content primarily targeting local residents and listeners. The website provides live streaming services, news updates, event information, and community engagement features, positioning itself as a key media player in the region. The digital infrastructure leverages modern web technologies including Google Analytics, Facebook SDK, Hotjar, and DoubleClick for advertising and analytics, indicating a mature digital presence. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though some security headers could be improved. Privacy compliance is moderate with a cookie consent mechanism but lacks explicit privacy and terms of service pages on the homepage. Overall, the website is professional, content-rich, and trustworthy, supporting the station's market position effectively.

T

touchDERMA

touchdermaime.org

63

touchDERMA is a specialized healthcare education platform focusing on dermatology continuing medical education (CME). The website offers accredited learning activities, clinical updates, and expert insights designed to improve patient outcomes. The platform targets healthcare professionals and dermatologists seeking up-to-date educational content. The business is relatively new, founded in 2023, and operates with a medium-sized digital presence. Technically, the site is built on WordPress, leveraging modern web technologies and third-party services such as Google Tag Manager and Facebook Pixel for analytics and advertising. Hosting and DNS services are provided by Cloudflare, ensuring reliable performance and security. The security posture is good with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled and some security headers are not explicitly set. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service on the analyzed page. Overall, the website is professional, well-branded, and trustworthy, but could improve transparency around privacy and security policies.

B

BioRN - Life Science Cluster Rhine-Neckar

biorn.org

53

BioRN - Life Science Cluster Rhine-Neckar is a well-established innovation cluster based in the Rhine-Neckar region of Germany, focusing on biotech and life sciences. The organization fosters collaboration between academia, industry, and public stakeholders to promote health innovations and support startups. The website reflects a mature digital presence with rich content, event information, and member services, targeting life science professionals and investors. Technically, the site is built on WordPress with modern plugins for SEO and cookie management, hosted by a reputable German registrar. Security posture is adequate with HTTPS and cookie consent but lacks some advanced security headers and policies. Privacy compliance is partial due to missing explicit privacy and terms of service pages. Overall, the domain registration and website content align well, indicating a legitimate and credible business presence.

O

Oberösterreichische Nachrichten

nachrichten.at

65

Oberösterreichische Nachrichten is a prominent regional news media outlet based in Austria, focusing on delivering current news from Upper Austria as well as national and international events. The website serves a broad general audience with a digital news platform that integrates advertising and subscription paywall technologies. The company maintains a consistent brand presence with verified social media profiles and structured data enhancing SEO and user trust. Technically, the site employs a modern CMS (fCMS by fidion GmbH), uses advanced consent management via OneTrust, and integrates multiple advertising and analytics services conditionally based on user consent and subscription status. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities or exposed sensitive data. However, explicit privacy policy and terms of service pages were not detected in the provided content, which could be improved for compliance and transparency. Overall, the website is professional, trustworthy, and well-optimized for performance and mobile use.

K

Kagiso Media

kagisomedia.co.za

9

Kagiso Media is a prominent South African media and publishing company with a diversified portfolio including broadcasting, content creation, specialised publishing, and advertising solutions. The company manages several well-known brands and subsidiaries, positioning itself as a leader in the South African media landscape. The website reflects a professional and modern digital presence built on WordPress with advanced plugins and multimedia content, indicating a mature technical infrastructure. Security posture is generally good with HTTPS enabled and no obvious vulnerabilities, though the absence of security headers and privacy policies suggests room for improvement. The lack of publicly available WHOIS data indicates privacy protection, which is reasonable for this business type but reduces transparency. Overall, the website is trustworthy and well-maintained but would benefit from enhanced privacy compliance and security best practices.

R

Russmedia Digital GmbH

russmedia.com

10

Russmedia is a well-established media company based in Austria, specializing in regional newspapers, digital marketing, and publishing services. The company targets regional media consumers and advertisers, positioning itself as a leader in the Austrian media landscape. The website reflects a professional digital presence with a focus on user experience and compliance with privacy regulations such as GDPR. Technically, the site is built on WordPress and leverages modern web technologies including jQuery, FontAwesome, and Cookiebot for cookie consent management. Security measures include HTTPS enforcement and standard security headers, although no explicit security policy or vulnerability disclosure is published. The absence of WHOIS data for the domain is a notable anomaly, reducing transparency but not necessarily indicating illegitimacy given the professional nature of the site and business. Overall, the site demonstrates a mature digital infrastructure with moderate performance and good privacy compliance.

P

Picus Capital GmbH

picuscap.com

50

Picus Capital GmbH is an early-stage technology investment firm focused on partnering with daring technology companies to build global leaders. The company operates primarily in the technology sector, providing pre-seed, seed, and Series A investment along with strategic and operational support. The website is professionally designed using WordPress and modern web technologies, featuring client testimonials and a clear business focus. Technical infrastructure includes Google Analytics and Tag Manager with opt-out mechanisms, and the site is SSL secured. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Privacy and security policies are not explicitly presented, and security headers are missing, indicating room for improvement in security posture. Overall, the site is functional and trustworthy from a business perspective but requires enhanced transparency and security measures.

H

High-Tech Gründerfonds (HTGF)

htgf.de

73

High-Tech Gründerfonds (HTGF) is a prominent German pre-seed and seed investor focused on technology startups. The company supports tech founders with early-stage investments, leveraging a strong network in industry and academia, and deep technical expertise. Their mission is to strengthen Germany's technological backbone and foster international market leaders. The website reflects a mature digital presence built on WordPress, optimized for SEO and mobile devices, with professional design and clear navigation. However, explicit privacy and terms of service pages are not found, and contact information is limited on the public site. Security posture is adequate with HTTPS and cookie consent but lacks visible security headers and detailed security policies. WHOIS data is minimal, lacking registrant details, which slightly reduces trustworthiness but does not contradict the professional business presentation.

K

Kurt Tucholsky Literaturmuseum

tucholsky-museum.de

45

The Kurt Tucholsky Literaturmuseum website represents a small, non-profit cultural institution dedicated to preserving and promoting the legacy of Kurt Tucholsky. The museum offers exhibitions, events, and educational projects, positioning itself as a recognized cultural memory site in Germany. The website is built on TYPO3 CMS, uses modern web technologies, and provides a good user experience with clear navigation and mobile optimization. Security posture is solid with HTTPS enforced, though it lacks some advanced security headers and cookie consent mechanisms. Contact information is clearly presented, and the museum maintains an active social media presence. Overall, the site is trustworthy and professionally maintained, reflecting the museum's cultural mission.

N

NEB - Die Niederbarnimer Eisenbahn

neb.de

54

NEB - Die Niederbarnimer Eisenbahn operates as a regional railway service provider in the Brandenburg and Berlin area, offering passenger transport, ticketing, and travel information services. The website is well-structured, professionally designed, and targets regional commuters and travelers. It provides detailed information about train lines, tickets, excursions, and service updates. The digital infrastructure is based on TYPO3 CMS, enhanced with modern web technologies and accessibility features, ensuring a good user experience across devices. The website employs Cookiebot for cookie consent management and integrates Google Analytics for traffic analysis, reflecting a mature approach to privacy compliance. Security posture is solid with HTTPS enforced and Cloudflare DNS usage, although some security headers could be improved. Overall, the website is trustworthy, professional, and compliant with relevant privacy regulations, though explicit privacy policy and terms of service pages were not detected in the provided content.

L

Living Wage Foundation

livingwage.org.uk

59

The Living Wage Foundation is a UK-based non-profit organization dedicated to promoting fair wages through the real Living Wage accreditation. It operates under Citizens UK and has a strong market presence with over 16,000 accredited employers including major corporations. The website is professionally designed using Drupal 10 and Bootstrap, featuring good mobile optimization and accessibility. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. WHOIS data is unavailable due to domain naming rules error, but the website's legitimacy is supported by its content and affiliations. Overall, the site demonstrates a mature digital presence with a focus on social responsibility and employer engagement.

A

abcPremium GmbH

shop-mbs.de

65

The website shop-mbs.de is an e-commerce platform operated by abcPremium GmbH, based in Heidelberg, Germany. It offers a range of products primarily targeting German-speaking customers. The site is built on the Magento platform, utilizing various extensions such as Amasty modules and Stripe payment integration, indicating a moderately mature technical infrastructure. The presence of Cookiebot for cookie consent demonstrates attention to privacy compliance, although no explicit privacy policy or terms of service pages were found. Security posture is adequate with HTTPS enforced and Cloudflare DNS usage, but lacks visible security headers and incident response information. Overall, the site is functional and professional but could improve transparency and compliance documentation.

H

HDG

hangar.it

48

Hangar Design Group (HDG) is an established integrated creative agency and design consultancy based in Italy, with a strong market presence and a portfolio of notable clients and projects. The company focuses on branding, storytelling, and digital presence to help businesses evolve and succeed. The website reflects a professional and consistent brand image, supported by ISO 9001:2015 certification and a multilingual WordPress platform. The technical infrastructure includes modern web technologies such as jQuery, Swiper.js, and privacy-focused analytics tools like Matomo alongside Google Analytics. Privacy compliance is robust, featuring Iubenda cookie management and GDPR adherence. Security posture is strong with HTTPS, DNSSEC, and cookie consent mechanisms, though additional security headers could enhance protection. Overall, the site is well-designed, user-friendly, and trustworthy, with no critical vulnerabilities detected.

L

Local Business View - Marco Bonatta

local-business-view.it

54

Local Business View, operated by Marco Bonatta, specializes in creating immersive Google Street View virtual tours for local businesses in Italy, primarily targeting sectors such as hospitality, retail, and real estate. The company leverages its expertise and Google certification to enhance local businesses' online visibility and customer engagement through interactive digital experiences. The website reflects a focused business model with a strong niche market position supported by a portfolio of over 600 tours and significant user engagement metrics. Technically, the site is built on Incomedia WebSite X5 Pro with standard web technologies, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and secure form handling, though improvements are needed in security headers and privacy compliance. Overall, the site is professional, trustworthy, and provides clear contact channels, but lacks advanced privacy and security policy disclosures.

A

AFLAMUNA

aflamuna.org

41

AFLAMUNA is a Beirut-based cultural nonprofit organization dedicated to supporting independent Arab cinema and elevating social, political, and cultural movements through film. With roots dating back to 1999 as Beirut DC and formal nonprofit status since 2006, AFLAMUNA offers a variety of programs including impact labs, fellowships, and community cinema networks. The organization targets independent filmmakers, cultural organizers, and audiences interested in Arab cinema. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and Google Tag Manager for analytics. The site is well-designed, mobile-optimized, and content-rich, reflecting a mature digital presence. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers, representing areas for improvement. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration is consistent and legitimate, supporting the organization's credibility.

M

markt.de GmbH & Co. KG

markt.de

54

Markt.de GmbH & Co. KG operates a well-established online classified ads platform targeting private and commercial users in Germany. Founded in 2005 and headquartered in Munich, the company offers a broad range of classified categories including vehicles, real estate, jobs, services, pets, and electronics. The platform supports free and paid listings, serving as a marketplace for millions of users. Markt.de maintains a consistent brand presence with comprehensive privacy and terms policies, and active social media engagement. The website is optimized as a Progressive Web App (PWA) with modern frontend technologies such as Kotlin/JS and RequireJS, ensuring good mobile responsiveness and accessibility.

T

Tenhil GmbH & Co. KG

tenhil.de

61

Tenhil GmbH & Co. KG is a well-established German HR technology company specializing in recruiting solutions. The company operates multiple well-known online job portals and career fairs, leveraging advanced AI technology recognized by the German Federal Ministry of Research. Their business model focuses on connecting candidates with suitable employers through a broad network of online platforms and SaaS solutions. The company holds a strong market position with over 30 years of expertise and multiple subsidiary brands. Technically, the website is built on WordPress with Elementor, uses Cloudflare for DNS and CDN, and integrates modern SEO and analytics tools. Security posture is good with HTTPS and consent management in place, though explicit security headers and incident response policies are absent. Overall, the website is professional, GDPR compliant, and trustworthy, with no signs of blocking or suspicious activity.

Karrieretag is a German regional job fair organizer operating in multiple cities across Germany, targeting professionals, students, and career changers. The website is built on WordPress using modern themes and plugins, with a focus on SEO and user experience. The technical infrastructure includes popular event and job management plugins, and the site is mobile optimized with consent management for GDPR compliance. Security posture is good with HTTPS and some security best practices, though explicit security headers and policies could be improved. The lack of WHOIS data limits domain trust verification but the professional presentation and social media presence support legitimacy. Overall, the site is a credible platform for career events in Germany.

S

Stadt St. Ingbert

st-ingbert.de

68

The website www.st-ingbert.de serves as the official digital presence of the city of St. Ingbert, Germany. It provides residents, visitors, and businesses with access to municipal services, news, event information, and contact details. The site is well-structured, featuring a comprehensive navigation menu covering city administration, culture, tourism, economy, and social services. The digital maturity is evident through the use of WordPress CMS, modern JavaScript libraries like Swiper.js, and cookie consent management via Borlabs Cookie plugin. SEO and accessibility are well addressed with proper metadata and responsive design. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although security headers could be improved. Privacy compliance is moderate, with cookie consent implemented but no explicit privacy or terms of service pages detected in the analyzed content. Overall, the site reflects a professional municipal government portal with high trustworthiness and good user experience.

S

Saarpfalz-Kreis

saarpfalz-kreis.de

67

The Saarpfalz-Kreis website serves as the official digital portal for the regional government district in Germany, providing residents and visitors with access to a wide range of public services, news, events, and administrative information. The site targets local citizens and stakeholders, offering key services such as vehicle registration, consultation centers, career opportunities, and public announcements. The business model is that of a governmental public service provider with a medium-sized operational scope within the German government sector. Technically, the website is built on the ionas4 CMS platform, leveraging modern JavaScript frameworks and libraries including SystemJS and jQuery. It employs Cloudflare for DNS and CDN services, ensuring good performance and security. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate loading speed and comprehensive metadata including Open Graph and JSON-LD structured data. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms compliant with GDPR, and integrates Matomo analytics with privacy considerations. While security headers and best practices are generally observed, explicit security policies and vulnerability disclosure mechanisms are absent, representing areas for improvement. No vulnerabilities or suspicious patterns were detected, and the WHOIS data aligns well with the site's governmental nature. Overall, the website presents a professional, trustworthy, and user-friendly interface with strong privacy compliance and a solid security posture. Strategic recommendations include publishing explicit security and incident response policies, implementing a vulnerability disclosure program, and enhancing security headers to further strengthen the site's defense and transparency.

The University of Luxembourg is an international research university with a multilingual and interdisciplinary character, serving students and researchers primarily in Luxembourg. The website reflects a professional academic institution with a focus on education and research services. The digital infrastructure is built on WordPress with advanced SEO and privacy tools such as Yoast SEO Premium, Matomo analytics, and Cookiebot for cookie consent management. The site demonstrates good mobile optimization, accessibility, and user experience. Security posture is solid with HTTPS and privacy-aware analytics, though explicit security headers and incident response information are lacking. WHOIS data is unavailable, limiting domain trust assessment, but the website content and branding strongly support legitimacy. Overall, the site is well-maintained, privacy-conscious, and professionally presented.

A

ASW gGmbH

asw-ggmbh.de

45

ASW gGmbH is a well-established educational institution in Saarland, Germany, specializing in dual study programs and continuing education with accredited bachelor degrees. The institution emphasizes practical and scientific education, small group teaching, and personal contact, supported by modern facilities. The website reflects a professional and trustworthy presence with clear contact information and accreditation badges. Technically, the site is built on TYPO3 CMS with modern frontend technologies and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security policies and incident response details. Overall, the site is low risk and credible, serving students and professionals seeking dual study and advanced training.

The Deutsch-Französisches Hochschulinstitut (DFHI) is a well-established educational cooperation between the Hochschule für Technik und Wirtschaft des Saarlandes (htw saar) and the Université de Lorraine (UL), offering bilingual German-French degree programs primarily in management, engineering, and informatics. Founded in 1978, it serves approximately 450 students and has a strong alumni network exceeding 3400 graduates. The website reflects a mature digital presence with comprehensive content, clear navigation, and multilingual support, targeting prospective students, current students, alumni, and partner organizations. Technically, the website is built on WordPress with modern plugins for SEO, cookie consent, and responsive design. It uses HTTPS with good SSL configuration and includes structured data for enhanced search engine visibility. The site demonstrates good mobile optimization and accessibility features, although some additional security headers could improve its security posture. From a security perspective, the site employs HTTPS and cookie consent mechanisms aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is privacy protected as per EURid policy, which is typical for .eu domains, and does not raise suspicion. The domain's legitimacy is supported by consistent branding, partner links, and professional content. Overall, the DFHI website presents a trustworthy, professional, and secure platform for its educational mission. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and potentially publishing a dedicated security policy or incident response information to further strengthen trust and compliance.

H

Hauptstadtregion Berlin-Brandenburg

berlin-brandenburg.de

48

The website berlin-brandenburg.de serves as the official regional cooperation portal for the German federal states of Berlin and Brandenburg. It provides information on joint political initiatives, projects, and public services aimed at citizens, government officials, and businesses within the metropolitan region. The site is positioned as a trusted government platform facilitating collaboration and communication between the two states. Technically, the site is built on WordPress, leveraging popular plugins such as Yoast SEO for search optimization and Borlabs Cookie for GDPR-compliant cookie management. Hosting is provided via Amazon AWS infrastructure, ensuring reliable availability. The website demonstrates good mobile responsiveness, accessibility, and SEO practices, although some improvements in security headers and legal disclosures could be made. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism with user control over external media cookies. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security headers and incident response contacts suggests room for enhancement in security posture and transparency. Overall, berlin-brandenburg.de is a professionally maintained government website with strong compliance and trust indicators. Strategic improvements in security policies and legal documentation would further strengthen its risk profile and user confidence.

I

Investitionsbank des Landes Brandenburg (ILB)

ilb.de

61

The Investitionsbank des Landes Brandenburg (ILB) is a regional development bank focused on promoting and financing public and private investment projects within Brandenburg, Germany. The institution offers a broad portfolio of funding programs across sectors such as economy, infrastructure, labor, and housing. The website reflects a well-established public entity with a clear mission to support regional development through financial products and advisory services. The target audience includes private companies, public clients, individuals, associations, universities, and chambers, indicating a comprehensive service scope. Technically, the website employs a modern technology stack including Bootstrap, jQuery, and various JavaScript libraries to deliver a responsive and accessible user experience. The presence of a consent management platform (Klaro) and integration with Google Analytics demonstrates a mature digital infrastructure with privacy compliance in mind. The site is mobile-optimized and features clear navigation and professional design, supporting excellent user experience. From a security perspective, the site enforces HTTPS and uses bot protection (Friendly Captcha) and session management via Apache Tomcat. While no explicit security headers were detected in the HTML content, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant. However, the site could improve by publishing a security.txt file and providing explicit incident response contacts. Overall, the ILB website is a trustworthy, professional platform representing a government-affiliated financial institution. It balances user experience, privacy, and security effectively, supporting its role as a key regional development bank. Strategic recommendations include enhancing HTTP security headers, formalizing vulnerability disclosure processes, and increasing transparency on data retention policies to further strengthen security and compliance.

L

Landesregierung Brandenburg

digitalesbb.de

44

Digitales Brandenburg is an official digital transformation initiative by the Landesregierung Brandenburg (State Government of Brandenburg, Germany). The website serves as a comprehensive information portal providing updates on digital policies, strategies, and projects within the state. It targets citizens, municipalities, and businesses interested in digital development and government services in Brandenburg. The platform offers news, event information, newsletters, and resources related to digital infrastructure and society. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses SEO best practices and analytics tools such as Google Analytics and WP Statistics. The hosting is managed via kasserver.com, consistent with the domain's WHOIS data. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit policies are missing. Privacy compliance is partial, with a comprehensive privacy policy present but lacking a cookie consent mechanism. Overall, the website is professional, trustworthy, and well-positioned as a government digital resource.

E

Ehrenamt in Brandenburg

ehrenamt-in-brandenburg.de

42

Ehrenamt in Brandenburg is a government-supported platform dedicated to promoting and supporting voluntary civic engagement within the Brandenburg region of Germany. The website serves as an informational hub providing resources, recognition programs such as the Ehrenamtskarte, event announcements, and support for volunteer networks. It targets volunteers, civic organizations, and government bodies, positioning itself as a key regional player in fostering community involvement. Technically, the site is built on WordPress using the Avada theme and several reputable plugins, indicating a modern and maintainable infrastructure. The hosting appears to be managed by kasserver.com, a known hosting provider. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but could improve by adding explicit security headers and publishing a security policy. No critical vulnerabilities or suspicious activities were detected. Overall, the site demonstrates good content quality, technical implementation, and business credibility, making it a trustworthy resource for its audience.

S

STIGA Oy

stiga.com

72

STIGA Oy is a well-established Finnish company specializing in manufacturing and retailing garden machinery such as lawn mowers, garden tractors, brush cutters, and chainsaws. The company targets both consumers and professionals seeking quality garden equipment. Their website reflects a mature digital presence with a Magento-based e-commerce platform, integrating advanced analytics and marketing tools to optimize user experience and business operations. The site is professionally designed, mobile-optimized, and provides clear contact and privacy information, enhancing user trust. From a technical perspective, the website employs modern web technologies including RequireJS, jQuery, Google Tag Manager, and New Relic monitoring. The integration of Cookiebot ensures compliance with cookie consent regulations, and the site uses HTTPS with implied security headers, indicating a good security posture. However, explicit security policies and vulnerability disclosure mechanisms are not publicly available, representing an area for improvement. Security-wise, the site demonstrates strong practices such as encrypted connections, cookie consent management, and monitoring tools. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is a minor concern but does not detract significantly from the site's legitimacy given the professional presentation and comprehensive privacy compliance. Overall, STIGA Oy's website is a robust digital asset supporting their business operations effectively. Strategic recommendations include publishing explicit security policies, implementing vulnerability disclosure channels, and enhancing accessibility compliance to further strengthen their security and compliance posture.

L

Leibniz-Institut für ökologische Raumentwicklung e. V.

ioer.de

54

The Leibniz-Institut für ökologische Raumentwicklung e. V. is a reputable German research institute specializing in ecological spatial development and sustainable urban and regional planning. It operates under the Leibniz Association umbrella and is publicly funded by federal and state governments. The website serves as a comprehensive portal for research programs, publications, events, and data services, targeting researchers, policymakers, and urban planners. The institute maintains a strong market position within the academic and research community in Germany and internationally. Technically, the website is built on TYPO3 CMS with modern frontend frameworks like Bootstrap and jQuery, ensuring good mobile responsiveness and accessibility. The site uses Matomo analytics configured with privacy-respecting settings, although it lacks a cookie consent mechanism. Performance is moderate with a well-structured navigation system and professional design. From a security perspective, the site enforces HTTPS and disables cookies in analytics, reflecting good privacy practices. However, it lacks several security headers and does not publish a formal security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's academic nature, hosted on trusted research network name servers. Overall, the website is professional, trustworthy, and well-maintained, with minor improvements recommended in security headers and privacy compliance to enhance its security posture and regulatory adherence.

G

Gesellschaft für Freiheitsrechte e.V.

grundgesetzlich.org

47

Grundgesetzlich.org hosts a German-language podcast focused on educating the public about fundamental rights and political debates. The podcast is produced by Gesellschaft für Freiheitsrechte e.V., a non-profit organization. The website is built on WordPress with common plugins for podcast delivery and page building. It offers multiple distribution channels via popular podcast platforms and RSS feeds. The technical infrastructure is modern but basic, with no advanced security headers or cookie consent mechanisms detected. The site is secure with HTTPS and has a consistent brand presence. However, contact information and detailed security or privacy policies are limited, which could be improved to enhance trust and compliance.

L

Landkreis Freyung-Grafenau

mehralsduerwartest.de

50

The website www.mehralsduerwartest.de serves as the official regional marketing campaign platform for Landkreis Freyung-Grafenau, Germany. It promotes the region's business landscape, quality of life, and community engagement through rich multimedia content, stories, and event information. The site targets residents, families, local businesses, and tourists, positioning itself as a trusted source for regional promotion backed by local government. Technically, the site is built on WordPress with modern plugins like Yoast SEO and Borlabs Cookie, ensuring good SEO and privacy compliance. The infrastructure is stable with HTTPS and moderate performance. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR regulations.

I

innoWerft Walldorf GmbH

innowerft.com

55

innoWerft Walldorf GmbH operates as an early-stage investor and startup accelerator based in Walldorf, Germany, focusing on supporting B2B high-tech startups in their early phases. The company provides key services including fundraising support, sales assistance, and co-investment opportunities, positioning itself as a strategic partner for startups aiming to scale rapidly. Their market presence is reinforced by a portfolio of startups that have successfully closed Seed rounds and attracted significant investment since 2019. The website content is professionally crafted, targeting startups seeking acceleration and investment, with a clear call to action for pitch deck submissions.

M

MFG Medien- und Filmgesellschaft Baden-Württemberg mbH

mfg.de

55

MFG Medien- und Filmgesellschaft Baden-Württemberg mbH is a regional institution dedicated to promoting film culture and the creative industries in the Baden-Württemberg region of Germany. It operates through two main business areas: film funding and creative industry support, offering financial aid, networking, and educational events. The organization holds a strong market position as a key facilitator for media and cultural projects in the region, targeting creatives, filmmakers, and cultural institutions. The website reflects a professional and well-structured digital presence, leveraging TYPO3 CMS and modern web technologies to deliver content effectively. It includes comprehensive privacy and cookie policies, demonstrating compliance with GDPR and user consent requirements. Social media integration and structured data enhance its outreach and SEO performance.