Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,171001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
11,851–11,900 of 99,068
- HHübener Versicherung
huebener-ag.eu
Finance · Germany
64Medium
NIS2 25 · GDPR 100
NIS2 25 · GDPR 100
Hübener Versicherung is a Europe-wide specialist insurance provider, operating primarily in the finance sector. The website presents a professional appearance with multilingual support, targeting European insurance clients. The technical infrastructure is based on WordPress CMS with performance optimizations such as WP Rocket and preconnect hints. The site uses Fathom Analytics for minimal user tracking, indicating a moderate level of digital maturity. Security posture is basic, with no advanced security headers or incident response information visible. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is functional and professional but would benefit from enhanced security and compliance features.
Simmons & Simmonssimmons-simmons.com
Other · United Kingdom
74Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Simmons & Simmons is an established international law firm that positions itself as a strategic business partner to its clients. The firm offers legal services across multiple sectors including financial institutions, healthcare and life sciences, technology, media and telecommunications, and energy and infrastructure. With over 120 years of history, Simmons & Simmons maintains a strong market presence and a professional brand image. The website reflects a mature digital presence with comprehensive content, clear navigation, and modern web technologies such as Vue.js and Google reCAPTCHA for security. Technically, the website is well-structured, mobile-optimized, and employs modern fonts and video embedding technologies. The presence of privacy and cookie policies, along with a cookie consent mechanism, indicates attention to privacy compliance and user experience. However, the absence of visible security headers and explicit contact information for security or incident response are areas for improvement. From a security perspective, the site uses HTTPS and Google reCAPTCHA, which are positive indicators. The lack of WHOIS data is unusual for a firm of this stature and may warrant further investigation to confirm domain registration legitimacy. No vulnerabilities or malicious content were detected in the site content. Overall, Simmons & Simmons presents a professional and trustworthy online presence suitable for its business model. Strategic recommendations include enhancing security headers, publishing explicit security policies, and improving transparency around domain registration and contact information.
tegosgrouptegos-group.com
Energy · Germany
68Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
tegosgroup is a medium-sized German company founded in 2017 specializing in cloud platform software solutions for optimizing business processes in the circular economy, particularly focusing on waste management, disposal, and recycling sectors. The website presents a professional and consistent brand image with good content relevance and user experience. Technically, the site is built on WordPress using Gravity Forms and jQuery UI, hosted by IONOS SE, and demonstrates moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and no explicit security or privacy policies are found. Overall, the site is trustworthy but could improve privacy compliance and security transparency.
GEFAHRGUTJÄGER GmbHgefahrgutjaeger.de
Transportation · Germany
70Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
GEFAHRGUTJÄGER GmbH is a specialized consulting and legal services provider focused on hazardous goods law, hazardous substances, waste management, immission control, and occupational safety. The company targets businesses and professionals requiring expert advice and training in compliance with German and EU regulations. Their market position is that of a niche specialist with a strong focus on regulatory compliance and education. The website is professionally designed using WordPress with Elementor and Yoast SEO, indicating a mature digital presence. Integration of Google Analytics and Maps is managed with user consent, reflecting good privacy practices. Security posture is strong with HTTPS and security headers implemented, although no explicit security policy or incident response information is published. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements.
- ASUP Online-Shop
asup.info
Retail · Germany
68Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
ASUP Online-Shop is a German B2B e-commerce platform specializing in professional work safety equipment and disposal products, including Big Bags and technical equipment. The company claims over 20 years of experience and targets business customers exclusively, offering a broad product range and services such as free shipping over a threshold and a 30-day money-back guarantee. The website is well-branded and professionally designed, with clear navigation and mobile optimization. Technically, it uses the Shopware CMS platform, integrates multiple analytics and marketing tools including Matomo, Google Tag Manager, and Pardot, and supports live chat via Tawk.to. Security posture is good with HTTPS enforced and secure forms, though some security headers are missing and privacy policies are not explicitly found in the provided content. WHOIS data is privacy protected by Identity Digital, which is typical for commercial domains, and no suspicious patterns were detected. Overall, the site is trustworthy and professionally maintained.
Government · Germany
64Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
okl & partner Rechtsanwälte PartG mbB is a specialized law firm based in Germany, focusing on environmental and planning law with additional expertise in procurement, civil, and criminal law. The firm targets industrial clients, SMEs, and public sector entities, positioning itself as a market leader in its niche. The website reflects a professional service-oriented business model with a clear focus on legal advisory services. Technically, the website is built on WordPress using the Salient theme and several plugins including Yoast SEO and GDPR compliance tools. Hosting appears to be managed via GoDaddy, inferred from the domain's nameservers. The site demonstrates good mobile optimization and SEO practices but lacks visible privacy and cookie policies, which impacts its privacy compliance score. Security posture is moderate with no explicit security headers or incident response information found. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.
- sensis GmbH
sensis.de
Other · Germany
62Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
sensis GmbH is a specialized software company focused on developing tailored system solutions for the waste management industry in Germany. Their offerings cover municipal waste management, recycling and recovery plants, commercial waste processes, and innovative digital recycling yard solutions. The company targets municipal enterprises, commercial waste handlers, and recycling facilities, positioning itself as a niche provider with strong industry expertise. The website reflects a professional and consistent brand image with clear contact channels and customer references. Technically, the site is built on a modern React and Next.js stack, providing good mobile optimization and user experience. Security posture is adequate with HTTPS enforced and secure forms, but lacks some advanced security headers and explicit incident response policies. Privacy compliance is good with a comprehensive privacy policy, though cookie consent mechanisms are missing. Overall, the site scores well on business credibility and content quality, with minor improvements recommended in security and privacy transparency.
Stadt Obernburg a.Mainobernburg.de
Government · Germany
60Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Stadt Obernburg a.Main operates a comprehensive municipal website providing residents and visitors with information about city administration, public services, events, tourism, and cultural offerings. The site is well-structured, primarily in German, and targets local citizens and tourists. It maintains a consistent brand presence and offers clear contact channels including phone, email, and a contact form. The website leverages modern web technologies such as JavaScript, jQuery, and accessibility tools to enhance user experience. Hosting is managed via UI-DNS, a common provider for German municipal sites. From a security perspective, the website enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. It uses Matomo analytics configured to disable cookies by default, reflecting a privacy-conscious approach. However, no explicit security policy or incident response information is published, and security headers are not explicitly detected. The WHOIS data is limited but consistent with a legitimate municipal domain. No blocking or WAF mechanisms interfere with content access. Overall, the website demonstrates a solid technical and privacy foundation suitable for a government entity, with room for improvement in formal security disclosures and header implementations. The site is safe, free from adult or questionable content, and maintains a trustworthy online presence.
Erlenbach GmbHerlenbach.de
Manufacturing · Germany
51Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Erlenbach GmbH is a German medium-sized manufacturing company specializing in particle foam processing equipment, including pre-expansion machines, block molding machines, and shape molding machines. The company targets industrial manufacturers requiring efficient EPS and EPP processing solutions. Their website is professionally designed using TYPO3 CMS, offering multilingual support and a clear navigation structure. They provide comprehensive product information, customer testimonials, and training services via an Experience Center. Technically, the site is moderately optimized with cookie consent and uses Matomo for analytics, reflecting a good level of digital maturity. Security posture is adequate but could be improved by implementing standard HTTP security headers and publishing explicit security policies. Contact information is clearly presented with obfuscated emails to reduce spam risk. Overall, the website is trustworthy and business-focused with no signs of malicious or adult content.
EarthRangerearthranger.com
Technology
72Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
EarthRanger is a technology company specializing in real-time wildlife and ecosystem monitoring software designed to support protected area managers, ecologists, and wildlife biologists globally. The platform integrates diverse data sources such as GPS collars, IoT sensors, camera traps, and satellite imagery to provide actionable insights for conservation efforts. With over 750 conservation sites supported and 23,000 animals tracked, EarthRanger holds a strong position in the conservation technology market. The website reflects a professional and modern digital presence, emphasizing data-driven conservation impact and collaboration.
- BBruno H. Schubert-Stiftung
bruno-h-schubert-stiftung.de
Non-profit · Germany
66Medium
NIS2 2 · GDPR 55
NIS2 2 · GDPR 55
The Bruno H. Schubert-Stiftung is a German non-profit environmental foundation dedicated to promoting biodiversity and nature conservation. It is known for awarding the Frankfurt Conservation Award, one of Germany's most prestigious private environmental prizes. The website is professionally designed, content-rich, and targets individuals and organizations interested in environmental protection. The foundation has a strong reputation supported by testimonials from notable figures in academia and conservation. Technically, the website runs on WordPress with a modern theme and uses standard technologies such as jQuery and lazy loading for images. It is mobile-optimized and performs moderately well. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. However, explicit security policies and incident response information are not present. Security posture is good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The site lacks advanced security headers and a vulnerability disclosure policy, which are recommended for improvement. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website presents a trustworthy and credible digital presence for the foundation, with minor technical and security enhancements recommended to further strengthen its posture.
European Natural Forest Schoolnaturalforest.eu
Education · Germany
56Medium
NIS2 10 · GDPR 10
NIS2 10 · GDPR 10
The European Natural Forest School is a specialized educational program dedicated to natural forestry and ecology, targeting advanced students and young professionals in forestry and conservation fields. It operates as a small-scale, donor-supported initiative with partnerships including The Natural Forest Academy and donors such as the Frankfurt Zoological Society and Dieter Mennekes Umweltstiftung. The program aims to provide expert knowledge and practical field experience in natural forest ecology, conservation, and management, with the next session planned for 2026. Technically, the website is built on WordPress using Elementor and the JupiterX theme, leveraging modern plugins and libraries such as Vue.js and jQuery. The site is moderately performant, mobile-optimized, and accessible at a basic level. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional, trustworthy, and aligned with its educational mission but would benefit from enhanced privacy and security practices.
Wildnis in Deutschlandwildnisindeutschland.de
Non-profit · Germany
60Medium
NIS2 22 · GDPR 43
NIS2 22 · GDPR 43
Wildnis in Deutschland is a well-established non-profit initiative dedicated to creating and protecting wilderness areas in Germany. The website serves as an educational and advocacy platform, providing comprehensive information about wilderness, conservation efforts, and related funding programs. It targets environmentalists, policymakers, researchers, and the general public interested in nature preservation. The initiative is supported by a coalition of 22 conservation organizations, positioning it as a key player in the German environmental sector. Technically, the website is built on WordPress using the Enfold theme, enhanced with SEO and security plugins such as Yoast SEO and Contact Form 7 with reCAPTCHA. The hosting is managed via INWX, a reputable German registrar. The site demonstrates good mobile optimization, accessibility, and SEO practices, with structured data implemented for enhanced search engine understanding. From a security perspective, the site uses HTTPS with a strong SSL configuration and employs reCAPTCHA to protect forms from spam. While explicit security headers are not fully visible in the HTML, the overall posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies including consent mechanisms, aligning with GDPR requirements. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. It effectively communicates its mission and engages its audience professionally. Strategic recommendations include enhancing security headers, publishing incident response contacts, and considering a security.txt file to improve vulnerability disclosure transparency.
- Ferienhof Hardthöhe
ferienhof-hardthoehe.de
Hospitality · Germany
52Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Ferienhof Hardthöhe is a family-oriented farm holiday business located in Germany's UNESCO World Heritage site Oberes Mittelrheintal. The company offers a variety of accommodation options including chalets, wooden houses, and apartments, alongside farm activities such as pony courses, riding school, kids farm, and wellness services. The website is built on TYPO3 CMS with Bootstrap, featuring modern design and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers could enhance protection. The site demonstrates strong GDPR compliance and provides comprehensive privacy and cookie policies. Positive trust signals include multiple Google reviews and a regional tourism award. Overall, the website presents a professional and trustworthy digital presence for a small hospitality business.
- Bauer Martin Ferienhof
bauer-martin.de
Hospitality · Germany
57Medium
NIS2 17 · GDPR 60
NIS2 17 · GDPR 60
Bauer Martin Ferienhof is a family-oriented hospitality business offering vacation stays on a farm at the Baltic Sea in Germany. The website presents a professional and well-structured digital presence, leveraging WordPress with Elementor and NitroPack for performance optimization. The business targets families seeking wellness and farm experiences, with key services including luxury wellness houses, children's activities, and horse riding. The site complies with GDPR through a comprehensive privacy and cookie policy and employs hCaptcha for form security. Security posture is strong with HTTPS and security headers, though formal security policies and incident response details are absent. Overall, the site is trustworthy and well-optimized, with moderate user tracking via Google Tag Manager. Recommendations include publishing a security policy, incident response contacts, and vulnerability disclosure information to enhance trust and compliance.
Evangelisches Medienhaus GmbHgemeindebaukasten.de
Non-profit · Germany
65Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
The website www.gemeindebaukasten.de is a professionally designed platform offering a modular website builder service tailored for churches, diaconal organizations, youth groups, and related non-profit entities primarily in Germany. Operated by Evangelisches Medienhaus GmbH, it provides personalized support, privacy-compliant tools, and hosting within Germany, positioning itself as a niche provider in the religious and community sector. The site leverages TYPO3 CMS and integrates Matomo analytics with a strong focus on GDPR compliance and accessibility. Security posture is solid with HTTPS and consent management, though explicit security policies and headers could be enhanced. Overall, the site is trustworthy, well-structured, and serves its target audience effectively.
- Evangelisches Medienhaus GmbH
komm2print.de
Media · Germany
60Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
The website komm2print.de is an online print portal specializing in customized print products for church communities and districts in Germany. Operated by Evangelisches Medienhaus GmbH, it offers a streamlined Web2Print service with standardized and individual print solutions including business cards, invitations, signage, and fundraising flyers. The portal targets religious organizations seeking high-quality communication materials. Technically, the site is built on TYPO3 CMS, employs Matomo for analytics, and demonstrates good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though security headers and incident response policies could be improved. Overall, the domain registration aligns well with the business, indicating legitimacy and trustworthiness.
amosWEBamosweb.de
Other · Germany
67Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website amosweb.de, specifically the /app/auth page, currently displays an error message indicating an issue with content availability. The site appears to be built using modern JavaScript frameworks such as Nuxt.js and Vue.js, with integration of Mapbox for mapping services. However, the page lacks substantive content, including privacy policies, contact information, and business descriptions, which limits the ability to fully assess the business or its market position. The domain is registered with NS1 name servers and appears consistent with a German entity, but no registrant details are provided to confirm legitimacy. Security posture is moderate with HTTPS enabled but no visible security headers or policies. Overall, the site is minimally functional and lacks critical compliance and trust indicators.
- Evangelisches Medienhaus GmbH
medienkompass.de
Media · Germany
62Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Medienkompass is a German non-profit educational platform operated by Evangelisches Medienhaus GmbH, focused on providing accessible knowledge about digital media to empower responsible and creative use. The website offers articles, seminars, newsletters, and media tips primarily targeting church communities and educators. Technically, it is built on TYPO3 CMS with a modern, accessible design and uses privacy-conscious analytics (Matomo). Security posture is good with HTTPS and consent management, though security headers and incident response policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, serving a niche educational market effectively.
- FAUN Group
faun.com
Transportation · Germany
61Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
FAUN Group operates as a manufacturer specializing in waste collection vehicles and sweepers, serving a global market with a strong presence in Germany. The company offers a range of products including VARIOPRESS, ROTOPRESS, POWERPRESS, and CITY series vehicles, alongside specialized lifters and sweeping machines. Their business model focuses on manufacturing, sales, service, and training, supported by digital vehicle management solutions. The website reflects a professional and consistent brand image with good content quality and clear navigation, targeting municipalities and waste management companies. Technically, the website is built on WordPress with Elementor, integrating modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, TikTok Pixel, and LinkedIn Insight Tag. The site is mobile optimized and uses HTTPS, though some security headers are not explicitly detected. Cookie consent mechanisms are implemented, but privacy and terms of service documents are not clearly found, indicating room for compliance improvement. Security posture is generally good with HTTPS and no visible vulnerabilities, but the absence of WHOIS data and lack of explicit security policies or incident response contacts reduce trust slightly. The extensive use of tracking pixels suggests moderate to extensive user tracking, which should be balanced with stronger privacy disclosures. Overall, the website is professional and functional, but improvements in transparency, privacy policy publication, and security header implementation are recommended to enhance trust and compliance.
SyWaTeC Logistic GmbHsywatec.de
Transportation · Germany
69Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
SyWaTeC Logistic GmbH operates as a logistics and transportation service provider, targeting primarily German-speaking clients. The company uses a Wix-hosted website with a free subdomain, indicating a small or medium-sized business with a basic digital presence. The website content is primarily in German and focuses on logistics services, but lacks detailed business or contact information. Technically, the site is built on the Wix platform using standard web technologies and includes a cookie consent mechanism, reflecting some privacy awareness. Security-wise, the site uses HTTPS and includes Sentry for error monitoring but lacks visible security headers and explicit security or privacy policies. The WHOIS data is unavailable for the subdomain, which is typical for Wix free subdomains but limits domain trustworthiness. Overall, the site presents a basic but functional online presence with room for improvement in security, privacy, and business transparency.
ams Umweltschutz GmbHamsberlin.de
Other · Germany
66Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
ams Umweltschutz GmbH is a medium-sized German company specializing in asbestos disposal, protective clothing, respiratory protection, and environmental remediation products. Established in 1983, it serves primarily B2B customers in the construction and environmental sectors. The website is professionally designed using WordPress with modern SEO and privacy compliance tools, including GDPR-compliant cookie consent and contact forms protected by CAPTCHA. The company maintains a clear and accessible contact structure with multiple communication channels and social media presence. Technically, the site uses a solid tech stack with WordPress plugins and Google Analytics for tracking, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, secure forms, and cookie management, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, compliant, and well-positioned in its niche.
- PPALFINGER
palfinger.com
Transportation · Germany
72Medium
NIS2 20 · GDPR 88
NIS2 20 · GDPR 88
PALFINGER is a globally recognized enterprise specializing in innovative and reliable cranes, aerial work platforms, and lifting solutions for commercial vehicles and maritime applications. The company holds a strong market position as a leading manufacturer in the transportation and manufacturing sectors, targeting industrial clients and maritime businesses primarily in German-speaking regions. The website reflects a mature digital presence with comprehensive product information, service offerings, and corporate communications tailored to its audience. Technically, the website employs modern web technologies including Bootstrap, Pimcore CMS, and integrates Google Tag Manager and OneTrust for analytics and privacy compliance. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Security measures such as HTTPS enforcement and security headers are properly implemented, although explicit public security policies and vulnerability disclosure mechanisms are not prominently available. From a security perspective, the site shows a solid posture with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. The absence of WHOIS data is likely due to privacy protection services, which is common for large enterprises. Overall, the risk profile is low, with recommendations to enhance transparency around security incident response and vulnerability disclosures. Strategically, PALFINGER should continue to strengthen its security communication and consider publishing a vulnerability disclosure policy to build further trust. Maintaining and updating privacy and security practices will support compliance and customer confidence in an increasingly regulated environment.
Doppstadtdoppstadt.de
Manufacturing · Germany
67Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Doppstadt is a well-established German company specializing in manufacturing and providing sustainable recycling solutions tailored to diverse industrial needs. With over 60 years of experience, the company holds a strong market position supported by a comprehensive product portfolio including mobile shredding, screening, and composting technologies. The website reflects a mature digital presence with professional design, multilingual support, and active content updates. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and analytics tools, hosted on Versatel infrastructure. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers and explicit incident response policies are absent. Overall, the domain registration and WHOIS data align well with the business claims, indicating high legitimacy and trustworthiness.
- XIMA MEDIA GmbH
formcycle.eu
Technology · Germany
68Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
formcycle, a product of XIMA MEDIA GmbH, is a professional and flexible web-based platform specializing in digital form and process management. The company offers a low-code solution enabling users to create, configure, and process digital forms and workflows efficiently, supporting both cloud and on-premises deployments. Their market position is that of a niche technology provider focused on ease of use and customization without complex programming. The website is well-structured, bilingual (English and German), and targets businesses seeking digital transformation of form and workflow processes. Technically, the website is built on the Contao Open Source CMS and leverages modern JavaScript libraries such as jQuery, Slick Carousel, and Typed.js. It integrates Matomo for analytics and Usercentrics for GDPR-compliant consent management, reflecting a mature digital infrastructure. The site is mobile-optimized with good SEO and accessibility features, although some improvements in accessibility could be made. From a security perspective, the site enforces HTTPS and uses consent management for cookies, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is privacy protected, which is common and justified for this business type, and the domain appears legitimate and consistent with the company's German base. Overall, formcycle presents a trustworthy and professional online presence with a solid technical foundation and good privacy compliance. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to further strengthen security posture.
- Stiftung Creative Kirche
chormusicals.de
Non-profit · Germany
58Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
The website www.chormusicals.de represents the Stiftung Creative Kirche, a well-established non-profit organization focused on producing and promoting choir musicals across Germany. With over 30 years of experience, the organization offers cultural musical events, choir participation opportunities, and ticket sales. The site is professionally designed, content-rich, and targets choir enthusiasts and audiences interested in musical theater. Technically, the site is built on TYPO3 CMS and integrates modern JavaScript libraries and privacy-respecting analytics tools such as Matomo. The presence of a cookie consent mechanism via Klaro demonstrates a commitment to privacy compliance. Security posture is solid with HTTPS enforced, though some HTTP security headers are not visibly implemented. No critical vulnerabilities or blocking mechanisms were detected. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.
Universes in Universe - Worlds of Artuniverses.art
Media · Germany
63Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Universes in Universe - Worlds of Art is a specialized media platform providing comprehensive information on art destinations, biennials, exhibitions, and art projects worldwide. Established online since 1997, it serves a niche audience of art enthusiasts, curators, and cultural travelers with rich content including guides, articles, and event previews. The website leverages TYPO3 CMS and integrates modern frontend technologies and analytics tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and domain transfer protections, though improvements in DNSSEC and security headers are recommended. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site demonstrates high content quality, good user experience, and trustworthy business credibility.
Animas Valley Instituteanimas.org
Other
68Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Animas Valley Institute operates as a niche organization offering nature-based soul initiation and transformational leadership retreats. The website presents a focused business model centered on wilderness immersions and personal transformation experiences, targeting individuals interested in spiritual growth and leadership development. The domain appears to have been active since at least 2012, consistent with the organization's stated history. Technically, the site is built on WordPress with the Avada theme and includes modern plugins for booking and donations, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and Google site verification present, but lacks advanced security headers and explicit privacy policies, which are areas for improvement. Overall, the site is accessible, professionally designed, and provides relevant content for its audience, though it would benefit from enhanced compliance and security transparency.
CREE GmbHcreebuildings.com
Real Estate · Austria
55Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
CREE GmbH operates as an international construction collective specializing in regenerative building solutions. Their website presents a professional image with a clear focus on sustainable construction methodologies and a global network of partners. The company targets construction professionals and clients interested in sustainable building practices. The business model revolves around providing proven systems and methodologies to facilitate regenerative construction projects internationally. Technically, the website is built on WordPress using Elementor and Astra theme, supported by modern tools such as Google Tag Manager, HubSpot, and CookieHub for analytics and privacy compliance. The site is well-optimized for performance and mobile devices, with good SEO practices and structured data enhancing search visibility. Security-wise, the site benefits from HTTPS encryption and Cloudflare protection, with a comprehensive cookie consent mechanism categorizing cookies by purpose. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent, which could be improved to enhance trust and compliance. The WHOIS data for the domain is missing, indicating either a recent registration or privacy protection, which slightly reduces the domain trustworthiness despite the professional website content. Overall, the site is secure, professional, and compliant with privacy regulations, but could benefit from enhanced transparency in security and legal policies.
SYNER, s.r.o.posunoutsedal.cz
Real Estate · Czech Republic
55Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
SYNER, s.r.o. is a well-established construction engineering company based in the Czech Republic with over 33 years of market presence. The website 'Posunout se dál' serves as a recruitment campaign platform highlighting the company's stability, certifications, and attractive employee benefits. The company targets professionals and students in the construction and engineering sectors, offering various job positions and emphasizing a family-like corporate culture. Technically, the website is built on WordPress with modern technologies such as Contact Form 7, Google Analytics, and reCAPTCHA integration, ensuring a secure and user-friendly experience. Security posture is solid with HTTPS enforcement, partial security headers, and GDPR-compliant privacy and cookie policies. No critical vulnerabilities or suspicious content were detected, and the domain registration data aligns with the company's profile, although the domain is relatively new, likely dedicated to recruitment efforts. Overall, the website reflects a professional and trustworthy digital presence supporting SYNER's business objectives.
Bc. Tomáš Paulustomaspaulus.com
Education · Czech Republic
68Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Tomáš Paulus operates a professional UX design education and consulting business based in Prague, Czech Republic. The website offers online courses, mentoring, portfolio feedback, and corporate workshops focused on UX storytelling and design adoption of AI. The business targets UX designers and companies seeking to improve their user experience maturity. The site is well-branded, content-rich, and professionally designed, reflecting a niche market position in UX education and consulting within the Czech/Slovak region. Technically, the website is built on Webflow, leveraging modern web technologies including Google Tag Manager and Analytics, with good mobile optimization and performance. Security posture is adequate with HTTPS and cookie consent implemented, but lacks explicit security headers and published security policies. WHOIS data is missing, which raises legitimacy concerns, but the professional presence and active business mitigate some risk. Overall, the site scores well on content quality and technical implementation but should improve security transparency and domain registration clarity.
- Naučmese
naucmese.cz
Education · Czech Republic
63Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Naučmese is a Czech online educational platform offering a wide range of thematic courses, workshops, webinars, and video courses aimed at personal and professional development. The platform connects learners with instructors and provides additional services such as gift vouchers. It has a strong market presence in the Czech Republic with a medium-sized operation and a focus on community and skill sharing. Technically, the website uses modern web technologies including HTTPS, Google Analytics, Facebook Pixel, and Cloudflare Turnstile captcha for security. The platform implements a comprehensive cookie consent mechanism and complies with GDPR regulations. Security posture is good with HTTPS and bot mitigation, but lacks some advanced security headers and explicit incident response information. Overall, the website is professional, trustworthy, and user-friendly, with no adult or questionable content detected.
Other · Czech Republic
55Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
ZERA - Zemědělská a ekologická regionální agentura, z.s. is a Czech regional non-profit agency focused on agricultural and ecological initiatives, particularly compost certification, education, and sustainable farming practices. The organization targets farmers, compost operators, and environmental stakeholders, providing workshops, seminars, and consulting services. The website reflects a well-established presence with content spanning from 2016 to 2025 and partnerships with reputable governmental and European bodies. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript libraries such as jQuery and Slick Carousel, and integrates Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good navigation and content quality, though some SEO and accessibility features could be improved. From a security perspective, the site uses HTTPS and has implemented a cookie consent mechanism, but lacks visible security headers and a published privacy policy or terms of service. No vulnerabilities or exposed sensitive data were detected. WHOIS data is privacy-protected, which is justified for this type of organization, though it limits external verification of domain legitimacy. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in privacy documentation, security headers, and WHOIS transparency could enhance compliance and trust further.
- PPax-Bank für Kirche und Caritas eG
pax-bank-spendenportal.de
Non-profit · Germany
54Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
The Pax-BKC Spendenportal is a German-language online donation platform operated by Pax-Bank für Kirche und Caritas eG, focused on connecting donors with charitable projects and organizations primarily related to church and Caritas sectors. The platform offers project listings, organization registrations, and facilitates online donations, targeting donors and non-profit institutions in Germany. The website is professionally designed with clear navigation and mobile optimization, built on the Contao CMS with modern JavaScript libraries enhancing user experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, though formal security policies and incident response contacts are absent. No suspicious or malicious content is detected, and privacy compliance is well addressed with GDPR-aligned cookie consent and privacy policy. Overall, the site presents a trustworthy and professional presence in the non-profit donation space.
The Berlin Center for Intellectual Diasporaintellectualdiaspora.org
Non-profit · Germany
51Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The Berlin Center for Intellectual Diaspora operates as a small non-profit public forum based in Germany, focusing on Jewish-Catholic inspired discussions around contemporary politics, religion, society, and culture. The website serves as a platform for debates and encounters, targeting a general audience interested in intellectual and cultural discourse. The business model is centered on providing a niche cultural and religious discussion space without commercial intent. Technically, the website is built on WordPress using the Kadence theme and several plugins including Rank Math SEO and TranslatePress for multilingual support. The infrastructure is modern and moderately optimized for performance and mobile responsiveness. Hosting is associated with IONOS SE, a reputable registrar and hosting provider. SEO practices are good, but accessibility features are basic. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections enabled. However, DNSSEC is not enabled, and no security headers were detected in the provided content. There is no visible privacy policy, cookie consent mechanism, or incident response information, which are gaps in compliance and security posture. No vulnerabilities or suspicious patterns were identified. Overall, the website presents a moderate risk profile with good technical foundations but lacks important privacy and security compliance elements. Strategic improvements in policy publication, security headers, and DNS security would enhance trust and compliance.
- AAnstand digital
anstanddigital.de
Non-profit · Germany
57Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Anstand digital is a German non-profit educational project focused on promoting respectful and ethical behavior on the internet, particularly addressing issues like hatespeech and digital civility. It is a collaboration between the Katholische Akademie in Berlin and the Evangelische Kirche Deutschlands, funded by the German Federal Government's cultural office. The project provides educational materials, podcasts, and public discussions aimed primarily at youth and educators. Technically, the website is built on Akira CMS with modern frontend technologies including jQuery, Bootstrap, and Fancybox, delivering a responsive and accessible user experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. The site is free of advertising and tracking, reflecting a privacy-conscious approach. Overall, the domain and WHOIS data align with the project's legitimacy and non-profit nature.
Sozialdienst katholischer Frauen e.V. Berlinskf-berlin.de
Non-profit · Germany
58Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Sozialdienst katholischer Frauen e.V. Berlin is a well-established non-profit organization dedicated to supporting women, youth, and families in challenging life situations within Berlin. The organization offers a broad range of social services including youth assistance, family support, workshops for people with disabilities, and open social work initiatives. Their market position is that of a trusted regional social service provider with a medium organizational size and a clear focus on community welfare. The website reflects a professional and consistent brand image with comprehensive service descriptions and clear contact information. Technically, the website is built on a modern WordPress platform utilizing popular plugins such as WPBakery Page Builder, Slider Revolution, and CleanTalk Anti-Spam. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security measures include HTTPS enforcement, anti-spam tools, and cookie consent management, although some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The security posture is solid for a non-profit, with room for enhancement in formal security policies and incident response disclosures. Privacy compliance is adequate, with GDPR-aligned cookie and privacy policies present. The domain registration is consistent with the organization's location and business history, supporting legitimacy. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure mechanisms to further strengthen trust and compliance.
SANCTA MARIA Schule der hl. Hedwig gGmbHsancta-maria-schule.de
Education · Germany
57Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
SANCTA MARIA Schule der hl. Hedwig gGmbH is a specialized educational institution in Berlin, Germany, focusing on students with special needs in learning and intellectual development. The school operates under the Catholic Hedwigschwestern organization and collaborates with related pedagogical and social service partners. The website reflects a well-maintained digital presence using WordPress with Elementor and Astra theme, providing clear information about the school, its programs, and contact options. Privacy and security measures such as GDPR-compliant consent and Google reCAPTCHA are implemented, indicating awareness of data protection requirements. However, explicit security policies and incident response contacts are not present, which could be improved. Overall, the site is professional, trustworthy, and serves its target audience effectively.
- Kath. Schulzentrum Edith Stein - Fachschule für Sozialpädagogik und Berufsfachschule für Sozialassistenz
schulzentrum-edithstein.de
Education · Germany
63Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Katholisches Schulzentrum Edith Stein is a medium-sized educational institution based in Berlin, specializing in social pedagogy and social assistance training. It operates under the Catholic Archdiocese of Berlin and offers state-recognized programs for aspiring educators and social assistants. The website reflects a professional and consistent brand image, targeting students seeking vocational education in social fields. Technically, the site is built on Joomla CMS with modern JavaScript libraries and analytics tools, providing a responsive and user-friendly experience. Security posture is solid with HTTPS and GDPR-compliant cookie consent, though some security headers and policies could be improved. Overall, the domain and hosting align well with the institution's profile, indicating legitimacy and trustworthiness.
Canisius-Kollegcanisius.de
Education · Germany
54Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Canisius-Kolleg is a well-established Jesuit educational institution located in Berlin, offering Gymnasium education from grade 5 and an integrated secondary school from grade 9. The school emphasizes a Christian-humanist educational philosophy, fostering comprehensive development and responsibility among young people. It serves a diverse student body with over 900 students from 60 nationalities. The website reflects a mature digital presence built on WordPress with modern plugins and a responsive design, providing clear navigation and rich content. Privacy and cookie policies are comprehensive and GDPR compliant, with an active consent mechanism. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site projects professionalism, trustworthiness, and a strong educational brand in the Berlin region.
- VM
vm.com
Technology · Hong Kong
58Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
VM operates as a pioneering domain NFT marketplace, leveraging blockchain technology to facilitate seamless domain trading, transfers, lending, and escrow services. Registered as an ICANN-accredited registrar in Hong Kong since 2022, VM positions itself as a trusted platform for Web3 domain asset management. The website demonstrates a modern technical infrastructure built on Vue.js and integrates with popular blockchain wallets such as MetaMask, indicating a mature digital presence. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response details are not publicly available. The absence of WHOIS data for the domain raises some concerns about registration transparency, but the presence of recognized partners and clear privacy policies mitigates some risk. Overall, VM presents a credible and innovative business with room for improvement in transparency and security disclosures.
Weber Betonwerkweber-betonwerk.de
Manufacturing · Germany
58Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Weber Betonwerk is a German-based manufacturer specializing in high-quality concrete prefabricated and semi-finished elements for the construction industry. The company emphasizes precision, in-house formwork construction, and just-in-time delivery supported by a modern fleet and digital customer portal. Their website reflects a mature digital presence built on WordPress with professional design and GDPR-compliant privacy and cookie policies. The technical infrastructure includes modern plugins and Cloudflare DNS, ensuring good performance and security. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and well-positioned to serve its target audience of construction professionals.
Masterpagesmasterpages.com
Technology · Germany
68Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Masterpages is a German-based SaaS platform specializing in creating optimized marketing websites and landing pages designed to generate leads and customers efficiently. The platform leverages AI technologies to assist users in generating sales copy and images, making it accessible even to those without technical expertise. It targets a diverse audience including local businesses, online entrepreneurs, coaches, affiliate marketers, and agencies. The business model is subscription-based with additional live workshops and marketing support. Technically, the website employs modern frameworks such as Bootstrap and integrates multiple third-party services including Stripe for payments, Facebook SDK, and analytics tools like Yandex Metrika and Google Tag Manager. The hosting and DNS are managed via Cloudflare, ensuring good performance and security. Security posture is solid with HTTPS enforced and domain locks in place, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is addressed with a comprehensive GDPR-aligned privacy policy, but lacks a visible cookie consent mechanism. No direct contact or incident response information is provided, which could be improved. Overall, the website is professional, well-designed, and trustworthy with extensive marketing and lead generation capabilities.
Bildungsstätte Anne Frankhfg-jetzt.de
Education · Germany
60Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
HfG.jetzt is an informational website dedicated to prospective students applying to Hochschule für Gestaltung (HfG) Offenbach, focusing on art and design study programs. The site provides application timelines, program details, and links to related university resources. It targets applicants primarily in Germany but offers an English version for international users. The business model centers on educational information dissemination without direct commercial transactions. Technically, the website is built on WordPress, utilizing modern JavaScript libraries such as Swiper.js for UI components and jQuery for scripting. The site is hosted with domain control services consistent with GoDaddy infrastructure. It employs HTTPS with good SSL configuration and includes a GDPR-compliant cookie consent mechanism that restricts cookies to necessary ones only, reflecting a strong privacy posture. Security-wise, the site enforces HTTPS and cookie consent but lacks explicit security headers and documented security policies or incident response contacts. No vulnerabilities or tracking scripts were detected, indicating a low-risk profile. The WHOIS data aligns with the website's educational purpose, showing no suspicious registration patterns. Overall, the website is professional, trustworthy, and well-suited for its educational audience. Strategic improvements could include enhancing security headers, publishing security policies, and providing clearer contact information to strengthen trust and compliance.
- ImmoGarten GmbH
immogarten.de
Real Estate · Germany
68Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
ImmoGarten GmbH operates as a specialized garden nursery and plant provider based in Frankfurt am Main, Germany. The company offers a broad range of plants including garden trees, shrubs, hedges, and garden accessories, complemented by services such as garden consultation, delivery, and planting. Their market position is that of a regional specialist with a strong presence in the Rhein-Main area, supported by partnerships with related brands and an online shop for magnolias. The website is built on Silverstripe CMS and employs modern web technologies, providing a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of a privacy policy and terms of service pages indicates compliance gaps. Contact information is clearly presented, enhancing business credibility. Overall, the website is professional, trustworthy, and well-structured, serving its target audience effectively.
Immo Herbst GmbHkarriere-immo-herbst.de
Real Estate · Germany
58Medium
NIS2 17 · GDPR 55
NIS2 17 · GDPR 55
Immo Herbst GmbH operates a career portal focused on recruitment for gardening and landscaping roles in Frankfurt am Main, Germany. The website provides job listings and information about employee benefits, targeting job seekers in the landscaping sector. The company appears to be a small regional player in the real estate and landscaping industry. Technically, the website uses a proprietary or site builder framework (OneKit), integrates Facebook Pixel for marketing and tracking, and is hosted on servers associated with kasserver.com. The site is mobile-optimized and has good SEO practices but lacks some advanced accessibility features. Security-wise, HTTPS is enabled and cookie consent mechanisms are in place; however, the absence of security headers and explicit privacy and terms of service pages indicates room for improvement. No blocking or WAF mechanisms were detected, and the content is safe for general audiences. WHOIS data is limited but consistent with the business profile. Overall, the website is functional and professional but would benefit from enhanced privacy, security, and contact transparency.
Deutsche Anwaltauskunftanwaltauskunft.de
Other · Germany
57Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Deutsche Anwaltauskunft operates a German-language online legal information magazine and lawyer referral platform. It provides comprehensive legal content across multiple categories such as life, work, housing, mobility, society, economy, and finance. The platform targets the general public seeking legal advice and lawyer contacts in Germany. Technically, the website is built on the Contao CMS, uses modern JavaScript libraries including jQuery and Usercentrics for consent management, and integrates Matomo for analytics. The site is mobile-optimized with good navigation and SEO practices. Security-wise, HTTPS is enforced, and consent mechanisms are in place, but explicit security headers and formal security policies are absent. Overall, the site demonstrates a mature digital presence with moderate to good security posture and privacy compliance.
- Tteam tietge
tietge.com
Other · Germany
61Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
team tietge is a small full service advertising agency based in Offenburg, Germany, specializing in digital and analog corporate communication. The website presents a professional business profile targeting companies seeking comprehensive advertising and communication services. Technically, the site is built on Silverstripe CMS with Bootstrap framework, offering a modern and responsive design with good SEO practices. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is moderate with no detected security headers or explicit SSL configuration details. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is functional and professional but lacks critical trust and security indicators.
Agile Store Locator WordPress Pluginagilestorelocator.com
Technology
52Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Agile Store Locator is a specialized WordPress plugin provider offering a premium store locator solution integrated with Google Maps API. The company has established a strong market presence since 2016, with over 10,000 sales and hundreds of positive reviews, positioning itself as a niche leader in the WordPress plugin ecosystem. Their product suite includes multiple templates, analytics, and premium addons for WooCommerce and data synchronization, targeting WordPress site owners and e-commerce businesses seeking enhanced store location capabilities. Technically, the website is built on WordPress with Bootstrap and integrates modern marketing and analytics tools such as Google Analytics and Sender.net. The site demonstrates good mobile responsiveness, accessibility, and SEO optimization, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and domain transfer restrictions but lacks DNSSEC and explicit security headers, indicating room for improvement in hardening. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism despite tracking scripts. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy practices.
- CORTEX media GmbH
cortex-media.de
Technology · Germany
65Medium
NIS2 10 · GDPR 28
NIS2 10 · GDPR 28
CORTEX media GmbH is a small technology company based in Ulm, Germany, specializing in professional internet applications including cloud software, web development, AI integration, mobile apps, and server hosting. The company positions itself as an innovation hub offering tailored digital solutions for businesses, ranging from small mobile apps to large internet portals and cloud infrastructures. Their website reflects a high level of professionalism with consistent branding and comprehensive service offerings. Technically, the site is built on WordPress with modern web technologies, optimized for mobile devices, and includes structured data for SEO benefits. Security posture is solid with HTTPS and no visible vulnerabilities, though there is room for improvement in security policy transparency and cookie consent mechanisms. Overall, the website is trustworthy and well-maintained, supporting the company's market position as a competent digital solutions provider.