Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,171001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
11,951–12,000 of 99,068
- Asociace neformálního vzdělávání
neformalnivzdelavani.eu
Education · Czech Republic
56Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website www.neformalnivzdelavani.eu serves as an educational resource focused on non-formal education primarily targeting youth workers, teachers, social workers, camp leaders, volunteers, and parents interested in innovative educational methods. It is managed by the Asociace neformálního vzdělávání (ANEV), a Czech non-profit organization, and is supported by European Union funding. The site offers multilingual content, including Czech, English, Finnish, and Portuguese versions, enhancing its accessibility across Europe. The business model is non-profit, focusing on providing educational content, resources, and community support rather than commercial services. Technically, the website is built on WordPress with common plugins such as WPML for multilingual support and Featherlight for image lightboxes. It uses jQuery and Google Fonts, with a moderate performance profile and good mobile optimization. SEO and accessibility are basic to good, but there is room for improvement in accessibility features and security headers. The site is served over HTTPS with a valid SSL certificate, ensuring secure communications. From a security perspective, the site lacks visible security headers and does not expose sensitive data or vulnerable libraries in the provided content. However, the absence of a privacy policy and terms of service pages, as well as no explicit contact emails or phone numbers, reduces privacy compliance and user trust. The WHOIS data is unavailable due to EURid privacy policies, but the website’s association with known organizations and EU funding supports its legitimacy. No WAF or blocking mechanisms were detected, and the content is safe for general audiences. Overall, the website is a credible, well-structured educational resource with moderate technical maturity and a good security baseline. Strategic improvements in privacy documentation, security headers, and contact transparency would enhance compliance and trustworthiness.
Vorreiter-Magazinmagazin-vorreiter.de
Government · Germany
73Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
The Vorreiter-Magazin website serves as an informational platform focused on European cooperation and regional initiatives in Niedersachsen, Germany. It provides articles and news related to Interreg programs and cross-border collaboration, targeting residents and stakeholders interested in these topics. The site uses WordPress with the Avada theme and several plugins to deliver content, including a cookie consent mechanism via Borlabs Cookie. Social media presence includes Facebook, Instagram, and YouTube channels. However, the site lacks explicit privacy and terms of service pages, which are important for compliance and user trust. Technically, the website employs a modern CMS platform with common plugins and libraries such as jQuery and Slider Revolution. Hosting appears to be managed via DomainControl.com, a reputable provider. Performance and mobile optimization are moderate to good, but SEO and accessibility could be improved. Security posture is basic, with HTTPS implied but no visible security headers or vulnerability disclosures. Analytics is implemented through Google Tag Manager, indicating moderate user tracking. Security-wise, the site shows some best practices like cookie consent but lacks comprehensive security headers and formal vulnerability disclosure mechanisms. No critical vulnerabilities or malware indicators were detected, but improvements are recommended to enhance security and compliance. The domain WHOIS data is limited, with an unusual domain status 'connect' and no registrant details, which slightly reduces trustworthiness. Overall, the website is functional and serves its informational purpose but requires enhancements in privacy compliance, security hardening, and transparency to improve trust and regulatory adherence.
Datadruck GmbHdatadruck.com
Other · Germany
59Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Datadruck GmbH operates as a regional printing service provider based in the Ulm / Neu-Ulm area in Germany. The company offers a variety of printing products and services targeting both business and individual customers. The website is professionally designed using WordPress with Elementor and Astra theme, indicating a moderate level of digital maturity. The presence of structured data and SEO optimizations further supports their online presence. From a security perspective, the website uses HTTPS and employs Matomo analytics with cookies disabled, reflecting some privacy awareness. However, the absence of explicit privacy, cookie, and security policies, as well as missing WHOIS domain registration data, presents concerns that should be addressed to improve trust and compliance. Overall, the website is functional and professional but would benefit from enhanced transparency and security documentation.
TB Transportbeton Glöckle GmbH & Co. KGtb-gloeckle.de
Transportation · Germany
71Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
TB Transportbeton Glöckle GmbH & Co. KG is a regional German company specializing in the supply of transport concrete, mortar, special concrete, and flowable fill products. Established with a modern mixing plant since 2009, the company positions itself as a reliable and quality-focused partner for the construction industry in its region. The website reflects a professional business presence with clear service offerings and contact information. Technically, the site is built on WordPress with modern plugins for SEO, GDPR compliance, and interactive maps, indicating a moderate to advanced digital maturity. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site is trustworthy and compliant with EU regulations, supporting the company's credibility in its sector.
GW-Immobilienverwaltungs GmbHgwi-sw.de
Real Estate · Germany
64Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
GW-Immobilienverwaltungs GmbH is a small regional real estate management company based in Schweinfurt, Germany, specializing in residential property management, rental property management, facility management, and rental services. The website is professionally designed using Joomla! CMS with modern front-end libraries such as jQuery, Bootstrap, and UIkit, providing a good user experience and mobile optimization. The company targets property owners, homeowners associations, and tenants within the local market. Security posture is moderate with HTTPS implied but no explicit security headers detected; cookie consent is implemented indicating GDPR awareness. No advanced security or incident response policies are published, and no analytics or advertising scripts are present, reducing privacy risks. Overall, the website is trustworthy and business credible with clear contact information and consistent branding.
Evangelische Medienarbeit | EMAtermine-e.de
Media · Germany
65Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The website www.termine-e.de is an online login portal for the 'termine-e' scheduling system operated by Evangelische Medienarbeit (EMA), a media organization in Germany. It serves registered users with max-e-Accounts, providing access to media scheduling and management tools. The site is professionally branded and targets media professionals or affiliated entities within the EMA ecosystem. The business model focuses on providing specialized online tools for media scheduling and support services. Technically, the site is built on Ruby on Rails with modern frontend assets like Font Awesome and Turbo, indicating a contemporary web infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and consistent branding. Security-wise, the site uses HTTPS and includes CSRF protection in forms, but lacks visible security headers and cookie consent mechanisms, which are recommended for enhanced security and compliance. No vulnerabilities or suspicious content were detected. Overall, the site is trustworthy, secure, and professionally maintained, though improvements in privacy compliance and security headers are advised.
Tivoli Casinotivolicasino.dk
Other · Denmark
62Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Tivoli Casino is a well-established Danish online gambling platform operating since 2010. It offers access to Danish slot machines, jackpots, and mobile gaming, targeting adult Danish users interested in online casino games. The website is built on the Sitecore CMS platform and employs modern JavaScript frameworks and tag management tools to deliver a responsive and user-friendly experience. While the site includes a cookie consent mechanism, it lacks visible privacy policy and terms of service pages, which are critical for compliance and user trust. Security posture is generally good with HTTPS enabled and no exposed sensitive data, but could be improved by adding explicit security headers and incident response contact information. The domain WHOIS data is consistent with the business claims, showing a long registration history and active status, supporting the site's legitimacy. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.
SuprNationsuprnation.com
Technology · Malta
58Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
SuprNation is a Malta-based technology company specializing in the iGaming industry, founded in 2015. The company develops innovative online casino products with a focus on mobile optimization and enhanced user experience. Their product portfolio includes brands such as VoodooDreams, NYspins, and Duelz, positioning them as a creative challenger in the competitive iGaming market. The website reflects a professional and consistent brand image with clear contact information and social media presence. Technically, the site is built on WordPress with common industry plugins and uses Cloudflare for DNS and likely CDN services. Analytics are implemented via Google Tag Manager. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and trustworthy but would benefit from enhanced security and privacy measures.
Restricted Country - Slotboxslotbox.com
Other
66Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website slotbox.com currently serves a restricted country notice page, indicating that access to the full content is blocked or limited by geographic or regulatory restrictions. The domain is registered since 2002 with GoDaddy.com, LLC and uses Cloudflare for DNS and likely DDoS protection. Due to the restricted content, no meaningful business information, contact details, or policies are available on the site. The lack of accessible content and absence of privacy or cookie policies limits the ability to assess compliance and security posture fully. The site appears to be related to online gaming or casino services based on the domain name and metadata, but this cannot be confirmed from the current page.
- SSky City Casino
skycity.com
Hospitality · United States
56Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Sky City Casino is a well-established hospitality and gaming business located in Western New Mexico, offering casino gaming, hotel accommodations, an RV park, dining, entertainment, and cultural tourism services. The website reflects a medium-sized regional casino and hotel destination with a focus on adult customers interested in gaming and cultural experiences. Technically, the site is built on WordPress using the Astra theme and Beaver Builder, integrating Google Analytics and Facebook Pixel for marketing and tracking. The site is mobile optimized with good design and navigation but lacks explicit privacy and cookie policies, which impacts privacy compliance. Security posture is moderate with HTTPS enabled and domain transfer lock in place, but no DNSSEC or security headers detected. The domain is long-standing and consistent with the business claims, enhancing trustworthiness. Overall, the website is professional and functional but would benefit from improved privacy disclosures and enhanced security headers.
ATGatg.se
Other · Sweden
69Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
ATG is a prominent Swedish betting company specializing in horse racing, sports betting, and casino games. The website serves a Swedish-speaking adult audience with comprehensive betting services, expert tips, live streaming, and news. It holds a leading market position in Sweden's gambling industry. Technically, the site is built on a modern React framework, leveraging Google Tag Manager, Dynatrace for monitoring, and OneTrust for privacy compliance. The infrastructure includes AWS streaming services, ensuring robust performance and scalability. Security-wise, the site enforces HTTPS, employs standard security headers, and integrates cookie consent mechanisms aligned with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates a mature digital presence with strong privacy and security postures appropriate for its industry.
- ATG
atgvision.com
Transportation · Sweden
59Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.swedishhorseracing.com is a media and betting platform focused on Swedish horse racing. It provides video replays of races, coverage of major events, and betting information targeting horse racing enthusiasts primarily in Sweden. The site is branded under ATG, a known entity in the Swedish horse racing and betting industry. Technically, the site uses modern web technologies including AngularJS, JWPlayer for video playback, Google Tag Manager for analytics, and AdRoll for advertising and retargeting. The hosting for media content is provided by Rackfish, indicating a professional infrastructure. Security posture is generally good with HTTPS enforced and use of Google reCAPTCHA, but lacks some security headers and explicit privacy and terms of service documentation. The absence of WHOIS data for the domain is a concern for domain legitimacy verification, though the website content and branding suggest a legitimate business. Overall, the site is well-designed, mobile-optimized, and provides relevant content for its audience, but would benefit from improved transparency in privacy and security policies.
Fakuma Internationale Fachmesse für Kunststoffverarbeitungfakuma-messe.de
Manufacturing · Germany
59Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Fakuma is a leading international trade fair specializing in industrial plastics processing, held in Friedrichshafen, Germany. The website provides comprehensive information about the event, including exhibitor and visitor details, news, and multimedia content. The site is professionally designed using WordPress with modern performance optimizations and SEO best practices. The technical infrastructure includes popular plugins such as WP Rocket for caching and Borlabs Cookie for GDPR-compliant cookie consent management. Security posture is solid with HTTPS enforced and some security headers implied, though explicit security policies and incident response contacts are not published. Overall, the website is trustworthy and well-positioned in its niche, serving industry professionals and exhibitors effectively.
Manufacturing · Germany
59Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Motek Messe is an established international trade fair organizer specializing in production and assembly automation, hosting events in Stuttgart, Germany. The website serves as a comprehensive platform for exhibitors and visitors, providing detailed event information, ticketing, and industry news. The business holds a strong market position within the manufacturing sector, partnering with related events such as Bondexpo to offer a broad industry platform. Technically, the site is built on WordPress with modern optimization plugins like WP Rocket and Borlabs Cookie for consent management, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although explicit privacy and security policies are missing. Overall, the site demonstrates professionalism and trustworthiness, supported by consistent branding and active social media presence.
P. E. Schall GmbH & Co. KGstanztec-messe.de
Manufacturing · Germany
57Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Stanztec is a specialized trade fair focused on stamping technology, organized by P. E. Schall GmbH & Co. KG in Germany. The event targets industry professionals and exhibitors, providing a platform for showcasing innovations in miniaturization, functional integration, and material efficiency. The website is well-structured, professionally designed, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, it leverages WordPress with modern plugins and caching mechanisms, hosted on Anexia infrastructure. Security posture is strong with HTTPS enforcement and security best practices, though explicit cookie consent and security policies could be improved. Overall, the site is trustworthy, with clear contact information and social media presence, supporting its legitimacy and business credibility.
Manufacturing · Germany
59Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Optatec is a well-established international trade fair specializing in optical technologies, components, and systems, held in Frankfurt, Germany. The website serves as a comprehensive platform for exhibitors and visitors, providing detailed information about upcoming events, exhibitor directories, and industry news. The business operates in the manufacturing sector, focusing on photonics and optical technology industries, targeting professionals and companies in these fields. The site is professionally designed with consistent branding and good content quality, supporting its market position as a key industry event. Technically, the website is built on WordPress with a modern tech stack including performance optimizations like WP Rocket and cookie management via Borlabs Cookie. It uses structured data (JSON-LD) for SEO and social media integration, and is hosted on Anexia servers. The site is mobile-optimized and performs well, with good SEO practices implemented. From a security perspective, the site uses HTTPS with good SSL configuration and security headers. Cookie consent is implemented, but explicit privacy policies, terms of service, and incident response information are not found, representing areas for improvement. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, the website is trustworthy and professional, with a strong business credibility score. Strategic recommendations include publishing clear privacy and security policies, adding incident response contacts, and enhancing accessibility features to further improve compliance and user trust.
Control Internationale Fachmesse für Qualitätssicherungcontrol-messe.de
Manufacturing · Germany
59Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Control Internationale Fachmesse für Qualitätssicherung is a leading international trade fair focused on industrial quality assurance technologies, procedures, products, and system solutions. The event is organized by P. E. Schall GmbH & Co. KG and targets professionals and companies involved in quality assurance across manufacturing sectors. The website provides comprehensive information for exhibitors and visitors, including event dates, exhibitor directories, news, and special features. The company maintains a strong market position as a premier platform for quality assurance innovations and networking. Technically, the website is built on WordPress with a modern tech stack including WP Rocket for performance optimization, Borlabs Cookie for consent management, and Slider Revolution for dynamic content. The site is hosted on Anexia servers, uses HTTPS with excellent SSL configuration, and is mobile-optimized with good SEO practices. The presence of structured data and multilingual support enhances its digital maturity. From a security perspective, the site enforces HTTPS, implements cookie consent, and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and some security headers. No vulnerabilities or suspicious activities were detected. Privacy compliance is partial, with cookie consent but no explicit privacy or terms of service pages found in the analyzed content. Overall, the website is professional, trustworthy, and well-maintained, serving its business purpose effectively. Strategic improvements in privacy documentation and security transparency would enhance its compliance and trustworthiness further.
Verein Deutscher Zementwerke e.V.vdz-online.de
Manufacturing · Germany
74Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
The Verein Deutscher Zementwerke e.V. (VDZ) is a well-established German non-profit association serving as a leading research and competence center for the cement, concrete, and environmental protection sectors. Founded in 1877, it provides a broad range of services including research, certification, consulting, and professional training to the cement industry. The website reflects a professional and comprehensive digital presence with multilingual support and clear navigation tailored to industry professionals and stakeholders. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies including SVG graphics and asynchronous JavaScript loading. The use of Matomo analytics indicates a privacy-conscious approach to user tracking. The website is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks some recommended security headers such as Content-Security-Policy and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the organization's identity and domain usage, supporting legitimacy. Overall, the VDZ website presents a trustworthy, professional, and secure platform that effectively supports its business objectives and stakeholder engagement.
- BBundesverband der Deutschen Transportbetonindustrie e.V. (BTB)
transportbeton.org
Transportation · Germany
72Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
The Bundesverband der Deutschen Transportbetonindustrie e.V. (BTB) is a professional industry association representing transport concrete manufacturers and related businesses in Germany. The organization focuses on key industry challenges such as decarbonization, resource conservation, technical standards, research, education, and workplace safety. It operates the Concrete Sustainability Council (CSC) certification system in Germany, underscoring its commitment to sustainable construction practices. The website serves as a comprehensive resource for members and the broader industry, offering news, training, research updates, and member-exclusive content. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including jQuery and Matomo analytics. It features good SEO optimization, accessibility, and mobile responsiveness. Security practices include HTTPS enforcement and secure login forms with CSRF protection. Cookie consent mechanisms and GDPR-compliant privacy policies are implemented, reflecting a mature approach to privacy and compliance. While the website content and technical infrastructure are robust and professional, the WHOIS data for the domain is unavailable due to a malformed WHOIS response, limiting the ability to fully verify domain registration legitimacy. No WAF or blocking mechanisms were detected, allowing full content access and analysis. Overall, the site demonstrates a strong security posture with minor recommendations for enhanced security headers and explicit incident response information. Strategically, BTB is well-positioned as a leading industry association in Germany's transport concrete sector, with a clear focus on sustainability and member services. The digital presence supports its mission effectively, though verifying domain registration details through alternative means is advisable to strengthen trust.
Manufacturing · Germany
53Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
The Industrieverband Steine und Erden Baden-Württemberg e.V. operates as a regional industry association representing the stones and earths sector in Baden-Württemberg, Germany. The website serves as an information hub providing news, events, educational initiatives, and service offerings to its members and the broader public interested in the industry. It maintains a professional and consistent brand presence with clear communication channels and social media engagement. Technically, the site is built on the 'cumodis simple cms' platform, uses modern web standards, and integrates Matomo analytics with privacy-conscious configurations. Security posture is adequate with HTTPS enforced and secure login forms, though the absence of explicit security headers suggests room for improvement. Privacy compliance is strong, evidenced by a comprehensive privacy policy and cookie consent mechanism. Overall, the site is trustworthy, well-maintained, and serves its target audience effectively.
EP Power Mineralseppowerminerals.com
Manufacturing
53Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
EP Power Minerals is a well-established European company specializing in the supply of cementitious materials such as fly ash and granulated blast furnace slag, serving the concrete and cement industries globally. With over 40 years of experience and a network of subsidiaries and partners, the company positions itself as a leader in its sector. The website reflects a professional and modern digital presence built on TYPO3 CMS, featuring comprehensive content, clear navigation, and mobile optimization. Privacy and cookie compliance are well implemented with a consent manager and detailed policies. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and explicit policies could be improved. The absence of WHOIS registration data introduces some uncertainty about domain legitimacy, but the overall business credibility remains high based on website content and external domain relationships.
- Waibel
waibel-gruppe.de
Transportation · Germany
63Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Waibel is a medium-sized German company specializing in the building materials market, offering integrated services including extraction, production, transport logistics with its own fleet, shipping, and disposal. The company has over 50 years of experience and targets both construction companies and private customers. The website is built on TYPO3 CMS and uses modern web technologies, providing a professional and well-structured user experience with good mobile optimization. Security posture is moderate with HTTPS implied but lacking explicit security headers and policies. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the website reflects a credible business with room for improvement in security and privacy transparency.
- Putzmeister
putzmeister.com
Manufacturing · Germany
75Medium
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
Putzmeister is a globally recognized leader in manufacturing and servicing construction and mining machinery, specializing in concrete pumps, mixers, and related equipment. Founded in 1958 and headquartered in Germany, the company operates under the parent company SANY Group and maintains a strong market position with multiple subsidiary brands. The website reflects a professional and comprehensive digital presence targeting industry professionals and customers worldwide. Technically, the site is built on the Liferay CMS platform with modern web technologies including React and Matomo analytics, providing a good user experience with moderate performance and mobile optimization. Security posture is solid with HTTPS enforcement and domain transfer protections, though improvements such as DNSSEC and explicit cookie consent mechanisms are recommended. Overall, the domain registration and website content align well, supporting high legitimacy and trustworthiness.
- MSE Camsoft GmbH
camsoft.de
Technology · Germany
57Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
MSE Camsoft GmbH is a German-based small technology company specializing in custom software development with a focus on mobile software and dispatch systems for industrial and commercial sectors such as construction, airport services, and vehicle rental. Their business model is B2B, providing tailored software solutions integrated into existing IT environments. The website is professionally designed with clear navigation and relevant content targeting business clients. Technically, the site uses a modern front-end stack including Bootstrap and jQuery, but relies on an outdated Google Analytics script and lacks visible security headers, indicating room for modernization and security improvements. Security posture is moderate with no critical vulnerabilities detected but missing best practices such as security headers and cookie consent mechanisms. WHOIS data aligns well with the website's German business identity, supporting legitimacy. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.
- AULBACH GmbH & Co. KG
aulbach.com
Retail · Germany
56Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
AULBACH GmbH & Co. KG operates as a medium-sized German company specializing in meat, poultry, and game specialties with a focus on convenience food products for professional kitchens and gastronomy. Their product range includes raw meat pieces, convenience items such as pre-cooked snacks, sausage products, and organic meat options. The company targets B2B customers in the catering and food service sectors, positioning itself as a reliable supplier with a broad assortment of traditional and innovative products. Technically, the website is built using the connectiv! WebCMS platform and employs older JavaScript libraries like Prototype.js and Scriptaculous. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. Cookie consent mechanisms are implemented, indicating awareness of privacy compliance requirements. However, no advanced analytics or marketing tools are detected. From a security perspective, the site lacks visible security headers and explicit security policies or incident response contacts. The SSL configuration and hosting details are not provided, limiting the assessment of encryption strength. The absence of WHOIS data for the domain is a notable concern, as it reduces trust in domain legitimacy despite the professional appearance of the website. Overall, the website presents a professional and trustworthy front for its business operations but would benefit from enhanced security practices, improved transparency in domain registration, and clearer contact information to strengthen its credibility and compliance posture.
Roth Elektrotechnikroth-elektrotechnik.com
Energy · Germany
63Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Roth Elektrotechnik is a well-established electrical services company based in Großwallstadt, Germany, with over 18 years of experience. The company specializes in photovoltaic systems, electrical engineering, smart home KNX technology, and construction site power supply rental. Their market position is that of a trusted regional master craftsman business emphasizing quality, reliability, and customer satisfaction. The website reflects a professional and consistent brand image targeting residential and commercial customers in the local region. Technically, the website is built on Joomla CMS with modern frontend technologies such as Bootstrap, GLightbox, and AOS for animations. It is mobile-optimized and provides a good user experience with clear navigation and relevant content. Cookie consent is implemented via TermsFeed scripts, indicating attention to privacy compliance. However, no advanced analytics or tracking services are detected, suggesting a privacy-conscious approach. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks visible security headers and does not provide explicit security or incident response policies. The domain WHOIS data is consistent with the business claims, showing a long registration period without privacy protection, supporting legitimacy. No critical vulnerabilities or suspicious patterns were detected. Overall, the website scores well in content quality, technical implementation, privacy compliance, and business credibility, with moderate security posture. Strategic improvements in security headers and incident response disclosures could further enhance trust and security maturity.
Transportation · Germany
54Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Beato Umzüge is a small, family-owned moving and logistics company operating primarily in the German regions of Aschaffenburg, Miltenberg, Frankfurt, and Würzburg, with services extending nationally and internationally. Their offerings include private and corporate moves, international relocations, storage solutions, and additional services such as furniture assembly and clearance. The company positions itself as a reliable, customer-focused partner with a strong emphasis on professional service and customer satisfaction, supported by positive testimonials and a well-structured website. Technically, the website is built on Joomla CMS with modern frontend technologies including Bootstrap, Swiper.js, and AOS for animations. The site is mobile-optimized, uses HTTPS with a valid SSL configuration, and incorporates anti-spam measures like Google ReCaptcha in its contact form. SEO and accessibility are adequately addressed, though some security headers are missing. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and CSRF token usage but lacks explicit security policies or incident response contacts. No vulnerabilities or suspicious elements were detected. Privacy compliance is supported by a comprehensive privacy policy, though no cookie consent mechanism was found. Contact information is transparent and complete, enhancing trust. Overall, the website presents a professional, trustworthy image with a solid technical foundation and good security hygiene. Recommendations include adding security headers, implementing a cookie consent banner, and publishing incident response information to further strengthen compliance and security posture.
- Hauptverband der Deutschen Bauindustrie e.V.
leisegehtsnicht.de
Transportation · Germany
51Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The website 'Leise geht's nicht.' represents the Hauptverband der Deutschen Bauindustrie e.V., a key industry association for the German construction sector. It serves as an informational platform highlighting the industry's role in infrastructure, digitalization, climate protection, and housing development. The site targets stakeholders including government, industry professionals, and the general public, emphasizing the societal importance and challenges of construction projects. Technically, the site is built on TYPO3 CMS with Matomo analytics, demonstrating a modern and professional digital infrastructure. The site is mobile-optimized and well-structured, though some accessibility and security header improvements are possible. Security posture is strong with HTTPS and no visible vulnerabilities, but lacks published security policies or vulnerability disclosure mechanisms. Overall, the site is trustworthy, professional, and compliant with GDPR through linked policies on the bauindustrie.de domain.
- Oranto GmbH
oranto.de
Technology · Germany
57Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Oranto GmbH is a small technology company based in Berlin, Germany, specializing in agile software development with a focus on Enterprise Content Management Systems, database applications, and scientific study platforms. Their key offerings include Oranto AI, a secure AI management solution emphasizing data privacy, and a flexible, GDPR-compliant Studienplattform for managing clinical and non-clinical studies. The company positions itself as a trusted partner for digital transformation, providing services such as web hosting, SEO, TYPO3 expertise, and IT consulting. Technically, the website is built on TYPO3 CMS, uses Matomo for privacy-conscious analytics, and is hosted via domainoffensive.de. The site is well-structured, mobile-optimized, and demonstrates good SEO practices.
Government · Germany
52Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
The Evangelische Kirche von Westfalen is a major regional Protestant church organization in Germany, providing religious, educational, and social services. The website serves as an information and engagement platform for members and the public, featuring news, events, and resources. The organization holds a strong market position as the fourth largest evangelical church in Germany, targeting a broad general audience interested in faith and community activities. Technically, the website is built on TYPO3 CMS, with modern web standards, responsive design, and accessibility features. It integrates third-party services for analytics and media content while maintaining GDPR compliance through a comprehensive cookie consent mechanism. Security posture is solid with HTTPS and privacy-respecting analytics, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, trustworthy, and well-maintained, reflecting the organization's credibility and commitment to transparency.
Government · Germany
52Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The website www.evlks.de serves as the official online portal for the Evangelisch-Lutherisches Landeskirchenamt Sachsens, a regional religious authority in Germany. It provides comprehensive information about church activities, events, educational resources, and community support services. The site targets both the general public and church members, including volunteers and staff. It holds a strong market position as a trusted source for religious and cultural information within Saxony. The business model is non-profit, focusing on community engagement and information dissemination.
- Evangelische Kirche der Pfalz
evpfalz.de
Government · Germany
61Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The Evangelische Kirche der Pfalz website serves as the official digital presence of one of the 20 regional Protestant churches in Germany under the EKD umbrella. It provides comprehensive information about church activities, events, community engagement, job opportunities, and press releases. The site targets a broad audience including church members, volunteers, and the general public interested in religious and community topics. The organization positions itself as a large, established non-profit religious entity with a strong regional presence in Germany. Technically, the website is built on the TYPO3 CMS platform, leveraging modern JavaScript frameworks such as Swiper.js for interactive elements and Usercentrics for GDPR-compliant cookie management. The site is well-optimized for mobile devices, accessibility, and SEO, demonstrating a mature digital infrastructure. Hosting appears to be managed via German-based servers, consistent with the organization's regional focus. From a security perspective, the site enforces HTTPS and integrates privacy proxy servers to enhance data protection. While no explicit security headers were detected in the provided data, the overall posture is strong with no visible vulnerabilities or exposed sensitive information. The presence of a cookie consent mechanism and clear privacy policies indicates good compliance with GDPR requirements. However, the site could improve by publishing a dedicated security policy and incident response contacts. Overall, the website is professional, trustworthy, and well-maintained, reflecting the organization's credibility and commitment to transparency. It effectively balances user experience, content quality, and privacy considerations, making it a reliable resource for its audience.
- Ev.-Luth. Kirche in Oldenburg
kirche-oldenburg.de
Government · Germany
50Medium
NIS2 2 · GDPR 55
NIS2 2 · GDPR 55
The Evangelisch-Lutherische Kirche in Oldenburg operates as a regional non-profit religious organization serving the Oldenburg area in Germany. The website provides comprehensive information about church services, community support, educational programs, and social initiatives, targeting a broad audience interested in religious and community activities. The organization maintains a consistent brand presence and offers clear contact channels including phone, email, and social media. Technically, the website is built on TYPO3 CMS with modern frontend technologies such as Bootstrap and jQuery, ensuring good mobile responsiveness and accessibility. SEO practices are well implemented with meta tags and structured data. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms aligned with GDPR requirements. However, some security headers like Content-Security-Policy and X-Frame-Options are missing, which could be improved. No vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a solid security posture and compliance with privacy regulations, supporting the organization's credibility and trustworthiness. Strategic improvements in security headers and publishing a formal security policy would enhance the security maturity further.
Government · Germany
50Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The Evangelische Kirche in Mitteldeutschland (EKM) is a large, established religious organization serving multiple German federal states including Sachsen-Anhalt, Thüringen, parts of Sachsen and Brandenburg. The website serves as an information hub for religious services, community engagement, social justice initiatives, press releases, and career opportunities. It targets a broad audience interested in religious and social activities within central Germany. The organization maintains a strong regional presence with official contact points and active social media channels. Technically, the website uses modern frameworks such as Symfony, Bootstrap, and Matomo analytics, hosted via INWX, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS and some security best practices, though explicit security and privacy policies are not prominently linked. Overall, the site is professional, trustworthy, and content-rich, supporting the organization's mission and community engagement.
Bremische Evangelische Kirchekirche-bremen.de
Non-profit · Germany
60Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The Bremische Evangelische Kirche website serves as the official online presence of the regional evangelical church in Bremen, Germany. It offers comprehensive information about its communities, faith, events, and social support services. The site targets a general audience interested in religious and community activities, positioning itself as a trusted non-profit organization within the Bremen region. The business model focuses on community engagement, religious services, and social assistance, supported by educational and cultural programs.
- RRhein-Sieg-Kreis
karriere-im-kreis.de
Government · Germany
62Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The website www.karriere-im-kreis.de serves as the official career portal for the Rhein-Sieg-Kreis regional government in Germany. It provides comprehensive information about job opportunities, dual education, and studies within the public sector, targeting job seekers in the Rhein-Sieg-Kreis area. The site is professionally designed with consistent branding and high-quality content, reflecting a strong regional government presence. Technically, the site uses the Sitepark CMS platform with modern JavaScript libraries and is hosted by a regional IT provider, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and secure form handling, though explicit security headers and incident response policies are not published. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the site is trustworthy, safe, and well-suited for its audience.
Rhein-Sieg-Kreisrhein-sieg-kreis.de
Government · Germany
63Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The Rhein-Sieg-Kreis website serves as the official digital portal for the regional government of Rhein-Sieg-Kreis in Germany. It provides residents and stakeholders with access to a wide range of public services, including vehicle registration, political information, event calendars, and family support services. The site is well-structured and targets local citizens and public service users. The business model is that of a public sector entity focused on governance and community services. Technically, the site is built on the Information Enterprise Server by Sitepark GmbH, utilizing modern web technologies such as SVG icons and JavaScript for interactive elements. The site demonstrates good mobile optimization and accessibility features, although performance is moderate. Security posture is adequate with HTTPS usage implied, but lacks visible security headers and explicit security policies. Privacy compliance is weak due to the absence of clear privacy and cookie policies. Overall, the site is trustworthy and professional, but could improve transparency and security practices.
Other
66Medium
NIS2 17 · GDPR 15
NIS2 17 · GDPR 15
The website at https://www.kahl-main.de/eingang.asp currently presents no accessible content, with an empty HTML body and no metadata or visible elements. This lack of content suggests the site is either blocked by a web application firewall or misconfigured, preventing meaningful analysis of its business or technical aspects. The domain is active with multiple name servers, indicating legitimate registration, but no registrant details are available to verify ownership or business claims. Due to the absence of content, no privacy, cookie, or security policies are detectable, and no contact information is provided. The technical infrastructure cannot be assessed beyond the WHOIS data. Security posture is poor with no HTTPS or security headers detected. Overall, the site appears inaccessible or blocked, limiting the ability to evaluate its business model, services, or compliance status.
TechSolutions Group N.V.22bet.cafe
Other
72Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
22Bet is an online gambling and sports betting platform operating under a Curacao license and managed by TechSolutions Group N.V. Founded in 2017, it offers a wide range of services including sportsbook, casino games, live casino, eSports betting, and mobile applications for Android and iOS. The platform targets adult users aged 21 and above, providing various bonuses and promotions to enhance user engagement. The website is built on WordPress with modern web technologies and offers a good user experience with mobile optimization and clear navigation. Security measures include SSL encryption and licensed gaming software, though visible security headers and privacy policies are lacking. WHOIS data is unavailable due to unsupported TLD WHOIS queries, but the business information and content appear consistent and legitimate. Social media presence on Instagram, Twitter, and Telegram supports community engagement. Overall, the platform demonstrates a solid business and technical foundation with room for improvement in privacy compliance and security transparency.
Triversum Kft.ametszet.hu
Technology · Hungary
63Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
aMetszet, operated by Triversum Kft., is a Hungarian technology company offering integrated online services focused on transparent and simple data management. Their platform includes CRM, project management, restaurant software, inventory management, e-learning, and content management systems, targeting businesses seeking unified data solutions. The website presents a professional design with good user experience and clear navigation, though it lacks comprehensive privacy and security policies. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and Owl Carousel, ensuring mobile responsiveness and moderate performance. However, security posture is limited due to missing security headers and absence of HTTPS verification in the provided data. No analytics or tracking scripts are detected, indicating minimal user tracking. Overall, the site is safe for general audiences and shows moderate trustworthiness but would benefit from enhanced security and compliance measures.
- Katholische Akademie der Erzdiözese Freiburg
katholische-akademie-freiburg.de
Education · Germany
56Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
The Katholische Akademie der Erzdiözese Freiburg is a regional non-profit educational and cultural institution affiliated with the Catholic Archdiocese of Freiburg, Germany. It organizes interdisciplinary events and discussions on theology, philosophy, ethics, church matters, and social topics, targeting interested individuals and the broader community. The website reflects a professional and consistent brand presence with a focus on event promotion and educational content. Technically, the website is built on the Edith CMS platform, utilizing jQuery, Bootstrap, and Matomo analytics for tracking. Hosting is provided by w-commerce.de, with multiple authoritative nameservers ensuring domain stability. The site is mobile-optimized with good navigation and SEO practices, although performance is moderate. From a security perspective, the site enforces HTTPS and uses Matomo with cookie disable options, indicating some privacy awareness. However, it lacks explicit privacy and cookie policies, security headers, and incident response information, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is safe, trustworthy, and professionally maintained but would benefit from enhanced privacy compliance and security best practices to strengthen user trust and regulatory adherence.
- Kkath.de gGmbH
hinsehen.net
Media · Germany
57Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
hinsehen.net is a German-language online cultural and religious commentary platform operated by kath.de gGmbH and affiliated with Verein publicatio. It targets German-speaking audiences interested in Catholic culture, religion, and social issues across Germany, Austria, and Switzerland. The website offers articles, analysis, and newsletters focusing on Catholic and societal topics, positioning itself as a niche media outlet within the religious and cultural media sector. Technically, the site is powered by TYPO3 CMS and integrates modern web technologies including Google Analytics and Tag Manager for analytics, FontAwesome for icons, and Google Fonts for typography. The hosting is provided by Hetzner Online GmbH, a reputable German hosting provider. The website demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security posture is adequate but could be improved by enabling DNSSEC, adding security headers, and publishing formal security policies. Privacy compliance is basic with a cookie consent banner and a privacy policy page, but lacks detailed GDPR compliance indicators and data retention disclosures. No direct contact emails or phone numbers are published, which limits direct user engagement. Overall, the site is professional and trustworthy with moderate risk and room for security and compliance enhancements.
ELB Learningrehearsal.com
Education
69Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Rehearsal, operated by ELB Learning, is a specialized video role-play training platform designed to enhance sales enablement, call center training, and soft skills development. The platform targets corporate training professionals and sales teams, offering a SaaS model that supports video-based practice and coaching accessible anywhere. The website presents a professional and consistent brand image with clear calls to action for demos, app downloads, and support resources, positioning itself as a niche player in the education technology sector. Technically, the website leverages modern web technologies including React and Tailwind CSS, with a focus on performance and mobile optimization. Security best practices are well implemented with strong HTTP security headers and HTTPS enforcement. However, the absence of a cookie consent mechanism and explicit vulnerability disclosure pages indicates room for improvement in privacy compliance and transparency. The security posture is strong with no visible vulnerabilities or exposed sensitive data. The site demonstrates good adherence to security standards but could enhance incident response readiness by providing direct security contact channels. The lack of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, although the professional presentation and ELB Learning association mitigate concerns. Overall, Rehearsal's website is a well-executed digital presence for a specialized SaaS training platform, with solid technical and security foundations. Strategic improvements in privacy compliance and domain registration transparency would further strengthen trust and compliance.
eLearning Brotherslectoraonline.com
Technology
71Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Lectora Online is a web-based eLearning authoring platform operated under the brand eLearning Brothers. The website offers a SaaS solution for creating and collaborating on training content, targeting corporate training teams and eLearning developers. The platform is positioned as a trusted and established tool in the eLearning industry, with a focus on ease of use and team collaboration. Technically, the website is built on Webflow CMS, uses modern JavaScript libraries like jQuery, and integrates Google Analytics and Cookiebot for analytics and privacy compliance. The site is hosted behind Cloudflare, ensuring good performance and security. Security posture is strong with HTTPS enforced and a comprehensive cookie consent mechanism, although explicit security headers and incident response policies are not published. The absence of WHOIS data for the domain www.lectoraonline.com raises concerns about domain registration legitimacy, which should be verified. Overall, the website is professional, privacy-conscious, and technically sound, but would benefit from improved transparency in domain registration and contact information.
ELB LEARNINGcenariovr.com
Technology · United States
56Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
CenarioVR is a specialized VR course authoring platform developed by ELB LEARNING, founded in 2017. It targets eLearning professionals and organizations seeking to create immersive VR training content without coding. The platform supports multiple VR devices and integrates xAPI tracking and analytics, positioning itself as an accessible and versatile tool in the VR education technology market. The website reflects a professional and consistent brand image with clear contact information and customer testimonials, indicating a mature business presence. Technically, the website is built on Webflow CMS and leverages modern web technologies including Google Analytics, Google Tag Manager, and Google reCAPTCHA Enterprise for security and marketing. Hosting appears to be on AWS infrastructure. The site is mobile optimized and supports a range of VR platforms, demonstrating good digital maturity. However, some technical improvements such as enabling DNSSEC and adding security headers could enhance security posture. Security-wise, the site uses HTTPS and has implemented reCAPTCHA on forms, but lacks explicit security policies and incident response contacts. No major vulnerabilities were detected, but the absence of privacy and cookie policies and consent mechanisms indicates compliance gaps, especially regarding GDPR. The WHOIS data is consistent with the business claims, showing a legitimate and stable domain registration. Overall, the website is trustworthy and professionally managed but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust.
- Hauptverband der Deutschen Bauindustrie e.V.
leise-gehts-nicht.de
Other · Germany
51Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The website represents the Hauptverband der Deutschen Bauindustrie e.V., a key German industry association advocating for the construction sector. It focuses on infrastructure, digitalization, climate protection, and housing development, positioning itself as a vital stakeholder in societal and economic development. The site is built on TYPO3 CMS and uses Matomo for privacy-conscious analytics, reflecting a modern and responsible technical infrastructure. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and explicit policies could be improved. Contact information and social media presence are comprehensive, enhancing trust and accessibility. Overall, the site is professional, content-rich, and aligned with its business mission.
- Hauptverband der Deutschen Bauindustrie e.V.
bauindustrie.de
Other · Germany
54Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The Hauptverband der Deutschen Bauindustrie e.V. is the leading industry association representing the German construction sector. It advocates for the interests of construction companies at all levels of government and society, providing data, best practices, and policy dialogue to strengthen the industry's competitiveness. The website is professionally designed, content-rich, and targets construction professionals, policymakers, and stakeholders. Technically, the site is built on TYPO3 CMS with Bootstrap and uses Matomo for privacy-conscious analytics. It is mobile-optimized and well-structured for SEO and accessibility. Security posture is good with HTTPS enforced and cookie consent implemented, though formal security policies and incident response contacts are not published. Overall, the site is trustworthy, compliant with GDPR, and safe for general audiences.
- Christof Brand Transporte
christof-brand-transporte.de
Transportation · Germany
52Medium
NIS2 17 · GDPR 48
NIS2 17 · GDPR 48
Christof Brand Transporte is a small, family-owned German transportation company specializing in specialized and heavy transport of construction machinery and equipment. Founded in 1994 with a transport division established in 2012, the company serves regional and European markets with a focus on flexibility and reliability. The website reflects a professional business presence with clear service offerings and contact information. Technically, the site is built on Joomla CMS using standard libraries such as jQuery, Bootstrap, and Leaflet.js for mapping, with hCaptcha integrated for form security. Security posture is solid with HTTPS and spam protection, though security headers and incident response policies are absent. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, but no terms of service or vulnerability disclosure policies are found. Overall, the website is trustworthy, well-structured, and suitable for its business purpose.
REIKEM IT Systemhausreikem.de
Technology · Germany
62Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
REIKEM IT Systemhaus GmbH is a German-based IT service provider specializing in IT security, telephony solutions, and web development. The company positions itself as a reliable partner offering comprehensive IT infrastructure management, consulting, and maintenance services tailored to business clients. Their website reflects a professional and modern digital presence with clear navigation, detailed service descriptions, and strong trust signals such as customer testimonials and partner affiliations. Technically, the site is built on Joomla CMS with modern frontend frameworks and includes analytics and marketing tools like Matomo and Google Tag Manager. Security measures include HTTPS enforcement and reCAPTCHA integration, although explicit security policies and incident response contacts are not publicly detailed. Overall, the website demonstrates a mature digital infrastructure and a solid security posture appropriate for a small IT service company.
- Spruegel.de
spruegel.de
Retail · Germany
53Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Spruegel.de is a German-based e-commerce retailer specializing in workwear, business clothing, and related accessories. The company targets professional and business customers seeking customizable clothing solutions, including logo embroidery and product individualization. The website is built on the Shopware 6 platform, indicating a modern e-commerce infrastructure with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though explicit privacy and terms of service pages are missing, which impacts compliance confidence. Tracking is performed via etracker and Google Analytics, with moderate user tracking levels. Overall, the website presents a professional and trustworthy front for its niche market segment.