Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,177001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
13,001–13,050 of 99,068
Vetion.devetion.de
Healthcare · Germany
52Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Vetion.de is a German veterinary-focused online platform providing news, educational resources, job listings, and a shop tailored to veterinary professionals. The website serves as a comprehensive information hub for veterinarians, offering specialized content and eLearning opportunities. It maintains a consistent brand presence and targets the German veterinary community effectively. Technically, the site is built on WordPress with a modern plugin ecosystem, including WooCommerce for e-commerce capabilities and various analytics and consent management tools. The site is mobile optimized and performs moderately well, with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers could enhance protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a detailed privacy policy and cookie consent mechanism in place. Contact information is available primarily through forms and social media, though no explicit company emails or phone numbers were found in the HTML. Overall, Vetion.de presents as a trustworthy, professional, and well-maintained platform serving a niche healthcare market in Germany.
—
66Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Intersolute GmbHintersolute.de
Technology · Germany
59Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Intersolute GmbH is a German technology partner specializing in IT infrastructure, digital transformation, cloud solutions, AI integration, software development, and design services. The company targets businesses seeking professional and solution-oriented IT and digital services, positioning itself as a regional expert with strong partnerships and certifications. The website reflects a mature digital presence with comprehensive content and clear navigation. Technically, the site uses a custom CMS, modern web standards, and integrates analytics tools like Matomo and Google Tag Manager. Security posture is good with HTTPS and cookie consent mechanisms, though additional security headers and a published security policy would enhance trust. WHOIS data is limited due to DENIC privacy policies but shows consistent domain control. Overall, the site is professional, trustworthy, and well-optimized for its audience.
- PANGAEA
pangaea.de
Other · Germany
59Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
PANGAEA is a specialized data publisher focused on archiving, publishing, and distributing georeferenced datasets related to earth system and environmental sciences. It serves a scientific audience, primarily researchers and institutions engaged in earth system research. The platform is recognized as a member of the World Data System and is hosted by reputable German research institutions, lending it strong credibility and trustworthiness. The website offers extensive scientific content, including featured datasets and news updates, with a professional and consistent branding approach. Technically, the website employs modern web technologies such as Bootstrap for responsive design, jQuery for interactivity, Leaflet for mapping, and Matomo for analytics, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Hosting appears to be managed by academic institutions, which supports reliability and stability. From a security perspective, the site enforces HTTPS and uses Matomo analytics configured with domain-specific cookies, reflecting good privacy practices. However, explicit security headers are not detected, and no public security or incident response policies are published. There are no visible vulnerabilities or exposed sensitive data. Certifications from the World Data System, World Meteorological Organization, and CoreTrustSeal further enhance the security and trust posture. Overall, PANGAEA presents a low-risk profile with strong business credibility and technical maturity. The absence of direct contact emails or phone numbers is mitigated by a contact form and comprehensive policy pages. Strategic improvements could include publishing explicit security policies, incident response contacts, and implementing cookie consent mechanisms to enhance compliance and user trust.
Unser Green Dealunser-green-deal.de
Government · Germany
57Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Unser Green Deal is a German-based advocacy website focused on promoting climate and biodiversity protection aligned with the EU Green Deal and EU Biodiversity Strategy. The site targets environmentally conscious European citizens and stakeholders interested in EU environmental policies. It operates as a small non-profit or governmental advocacy entity, providing information and campaigning for sustainable land and marine protection. Technically, the website is built on WordPress using the Divi theme and integrates various plugins for social media feeds, cookie consent management, and spam protection via Google reCAPTCHA. The site demonstrates good digital maturity with mobile optimization, SEO best practices, and a comprehensive privacy framework. Security posture is solid with HTTPS enforcement, cookie consent documentation, and use of anti-spam measures, though some security headers could be improved. Overall, the website is trustworthy, professional, and compliant with GDPR requirements, though it lacks explicit security policies or incident response contacts. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular plugin updates to mitigate vulnerabilities.
Dr. Gerhard Schillingdr-schilling-monsheim.de
Other · Germany
54Medium
NIS2 10 · GDPR 95
NIS2 10 · GDPR 95
Dr. Gerhard Schilling operates a personal blog focused on agriculture and local politics in Germany. The website serves as a platform for commentary and insights into these sectors, targeting a German-speaking audience interested in these topics. The business model is content publishing via a WordPress-based blog, with a niche market position and a small-scale operation. The site is hosted on Hetzner, a reputable German hosting provider, and uses modern web technologies including WordPress, OceanWP theme, and privacy-focused analytics via Matomo. The site implements GDPR-compliant cookie consent mechanisms and maintains a privacy policy, reflecting a good level of privacy compliance. Security posture is adequate with HTTPS enforced and cookie consent in place, though additional security headers and vulnerability disclosure mechanisms could enhance security maturity. Overall, the website is professional, trustworthy, and well-structured, with good content quality and user experience.
- AgrarBündnis
agrarbuendnis.de
Non-profit · Germany
58Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
AgrarBündnis is a German non-profit alliance comprising 26 independent organizations focused on agriculture, environmental protection, and socio-economic issues in farming. The website serves as an information hub, sharing projects, discussion papers, and press releases relevant to sustainable agriculture and environmental advocacy. The organization positions itself as an established and credible entity within its sector, targeting stakeholders interested in sustainable and socially responsible agriculture. Technically, the website is built on TYPO3 CMS, leveraging modern frontend libraries such as jQuery, Bootstrap, and FontAwesome. Hosting is managed via cyon.ch, a reputable Swiss hosting provider. The site demonstrates moderate performance and good mobile optimization, though accessibility features could be enhanced. SEO is basic but functional, with proper meta tags and canonical URLs. From a security perspective, the site uses HTTPS with a good SSL configuration and implements a cookie consent mechanism compliant with GDPR. However, explicit security headers are not detected, and no public security or incident response policies are available. Google Analytics is used with IP anonymization, indicating moderate user tracking. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website is professional, trustworthy, and safe for general audiences. The absence of contact emails and phone numbers on the homepage slightly reduces direct user engagement potential. Strategic improvements in security headers, accessibility, and public security policies would enhance the site's security posture and compliance.
Aktion Agraraktion-agrar.de
Other · Germany
59Medium
NIS2 2 · GDPR 48
NIS2 2 · GDPR 48
Aktion Agrar is a German non-profit organization dedicated to advocating for sustainable, ecological, and socially responsible agriculture. The website serves as a platform to disseminate information, campaign materials, and newsletters to supporters and the general public interested in agricultural reform. The organization targets a general audience including farmers, activists, and environmentally conscious individuals. Technically, the website is built on WordPress, leveraging popular plugins such as Yoast SEO Premium for search engine optimization and Matomo for privacy-focused analytics. The site demonstrates good mobile optimization and a professional design, contributing to a positive user experience. Security-wise, the site uses HTTPS and asynchronous script loading but lacks explicit security headers and detailed security or privacy policies, which are areas for improvement. The WHOIS data is minimal and lacks detailed registrant information, which slightly impacts the trustworthiness assessment but does not negate the legitimacy of the organization based on website content and technical setup.
- DDeutsche Vernetzungsstelle Ländliche Räume
netzwerk-laendlicher-raum.de
Government · Germany
68Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The Deutsche Vernetzungsstelle Ländliche Räume (DVS) is an official German government information portal focused on rural development and the EU's Common Agricultural Policy. It provides comprehensive resources including funding information, news, events, and job listings targeted at stakeholders in agriculture, environment, and regional planning. The platform is affiliated with the Bundesanstalt für Landwirtschaft und Ernährung (BLE), ensuring authoritative content and trustworthiness. Technically, the website is built on TYPO3 CMS, uses Matomo for privacy-conscious analytics, and implements strong privacy and cookie consent mechanisms. The site is well-structured, mobile-optimized, and accessible, reflecting a mature digital presence. Security posture is solid with HTTPS and basic security headers, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.
Verband der Bildungszentren im ländlichen Raum (VBLR)jung-laendlich-vielfaeltig.de
Education · Germany
68Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The website jung-laendlich-vielfaeltig.de represents a non-profit educational project led by the Verband der Bildungszentren im ländlichen Raum (VBLR) focused on youth political education and extremism prevention in rural Germany. The project collaborates with schools and the federal 'Respekt Coaches' program, supported by the German Federal Ministry for Family Affairs. The site provides detailed information about the project, its goals, offerings, and contact persons, targeting young people and educators in rural areas. Technically, the site is built on the RoSys® Truevision CMS with Turbolinks, featuring responsive design and moderate performance. Security posture is adequate with HTTPS usage but lacks visible security headers and explicit cookie consent mechanisms. Contact information is clearly presented, but no social media or analytics scripts are detected, indicating a privacy-conscious approach. WHOIS data aligns well with the business purpose, showing no suspicious patterns. Overall, the site is professional, trustworthy, and content-rich, serving its educational mission effectively.
esistfreitagesistfreitag.store
E-commerce · Germany
75Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
esistfreitag is a small German e-commerce business specializing in urban-themed gifts and lifestyle products such as prints, posters, pins, postcards, greeting cards, city maps, magazines, fashion, and notebooks. The website is built on the Shopify platform, leveraging modern web technologies and integrations with marketing and analytics tools like Facebook Pixel and Mailchimp. The site is well-structured, mobile-optimized, and provides comprehensive privacy and cookie policies compliant with GDPR. Security posture is good with HTTPS enforced and domain registration consistent with business claims, although additional security headers and a formal security policy could enhance trust. Overall, the website presents a professional and trustworthy online retail presence targeting a general audience interested in urban lifestyle products.
Tapehousetapehouse-productions.de
Media · Germany
63Medium
NIS2 17 · GDPR 33
NIS2 17 · GDPR 33
Tapehouse is a small media agency based in Cologne and Bonn, Germany, specializing in social media marketing, image films, and audio recordings. The company targets small and medium-sized enterprises in the local region, offering full-service media solutions. The website is built on the Wix platform, leveraging Wix Thunderbolt framework and integrates Google Analytics and Google Tag Manager for visitor tracking. The technical infrastructure is modern and mobile-optimized, though SEO and accessibility features are basic. Security posture is adequate with HTTPS enabled and some script-based security hardening, but lacks explicit security headers and formal policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve transparency and compliance.
- KKinderkrippe St. Augustin Coburg
krippe-coburg.de
Other · Germany
58Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Kinderkrippe St. Augustin Coburg operates a website primarily serving as an informational portal for a local childcare facility in Coburg, Germany. The site is currently under reconstruction, offering limited content but includes essential features such as a cookie consent banner and links to privacy and imprint pages. The target audience is parents and guardians seeking childcare services. Technically, the website employs legacy JavaScript libraries like jQuery 1.7.2, integrates Matomo analytics for visitor tracking, and uses Google reCaptcha for bot protection. Hosting appears to be managed via internet1.de, with a CMS likely based on Alfresco. Security posture is moderate with HTTPS enforced and cookie consent mechanisms in place; however, the absence of modern security headers and use of outdated libraries present potential risks. Privacy compliance is addressed through a clear cookie banner and privacy policy, though no terms of service or security policy pages are found. Overall, the website is functional but basic, with room for modernization and enhanced security.
KiTa St. Augustin Coburgkindergarten-coburg.de
Education · Germany
63Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
KiTa St. Augustin Coburg is a local childcare provider in Coburg, Germany, offering services including Kinderkrippe, Kindergarten, and Vorschule with a focus on pedagogical care and education in a family-centered environment. The website is professionally designed, targeting families seeking trusted childcare services. Technically, the site uses OpenCms with Apollo theme, integrates Matomo analytics for privacy-conscious tracking, and is hosted on servers indicated by the domain's nameservers. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS and cookie consent implemented, but lacks some security headers and incident response information. Overall, the site is trustworthy and compliant with GDPR, with clear contact details and no suspicious content.
Pfarrei St. Heinrich und Kunigunde Burgkunstadtpfarrei-burgkunstadt.de
Non-profit · Germany
63Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
Pfarrei St. Heinrich und Kunigunde Burgkunstadt is a local parish church serving the community in Burgkunstadt, Germany. The website provides comprehensive information about religious services, sacraments, community news, and events, targeting local parishioners and visitors. It is part of the Erzbistum Bamberg diocese network and collaborates with nearby parishes. The site is well-structured, accessible, and includes GDPR-compliant privacy and cookie policies. Contact information is clearly presented, supporting community engagement. Technically, the website is built on the Alkacon Mercury CMS platform, using modern web technologies including JavaScript, Bootstrap, and Matomo analytics for privacy-conscious tracking. The site is mobile-optimized and includes accessibility features such as the eyeAble plugin. Hosting is provided by internet1.de, with DNS configured accordingly. Performance is moderate, with good SEO and accessibility practices. From a security perspective, the site uses HTTPS (assumed from canonical URLs and external scripts), employs cookie consent mechanisms, and avoids exposing sensitive data. However, explicit security headers are not visible in the provided data, and no incident response or security policy pages are found. The site does not show signs of vulnerabilities or malicious content. The WHOIS data indicates a consistent and legitimate domain registration appropriate for a local parish. Overall, the website demonstrates a solid digital presence for a small non-profit religious organization, balancing user experience, privacy, and accessibility. Strategic improvements could include enhancing security headers, publishing a security policy, and formalizing incident response contacts to strengthen trust and compliance.
DPSG Bad Staffelstein Stamm Andechs-Rothenaudpsg-badstaffelstein.de
Non-profit · Germany
55Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
DPSG Bad Staffelstein is a local non-profit scouting organization in Germany, providing youth scouting activities and community engagement. The website serves as an information hub for members and the local community, featuring news, event calendars, and details about scouting stages and campsites. The site is built on WordPress with a modern tech stack including Bootstrap and jQuery, and it demonstrates good digital maturity with mobile optimization and cookie consent compliance. Security posture is solid with HTTPS and cookie management, though some security headers and incident response details are absent. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.
- CCaritasverband für den Landkreis Lichtenfels e.V.
caritas-lichtenfels.de
Non-profit · Germany
54Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Caritasverband für den Landkreis Lichtenfels e.V. is a regional non-profit organization providing a wide range of social services including child and youth welfare, family support, senior care, and integration assistance. The website reflects a well-structured and professionally maintained digital presence, targeting local communities in Germany. The organization leverages modern web technologies such as Bootstrap, jQuery, and Matomo analytics, ensuring a balance between functionality and privacy compliance. Security measures include HTTPS, cookie consent management, and use of Google reCAPTCHA to protect forms. However, there is room for improvement in implementing security headers and explicit incident response policies. Overall, the website is trustworthy, accessible, and compliant with GDPR requirements, supporting the organization's mission effectively.
Regens Wagner Burgkunstadtregens-wagner-burgkunstadt.de
Non-profit · Germany
59Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Regens Wagner Burgkunstadt is a medium-sized non-profit organization based in Germany that provides comprehensive social services for people with disabilities. Their offerings include housing, education, employment, open help, leisure activities, day care, accompanying services, care, and pastoral care. The website reflects a well-structured and professionally maintained digital presence, leveraging auctores CMS and common web technologies such as jQuery and Bootstrap. The site is mobile-optimized and accessible, with clear navigation and relevant content for its target audience. From a security perspective, the website employs HTTPS with good SSL configuration and includes CSRF tokens in forms, indicating attention to basic security practices. However, it lacks several important security headers and does not provide explicit incident response or vulnerability disclosure information. Privacy compliance is supported by a comprehensive GDPR-aligned privacy policy, though no explicit cookie consent mechanism is observed. Contact information is clearly presented, including phone numbers and a company email address, enhancing business credibility. Overall, the website is trustworthy and safe, with no adult or explicit content detected. The domain registration data aligns well with the website's content and business purpose, supporting legitimacy. Strategic improvements in security headers, incident response transparency, and cookie consent would further enhance the site's security posture and compliance. The organization maintains active social media channels on Facebook, YouTube, and Instagram, supporting community engagement and outreach.
Basilika Vierzehnheiligenvierzehnheiligen.de
Government · Germany
65Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Basilika Vierzehnheiligen is a religious and cultural institution located in Bad Staffelstein, Germany. The website serves as an official portal providing comprehensive information about church services, events, visitor information, and historical context. It targets pilgrims, local community members, and visitors interested in the basilica and its activities. The business model is non-profit, focusing on cultural and religious service provision. The site maintains a strong regional presence as a religious landmark with a consistent and professional brand image. Technically, the website is built on the Alkacon Mercury CMS platform, utilizing JavaScript, Matomo analytics for privacy-conscious tracking, and OpenStreetMap for location services. The site is mobile-optimized, accessible, and moderately performant. It integrates accessibility features and provides a cookie consent mechanism compliant with GDPR. From a security perspective, the site enforces HTTPS and employs cookie consent for external content. However, it lacks explicit security policy documentation and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is minimal but consistent with the website's legitimacy. Overall, the site demonstrates a good security posture with room for improvement in transparency and security policy publication. The overall risk assessment is low, with recommendations to enhance security documentation, implement security headers, and publish incident response information to strengthen trust and compliance.
- KKatholisches Pfarramt Schwürbitz
steinach-rodach-main.de
Government · Germany
57Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The website steinach-rodach-main.de serves as the official online presence of the Catholic parish Schwürbitz, located in the Lichtenfels-Obermain pastoral area in Germany. It provides parishioners and visitors with comprehensive information about church services, community events, staff, and sacraments. The site targets local community members and those interested in parish activities, operating as a non-profit religious community service platform. The content is well-organized, professionally presented, and primarily in German, reflecting its local audience focus. Technically, the website employs a modern technology stack including Bootstrap for responsive design, jQuery, Font Awesome, and specialized plugins like FancyBox and Revolution Slider for enhanced user experience. It uses FlexiWeb CMS inferred from AJAX glossary features and is hosted on servers associated with internet1.de. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance characteristics. From a security perspective, the site enforces HTTPS, uses Google reCAPTCHA for bot protection, and implements a cookie consent mechanism compliant with GDPR. Matomo analytics is used with anonymous tracking fallback to respect user privacy. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and could be improved. No vulnerabilities or exposed sensitive data were found in the analyzed content. Overall, the website demonstrates a solid security posture and good privacy compliance, with clear contact information and trust indicators such as official email addresses and imprint pages. The domain registration details align with the website content, indicating legitimacy and trustworthiness. Strategic recommendations include enhancing security headers, ensuring CSRF protection on forms, and publishing a dedicated security policy to further strengthen trust and compliance.
- KKath. Pfarramt St. Kilian
stkilian-badstaffelstein.de
Government · Germany
58Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The website for Kath. Pfarramt St. Kilian serves as the official online presence of the Catholic parish in Bad Staffelstein, Germany. It provides parishioners and visitors with comprehensive information about church services, sacraments, community groups, staff, events, and contact details. The site is positioned as a local religious community portal under the Archdiocese of Bamberg, targeting local residents and church members. The business model is non-profit, focusing on community engagement and religious service information. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Font Awesome, and specialized plugins like Revolution Slider and JWPlayer. It uses Matomo analytics with privacy-conscious configurations and Google reCAPTCHA for bot protection. The site is mobile optimized and uses a CMS likely based on FlexiWeb, with hosting provided by internet1.de. Performance is moderate with good SEO and basic accessibility features. From a security perspective, the site enforces HTTPS and implements a GDPR-compliant cookie consent mechanism. While some security headers are not explicitly detected, the site follows best practices such as anonymized analytics fallback and bot protection. No vulnerabilities or exposed sensitive data were found. However, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It effectively serves its community purpose with clear contact information and consistent branding. Strategic recommendations include enhancing security headers, publishing security policies, and adding a vulnerability disclosure channel to strengthen security posture and trust.
- Churchpool GmbH
churchpool.com
Other · Germany
65Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Churchpool GmbH operates a digital platform focused on religious communities, offering a mobile app that connects local and global faith groups. The website presents a well-structured, multilingual interface emphasizing community engagement features such as news, groups, chat, and event management. The business targets church members and religious organizations primarily in Germany, positioning itself as a niche community app provider. Technically, the site uses standard web technologies including Bootstrap and jQuery, with moderate performance and good mobile optimization. However, there is no evidence of advanced CMS or hosting details. Security posture is limited by lack of visible HTTPS enforcement and missing security headers, which should be addressed to improve trust and compliance. Privacy and cookie policies are present, indicating awareness of GDPR requirements, but no explicit incident response or security policy pages are found. WHOIS data is unavailable, reducing domain trustworthiness, though the website content and footer copyright suggest a legitimate small business entity. Overall, the site is functional and professional but would benefit from enhanced security measures and transparency.
- Vernetzte Kirche
evangelische-termine.de
Non-profit · Germany
54Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Evangelische Termine is a specialized event calendar platform serving the Evangelical Lutheran Church community in Bavaria, Germany. It offers a searchable calendar of church-related events, location-based event discovery, and user login functionality for event submissions. The platform is supported by the Vernetzte Kirche organization and promotes mobile applications for iPhone and Android to enhance accessibility. The website content is well-structured, professionally designed, and consistent with its non-profit religious mission. Technically, the site uses a modern tech stack including Bootstrap 5, jQuery, and FontAwesome, hosted on a provider associated with the domain's nameservers. The site is mobile optimized and provides basic accessibility features. However, there is room for improvement in SEO and security headers implementation. The login form uses secure POST methods, but no advanced security policies or vulnerability disclosures are present. From a security perspective, the site shows a moderate security posture with no visible critical vulnerabilities or exposed sensitive data. The absence of security headers and cookie consent mechanisms are notable gaps. Privacy compliance is partially met with a privacy policy page but lacks cookie consent and detailed GDPR indicators. The domain WHOIS data aligns well with the website's purpose and shows no suspicious patterns, supporting a high legitimacy score. Overall, Evangelische Termine is a trustworthy, well-maintained platform with a clear community focus. Strategic improvements in security headers, privacy compliance, and transparency around incident response would enhance its security posture and user trust.
- KKatholisches Dekanat Bayreuth
dekanat-bayreuth.de
Government · Germany
57Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The website represents the Catholic Deanery of Bayreuth, a regional religious institution providing comprehensive information about church services, community institutions, counseling centers, and news relevant to the local Catholic community. It serves as an official communication platform under the Archdiocese of Bamberg, targeting residents and parishioners in Bayreuth and surrounding areas. The site is well-structured with clear navigation and a professional design consistent with its religious and community-oriented mission. Technically, the website employs a modern technology stack including Bootstrap, jQuery, and Matomo analytics, hosted on a German provider with secure HTTPS connections. Privacy compliance is well addressed through a detailed cookie consent mechanism and a comprehensive privacy policy in German, aligned with GDPR requirements. Security posture is good with HTTPS and bot protection via Google reCAPTCHA, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected, and the site maintains high trustworthiness through official contact information and partner links.
Schlosskirchenmusik Bayreuthschlosskirchenmusik-bayreuth.de
Non-profit · Germany
66Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Schlosskirchenmusik Bayreuth is a small non-profit organization dedicated to church music at the Schlosskirche in Bayreuth, Germany. It organizes liturgical music, concerts, and provides training for part-time church musicians. The website reflects a well-structured community-focused entity with clear contact information and event listings. Technically, the site uses the Alkacon Mercury CMS, integrates Matomo for privacy-conscious analytics, and includes accessibility features via the EyeAble plugin. The site is hosted on German infrastructure with HTTPS enforced, ensuring secure communications. Security posture is good but could be enhanced with additional HTTP security headers and formal security policies. Privacy compliance is strong with a clear cookie consent mechanism and a comprehensive privacy policy. Overall, the site presents a trustworthy and professional image suitable for its community and non-profit mission.
Fachstelle für katholische Kinder- und Jugendarbeit im Dekanat Bayreuth / BDKJ-Regionalverband Bayreuthjugend-im-dekanat-bayreuth.de
Non-profit · Germany
63Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
The website represents the Fachstelle für katholische Kinder- und Jugendarbeit im Dekanat Bayreuth and the BDKJ-Regionalverband Bayreuth, focusing on youth pastoral work and church-related youth services in the Bayreuth region of Germany. It provides comprehensive information on events, youth programs, prevention of sexual violence, and support for volunteers. The site is affiliated with the Erzbistum Bamberg, indicating a strong institutional backing. Technically, the site is built on the Alkacon Mercury CMS platform, uses Matomo for analytics, and integrates accessibility tools such as Eye-Able, demonstrating a commitment to inclusivity and privacy. The website is well-structured, mobile-optimized, and GDPR compliant with clear cookie consent mechanisms. Security posture is good with HTTPS enforced, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site is trustworthy, professional, and serves its non-profit mission effectively.
- PPfarrei St. Franziskus Eckersdorf
st-franziskus-eckersdorf.de
Non-profit · Germany
57Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Pfarrei St. Franziskus Eckersdorf is a small non-profit Catholic parish serving the local community in Eckersdorf, Germany. The website provides parishioners and visitors with information about church services, events, contact details, and parish groups. It is positioned as a local religious community hub with a focus on spiritual and community services. The site is well-branded, consistent, and offers good content quality tailored to its audience. Technically, the website uses a modern tech stack including Bootstrap, jQuery, and Matomo analytics, hosted on internet1.de with proper HTTPS configuration. The site is mobile optimized and provides basic accessibility features. Security posture is good with HTTPS, cookie consent, and reCAPTCHA integration, though some security headers could be improved. Privacy compliance is strong with a clear cookie banner and privacy policy in German, aligned with GDPR requirements. Contact information is clearly presented with verified email and phone details. Overall, the website is trustworthy, professional, and suitable for its non-profit religious purpose.
- PPfarrei St. Hedwig Bayreuth
st-hedwig-bayreuth.de
Non-profit · Germany
58Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The website st-hedwig-bayreuth.de represents the Catholic parish St. Hedwig Bayreuth, providing detailed information about religious services, community events, and pastoral activities. It serves a local audience in Bayreuth, Germany, focusing on parishioners and community members. The site is part of the Diocese of Bamberg's digital presence and offers resources such as event calendars, sacraments information, and kindergarten services. Technically, the website uses a modern tech stack including Bootstrap, jQuery, and JW Player, hosted on servers associated with internet1.de. The site is mobile-optimized and includes accessibility features, though these could be enhanced further. Security-wise, HTTPS is enforced, and cookie consent mechanisms comply with GDPR, though some security headers could be improved. No critical vulnerabilities or suspicious patterns were detected. Overall, the site is professional, trustworthy, and well-aligned with its non-profit religious mission.
- KKatholisches Pfarramt St. Johannes Nepomuk / Heilig Geist
nepomuk-bayreuth.de
Government · Germany
58Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The website nepomuk-bayreuth.de serves as the official online presence for the Catholic parish offices of St. Johannes Nepomuk and Heilig Geist in Bayreuth, Germany. It provides parishioners and local community members with information about church services, events, staff, and contact details. The site is positioned as a local religious institution focused on community engagement and spiritual services. The business model is non-profit, serving the religious and social needs of its audience. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, Font Awesome, and specialized plugins such as Revolution Slider and JWPlayer. It uses a CMS likely based on FlexiWeb and is hosted on infrastructure associated with kirche-bamberg.de. The site is mobile-optimized and includes accessibility features, though these could be enhanced. Performance is moderate, with room for improvement in SEO and accessibility. From a security perspective, the site enforces HTTPS and uses a cookie consent banner with granular user controls. It integrates Google reCAPTCHA for bot protection and Matomo analytics with options for anonymous tracking, demonstrating a commitment to privacy compliance. However, it lacks advanced security headers like Content-Security-Policy and does not publish a security.txt or vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professional, with clear contact information and links to official Catholic organizations. It contains no adult or questionable content and is suitable for a general audience. Recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving SEO and accessibility to further strengthen its digital maturity and security posture.
For Future Bündnisfor-future-buendnis.de
Non-profit · Germany
65Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
For Future Bündnis is a German non-profit organization focused on climate protection activism, operating a network of over 50 local groups across Germany. The website serves as a hub for networking, event organization, and knowledge sharing, targeting individuals interested in climate activism. The organization holds a reputable position in the non-profit sector, evidenced by certifications such as the Phineo Wirkt-Siegel and support from the German Environment Agency (UBA). The business model centers on community engagement and empowerment rather than commercial activities. Technically, the website is built on WordPress using the Divi theme, enhanced with plugins for event management, cookie consent, and analytics. The infrastructure is modern and well-maintained, with good mobile optimization and SEO practices. Hosting is managed via UI-DNS, and the site employs HTTPS with strong SSL configuration, ensuring secure communications. Security posture is solid, with appropriate security headers, privacy-respecting analytics via Matomo, and a comprehensive cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a dedicated security policy or incident response contact, which could be improved to enhance trust and compliance. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It effectively supports the organization's mission while maintaining a secure and user-friendly online presence. Strategic recommendations include publishing explicit security policies, enhancing accessibility, and considering a vulnerability disclosure policy to further strengthen security culture.
InnoCoding GmbHinnocoding.com
Technology · Germany
64Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
InnoCoding GmbH is a specialized digitalization and funding consultancy company based in Münster, Germany, focusing on medium-sized enterprises. Their services encompass web and app development, funding application support, and data science solutions. The company positions itself as a full-service provider with a strong emphasis on quality, transparency, and customer proximity. The website reflects a professional and modern digital presence, leveraging TYPO3 CMS and integrating advanced analytics and marketing tools such as Google Analytics, Matomo, and Microsoft Clarity. Security practices include HTTPS enforcement and cookie consent mechanisms, although some security headers could be improved. The absence of WHOIS registration data is a notable concern for domain legitimacy verification but does not detract from the professional appearance and trust signals on the website. Overall, InnoCoding GmbH presents a credible and trustworthy business with a solid technical infrastructure and compliance posture.
SALESDOCk s.r.o.salesdock.com
Technology · Czech Republic
73Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
SALESDOCk s.r.o. is a professional B2B sales consulting company specializing in building and optimizing sales departments for tech startups, scaleups, and large tech companies. Their market position is strong, supported by over 400 clients and positive testimonials, with key services including sales academies focused on prospecting, go-to-market strategies, sales processes, and value-based selling. The company operates primarily in the technology sector and is based in the Czech Republic. Technically, the website is built on Webflow CMS and integrates modern marketing and analytics tools such as Google Tag Manager, Microsoft Clarity, Pardot, and ZoomInfo pixels, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced, cookie consent mechanisms, and use of reCAPTCHA, though explicit security headers and policies could be improved. The WHOIS data is unavailable, which slightly reduces trust but the professional content and business registration details support legitimacy. Overall, the website is well-designed, user-friendly, and compliant with privacy regulations, making it a credible and trustworthy online presence for the company.
Digitální architektidigitalniarchitekti.cz
Technology · Czech Republic
65Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Digitální architekti is a Czech Republic based small technology company specializing in professional data and web analytics services. Their website presents a professional image with consistent branding and clear messaging targeting businesses seeking to leverage data insights. The technical infrastructure is built on WordPress CMS with modern plugins and integrations such as Google Tag Manager and Cloudflare DNS, indicating a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and published policies. Overall, the website is well designed, mobile optimized, and SEO friendly, supporting a positive user experience and trustworthiness.
Institut Duhovkaduhovkainstitut.cz
Education · Czech Republic
63Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Institut Duhovka operates the Duhovka Montessori Teacher Training Institute, providing internationally recognized AMS Montessori diploma programs and online courses focused on Early Childhood and Elementary education. The institute is positioned as a reputable educational provider with accreditations from AMS and MACTE, targeting educators, directors, and parents seeking Montessori certification. The website demonstrates a professional and consistent brand presence with comprehensive content and clear navigation. Technically, the site uses modern tracking and analytics tools such as Google Tag Manager and Facebook Pixel, with cookie consent mechanisms ensuring GDPR compliance. Security posture is generally strong with HTTPS enforced, though the absence of explicit security headers suggests room for improvement. The lack of WHOIS registrant data is a notable concern for domain legitimacy verification, but the overall trust signals from accreditations, testimonials, and contact transparency mitigate this risk. Strategic recommendations include enhancing security headers, publishing explicit security policies, and verifying domain registration details to strengthen trust and compliance.
Duhovka Group, a.s.duhovka-prace.cz
Education · Czech Republic
55Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Duhovka Group, a.s. operates a bilingual Czech-English Montessori educational system in Prague, offering services from preschool through gymnasium and teacher training. The website focuses on career opportunities within the group and presents a professional, well-structured digital presence. The organization is medium-sized with over 500 children enrolled and multiple subsidiary institutions. Technically, the site uses modern web technologies including jQuery, Google Tag Manager, and a comprehensive cookie consent mechanism, indicating a mature digital infrastructure. Security posture is moderate with good privacy compliance but lacks explicit security policies or incident response contacts. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the website content and business information are consistent and professional. Overall, the site is safe, well-optimized, and trustworthy for its target audience.
Mateřská škola Duhovka s.r.o.duhovkaskolka.cz
Education · Czech Republic
55Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Mateřská škola Duhovka s.r.o. operates a private Czech-English Montessori preschool and nursery in Prague, serving children aged 2 to 6 years. The institution emphasizes Montessori pedagogy with accredited teachers and bilingual education, positioning itself as a reputable provider in the early childhood education sector in Prague. The website reflects a professional and consistent brand image with comprehensive information about programs, staff, and educational philosophy. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, and Facebook Pixel, with a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response contacts could be improved. The absence of WHOIS data reduces domain trustworthiness but the overall business credibility remains high due to transparent contact details and positive user testimonials. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and adding terms of service for completeness.
DUHOVKA GROUP, a.s.duhovkagroup.cz
Education · Czech Republic
55Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Duhovka Group is a well-established Czech private educational organization founded in 2008, offering a comprehensive bilingual Montessori education system in Prague. Their services span from nurseries and kindergartens to elementary schools, an eight-year gymnasium, and a Montessori institute for teacher training. The website reflects a professional and consistent brand image with clear communication of their educational philosophy and offerings. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, and cookie consent mechanisms, ensuring a good user experience and compliance with GDPR regulations. Security posture is moderate with HTTPS usage and cookie consent but lacks explicit security headers and detailed security policies. The absence of WHOIS data reduces domain transparency and trustworthiness, though the business presence and content quality mitigate this concern. Overall, the site is well-positioned in the education sector with strong digital maturity but could improve security and domain registration transparency.
Media · Germany
73Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Deutscher Landwirtschaftsverlag GmbH operates a comprehensive media platform focused on agriculture and forestry sectors in Germany. The website serves as a hub for their media brands, subscription services, events, and digital content. It targets professionals and enthusiasts in the agricultural and forestry industries, offering a broad portfolio of magazines, special issues, and digital media. Technically, the site is built on Drupal 10 with modern frontend technologies like Tailwind CSS and Swiper.js, ensuring good mobile optimization and user experience. Security posture is solid with HTTPS, cookie consent mechanisms, and no visible vulnerabilities, though explicit security headers could be improved. Privacy compliance is strong with clear GDPR-aligned policies and consent management. Overall, the site reflects a professional, trustworthy media company with a strong digital presence and good business credibility.
Other · Czech Republic
61Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website bydleni.com is a minimal placeholder page that directs users to bydleni.cz, likely related to housing or real estate services in the Czech Republic. The domain is well-established, created in 2002, and registered with a reputable registrar. However, the website itself lacks substantive content, metadata, or any business or contact information, indicating it is not a fully developed site but rather a redirect or landing page. From a technical perspective, the site shows no evidence of modern web technologies, frameworks, or CMS usage. There are no scripts, forms, or tracking mechanisms detected. The hosting provider is linked to the registrar, but no advanced security configurations such as DNSSEC or security headers are present. The site’s performance and mobile optimization cannot be fully assessed due to minimal content but are likely poor. Security posture is weak due to the absence of HTTPS confirmation in the provided data, lack of security headers, and no visible privacy or cookie policies. The domain registration is legitimate and consistent with the website’s minimal claims, but the lack of security best practices and compliance documentation is a concern. No vulnerabilities or malicious indicators were found, but the site’s minimalism limits comprehensive security evaluation. Overall, the website presents a low-risk profile due to its minimal content and lack of data collection but scores low on content quality, technical implementation, and privacy compliance. Strategic recommendations include enhancing website content, implementing HTTPS and security headers, publishing privacy and cookie policies, and providing clear contact and business information to improve trust and compliance.
Space X-Chimpmycyberuniverse.com
Technology
71Medium
NIS2 47 · GDPR 53
NIS2 47 · GDPR 53
My Cyber Universe is a specialized technology blog founded in 2013 by Arthur Gareginyan, focusing on web development, cybersecurity, and software engineering topics. The site serves a niche audience of developers and tech enthusiasts, providing educational content, tutorials, and insights. It is supported by the Space X-Chimp team, which also manages related digital properties and an online store. The website demonstrates a consistent brand identity and maintains active content updates, reflecting a stable presence in its niche. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, and integrates third-party services such as Google Analytics, Google Adsense, and Disqus for comments. The site is well-structured with responsive design elements, good SEO practices, and moderate performance. However, it lacks some advanced security headers and a cookie consent mechanism, which are important for compliance and user trust. From a security perspective, the site uses HTTPS with a strong SSL configuration, and no obvious vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a notable anomaly that reduces overall trustworthiness, although the website content and business information appear legitimate. Privacy policies and terms of use are present and comprehensive, but cookie policy and incident response information are missing. Overall, the website presents a low-risk profile with good content quality and technical implementation but would benefit from improved privacy compliance and enhanced security headers. The lack of WHOIS transparency is a concern that should be addressed to improve trust and legitimacy perception.
Erzdiözese München und Freisingfachstelle-md.online
Education · Germany
66Medium
NIS2 7 · GDPR 68
NIS2 7 · GDPR 68
5.MD – Medien und Digitalität is a specialized office under the Archdiocese of Munich and Freising, focusing on media, digital transformation, and religious education. The website serves educators and religious professionals by providing media resources, educational publications, events, and digital tools. The organization operates as a non-profit entity within the religious and educational sectors in Germany. Technically, the website is built on Webflow CMS and employs modern JavaScript libraries for enhanced user experience, including Swiper and Splide for sliders, and Cookiebot for GDPR-compliant cookie management. Security is robust with HTTPS, security headers, and no visible vulnerabilities. Privacy policies and terms of service are clearly presented, reflecting good compliance with GDPR. The site links to reputable partners and maintains consistent branding and professional content quality.
PONATURE s.r.o.shopkilpi.cz
Retail · Czech Republic
64Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Kilpi.cz is the official e-commerce website of the Kilpi brand, specializing in outdoor and sports apparel. The company operates both online and through physical stores in the Czech Republic, offering a wide range of products including jackets, pants, footwear, and accessories. The website targets outdoor enthusiasts and general consumers seeking quality sportswear. The business model is direct-to-consumer retail with a focus on customer loyalty and fast delivery. The brand is well-established with consistent branding and trust signals such as customer testimonials and physical store presence. Technically, the website employs a modern tech stack including JavaScript frameworks, Google Tag Manager, Microsoft Clarity, and other marketing and analytics tools. It uses AWS Cloudfront CDN for hosting and demonstrates good mobile optimization and SEO practices. The site is moderately performant with basic accessibility features. From a security perspective, the site enforces HTTPS and uses several third-party scripts for analytics and marketing. While some security headers are not explicitly detected, no critical vulnerabilities or exposed sensitive data were found. Privacy and cookie policies are present with consent mechanisms, indicating basic GDPR compliance. However, no explicit security or incident response policies were found. Overall, the website presents a low-risk profile with a legitimate business presence. The lack of WHOIS data is likely due to privacy protection, which is justified for this business type. Recommendations include enhancing security headers and publishing explicit security policies to improve trust and compliance.
- Chambre de commerce franco-tchèque
ccft-fcok.cz
Other · Czech Republic
60Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The Chambre de commerce franco-tchèque is a professional bilateral chamber of commerce facilitating French-Czech business relations. It offers a comprehensive range of services including business development, market studies, recruitment, event organization, and membership benefits. The website is well-positioned as a trusted intermediary for companies seeking to expand or operate in the Czech Republic and France, serving a medium-sized business community with over 300 members. Technically, the site is built on TYPO3 CMS, employs modern analytics and consent management tools, and is hosted on a reliable infrastructure with HTTPS enforced. Security posture is solid with standard best practices, though some security headers could be improved and explicit security policies are absent. Privacy compliance is strong with clear cookie consent and GDPR-aligned privacy policies. The absence of WHOIS data is typical for CZ domains but slightly reduces trust; however, the professional presentation and external partner links support legitimacy. Overall, the site is a high-quality, secure, and privacy-conscious platform serving its business audience effectively.
Abillioabill.io
Technology · Latvia
65Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Abillio is a Latvian-based technology company founded in 2020, offering a SaaS platform tailored for freelancers to manage invoicing, accounting, payments, and compliance reporting such as DAC7. The platform integrates API capabilities and targets online platforms and freelancers seeking streamlined financial operations. The website demonstrates a good level of digital maturity, leveraging WordPress CMS with modern marketing and analytics tools including Google Analytics, Hotjar, Intercom, and Facebook Pixel. The presence of a cookie consent mechanism indicates awareness of privacy regulations, although no explicit privacy policy or terms of service were detected in the provided content. Security posture is solid with HTTPS enforcement and domain transfer protection, but could be enhanced by enabling DNSSEC and publishing explicit security policies. Overall, the site is professional and trustworthy, with consistent branding and clear business focus.
AIESEC Česká republikaaiesec.cz
Non-profit · Czech Republic
60Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
AIESEC Česká republika is a well-established non-profit youth organization focused on leadership development through international internships and volunteer programs. The website reflects a mature digital presence with a WordPress CMS, modern tracking and marketing tools, and a clear focus on youth engagement. The organization maintains strong partnerships with reputable companies and has a consistent brand identity. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data is due to privacy protection and does not detract from the organization's legitimacy. Overall, the site is professional, trustworthy, and serves its target audience effectively.
- futurum Diakonie Württemberg
futurum-diakonie.de
Non-profit · Germany
67Medium
NIS2 17 · GDPR 55
NIS2 17 · GDPR 55
futurum Diakonie Württemberg operates as a creative future center within the Diakonie Württemberg network, focusing on social innovation, education, and networking. The organization offers workshops, training, and space rental services aimed at inspiring and enabling its members and partners to actively shape future challenges. The website reflects a medium-sized non-profit entity with consistent branding and a clear mission aligned with social welfare and innovation. Technically, the site is built on the Squarespace platform, leveraging modern web technologies and providing a good user experience with mobile optimization and moderate performance. Security posture is strong with HTTPS enforced, HSTS enabled, and use of Google reCAPTCHA to protect forms. However, the absence of explicit privacy policies, terms of service, and incident response information represents compliance gaps. Overall, the website is professional and trustworthy but would benefit from enhanced transparency and formal security documentation.
- Stadt Kronach
kronach.de
Government · Germany
68Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Stadt Kronach operates an official municipal website serving as a comprehensive portal for residents, tourists, and stakeholders interested in the city of Kronach, Germany. The website provides detailed information on tourism, culture, city services, politics, and community events, positioning itself as a trusted source for local information and engagement. The business model is focused on public service and community outreach, with a medium-sized municipal scope. Technically, the site employs a modern technology stack including jQuery, Bootstrap 4, and accessibility tools like Eye-Able, ensuring good performance, mobile optimization, and accessibility compliance. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though formal security policies and incident response contacts are not published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.
Bundeskanzleramt (Federal Chancellery of Germany)bundeskanzler.de
Government · Germany
70Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
The website represents the official online presence of the Federal Chancellor of the Federal Republic of Germany, currently Friedrich Merz. It serves as a government information portal providing details about the Chancellor, his appointments, and the functions of the Federal Chancellery. The site targets the general public, citizens of Germany, and international visitors interested in German government affairs. The business model is purely informational and public service oriented, with a strong emphasis on trust and official representation. Technically, the website is built on the CoreMedia CMS platform and uses modern web technologies including SVG icons and JavaScript. It is optimized for mobile devices and demonstrates good accessibility and SEO practices. The site employs Piwik (Matomo) analytics with privacy-conscious configurations such as disabling cookies and honoring Do Not Track signals. From a security perspective, the site uses HTTPS with good SSL configuration and implements some privacy best practices. However, it lacks explicit security headers, a security.txt file, and clear incident response contact information. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is professional, trustworthy, and secure for its purpose, but could improve privacy compliance and security transparency by publishing privacy and cookie policies, security disclosures, and contact details for incident response.
Diakonie Deutschlanddiakonie.de
Non-profit · Germany
69Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Diakonie Deutschland is a leading non-profit organization in Germany focused on social welfare, care, and support services for vulnerable populations. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. The organization leverages TYPO3 CMS, integrates privacy-conscious analytics tools, and employs a consent management platform to comply with GDPR requirements. Security posture is solid with HTTPS and privacy proxies, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for accessibility and mobile use.
- Kunstmuseum Bayreuth
kunstmuseum-bayreuth.de
Other · Germany
51Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Kunstmuseum Bayreuth is a regional art museum in Bayreuth, Germany, focusing on exhibitions of artworks primarily from the mid-20th century. The institution serves a general audience including art enthusiasts and tourists, offering exhibitions, cultural events, a museum shop, and a newsletter. The website is built on TYPO3 CMS and integrates modern technologies such as Usercentrics for cookie consent and ReadSpeaker for accessibility. The site is well-structured, mobile-optimized, and provides clear navigation and professional content presentation. Security posture is solid with HTTPS enforced and email obfuscation implemented, though some security headers are missing and no explicit security policy is published. Privacy compliance is strong with GDPR-aligned cookie consent mechanisms and a comprehensive privacy policy. Overall, the website reflects a trustworthy and professional cultural institution with moderate technical maturity and good user experience.