Security Directory

U

Umělá inteligence do škol

aidoskol.cz

38

The website 'Umělá inteligence do škol' is a Czech educational portal launched in 2023, dedicated to providing resources, training, workshops, and materials related to artificial intelligence for primary and secondary schools. It serves as a guide and aggregator for educators and students interested in AI education. The site is supported by several partner organizations, including prg.ai, digikoalice.cz, and aidetem.cz, indicating a collaborative ecosystem focused on AI literacy in education. Technically, the site is built on WordPress with modern plugins such as Elementor and Yoast SEO, hosted on a Czech hosting provider, and uses HTTPS with Google Analytics for tracking. Security posture is moderate with room for improvement in security headers and explicit policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is professional, content-rich, and trustworthy but should enhance compliance and security transparency.

V

Verband Forschender Arzneimittelhersteller e.V.

vfa.de

60

The Verband Forschender Arzneimittelhersteller e.V. (vfa) is a prominent German pharmaceutical industry association representing leading research-based pharmaceutical companies. The website serves as a comprehensive platform providing information on pharmaceutical research, health policy, economic topics, and member services. It targets pharma companies, healthcare professionals, patients, and policymakers, positioning itself as a key industry voice in Germany. The site features professional design, clear navigation, and extensive content relevant to its audience. Technically, the site employs modern web technologies including Bootstrap, jQuery, and Google Tag Manager, with good mobile optimization and accessibility. Security posture is strong with HTTPS enforced, secure login forms, and cookie consent management, though explicit security headers and policies could be enhanced. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained, supporting the vfa's role as a leading industry association.

I

IdeenExpo GmbH

ideenexpo.de

62

IdeenExpo GmbH operates Europe's largest youth event focused on technology and natural sciences, attracting hundreds of thousands of young talents biennially. The company organizes interactive exhibitions, workshops, and stage shows to inspire youth and connect them with future career opportunities in STEM fields. Their market position is strong within the education sector in Germany, supported by a professional and consistent brand presence across multiple digital channels. Technically, the website is built on Drupal 9 with modern front-end frameworks and integrates analytics tools like Matomo and Facebook Pixel, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement, cookie consent mechanisms, and antibot protections, though some security headers could be improved. Overall, the site is well-optimized for performance, accessibility, and SEO, providing a high-quality user experience. Privacy compliance is robust with clear policies and consent management, though explicit terms of service and incident response details are lacking. The domain registration data aligns well with the website content, indicating legitimacy and trustworthiness.

F

Fröling Heizkessel- und Behälterbau Ges.m.b.H.

froeling.com

55

Fröling Heizkessel- und Behälterbau Ges.m.b.H. is a well-established Austrian manufacturer specializing in biomass and wood heating systems. With over 60 years of experience, the company offers a comprehensive product range including pellet, wood log, chip, and combination boilers, serving residential, commercial, agricultural, and industrial sectors. The company is recognized for innovation and quality, evidenced by multiple awards such as the PlusXAward for Best Brand 2025. Their market position is strong in Austria and Europe, supported by a broad partner network and customer base. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies such as jQuery, Bootstrap, and lazy loading for images. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers are not explicitly detected. No critical vulnerabilities or exposed sensitive data were found. The WHOIS data is incomplete or unavailable, which raises some concerns about domain registration transparency. However, the website content, branding, and contact information strongly support the legitimacy of the business. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent aligned with GDPR requirements. Overall, the website and business present a professional and trustworthy front with minor areas for improvement in security header implementation and WHOIS transparency. Strategic recommendations include enhancing security headers, publishing an explicit security policy, and ensuring WHOIS data accuracy to strengthen trust further.

M

Messer Tehnogas AD

messer.rs

71

Messer Tehnogas AD is a well-established industrial and medical gas supplier in Serbia, operating as part of the global Messer Group. The company offers a wide range of gases and related equipment and services, targeting industrial and healthcare sectors. The website reflects a mature digital presence with a professional design, clear navigation, and relevant content tailored to its audience. Technically, the site is built on the Liferay CMS platform, leveraging modern JavaScript libraries and analytics tools such as HubSpot and Piwik PRO, indicating a moderate to advanced digital infrastructure. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and published security policies could enhance trust. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

M

Messer Schweiz AG

messer.ch

73

Messer Schweiz AG operates as a leading supplier of industrial, medical, and specialty gases in Switzerland, supported by a global parent company Messer SE & Co. KGaA. The website reflects a mature digital presence with comprehensive product and service information targeting industrial and healthcare sectors. The company leverages modern CMS technology (Liferay) and integrates marketing and analytics tools such as HubSpot to enhance user engagement and data-driven marketing. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates professionalism, compliance with privacy regulations, and a trustworthy business identity.

M

Messer Iberica de Gases S.A

messer.es

63

Messer Iberica de Gases S.A is a leading manufacturer and supplier of industrial, medicinal, food-grade, and specialty gases in Spain and globally. The company offers tailored solutions across multiple industries including healthcare, manufacturing, and energy. Their website reflects a mature digital presence built on the Liferay CMS platform, integrating modern web technologies and marketing tools such as HubSpot and Facebook Pixel. The site is well-structured, professionally designed, and provides comprehensive information about products, services, compliance, and corporate responsibility. Security posture is strong with HTTPS enforced and standard security headers present, though there is room for improvement in incident response transparency and vulnerability disclosure. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, the website and business presence indicate a trustworthy and established company with a solid market position.

M

Messer Slovenija d.o.o

messer.si

62

Messer Slovenija d.o.o is a well-established company specializing in the supply of industrial, medical, and specialty gases along with related equipment and services. The company operates primarily in Slovenia and is part of the larger Messer Group, a recognized player in the energy sector. Their website reflects a professional business model targeting industrial and commercial customers, offering a comprehensive range of gases and value-added services such as on-site production and e-services. The domain age and WHOIS data support the legitimacy and longstanding presence of the company in the market. Technically, the website is built on the Liferay CMS platform, enhanced with modern JavaScript libraries and marketing tools like HubSpot. The site is mobile-optimized, has good SEO practices, and integrates analytics and tracking pixels responsibly with user consent. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, indicating compliance with GDPR. However, explicit security policies and incident response contacts are not published, and security headers could be improved. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, the website presents a trustworthy and professional digital presence for Messer Slovenija d.o.o, with strong business credibility and compliance posture. Strategic improvements in security headers and incident response transparency would further enhance their security maturity.

M

Messer Polska Sp. z o.o.

messer.pl

65

Messer Polska Sp. z o.o. is a leading industrial gases supplier in Poland with over 120 years of experience, serving multiple industrial sectors including metallurgy, chemical, food, medical, and electronics. The company offers a broad portfolio of gases and related technical services such as consultancy, delivery, and safety training. The website is professionally designed, built on the Liferay CMS platform, and integrates modern web technologies and marketing tools like HubSpot. Privacy and cookie policies are comprehensive and GDPR compliant, with clear consent mechanisms. Security posture is good with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. WHOIS data is unavailable, which limits domain registration trust analysis, but the website's content and corporate affiliations strongly support legitimacy. Overall, Messer Polska presents a credible and professional digital presence aligned with its business operations.

M

Messer BV

messer.nl

68

Messer BV is a well-established Dutch company specializing in the supply of industrial, medical, food-grade, and specialty gases, supported by over 100 years of industry experience. As part of the Messer Group, it holds a strong market position in the energy and manufacturing sectors, offering a comprehensive range of gases and related hardware solutions. The website reflects a professional B2B business model targeting industrial and commercial customers, with clear navigation and relevant content.

M

Messer Hungarogáz Kft.

messer.hu

11

Messer Hungarogáz Kft. is a leading industrial gas supplier in Hungary, offering a wide range of gases including nitrogen, oxygen, carbon dioxide, argon, helium, and specialty gases. The company operates as part of the global Messer Group, serving various industrial sectors with bottled and liquefied gases, gas supply systems, and on-site gas generation. The website reflects a mature digital presence built on the Liferay CMS platform, integrating modern marketing and analytics tools such as HubSpot and Google Tag Manager. The site is well-structured, mobile-optimized, and provides comprehensive information about products, services, compliance, and corporate responsibility. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms in place, although explicit security policies and incident response details are not publicly disclosed. Overall, the domain registration data aligns with the business claims, indicating legitimacy and trustworthiness.

M

Messer France SAS

messer.fr

61

Messer France SAS operates as a key supplier of industrial, food-grade, special, and medical gases within France, serving a broad range of industrial and commercial clients. The company is part of the larger Messer Group, a recognized entity in the energy sector. Their website reflects a mature digital presence with comprehensive product and service offerings, targeting B2B customers in various sectors including medical, food, and industrial gases. The site is professionally designed, mobile-optimized, and includes essential compliance and privacy information, indicating a commitment to regulatory adherence and user experience. Technically, the website leverages the Liferay CMS platform, integrating modern JavaScript libraries such as jQuery, Bootstrap, and HubSpot marketing and analytics tools. The infrastructure supports good performance and accessibility standards, with HTTPS enforced and security headers present, contributing to a solid security posture. However, the absence of explicit security policies and incident response information suggests areas for improvement in transparency and readiness. From a security perspective, the site demonstrates good practices including cookie consent mechanisms and no visible vulnerabilities or exposed sensitive data. The lack of WHOIS data limits domain registration trust analysis, but the professional nature of the site and its content supports legitimacy. Overall, the risk profile is moderate with recommendations to enhance security disclosures and domain registration transparency. Strategically, Messer France should focus on publishing clear security policies, incident response contacts, and vulnerability disclosure information to strengthen trust and compliance. Regular audits of third-party scripts and continuous monitoring will further enhance security posture. The company’s digital maturity is solid, supporting its market position and business objectives effectively.

M

Messer Belgium

messer.be

69

Messer Belgium is a well-established supplier of industrial, medical, food, and specialty gases operating primarily in Belgium. The company is part of the Messer Group, a global leader in gases and related technologies with over 100 years of industry experience. The website reflects a professional B2B business model targeting industrial and medical sectors, offering a broad range of gases and services including a network of gas centers and e-services. The digital presence is built on a modern Liferay CMS platform with integration of marketing and analytics tools such as HubSpot, ensuring a good level of digital maturity and user engagement. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and a public security policy are absent. WHOIS data is unavailable due to registry restrictions, but the domain and website content align with Messer Group's branding and business operations, indicating legitimacy. Overall, the website is professional, compliant with GDPR, and provides a trustworthy digital front for Messer Belgium.

L

Landwirtschaft Sozioökonomie: landwirtschaft-soziooekonomie.de

landwirtschaft-soziooekonomie.de

44

The website 'landwirtschaft-soziooekonomie.de' serves as a specialized platform focusing on the socio-economic aspects of agriculture, particularly labor quality and sustainable farming practices in Germany. It operates as a non-profit knowledge-sharing platform organizing events, workshops, and publishing documentation to support practitioners, scientists, and policymakers. The platform is niche-focused with a small scale and targets a specialized audience interested in agricultural socioeconomics. Technically, the website is built on TYPO3 CMS with modern web technologies including jQuery, Bootstrap, and FontAwesome. The site demonstrates moderate digital maturity with good mobile optimization and a clean, professional design. However, performance is moderate and SEO and accessibility features are basic. From a security perspective, the site lacks explicit security headers and incident response policies. HTTPS usage and SSL configuration details are not provided, and no cookie consent mechanism is implemented, which may impact GDPR compliance. No contact information such as emails or phone numbers are clearly provided, limiting direct communication channels. Overall, the website is functional and professional but could improve its security posture and privacy compliance. Strategic enhancements in security headers, privacy policies, and contact transparency would strengthen trust and compliance.

A

AgrarBündnis

kritischer-agrarbericht.de

55

The Kritischer-Agrarbericht.de website serves as the official online presence for the Kritischer Agrarbericht, a long-standing non-profit publication by the AgrarBündnis focused on critical agricultural policy analysis in Germany. The site provides access to annual reports and special editions, targeting an audience interested in agricultural policy, sustainability, and socio-economic aspects of farming. Technically, the site is built on TYPO3 CMS with modern frontend technologies such as Bootstrap and FontAwesome, hosted on a professional Swiss hosting provider (cyon.ch). The website demonstrates good content quality, clear navigation, and basic mobile optimization. Privacy compliance is well addressed with a cookie consent mechanism and a dedicated privacy policy page in German. However, explicit contact information, terms of service, and security policies are not publicly available, which could be improved for transparency. Security posture is moderate with no visible security headers or advanced protections, but no critical vulnerabilities were detected. Overall, the site is trustworthy and professionally maintained, suitable for its non-profit informational purpose.

The Bundesverband der Regionalbewegung e.V. (BRB) is a German non-profit umbrella organization and competence network dedicated to promoting regionality and strengthening regional economic cycles. With approximately 360 member organizations, it serves as a key voice and network for regional initiatives, small and medium enterprises, municipal initiatives, and agricultural and food sectors. The website reflects a well-established organization celebrating over 20 years of activity, providing information, networking, and advocacy services. Technically, the site is built on the Odoo CMS platform, leveraging modern web technologies such as Bootstrap and FontAwesome, and integrates Google Analytics for visitor insights. The site is mobile-optimized and presents a professional design with clear navigation and relevant content. Security posture is moderate; while HTTPS and CSRF tokens are present, explicit security headers and incident response policies are not published. Privacy compliance is addressed with a privacy policy and cookie consent mechanism, though GDPR-specific details are basic. Overall, the domain registration data aligns well with the organization's claims, supporting legitimacy and trustworthiness.

A

Arctic Portal

arcticportal.org

54

Arctic Portal is a well-established non-profit gateway providing comprehensive information, data sharing, and consultation services related to the Arctic region. The website offers news, maps, scientific data, governance information, educational resources, and event calendars targeting researchers, policymakers, educators, and Arctic stakeholders. The organization is based in Iceland and has been operational since 2005, positioning itself as a trusted source in the Arctic domain. Technically, the website is built on Joomla CMS with modern frontend technologies including Bootstrap, jQuery, and Font Awesome. It is hosted with domain registration via GoDaddy and DNS managed by Cloudflare. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Google Analytics is used for user behavior tracking, including scroll and download events, indicating moderate user tracking practices. From a security perspective, the site enforces HTTPS and employs domain status locks to protect domain integrity. However, DNSSEC is not enabled, and no security headers were detected, which are areas for improvement. The absence of privacy and cookie policies suggests compliance gaps with GDPR and other privacy regulations. No incident response or vulnerability disclosure policies are published, which could impact trust and security readiness. Overall, Arctic Portal demonstrates a solid business and technical foundation with a strong reputation in its niche. To enhance security posture and regulatory compliance, it should implement DNSSEC, security headers, privacy and cookie policies, and publish incident response contacts. These steps will improve trustworthiness and align with best practices for data protection and user privacy.

Jean-Paul-Grundschule is a local primary school based in Schwarzenbach an der Saale, Germany, serving students, parents, and the community with educational services and school-related information. The website provides clear contact details, school news, and links to relevant educational partners and government bodies. The site is built on WordPress with Bootstrap and jQuery, indicating a standard but modern technical infrastructure suitable for a small educational institution. The website is mobile-optimized and presents a consistent brand image with official logos and structured navigation. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy PDF available but no cookie consent mechanism or GDPR-specific indicators. Overall, the site is trustworthy and professional, though improvements in privacy and security transparency are recommended.

N

National Biodiversity Network

nbn.org.uk

55

The National Biodiversity Network (NBN) is a UK-based non-profit organization dedicated to the collection, sharing, and dissemination of biodiversity data. It operates a large partnership network with over 200 members including conservation organizations, government bodies, and voluntary groups. The NBN Atlas serves as a comprehensive data portal with over 300 million species occurrence records. The website reflects a mature digital presence with a WordPress CMS, modern SEO practices, and integration of social media channels to engage its target audience of environmental professionals and citizen scientists. Technically, the site uses common frameworks and libraries such as Bootstrap, jQuery, and WooCommerce for e-commerce capabilities, with Google Analytics and Tag Manager for analytics and tracking. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers and policies could be improved. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy policy or terms of service detected in the provided content. Overall, the site is professional, trustworthy, and well-positioned within its niche, though it would benefit from enhanced transparency around privacy and security policies.

Michel IT-Service GmbH is a small German IT service company specializing in professional software development, individual software solutions, coaching, and web template programming. The company has approximately 25 years of experience, focusing on niche markets such as the textile and waste disposal industries. The website is well-structured, professionally designed, and clearly targets business clients and agencies seeking custom IT solutions. The technical infrastructure includes modern technologies such as .NET, C#, MS SQL Server, HTML5, CSS3, JavaScript, jQuery, and Bootstrap, hosted by a regional German hosting provider. Security posture is adequate with SSL/TLS encryption mentioned, but lacks explicit security headers and incident response policies. Privacy compliance is strong with a comprehensive GDPR-compliant privacy policy, though no cookie consent mechanism is implemented. Overall, the website and business present a trustworthy and professional image with room for security and compliance enhancements.

W

Wirkstatt evangelisch für Kirchen- und Gemeindeentwicklung

gemeindeakademie-rummelsberg.de

44

The website represents the Wirkstatt evangelisch, a church-affiliated educational and consulting institution in Bavaria, Germany. It offers training, coaching, and advisory services focused on church and community development. The site is well-structured, professionally designed, and targets church leaders and staff. Technically, it is built on Drupal 10 with Bootstrap and includes a modern cookie consent mechanism. Security posture is adequate with HTTPS and cookie consent but lacks explicit security headers and published security policies. The domain and hosting appear legitimate and consistent with the organization's profile. Overall, the site is trustworthy and serves its niche audience effectively.

E

Eckstein - das Haus der Evang.-Luth. Kirche in Nürnberg

eckstein-evangelisch.de

43

Eckstein is a medium-sized non-profit institution serving as the heart of the Evangelical Lutheran Church in Nuremberg. It offers a broad range of educational, counseling, and community services, hosting events and providing meeting spaces in the city center. The website reflects a well-structured, professionally designed platform that effectively communicates its mission and services to a general audience interested in evangelical church activities. Technically, the site is built on TYPO3 CMS with Bootstrap and incorporates modern web technologies ensuring good performance, mobile optimization, and accessibility. Privacy compliance is well addressed with GDPR-aligned policies and a cookie consent mechanism. Security posture is solid with HTTPS and privacy-conscious analytics, though additional security headers and incident response information could enhance trust. Overall, the site is trustworthy, safe, and professionally maintained, supporting the institution's community-focused mission.

E

Evangelische Brüder-Unität

herrnhut-entdecken.de

53

The website www.herrnhut-entdecken.de represents the Evangelische Brüder-Unität, a non-profit religious and cultural organization based in Herrnhut, Germany. It provides visitors with information about Herrnhut, exhibitions, guided tours, and related cultural heritage. The site targets a general audience interested in religious history and cultural exploration. The business model is informational and community outreach focused, with a niche market position within religious and cultural tourism. Technically, the website is built on TYPO3 CMS, utilizing standard web technologies such as Bootstrap and FontAwesome. The site is moderately performant, mobile-optimized, and has good SEO practices. Accessibility is basic but present. No advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS (implied by canonical URLs), but no explicit security headers were detected in the HTML content. Cookie consent is implemented, and privacy policy is available, indicating GDPR compliance. However, there is no visible incident response or security policy documentation. No vulnerabilities or exposed sensitive data were found in the content. The WHOIS data is consistent and indicates a legitimate domain registration. Overall, the website is professional, trustworthy, and suitable for its intended audience. Strategic improvements could focus on enhancing security headers, adding terms of service and incident response policies, and improving accessibility features to strengthen compliance and user trust.

H

Holzhofer Consulting GmbH

holzhofer-consulting.de

64

Holzhofer Consulting GmbH is a specialized consulting firm based in Munich, Germany, focusing on data protection, IT, and information security services. With over 14 years of experience, the company positions itself as a pioneer in external data protection officer services and information security management. Their key offerings include GDPR compliance consulting, ISO 27001 certification support, risk management, audits, and employee training. The firm targets medium-sized enterprises primarily within Germany, emphasizing practical and tailored solutions to ensure business continuity alongside compliance. Technically, the website employs modern web technologies such as Bootstrap for responsive design and Matomo for privacy-conscious analytics. Hosting is managed via kundencontroller.de, consistent with the domain's nameservers. The site is well-structured, mobile-optimized, and demonstrates good SEO practices, although some accessibility features could be enhanced. No CMS was explicitly detected, suggesting a custom or lightweight solution. From a security perspective, the site uses HTTPS with a good SSL configuration and avoids exposing sensitive data. However, it lacks explicit security headers and a cookie consent mechanism, which are important for GDPR compliance and security hardening. The presence of numerous industry-recognized certifications and a clear incident response section indicates a mature security posture. No vulnerabilities or suspicious domains were detected, and the privacy settings in analytics reflect a commitment to user privacy. Overall, Holzhofer Consulting presents a professional, trustworthy, and secure online presence aligned with its business focus. Strategic improvements in cookie consent, security headers, and vulnerability disclosure would further enhance compliance and security posture.

A

AGRITECHNICA

agritechnica.com

56

AGRITECHNICA is a globally recognized trade fair specializing in agricultural machinery, positioning itself as the leading event in this sector. The website serves as an information portal for the 2025 event, targeting agricultural professionals and industry stakeholders. The business model revolves around event organization and industry networking, with a strong market position as a premier trade fair in manufacturing for agriculture. Technically, the site is built on TYPO3 CMS with modern frontend technologies like Bootstrap and jQuery, indicating a mature digital infrastructure. However, some performance and security aspects could be improved, such as implementing security headers and enhancing privacy compliance. Security posture is moderate with no evident vulnerabilities but lacks visible security best practices and policies. Overall, the site is professional and trustworthy but would benefit from improved transparency and security measures.

K

Kirche im Grünen

kircheimgruenen.de

44

Kirche im Grünen is a small non-profit religious organization based in Germany that offers outdoor church services and events across various scenic regions including the Fichtelgebirge, Bayerischer Wald, and the Alpine area. The website serves as an informational portal inviting visitors to participate in these spiritual gatherings in nature. The organization positions itself as a niche provider of religious services emphasizing connection with nature. Technically, the website is built on Drupal 10 CMS with Bootstrap framework, leveraging jQuery and other standard web technologies. It is hosted on a German hosting provider (kunde24.de) and demonstrates moderate performance with good mobile optimization. The site is accessible, well-structured, and provides a good user experience with clear navigation. From a security perspective, the site uses HTTPS and secure form submissions but lacks advanced security headers and published security policies. Privacy compliance is partially addressed with a privacy policy page, but no cookie consent mechanism is present. No incident response or vulnerability disclosure information is available. Overall, the security posture is adequate but could be improved with additional best practices. The website is free from adult or questionable content and maintains a high trustworthiness level. External links are relevant and point to partner church tourism sites. No advertising or tracking scripts are detected, indicating a privacy-conscious approach. The WHOIS data is minimal but consistent with a legitimate small non-profit entity. The overall risk is low, with recommendations focusing on enhancing security headers, cookie consent, and incident response transparency.

P

PopNet Informatik AG

popnet.ch

51

PopNet Informatik AG is a Swiss IT services company established in 1995, providing a broad range of IT solutions including network infrastructure, Microsoft server management, business software, cloud services, and web development primarily based on TYPO3 CMS. The company targets both business and private customers as well as municipalities, positioning itself as a reliable and competent regional IT partner with nearly 30 years of experience. Their business model combines personalized IT support, product sales via an online shop, and service points for repair and consultation. Technically, the website is built on TYPO3 CMS with Bootstrap and JavaScript, offering good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and a formal security policy. No vulnerabilities or suspicious activities were detected. Overall, the domain registration data aligns well with the business claims, supporting high legitimacy and trustworthiness.

P

PopNet Informatik AG

memoweb.ch

47

PopNet Informatik AG operates the memoweb.ch website, providing professional web design and IT services primarily in the Bernese Oberland region of Switzerland. Their offerings include TYPO3 CMS-based website development, advertising graphics, remote maintenance, and a low-cost CMS usage option called webVisit. The company targets local businesses and individuals seeking reliable and customizable web solutions. The website is well-branded, professionally designed, and provides clear contact information, enhancing trust and credibility. Technically, the site is built on TYPO3 CMS with Bootstrap for responsive design, ensuring good mobile optimization and accessibility. The site loads moderately fast and includes proper meta tags for SEO, although SEO optimization is basic. No advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. However, the absence of cookie consent mechanisms and security headers suggests room for improvement in compliance and security hardening. From a security perspective, the website uses HTTPS with a strong SSL configuration and does not expose sensitive data or vulnerable libraries. Nonetheless, the lack of security headers and formal security policies reduces the overall security posture. No incident response or vulnerability disclosure information is provided, which could be a concern for security-conscious clients. The domain registration is privacy protected, which is typical for small businesses and does not raise immediate legitimacy concerns. Overall, memoweb.ch presents as a trustworthy, professional small business website with solid technical foundations but with opportunities to enhance security and privacy compliance. Strategic improvements in cookie consent, security headers, and published security policies would strengthen their security posture and regulatory adherence.

CBXNET GmbH operates the website event-connect.berlin, providing specialized event internet services including high-bandwidth symmetrical internet access via Richtfunk and 4G/5G bonding, WLAN and LAN installations, and on-site technical support primarily in Berlin and Brandenburg. The company positions itself as a reliable regional telecommunications provider with a focus on event connectivity solutions. The website is built on TYPO3 CMS with Bootstrap, offering a professional and responsive user experience. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Business credibility is high, supported by consistent domain registration data and references to known event locations.

CBXNET combox internet GmbH is a Berlin-based internet service provider specializing in broadband internet solutions via their own microwave radio network, complemented by IT infrastructure services including data center housing, hosting, and cloud services. They cater primarily to business customers and SMEs in the Berlin-Brandenburg region, focusing on enabling digital transformation with reliable, secure internet and IT solutions. The company maintains a strong regional presence with proprietary infrastructure and a portfolio of IT security and event connectivity services. Technically, the website is built on TYPO3 CMS with modern frontend frameworks and integrates Google Analytics for user insights. Security posture is solid with HTTPS and secure forms, though improvements in HTTP security headers and explicit security policies are recommended. Privacy compliance is well addressed with comprehensive GDPR-aligned policies and cookie consent mechanisms. Overall, CBXNET presents a professional, trustworthy business with good digital maturity and a clear focus on business customers in telecommunications and IT services.

CBXNET operates as a regional Wireless Internet Service Provider specializing in broadband internet connections via directional radio (Richtfunk) technology in the Berlin-Brandenburg area. Their website richtfunk.berlin focuses on business internet solutions including symmetrical high-speed connections, backup redundancy, site networking, and multi-tenant infrastructure. The company targets small to medium enterprises, healthcare, finance, education, and property management sectors, positioning itself as a reliable and flexible alternative to traditional telecom providers, especially in under-served areas. Technically, the website is built on TYPO3 CMS with Bootstrap and integrates Google Analytics and Google Maps APIs. The site is mobile-optimized and well-structured, offering a professional user experience. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is partially met with a comprehensive privacy policy linked on the parent domain but lacks a cookie consent mechanism. Overall, the security posture is good with no detected vulnerabilities or blocking mechanisms. The domain registration is consistent with the business history, enhancing trustworthiness. The site content is safe for general audiences and professionally presented, supporting CBXNET's credibility as a regional telecom provider.

OceanExpert is a specialized directory platform operated by the UNESCO/IOC Project Office for IODE, providing a comprehensive listing of marine and freshwater professionals, institutes, groups, events, and documents. The platform serves a niche audience of researchers and organizations involved in oceanographic and aquatic sciences, positioning itself as an authoritative resource within this scientific community. The business model is non-commercial, supported by a government/non-profit entity based in Belgium, with a domain established since 2002, indicating a mature and stable presence. Technically, the website employs a modern tech stack including jQuery, Bootstrap, FontAwesome, and Leaflet for interactive mapping, alongside Google Analytics and reCAPTCHA for analytics and security. The site demonstrates moderate performance and basic mobile optimization, with room for improvement in accessibility and SEO. The infrastructure is custom-built without a known CMS, hosted under the registrar Gandi SAS. From a security perspective, the site uses HTTPS and implements CSRF tokens and reCAPTCHA on login forms, reflecting good security practices. However, the absence of DNSSEC, lack of security headers, and missing cookie consent mechanisms highlight areas for enhancement. No critical vulnerabilities or malicious indicators were found, and the domain registration details align well with the organization's profile, supporting legitimacy. Overall, OceanExpert presents a professional, trustworthy, and content-rich platform with a solid business foundation. Strategic improvements in privacy compliance, security headers, and mobile accessibility would further strengthen its security posture and user trust.

H

HERING Group

heringinternational.eu

47

HERING Group is a medium-sized, well-established company specializing in systemized construction solutions primarily for the transportation and infrastructure sectors. Founded in 1892 and based in Germany, the company offers a broad portfolio including architectural concrete façades, railway construction, public toilet facilities, noise protection, modular platforms, and sustainable technologies such as organic photovoltaics. Their market position is strong with a focus on quality, sustainability, and innovation, supported by approximately 700 employees and international project experience. Technically, the website is built on TYPO3 CMS with modern frontend technologies like Bootstrap and Swiper.js, and uses Matomo for privacy-conscious analytics. The site is well-structured, mobile-optimized, and professionally designed, providing a good user experience and clear navigation. However, some technical improvements are recommended, such as adding security headers and cookie consent mechanisms to enhance compliance and security posture. From a security perspective, the site uses HTTPS with good SSL configuration and does not expose sensitive data or vulnerable libraries. The absence of security headers and a formal incident response or vulnerability disclosure policy are areas for improvement. The WHOIS data for the domain is missing, which raises concerns about domain registration transparency, although the website content and social media presence strongly indicate a legitimate business. Overall, the website presents a professional and trustworthy image with minor compliance and security gaps. Strategic recommendations include implementing cookie consent, enhancing security headers, publishing incident response contacts, and verifying domain registration details to improve trust and compliance.

I

Initel sp. z.o.o

initel.pl

37

Initel sp. z.o.o is a Polish company specializing in the integration of electrical and low-current installations, providing comprehensive project design and execution services primarily for the electrical industry. Established in 2002, the company also operates a production facility manufacturing steel sheet products for electrical and telecommunication sectors, including OEM manufacturing and export services within the EU, notably Germany. The website reflects a medium-sized business with a professional online presence focused on B2B clients in the energy sector. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and FontAwesome, with responsive design and multimedia content. However, no CMS or advanced analytics/tracking tools are detected, indicating a relatively straightforward technical infrastructure. Performance and SEO are moderate to good, with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers, which are recommended for enhanced protection. No privacy or cookie policies are present, and no forms are available for data collection, limiting exposure but also indicating gaps in compliance and user transparency. No WAF or blocking mechanisms are detected, and the domain registration data is consistent and legitimate, supporting trustworthiness. Overall, the website is professional and safe, but improvements in privacy compliance, security best practices, and contact transparency would strengthen its security posture and user trust.

M

MLI Leadership Institut GmbH

leadership-munich.org

52

MLI Leadership Institut GmbH is a specialized consulting firm based in Germany, focusing on leadership development, strategic consulting, and organizational development services. Founded in 2013, the company targets businesses seeking to enhance leadership capabilities and activate corporate strategies. Their market position is that of a niche provider within the Munich metropolitan region, offering coaching, leadership programs, and strategy activation services. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to corporate clients. Technically, the site is built on October CMS, leveraging Bootstrap and jQuery, with modern tracking and consent management tools integrated. The site is mobile optimized and performs moderately well.

S

Sozialverband Deutschland e.V.

sovd-rentenlabyrinth.de

51

The Sozialverband Deutschland e.V. (SoVD) is a well-established non-profit organization focused on social welfare and pension advisory services in North Rhine-Westphalia, Germany. The website serves as an informational and service platform, providing guidance on pensions, social law, and related social services. It targets German residents seeking support navigating social security and pension systems. The organization maintains a strong regional presence with multiple advisory centers and active social media engagement. Technically, the website is built on TYPO3 CMS with modern web technologies including Bootstrap, jQuery, and integrates analytics and chatbot tools for enhanced user experience. Privacy and cookie consent mechanisms are robust and GDPR compliant. Security posture is good with HTTPS enforced, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site reflects a professional, trustworthy, and user-friendly platform for social welfare services.

M

meistro GmbH

meistro.de

59

meistro GmbH is a German energy service provider specializing in comprehensive energy solutions for commercial clients. Their offerings include energy supply (electricity and gas), energy consulting, and energy generation through solar parks. Established since 2006, meistro serves over 12,000 commercial customers, positioning itself as a reliable and certified partner in the energy sector, with TÜV Nord certification and positive customer reviews. The company targets businesses in Germany seeking sustainable and efficient energy solutions. Technically, the website is built on TYPO3 CMS with Bootstrap and integrates modern tools such as Google Tag Manager and Google Analytics (GA4). The site is hosted on Schlundtech infrastructure and demonstrates good performance, mobile optimization, and accessibility. Cookie consent and GDPR compliance mechanisms are robustly implemented, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS and employs cookie consent but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is structured but limited in registrant detail, consistent with a legitimate German business domain. Overall, meistro.de presents a professional, trustworthy, and well-maintained digital platform aligned with its business goals. Strategic improvements in security headers and transparency around security policies would enhance its security posture and trustworthiness further.

G

GRITH AG

vereinonline.org

49

VereinOnline.org is a German-based SaaS provider specializing in online club and association management software. The platform offers comprehensive features including member management, event calendars, newsletters, bookkeeping, and mobile app access, targeting clubs, associations, and similar organizations. The business is operated by GRITH AG, an established company with a domain age since 2009 and recognized with awards such as Best Of Communication 2018. The website content is professional, well-structured, and primarily in German, reflecting a mature and focused business model. Technically, the site uses modern frontend technologies like Bootstrap and jQuery, supports mobile responsiveness, and integrates accessibility features. Hosting is provided by IONOS SE, a reputable registrar and hosting provider. Security posture is moderate with some gaps such as lack of DNSSEC and missing security headers, but no critical vulnerabilities or exposed sensitive data were found. Privacy compliance is good with a comprehensive GDPR privacy policy, though no cookie consent mechanism was detected. Contact is primarily via a web form, with no direct emails or phone numbers visible on the main site. Overall, the website is trustworthy and professionally maintained, suitable for its target audience.

The website www.tag-der-restaurierung.de serves as the official platform for the Verband der Restauratoren, a professional association dedicated to the conservation and restoration of cultural heritage in Germany and Europe. It primarily promotes the European Day of Conservation-Restoration, an event held annually to showcase restoration projects and raise public awareness. The site offers detailed event information, digital content such as videos and podcasts, and resources for restoration professionals. The target audience includes restoration experts, cultural institutions, and the general public interested in heritage preservation. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Events Calendar Pro, ensuring good SEO and event management capabilities. It uses Bootstrap for responsive design and integrates a comprehensive cookie consent mechanism via consentmanager.net, reflecting a mature digital infrastructure. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and employs a detailed cookie consent banner, indicating compliance with GDPR. However, explicit security headers and incident response policies are not evident. No vulnerabilities or suspicious elements were detected in the content or scripts. The domain registration data aligns well with the website's purpose and business history, supporting its legitimacy. Overall, the website presents a professional, trustworthy, and well-maintained digital presence for a cultural heritage association. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and maintaining regular updates to plugins and core software to mitigate risks.

CBXNET combox internet GmbH is a Berlin-based Internet Service Provider specializing in broadband internet via microwave radio, IT infrastructure including data centers, cloud services, and event connectivity solutions. The company targets business customers and SMEs in the Berlin metropolitan area, leveraging its own microwave network and redundant data centers to provide high-availability services. The website reflects a mature digital presence built on TYPO3 CMS with modern front-end technologies and good mobile optimization. Security posture is solid with HTTPS and secure forms, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, CBXNET presents as a credible and professional regional ISP with strong business trust signals.

Z

Zukunft Hanau

zukunft-hanau.de

49

Zukunft Hanau is a government-supported urban development and citizen engagement platform focused on the city of Hanau, Germany. It provides information on various projects, events, and initiatives aimed at improving urban life, digital transformation, and sustainability. The website targets local residents, stakeholders, and planners, promoting active citizen participation. Technically, the site is built on WordPress with modern plugins and frameworks such as Bootstrap and Yoast SEO, ensuring good performance, mobile optimization, and SEO compliance. Security posture is strong with HTTPS, cookie consent mechanisms, and security hardening plugins, though some security headers could be improved. Privacy compliance is robust with clear GDPR-aligned policies and cookie management. Overall, the site is professional, trustworthy, and well-aligned with its public sector mission.

Hanau Bäder GmbH is a public service company operating swimming pools and sauna facilities in Hanau, Germany. The company provides recreational and wellness services including indoor and outdoor swimming, sauna experiences, aqua fitness, courses, and events targeting families and local residents. The website reflects a well-structured and professionally maintained digital presence consistent with a medium-sized municipal or regional service provider. Technically, the site uses a modern tech stack including jQuery, Bootstrap, FontAwesome, and Matomo analytics, built on the IMPERIA CMS platform. Accessibility features and cookie consent mechanisms are implemented, demonstrating compliance with GDPR and user inclusivity. Security posture is adequate with HTTPS usage and no visible vulnerabilities, though security headers and incident response policies could be improved. Overall, the website is trustworthy, user-friendly, and aligned with the business's public service mission.

Hanauer Straßenbahn GmbH is a medium-sized public transportation company operating tram and bus services in Hanau, Germany. The company provides comprehensive passenger information, ticketing options including mobile tickets, and integrates with the regional transport association RMV. The website is professionally designed with consistent branding and targets local commuters and visitors. Technically, the site uses modern frameworks such as Bootstrap and jQuery, is powered by the Imperia CMS, and integrates third-party widgets for transport schedules. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies are absent. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy and functional, supporting the company's business objectives effectively.

D

Daniel Kiechle EDV

kiechle-edv.de

52

Daniel Kiechle EDV is a small German IT service provider specializing in infrastructure, security, and communication solutions. The company targets local businesses and professionals seeking IT consulting and remote support services. The website is professionally designed using WordPress with a clear focus on its core services and contact accessibility. The technical infrastructure is based on a standard WordPress CMS with common libraries such as jQuery and Bootstrap, providing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though it lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and functional but could improve in security and compliance transparency.

B

Bayerisches Staatsministerium für Ernährung, Landwirtschaft, Forsten und Tourismus

100genussorte.bayern

71

Genussorte Bayern is a government-backed initiative promoting the culinary richness of Bavaria through a well-structured website featuring regional specialties, events, recipes, and interactive maps. The platform targets both residents and tourists interested in exploring Bavarian food culture. Technically, the site is built on WordPress with Elementor and uses modern JavaScript libraries and plugins to enhance user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some HTTP security headers could be improved. Privacy compliance is robust, with a comprehensive privacy policy and cookie management system. Overall, the site presents a trustworthy and professional image consistent with its government affiliation.

D

Diözesan-Caritasverband Würzburg

caritas-wuerzburg.de

53

The website www.caritas-wuerzburg.de represents the Diözesan-Caritasverband Würzburg, a large non-profit organization focused on social services, charitable activities, and community support within the Unterfranken region of Germany. The site offers extensive information about their services including help and counseling, volunteering, donations, projects, and social services for various vulnerable groups such as children, families, seniors, and people with disabilities. The organization positions itself as a regional leader in social welfare and charity, targeting a broad audience including those in need and potential volunteers or donors. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies such as Bootstrap, jQuery, and Font Awesome for UI components. It integrates privacy-conscious analytics via Matomo and employs Usercentrics for GDPR-compliant cookie consent management. The site demonstrates good mobile optimization and accessibility features, with a well-structured navigation system that supports user experience and SEO. From a security perspective, the site enforces HTTPS and uses privacy-respecting analytics, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or suspicious external domains were detected. The WHOIS data is consistent with the website's professional presentation, indicating legitimacy and trustworthiness. Overall, the website is professional, secure, and compliant with privacy regulations, serving as a reliable digital presence for a reputable non-profit organization. Strategic improvements could focus on enhancing security headers, publishing a security policy, and providing explicit contact information for incident response to further strengthen trust and security posture.

Kirchliche Jugendarbeit Diözese Würzburg is a non-profit organization affiliated with the Bistum Würzburg, focusing on youth work, education, and faith formation within the diocese. The website serves as a portal for information on events, services, and contact details aimed at young people and church communities. The organization holds a stable regional position with clear branding and a consistent message aligned with its religious and educational mission. Technically, the website is built on TYPO3 CMS with modern frontend technologies and includes privacy-conscious analytics and consent management tools. Security posture is solid with HTTPS and no visible vulnerabilities, though formal security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, serving its audience effectively.

B

Bistum Würzburg

bistum-wuerzburg.de

53

Bistum Würzburg is a large regional Catholic Church organization serving the Unterfranken area in Germany. The website provides comprehensive information about faith, church services, community engagement, education, and charitable activities. It targets local Catholic believers and interested parties with a non-profit service model. Technically, the site is built on TYPO3 CMS with modern frontend technologies and uses Matomo for privacy-conscious analytics. The site implements GDPR-compliant cookie consent via Usercentrics and provides standard legal pages such as privacy policy and imprint. Security posture is good with HTTPS and privacy-respecting analytics, though some security headers could be improved. No blocking or WAF challenges were detected, and the site content is safe and appropriate for general audiences.

O

onlineshops-finden.de

onlineshops-finden.de

46

onlineshops-finden.de is a German online marketplace and directory portal specializing in listing over 8000 online shops across diverse categories. The platform serves both consumers and B2B users by providing thematic sorting, shop search, and marketing opportunities. It is positioned as a niche leader in the German e-commerce directory space with a medium-sized operation and a focus on comprehensive shop listings and related press content. Technically, the site is built on Drupal CMS with modern JavaScript libraries and includes privacy-conscious analytics via Matomo. The site implements cookie consent mechanisms and uses HTTPS, reflecting a moderate level of digital maturity. Security posture is adequate but could be improved with additional headers and published policies. The site includes mature content categories such as vape and cannabis lifestyle products, requiring age-appropriate content warnings. WHOIS data is minimal, with generic name servers, which slightly reduces trust but no direct red flags are present. Overall, the site is functional, professional, and trustworthy with room for security and compliance enhancements.