Security Directory

T

TKWY

tkwy.de

56

TKWY is a small hospitality business based in Germany, specializing in fresh, high-quality regional food products with an emphasis on digital ordering and customer engagement. The company operates a modern website built on the chayns platform, integrating various digital services such as online ordering, voucher sales, and package delivery. The website reflects a digital-first approach, positioning TKWY as an innovative showcase business within the hospitality sector, supported by Tobit.Software's technology ecosystem. Technically, the site employs modern web technologies including React and Stripe.js for payment processing, hosted via Gandi.net with secure HTTPS configuration. However, the site lacks explicit privacy and cookie policies, and no direct contact emails or phone numbers are provided, which may impact user trust and compliance. Security posture is generally good with HTTPS and no exposed sensitive data, but the absence of security headers and incident response information suggests room for improvement. Overall, TKWY presents a professional and user-friendly digital presence with moderate risk, primarily due to incomplete privacy compliance and limited contact transparency.

S

scio s.r.o.

scioskola.cz

66

ScioŠkoly is a Czech Republic-based network of innovative primary and secondary schools focused on preparing students for the challenges of the 21st century. The organization operates multiple schools across the country, emphasizing freedom, responsibility, and modern educational methods. The website reflects a mature and well-established educational institution with a strong market position supported by accreditations and positive community feedback. Technically, the site uses modern web technologies including Umbraco CMS, Bootstrap, and Google Tag Manager for analytics and consent management. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and incident response information are missing. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

S

staatsministerium.de is available for purchase - Sedo.com

staatsministerium.de

8

The website is a domain parking and sales landing page hosted by Sedo.com for the domain staatsministerium.de. It primarily serves domain buyers and investors interested in acquiring this domain. The platform operates as a domain marketplace and brokerage service, with a business model centered on domain sales and parking. The website content is minimal and focused on domain availability rather than providing organizational or business information related to the domain name itself. Technically, the site uses modern web technologies including JavaScript modules and Cloudflare DNS services, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer restrictions in place, but lacks advanced security headers and published security policies. Privacy compliance is limited, with no privacy or terms of service policies found, though a cookie consent mechanism is present. Overall, the domain registration is legitimate and consistent with the domain marketplace business model. The site is safe with no adult content or suspicious elements detected.

U

USU Software AG

usu.com

66

USU Software AG is a technology company specializing in IT service management, IT asset management, and AI-driven enterprise solutions. The company positions itself as a leader in optimizing IT operations and elevating service delivery through innovative cloud, risk management, and cost control solutions. Their website reflects a mature digital presence with comprehensive product offerings and resources targeting IT professionals and enterprise decision makers. Technically, the site is built on HubSpot CMS with extensive use of modern analytics and marketing tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS and security headers implemented, though explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy, but the professional branding and external references support the company's credibility. Overall, USU demonstrates a robust business and technical foundation with room for improvement in transparency around security and domain registration details.

Wirkstatt evangelisch is a newly established institution within the Evangelical Lutheran Church in Bavaria, formed by merging three church departments to provide consolidated support, training, and consulting services to church employees and communities. The website presents a clear mission focused on collaboration, spirituality, and organizational efficiency within the church context. Technically, the site is built on WordPress with a modern theme, showing good mobile optimization and accessibility, though some SEO and security header improvements are possible. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks some advanced security headers and a cookie consent mechanism. Overall, the site is trustworthy, compliant with GDPR, and professionally presented, reflecting its non-profit church affiliation.

B

BelWü-Koordination

belwue.de

60

BelWü is a regional data network provider serving scientific and educational institutions in Baden-Württemberg, Germany. It connects universities, colleges, schools, and public libraries, offering a range of network and internet services tailored to the academic sector. The website presents a clear and professional overview of its services and organizational structure, targeting institutional users within the region. Technically, the website is built with standard HTML, CSS, and JavaScript, featuring a responsive design and clear navigation, though it lacks advanced frameworks or CMS indications. Security posture is moderate with HTTPS assumed but missing explicit security headers and cookie consent mechanisms. The WHOIS data aligns with the academic nature of the service, using university name servers and Deutsche Telekom infrastructure, supporting legitimacy. Overall, the site is trustworthy and functional but could improve privacy compliance and security best practices.

O

Orchestre de Paris

monsieur-onde.com

48

Monsieur Onde is a culturally focused website dedicated to promoting classical music and the repertoire of the Orchestre de Paris through interactive games, videos, and educational content. The site targets a general audience interested in music education and classical symphonic works. The business model appears to be educational and promotional, leveraging multimedia content to engage users and enhance their knowledge of classical music. The website is professionally designed with consistent branding aligned with the Orchestre de Paris, indicating a strong association with this reputable cultural institution. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and Google Analytics. It is hosted by OVH sas, a well-known hosting provider. The site is mobile optimized and includes SEO best practices such as meta tags and Open Graph data. However, there is room for improvement in accessibility and security headers implementation. Performance is moderate, and the site is fully accessible without any blocking or WAF challenges. From a security perspective, the site uses HTTPS and protects the domain with registrar status flags. However, it lacks security headers and a cookie consent mechanism, which are important for GDPR compliance and overall security posture. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is transparent and consistent with the website's claims, enhancing trustworthiness. Overall, the website presents a moderate risk profile with good business credibility but some gaps in privacy compliance and security best practices. Strategic improvements in cookie consent, security headers, and contact transparency would enhance trust and compliance.

O

Orchestre de Paris

orchestredeparis.com

58

Orchestre de Paris is a prestigious French symphony orchestra presenting concerts primarily at the Philharmonie de Paris. The organization offers a rich cultural experience with over 150 years of history and a roster of 120 musicians. Their services include live concerts, subscription sales, educational outreach, and digital concert streaming. The website reflects a mature digital presence with professional design, clear navigation, and integration with social media and ticketing partners. Technically, the site uses modern web technologies and includes cookie consent and privacy policies, indicating awareness of GDPR compliance. Security posture is generally good with HTTPS enforced, though the absence of visible security headers suggests room for improvement. The WHOIS data for the domain is missing or unavailable, which is unusual and slightly reduces trustworthiness, but the overall content and external affiliations support legitimacy. No adult or explicit content is present, making the site safe for general audiences.

A

Ambulante Ethikberatung für Hochfranken e.V.

ethikberatung-hochfranken.de

44

Ambulante Ethikberatung für Hochfranken e.V. is a small non-profit association founded in 2022, providing ambulatory ethics consultation services in the Hochfranken region of Germany. The organization focuses on supporting patients, their families, and healthcare professionals in ethical decision-making related to end-of-life care. The website presents a professional and consistent brand image, with clear contact information and detailed descriptions of services and team members. Technically, the site uses modern web technologies including Bootstrap and jQuery, hosted by a regional provider, and is mobile-optimized with good SEO practices. Security posture is moderate with HTTPS implied but lacking explicit security headers and policies. Privacy compliance is good with a privacy policy available, though no cookie consent mechanism is present. Overall, the website is trustworthy and well-suited for its target audience.

C

Caritas gGmbH St. Heinrich und Kunigunde

caritasheim-hof.de

62

Caritas gGmbH St. Heinrich und Kunigunde is a well-established non-profit organization providing comprehensive social care services in Bavaria, Germany. Their offerings include senior care, disability support, childcare, and educational services, positioning them as a regional leader in healthcare and social services. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to seniors, people with disabilities, children, and youth. Technically, the site uses modern JavaScript libraries, consent management tools, and tracking services, hosted likely on infrastructure associated with Deutsche Telekom AG. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and privacy disclosures are lacking. Overall, the site is trustworthy and serves its audience effectively but would benefit from enhanced privacy compliance and security transparency.

K

Kindergarten und Kinderkrippe "Regenbogen" Naila

kiga-regenbogen-naila.de

59

Kindergarten und Kinderkrippe "Regenbogen" Naila is a small, community-focused childcare and educational institution located in Naila, Germany. Affiliated with the Catholic Archdiocese of Bamberg, it provides kindergarten and nursery services with a strong emphasis on pedagogical concepts, parental cooperation, and community engagement. The website serves as an information portal for parents and guardians, detailing operational hours, fees, registration procedures, and educational philosophy. Technically, the website is built on the alkacon Mercury CMS platform, leveraging modern web technologies including HTML5, CSS3, JavaScript, and Matomo analytics for privacy-conscious user tracking. The site is well-optimized for mobile devices and accessibility, featuring a cookie consent mechanism and structured data for enhanced SEO and user experience. From a security perspective, the site enforces HTTPS and employs cookie consent for external content, but lacks explicit security headers and incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive privacy policy and GDPR-aligned cookie management. Overall, the website presents a trustworthy, professional, and user-friendly digital presence for a local educational institution. Strategic improvements could focus on enhancing security headers, publishing a security policy, and adding incident response contacts to further strengthen trust and compliance.

D

Durchstarter - Freiwilliges Schuljahr

freiwilligennet.de

41

Durchstarter - Freiwilliges Schuljahr is a German non-profit educational initiative aimed at engaging students from the 8th grade onwards in voluntary social and active school year programs. The website serves as an informational and engagement platform, offering a variety of social, cultural, and ecological volunteer opportunities in cooperation with local organizations. The platform targets young students seeking meaningful extracurricular experiences and supports partnerships with local social institutions. Technically, the website is built on a modern stack including Vue.js, Bootstrap, and Pimcore CMS, with privacy-conscious analytics via Matomo and a compliant cookie consent mechanism. Security posture is adequate with HTTPS enforced and privacy best practices observed, although explicit security headers and incident response policies are not published. Overall, the site is professional, accessible, and trustworthy, with a clear focus on educational and social engagement.

F

Freies Deutsches Hochstift

freies-deutsches-hochstift.de

59

Freies Deutsches Hochstift is a German cultural and educational institution dedicated to German literature and history, operating museums and archives. The website presents a professional and consistent brand image with good content quality targeted at the general public interested in German culture. Technically, the site uses modern tools such as Matomo for analytics and Cookiebot for GDPR-compliant cookie consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though security headers and explicit security policies are missing. Privacy compliance is supported by a comprehensive cookie consent mechanism but lacks a visible privacy policy page. Overall, the site is trustworthy and safe with no adult or questionable content detected.

C

Diese Webseite befindet sich im Aufbau

commonworks.de

35

The website commonworks.de is currently under construction and presents only a placeholder page with minimal content. There is no business description, contact information, or legal policies available, which limits the ability to assess the company's market position or services. The site uses basic HTML, CSS, and JavaScript with custom fonts and canvas effects, hosted on cloudpit servers. No CMS or advanced frameworks are detected. Security posture is weak due to lack of HTTPS information, security headers, and privacy compliance indicators. No forms or data collection mechanisms are present, and no analytics or tracking scripts are detected. Overall, the site is in an early development stage with low trust and credibility indicators.

P

Pulary Group s.r.o.

pulary.cz

43

Pulary Group s.r.o. is a Czech-based marketing and communication agency with a long-standing tradition of over 30 years, offering professional services in communication, marketing, advertising, and public relations. The company focuses on activating marketing tools to enhance client effectiveness and strengthen brand performance in performance marketing. The website is professionally designed, mobile-optimized, and built on WordPress, hosted by WEDOS, a Czech hosting provider. Social media presence on Facebook and Instagram supports their digital footprint. However, the site lacks explicit privacy and cookie policies, security headers, and incident response information, which are important for compliance and security transparency. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and stability.

P

PURPOSIA Group a.s.

purposia.eu

47

PURPOSIA Group a.s. is a well-established European investment holding company with Czech origins, managing a diversified portfolio of 42 companies primarily in the construction and real estate sectors. The group offers comprehensive services covering the entire lifecycle of construction projects, including design, property management, industrial flooring, aluminium systems, and manufacturing of concrete prefabricates. Their operations span multiple European countries, reflecting a strong regional presence and market leadership. The website presents a professional and consistent brand image with clear business information and subsidiary links. Technically, the website employs modern web technologies such as Swiper.js for interactive content and Bootstrap components for responsive design. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, there is a lack of visible privacy and cookie policies, which is a compliance gap. Security headers are not evident, and no explicit vulnerability disclosure or incident response information is provided. The security posture is moderate with HTTPS usage implied but no detailed security headers or policies visible. No forms collect sensitive data, reducing immediate risk, but improvements in security best practices and compliance documentation are recommended. The WHOIS data is not publicly available due to EURid privacy policies for .eu domains, which is typical and does not raise suspicion. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and trustworthy from a business perspective but would benefit from enhanced privacy compliance and security transparency to improve its risk profile and user trust.

Y

YES Forum

yes-forum.eu

46

YES Forum is a European non-profit network dedicated to empowering young people with fewer opportunities by promoting social inclusion and professional skill development. The organization operates primarily in Germany and targets youth organizations, social workers, and policymakers across Europe. Their services include advocacy, project coordination, publications, and membership networking. The website reflects a professional and consistent brand image with clear contact information and social media presence, supporting their legitimacy and trustworthiness. Technically, the website uses standard web technologies (HTML5, CSS3, JavaScript) with no explicit CMS detected. It is mobile-optimized and performs moderately well, though accessibility features are basic. The site uses HTTPS with no visible security vulnerabilities but lacks some security headers and a cookie consent mechanism, which are recommended for enhanced security and GDPR compliance. From a security perspective, the site shows a good posture with encrypted connections and no exposed sensitive data. However, the absence of published security policies, incident response contacts, and vulnerability disclosure mechanisms indicates room for improvement. The WHOIS data is unavailable due to privacy protection, which is common for non-profits but slightly reduces trust signals. Overall, YES Forum's website is a credible and professional platform supporting its mission, with moderate technical maturity and a solid security baseline. Strategic improvements in privacy compliance and security transparency would further enhance trust and compliance.

MarineRegions.org is a specialized marine geospatial data platform operated by the Flanders Marine Institute (VLIZ). It provides authoritative marine georeferenced place names, maritime boundaries, and related geographic information to researchers, policymakers, and maritime stakeholders. The platform integrates data from established sources such as the VLIMAR Gazetteer and MARBOUND database, positioning itself as a trusted resource in marine geographic information. The website is professionally designed with clear navigation and regularly updated content, including news and user testimonials, enhancing its credibility within the marine science community. Technically, the site employs standard web technologies including HTML5, CSS3, JavaScript, jQuery, and JWPlayer for media content. It uses Piwik (Matomo) analytics with cookies disabled, reflecting a moderate privacy-conscious approach. However, the site lacks explicit privacy and cookie policies, which is a compliance gap. Security-wise, HTTPS is enabled with no exposed sensitive data, but security headers are absent, and DNSSEC is not enabled, indicating room for improvement in security hardening. Overall, the site is trustworthy and functional but would benefit from enhanced privacy compliance and security best practices.

G

Gottesdienst-Institut der Evang.-Luth. Kirche in Bayern

gottesdienstinstitut.org

51

The Gottesdienst-Institut der Evang.-Luth. Kirche in Bayern is a well-established non-profit institution affiliated with the Evangelical Lutheran Church in Bavaria. It provides consulting, education, and media resources to support church communities, volunteers, and staff in preparing and conducting worship services. The organization has a strong regional presence and a 25-year history, positioning it as a trusted partner within its sector. The website reflects this professionalism with comprehensive content, clear navigation, and a consistent brand identity. The online shop extends its service offering by providing liturgical materials and publications. Technically, the website employs modern web technologies including Matomo for privacy-conscious analytics, a responsive design, and accessible navigation. While no explicit CMS or hosting provider is identified, the site performs well with good mobile optimization and SEO practices. Security measures include HTTPS and privacy-respecting analytics, though HTTP security headers and cookie consent mechanisms could be improved. The security posture is solid with no evident vulnerabilities or exposed sensitive data. The WHOIS data is unavailable due to query failure or privacy protection, which is common and justified for this type of institution. The website maintains transparency with clear contact information and partner affiliations, enhancing trustworthiness. Overall, the site presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, implementing a cookie consent mechanism if cookies are used elsewhere, and publishing a vulnerability disclosure policy to further strengthen security culture.

Z

Zlaté šperky s dušou: Ručne vyrobené príbehy od roku 1957

zlatokov.sk

50

The website represents a small Slovakian business specializing in handcrafted gold jewelry with a long heritage dating back to 1957. The site is designed with modern responsive technologies such as Bootstrap 5, providing a good user experience and clear navigation for its target audience. However, the website lacks critical privacy and security documentation such as privacy policies, cookie consent mechanisms, and security headers, which impacts its overall security posture. No contact information or social media presence was detected in the provided content, limiting direct communication channels. The domain registration data is consistent and supports the business's legitimacy and history, enhancing trustworthiness. Overall, the website is functional and professionally designed but requires improvements in security and privacy compliance to meet modern standards.

Brill Audio Visual Kft. is a well-established Hungarian audiovisual service provider specializing in event technology solutions including sound, lighting, projection, LED walls, interpretation, voting systems, IT solutions, and stage design. Founded in 1995, the company has expanded its presence across Central Europe through the Brill AV Media European Group. The website reflects a professional business with a clear focus on corporate and international event clients. Technically, the site is built on Drupal 7 with standard web technologies and moderate performance and mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and updated CMS versions, which could pose risks. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is trustworthy and business credible but would benefit from enhanced security and privacy practices.

A

Auswärtiges Amt

auswaertiges-amt.de

60

The Auswärtiges Amt website serves as the official digital presence of the German Federal Foreign Office, providing authoritative information on German foreign policy, consular services, travel safety advisories, and career opportunities within the foreign service. It targets a broad audience including travelers, diplomats, and the general public interested in Germany's international relations. The site maintains a strong market position as a trusted government source with consistent branding and comprehensive content.

S

SCIO

scio.cz

40

SCIO is a well-established Czech education services provider specializing in entrance exams, preparatory courses, and educational testing products for students and schools. With over 30 years of experience, SCIO holds a strong market position in the Czech education sector, offering a broad portfolio of services including national comparative exams for universities and secondary schools, as well as professional tools for educators. The website reflects a professional and user-friendly digital presence with clear navigation and comprehensive content tailored to its target audience of students, parents, and educational institutions. Technically, the site employs modern web technologies, including JavaScript, Google Tag Manager, and CookieHub for privacy compliance, and is optimized for mobile devices with good accessibility and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response information. The absence of WHOIS data limits domain trust analysis, but the overall digital footprint and professional presentation support legitimacy. Strategic recommendations include enhancing security transparency and incident response readiness to further strengthen trust and compliance.

B

BRNO OPEN 2023

brnoopen.eu

37

The website brnoopen.eu serves as the official platform for the BRNO OPEN 2023 dance sport event, specifically hosting the WDSF World Championships in Latin and Showdance Standard categories. The site targets dance sport enthusiasts, competitors, and attendees primarily in the Czech Republic. The business model revolves around event organization and promotion within the niche of competitive dance sport. Technically, the site is built on WordPress using the Divi theme, leveraging modern web fonts and structured data for SEO. Performance and mobile optimization are adequate, though accessibility features are basic. Security posture is limited, with no evident security headers or policies, and privacy compliance is minimal due to the absence of privacy and cookie policies. The domain registration is consistent with the business location and nature, registered through a reputable Czech registrar, ZONER a.s. Overall, the site is professional and relevant but would benefit from enhanced security and compliance measures.

C

C O R E 1

core1.agency

54

C O R E 1 is a Czech digital agency specializing in AI and advanced web technologies, operating since 2007. They position themselves as leaders in their field, offering services including AI integration, web design, UI/UX, and digital marketing. Their website reflects a professional and modern digital presence with strong branding and client testimonials, targeting businesses seeking innovative web solutions. Technically, the site uses modern web technologies, including Video.js for media, Google Tag Manager, and various marketing and retargeting tools, with a custom CMS named core1/BasicCMS. The site is well-optimized for performance, mobile responsiveness, and SEO. Security-wise, HTTPS is enforced and cookie consent mechanisms are implemented, but there is a lack of published security policies or incident response information. WHOIS data is unavailable, likely due to privacy protection, which is common and justified for this business type. Overall, the site demonstrates a mature digital infrastructure and credible business presence.

B

B&B. Markenagentur GmbH

bundb.de

65

B&B. Markenagentur GmbH is a medium-sized branding agency based in Hannover, Germany, specializing in strategic, creative, and communicative brand development. The company integrates human creativity with AI technologies to deliver innovative marketing and branding solutions, targeting businesses and public sector clients. Their service portfolio includes brand management, employer branding, change communication, and AI marketing, positioning them as a forward-thinking agency in the branding industry. Technically, the website demonstrates a modern and performant infrastructure with responsive design, multimedia integration (YouTube, Vimeo videos), and advanced cookie consent mechanisms. The use of Google Tag Manager with a custom domain, A/B testing tools, and lazy loading images reflects a mature digital presence. Hosting is likely provided by kasserver.com, consistent with the domain's nameservers. From a security perspective, the site enforces HTTPS, employs cookie consent compliant with GDPR, and uses CSRF tokens for form protection. However, explicit security headers are not detected, and no public security or incident response policies are found. No vulnerabilities or exposed sensitive data are evident in the content, indicating a solid security posture. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with a high-quality user experience and clear business information. Strategic recommendations include enhancing security headers, publishing security policies, and implementing vulnerability disclosure mechanisms to further strengthen trust and compliance.

T

Troester GmbH & Co. KG

x-compound.ch

57

Troester GmbH & Co. KG is a medium-sized German manufacturing company specializing in the design, development, and production of Continuous Kneaders and compounding technology for rubber and plastics processing. Established since 1997 in this niche, the company holds a worldwide leading market position with a strong focus on quality and innovation. Their website reflects a professional B2B orientation targeting industrial manufacturers requiring advanced compounding solutions. The company offers a broad range of services including spare parts supply, process engineering, electrical equipment, and refurbishment services. The digital presence is supported by structured data and social media integration, enhancing discoverability and trust. Technically, the website is built on WordPress with a custom theme by B&B Markenagentur, employing modern web standards including responsive design and privacy-conscious analytics via Matomo. Hosting is managed through Deutsche Telekom's DNS infrastructure, indicating a stable and reliable environment. Performance and SEO are well addressed, though some improvements in security headers and cookie consent mechanisms could be made. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for maturity in security governance. Privacy compliance is generally good, supported by a comprehensive privacy policy, but lacks a visible cookie consent banner which is important for GDPR adherence. Overall, the website and company demonstrate a high level of professionalism and trustworthiness suitable for their industrial market segment. Strategic enhancements in security transparency and privacy mechanisms would further strengthen their digital risk management and compliance posture.

T

TROESTER GmbH & Co. KG

troester-parts.de

56

TROESTER GmbH & Co. KG operates the TEESIS online platform, a specialized electronic spare parts catalog designed for industrial customers and partners. The website facilitates fast and intuitive identification of spare parts, supporting B2B transactions in the manufacturing sector. The platform includes user login and registration capabilities, enhancing secure access to detailed product information. The business positions itself as a niche supplier with a focus on quality and service in the manufacturing industry, primarily targeting German and European markets. Technically, the website is built on the CATALOGcreator® platform, leveraging modern web technologies such as HTML5, CSS3, and JavaScript. The site demonstrates moderate performance and basic mobile optimization, with a clean and professional design. SEO and accessibility features are present but could be improved. The hosting environment supports HTTPS, ensuring encrypted communications. From a security perspective, the site enforces HTTPS and employs secure login forms. However, it lacks advanced security headers and does not publish explicit security policies or incident response procedures. Privacy compliance is strong, with a comprehensive GDPR-compliant privacy policy accessible via an external link. No cookie consent mechanism or terms of service page was found. No tracking or advertising scripts were detected, indicating a privacy-conscious approach. Overall, the website is trustworthy, professional, and safe for its intended industrial audience. The domain registration data aligns well with the business identity, supporting legitimacy. Strategic improvements in security headers, cookie consent, and mobile optimization would enhance the platform's security posture and user experience.

A

ALEA Music

alea-music.com

41

ALEA Music is a small, professional live band service based in Germany specializing in event entertainment including background music and party performances. The website presents a well-structured, content-rich platform showcasing their services, band members, and multimedia content to engage potential clients. The technical infrastructure uses modern web technologies such as Bootstrap, jQuery, and Google Analytics, providing a responsive and user-friendly experience. However, the absence of WHOIS data raises concerns about domain registration legitimacy, though the website content itself is professional and consistent with a legitimate business. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms, indicating room for improvement in compliance and security best practices.

S

Stadt Coburg

coburg.de

54

The website www.coburg.de serves as the official online portal for the city of Coburg, Germany, providing a wide range of municipal information and services to residents and visitors. It offers access to online services, event information, local news, and administrative resources, positioning itself as a comprehensive digital gateway for the city's public administration and community engagement. The site targets citizens, tourists, and local businesses, emphasizing accessibility and service convenience. Technically, the website is built on the Sitepark CMS platform, utilizing modern web technologies including responsive design, SVG icons, and Matomo analytics for privacy-conscious user tracking. The site demonstrates good mobile optimization, accessibility features, and SEO practices, contributing to a positive user experience and efficient content delivery. From a security perspective, the site enforces HTTPS and employs a cookie consent mechanism compliant with GDPR standards. While explicit security headers and incident response policies are not clearly published, no critical vulnerabilities or suspicious activities were detected. The use of Matomo analytics reflects a commitment to privacy and data protection. Overall, the website presents a professional, trustworthy, and user-friendly interface for municipal services. Strategic recommendations include enhancing security header implementation, publishing clear security and incident response policies, and considering a vulnerability disclosure program to further strengthen trust and compliance.

T

Tobit Laboratories AG

tobit.com

72

Tobit Laboratories AG is a medium-sized German technology company specializing in the development and marketing of standard software solutions for digitalization, primarily through its chayns® cloud-based operating system. Established in 1986 and headquartered in Ahaus, Germany, Tobit serves a broad audience including enterprises, organizations, and municipalities. The company has a strong market position in Germany with a comprehensive portfolio of software products and services, supported by a large partner network. Technically, the website is built on modern web technologies including React and is hosted with Cloudflare services, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforcement and standard security headers, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is partially addressed with a privacy and terms of service page but lacks a visible cookie consent mechanism. Overall, the domain registration data aligns well with the company's identity, supporting legitimacy and trustworthiness.

M

Museen der Stadt Aschaffenburg

christian-schad-museum.de

41

The website represents the Museen der Stadt Aschaffenburg, a municipal cultural institution in Germany offering a range of museums including the Christian Schad Museum. It provides comprehensive cultural and educational services with a strong focus on art history and local heritage. The museum is uniquely positioned as the only location worldwide presenting all periods of Christian Schad's work. The site targets a broad audience including local visitors, tourists, and art enthusiasts. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript with jQuery and Modernizr, and includes accessibility and SEO best practices. The site is multilingual and includes a newsletter subscription service. Security posture is moderate with HTTPS implied, but lacks explicit security headers and incident response information. Privacy compliance is good with clear privacy and cookie policies, though no active cookie consent mechanism is present. Overall, the site is professional, trustworthy, and well-maintained, with room for security and privacy enhancements.

S

significa GmbH

significa.de

46

significa GmbH is a German full-service marketing agency specializing in digital and classical marketing solutions primarily for medium-sized companies in the technology and industrial sectors. With over 20 years of experience, the company offers a broad range of services including design, digital marketing, classic advertising, content creation, consulting, and innovative marketing on demand. The website reflects a professional and consistent brand image supported by client testimonials and a diverse portfolio of reputable clients. Technically, the site is built on a modern stack including HTML5, CSS3, JavaScript, jQuery, and uses REDAXO CMS with Matomo for privacy-conscious analytics. The site is well-optimized for SEO, accessibility, and mobile devices, providing a positive user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are not publicly disclosed. Overall, the site demonstrates high professionalism and trustworthiness with no signs of malicious content or blocking mechanisms.

T

Teatro alla Scala

teatroallascala.org

65

Teatro alla Scala is a prestigious cultural institution based in Milan, Italy, renowned globally for its opera, ballet, and concert performances. The website serves as a comprehensive portal for ticket sales, event calendars, educational programs, and streaming content via LaScalaTV. The site targets a broad audience including opera enthusiasts, families, and young audiences, offering rich multimedia content and detailed event information. The business model revolves around live performances, cultural education, and digital media distribution, supported by prominent sponsors such as Intesa San Paolo and Rolex. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Bootstrap, and Swiper.js for interactive elements. It integrates analytics tools like Matomo and Google Tag Manager, ensuring data-driven insights while maintaining user privacy through a clear cookie consent mechanism. The site is mobile-optimized and accessible, with good SEO practices and a professional design that enhances user experience. From a security perspective, the site uses HTTPS with a strong SSL configuration and implements cookie consent for compliance with GDPR. However, explicit security headers and published security policies are absent, representing areas for improvement. The WHOIS data is unavailable due to a malformed query, but the domain appears legitimate and active, consistent with the institution's reputation. Overall, Teatro alla Scala's website is a high-quality, trustworthy platform that effectively supports its cultural mission. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure information, and improving transparency around security practices to further strengthen trust and compliance.

C

co.met GmbH

ablesen.de

60

The website ablesen.de represents co.met GmbH, a German company specializing in digital meter reading and consumption data management services. Their offering includes a full-service solution for meter data acquisition, customer self-reading, and support for various meter technologies such as OMS-Funk and LoRaWAN. The company targets energy providers and meter operators, positioning itself as a specialized service provider in the energy sector. The website content is professional, well-structured, and primarily in German, reflecting a focused business audience. Technically, the website is built with standard HTML5 and CSS3, hosted on servers associated with Stadtwerke Saarbrücken Konzern, indicating reliable local infrastructure. The site is moderately optimized for performance and mobile devices, with good SEO practices and basic accessibility features. No advanced frameworks or CMS platforms are detected, suggesting a lightweight and straightforward implementation. From a security perspective, the site uses HTTPS as indicated by canonical URLs, but lacks explicit security headers and a published security policy. The privacy policy is comprehensive and GDPR compliant, detailing data processing, retention, and user rights. No cookie consent mechanism or terms of service are found, which could be improved. No signs of WAF or blocking mechanisms are present, and no vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website demonstrates a solid business credibility and privacy compliance posture with room for improvement in security best practices and transparency. The risk level is low, but enhancing security headers, cookie management, and incident response information would strengthen trust and compliance.

V

VELA EU

vela.eu

64

VELA EU is a well-established company specializing in manufacturing and providing safety and self-reliance chairs for children and adults, particularly targeting seniors and disabled individuals. The company has a long history dating back to 1935 and operates primarily in the healthcare sector, focusing on mobility aids. Their website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site is built on WordPress and leverages modern technologies including Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is hosted likely behind Cloudflare CDN, ensuring good performance and security. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not published. Privacy compliance is strong with a comprehensive privacy policy and GDPR-aligned cookie consent. Overall, the website and business appear legitimate and trustworthy, with no signs of malicious activity or content safety concerns.

V

VEMA Versicherungsmakler Genossenschaft eG

vemaeg.de

63

VEMA Versicherungsmakler Genossenschaft eG is a well-established German cooperative founded in 1997, serving as the largest cooperative network for insurance brokers in Germany. The organization focuses on digitalization, product development, and continuing education for insurance brokers, providing a comprehensive B2B platform and various services including events and training. Their market position is strong, supported by a large user base and extensive service offerings. Technically, the website uses modern JavaScript libraries like jQuery and Slick Slider, with good mobile optimization and SEO practices, though no CMS or hosting provider is explicitly identified. Security posture is solid with HTTPS and cookie consent mechanisms, but lacks published security policies or incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR, with clear contact information and active social media presence.

NT-net is a regional internet and telephony service provider operated by Stadtwerke Nürtingen GmbH, serving primarily the Nürtingen area in Germany. The company offers highspeed internet packages with various bandwidth options and telephone flat rates, emphasizing local customer support and transparency. The website is professionally designed, mobile-optimized, and provides comprehensive product information, discounts, and customer support details. The business model focuses on regional utility and telecommunications services with preferential treatment in fiber optic rollout, positioning NT-net as a trusted local provider. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, incorporating modern JavaScript and CSS technologies. It integrates cookie consent management, analytics tools like Google Analytics and Matomo, and provides secure mail server configuration details. The site demonstrates good SEO, accessibility, and performance characteristics, with no blocking or WAF challenges detected. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were found in the content. WHOIS data is unavailable due to privacy or technical reasons, but the website's consistent business information and local contact details support its legitimacy. Overall, NT-net's website presents a trustworthy and professional digital presence suitable for its regional telecommunications business. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure could further enhance its security posture and customer trust.

D

DJK-Sportverband e.V.

djk.de

57

DJK-Sportverband e.V. is a well-established non-profit sports federation in Germany, founded in 1920, that promotes sports activities underpinned by Christian and inclusive values. The organization targets sports clubs, athletes of all ages and abilities, and community members interested in ethical and inclusive sportsmanship. Their key services include diverse sports offerings, inclusion initiatives, prevention of sexualized violence, and organizing major sports events such as the Bundessportfest. The website reflects a strong community focus and a commitment to social responsibility.

B

Bund der St. Sebastianus Schützenjugend

bdsj.de

59

Bund der St. Sebastianus Schützenjugend (BdSJ) is a large non-profit youth organization in Germany with approximately 30,000 members. The organization focuses on social, sporting, and religious youth work, emphasizing cultural and political education within the framework of the Schützenjugend tradition. The website serves as an information hub for the federal association, providing news, project details, and resources for members and interested parties. The organization is well-established, founded in 1961, and maintains a strong presence through its six diocesan associations and over 1,200 brotherhoods. Technically, the website is built on the Alkacon Mercury CMS platform, utilizing modern web technologies including HTML5, CSS3, JavaScript, and jQuery. Accessibility features are implemented via the EyeAble plugin, and the site is mobile-optimized with good SEO practices. The site uses HTTPS with an excellent SSL configuration, ensuring secure communications. Privacy and cookie policies are comprehensive and GDPR compliant, with a consent mechanism in place. Security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the site lacks explicit security policy or incident response information and does not publish a security.txt file. Contact information is clearly presented, including email, phone, physical address, and a contact form with privacy consent. Social media sharing is integrated but no direct official social media profiles are linked. Overall, the website is professional, trustworthy, and well-maintained, reflecting the organization's credibility and commitment to its members. Strategic improvements could include adding explicit security policies and enhancing security headers to further strengthen the security posture.

R

RSG Langenhagen 82 e.V.

rsg-langenhagen.de

57

RSG Langenhagen 82 e.V. is a well-established non-profit sports club specializing in wheelchair sports in the Hannover region of Germany. The organization offers a variety of sports activities including badminton, wheelchair basketball, swimming, and self-defense workshops targeted primarily at children, youth, and individuals with physical disabilities. The club holds a strong regional position as a founding member of the German Wheelchair Sports Association and maintains partnerships with local foundations and organizations. The website content is comprehensive and well-structured, providing detailed information about events, workshops, and club news in German. Technically, the site is built on the IONOS MyWebsite CMS platform, uses modern web technologies, and is hosted by IONOS. It is mobile-optimized and provides a good user experience, though accessibility features could be improved. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR explicit indicators. Overall, the site is trustworthy and professional but could benefit from enhanced security and privacy features.

G

Genoverband e.V.

genoverband.de

54

Genoverband e.V. is a well-established German cooperative association providing auditing, consulting, education, and advocacy services to approximately 2,600 member cooperatives across 14 federal states. The organization specializes in the legal form of registered cooperatives (eG) and offers a broad range of services including economic, tax, and legal advice. The website reflects a professional and comprehensive digital presence with detailed information about the association, its services, news updates, events, and multiple physical office locations. The target audience includes cooperative members, founders, banks, and political stakeholders. Technically, the website uses modern web technologies such as HTML5, CSS3, JavaScript, and Swiper.js for interactive elements, and it is well optimized for mobile devices with good accessibility and SEO practices. Security-wise, the site enforces HTTPS and uses secure forms but lacks explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness.

Idea-sketch.com is a small business operated by Jan Böhme & Uwe Schützenmeister GbR, focusing on software and operational services tailored for education and development cooperation sectors. The website presents a minimalistic design with basic navigation and content primarily in German. The business appears niche-focused, serving educational institutions and development organizations, with a domain age of over a decade supporting its established presence. Technically, the website is simple, built with standard HTML and CSS, without detected CMS or advanced frameworks. Hosting utilizes Cloudflare DNS services, but no advanced security headers or DNSSEC are enabled, indicating room for improvement in technical security and performance optimization. The site lacks analytics, tracking, or marketing tools, reflecting a low digital marketing footprint. From a security perspective, the site uses domain status protections to prevent unauthorized changes but lacks visible HTTPS enforcement details and security headers. No incident response or security policies are published, and no contact information is explicitly provided on the main page, which may affect user trust and compliance. Privacy policy exists but cookie consent mechanisms are absent, indicating partial GDPR compliance. Overall, the website is functional but basic, with moderate trustworthiness and business credibility. Strategic improvements in security posture, privacy compliance, and contact transparency would enhance the site's professionalism and user confidence.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) indicating that the requested website content is not accessible or blocked. No actual website content, metadata, or business information is present. The page primarily contains embedded Chromium offline game scripts and styling for the offline error display. Due to the lack of accessible content, no privacy, cookie, or terms of service policies are found, and no contact or security policy information is available. This limits the ability to assess the business or security posture of the intended website. The page is safe in terms of content safety as it contains no adult or questionable material but is not a functional website page.

S

Stiftung Kunst und Natur

kunst-und-natur.de

63

Stiftung Kunst und Natur is a German non-profit foundation focused on fostering interdisciplinary engagement with art, culture, nature, and landscape. It operates at two main locations: Nantesbuch in Bavaria and the Museum Sinclair-Haus in Bad Homburg. The foundation offers cultural events, workshops, and environmental conservation activities, targeting art and nature enthusiasts as well as the regional community. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern JavaScript libraries, integrates Google Analytics for visitor insights, and employs Cookiebot for GDPR-compliant cookie consent management. Security posture is solid with HTTPS and error tracking, though additional security headers could enhance protection. Privacy compliance is well addressed with accessible policies and consent mechanisms. However, no explicit contact information or terms of service were found, which could be improved to enhance business credibility.

K

KirchnerHaus Aschaffenburg

kirchnerhaus.com

63

KirchnerHaus Aschaffenburg is a specialized cultural institution and museum dedicated to the life and works of Ernst Ludwig Kirchner and modern artists. The website provides detailed information about exhibitions, events, guided tours, and a retail shop offering art catalogs, posters, and postcards. The target audience includes art enthusiasts, families, and scholars interested in expressionism and modern art. The business model is primarily non-profit with revenue from ticket sales and merchandise. Technically, the website is built on WordPress using the Avada theme and WooCommerce for e-commerce functionality. It employs modern web technologies including jQuery and Google Analytics for tracking. The site is mobile-optimized and offers good user experience with clear navigation and professional design. From a security perspective, the site uses HTTPS and has cookie consent mechanisms in place, indicating compliance with GDPR. However, some security headers like Content-Security-Policy and X-Frame-Options are missing, which could be improved to enhance security posture. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, content-rich, and trustworthy from a user perspective. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and ownership transparency. This discrepancy should be investigated further to ensure full trustworthiness.

I

Institut für Stadtgeschichte Frankfurt

stadtgeschichte-ffm.de

50

The Institut für Stadtgeschichte Frankfurt is a prominent municipal archive and cultural institution in Frankfurt, Germany, with a historical legacy dating back to 1436. It serves as a key repository for historical documents related to the city and offers public access through archives, exhibitions, events, publications, and educational programs. The website reflects a well-structured and content-rich platform targeting researchers, historians, and the general public interested in Frankfurt's history. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and lazy loading for images, hosted on domaincontrol.com nameservers. The site is mobile-optimized with good SEO practices but lacks some advanced security headers and cookie consent mechanisms. No major vulnerabilities or exposed sensitive data were detected. From a security perspective, the site uses HTTPS and shows no signs of WAF or blocking mechanisms. However, it lacks explicit security policies, incident response contacts, and cookie consent banners, which are recommended for compliance and user trust. The WHOIS data indicates a legitimate domain registration consistent with the institution's profile. Overall, the website is professional, trustworthy, and serves its audience well, but could improve in privacy compliance and security posture by adding cookie consent, security headers, and incident response information.

D

Deutsches Romantik-Museum – Frankfurt am Main

deutsches-romantik-museum.de

57

The Deutsches Romantik-Museum website serves as an online presence for a cultural museum located in Frankfurt am Main, Germany, dedicated to Romanticism art and culture. The site targets general visitors interested in art and cultural heritage, providing information about exhibitions and events. The business model is that of a cultural institution with a focus on education and public engagement. Technically, the website employs modern web standards with HTML5 and CSS3, uses Matomo for analytics with privacy-conscious cookie management via Cookiebot, and is hosted on a multimedia service provider's infrastructure. The site is mobile-optimized and provides a good user experience with consistent branding and clear navigation. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, but lacks published security policies and incident response contacts. Overall, the site is trustworthy and compliant with GDPR cookie consent requirements but could improve transparency by publishing privacy and security policies.

L

Landesbauernverband Baden-Württemberg mbh

lbv-smg-reisen.de

41

The website www.lbv-smg-reisen.de represents a specialized travel service provider affiliated with the Landesbauernverband Baden-Württemberg mbh, focusing on group and club travel with an agricultural theme. The site offers a variety of travel programs to diverse destinations, emphasizing cultural and agricultural experiences. The business operates in Germany and targets agricultural professionals and groups interested in thematic travel. Technically, the site is built on Drupal 10, with good mobile optimization and accessibility, and moderate performance. Security posture is adequate with HTTPS enabled but lacks explicit security headers and incident response information. Privacy compliance is good with a clear privacy and cookie policy in German. Overall, the site is professional, trustworthy, and content-rich, though contact information is not explicitly found in the provided content.