Security Directory

B

Bayerisches Staatsministerium für Ernährung, Landwirtschaft, Forsten und Tourismus

genussorte.bayern

71

Genussorte Bayern is a government-supported platform dedicated to promoting the culinary heritage and regional specialties of Bavaria. It serves as an informational and promotional resource for residents and tourists interested in exploring Bavarian food culture, events, and local producers. The website is professionally designed using WordPress and Elementor, featuring interactive maps, event calendars, video galleries, and recipe collections. It is backed by the Bavarian State Ministry for Food, Agriculture, Forestry and Tourism, lending it strong credibility and trustworthiness. Technically, the site employs a modern WordPress ecosystem with various plugins for event management, accessibility, and cookie consent. The site is well-optimized for mobile devices and accessibility, with good SEO practices and performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though HTTP security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive privacy policy and cookie management system that aligns with GDPR requirements. The WHOIS data is privacy protected, which is typical for government-affiliated sites, and does not detract from the site's legitimacy. Overall, Genussorte Bayern presents a low-risk profile with a strong business and security posture, making it a reliable source for Bavarian culinary tourism information.

L

Landwirtschaftsverlag GmbH

lv.de

46

Landwirtschaftsverlag GmbH operates as a major German media company specializing in agriculture, food, and rural lifestyle content. With over 900 employees and significant revenue, it holds a strong market position among Germany's top 100 media companies. The website reflects a professional digital presence with a focus on publishing and digital media services targeted at agricultural professionals and rural communities. Technically, the site uses modern frameworks like Bootstrap and integrates Google Analytics and Usercentrics for tracking and consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS and anonymized analytics, though explicit security headers and incident response information are absent. Overall, the site is compliant with GDPR and provides clear business information, though lacks direct contact emails or phone numbers on the main pages. The domain registration data is minimal but consistent with the business claims, and no blocking or WAF interference was detected.

A

AgrarBündnis

agrarbuendnis.de

55

AgrarBündnis is a German non-profit alliance comprising 26 independent organizations focused on agriculture, environmental protection, and socio-economic issues in farming. The website serves as an information hub, sharing projects, discussion papers, and press releases relevant to sustainable agriculture and environmental advocacy. The organization positions itself as an established and credible entity within its sector, targeting stakeholders interested in sustainable and socially responsible agriculture. Technically, the website is built on TYPO3 CMS, leveraging modern frontend libraries such as jQuery, Bootstrap, and FontAwesome. Hosting is managed via cyon.ch, a reputable Swiss hosting provider. The site demonstrates moderate performance and good mobile optimization, though accessibility features could be enhanced. SEO is basic but functional, with proper meta tags and canonical URLs. From a security perspective, the site uses HTTPS with a good SSL configuration and implements a cookie consent mechanism compliant with GDPR. However, explicit security headers are not detected, and no public security or incident response policies are available. Google Analytics is used with IP anonymization, indicating moderate user tracking. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website is professional, trustworthy, and safe for general audiences. The absence of contact emails and phone numbers on the homepage slightly reduces direct user engagement potential. Strategic improvements in security headers, accessibility, and public security policies would enhance the site's security posture and compliance.

Opito Streaming, operated by Opito Labs GmbH, is a German-based professional streaming and live event production service provider founded in 2020. The company offers a comprehensive portfolio including full-service congress and conference streaming, live remote connections, pre-recording, live on-site production, hybrid events, and scalable streaming solutions with real-time recordings and video-on-demand. Their market position is that of a leading streaming expert with over 20 years of experience in the broader media and event production industry, targeting businesses and organizations requiring professional streaming services. Technically, the website employs modern front-end technologies such as Bootstrap, Material Design Bootstrap, Font Awesome, and jQuery, hosted by Hetzner Online GmbH. The site is mobile optimized with good design and user experience, though SEO and accessibility are basic. Analytics usage is minimal with Google Analytics scripts commented out, indicating a low level of user tracking. From a security perspective, the site lacks visible HTTPS confirmation in the provided data and does not implement common security headers, which lowers its security posture. No privacy or cookie policies are present, indicating gaps in GDPR compliance. Contact information is clearly provided, but no incident response or security policy details are available. Overall, the website is professional and trustworthy in business presentation but requires improvements in security best practices and privacy compliance to enhance trust and reduce risk. Strategic recommendations include enabling HTTPS, adding privacy and cookie policies, implementing security headers, and establishing vulnerability disclosure mechanisms.

T

TVN GROUP HOLDING GmbH & Co. KG

tvn.de

53

TVN GROUP HOLDING GmbH & Co. KG is a well-established German media company specializing in film and television production services, corporate media, live broadcasting, and innovative media solutions including VR/AR and 360° films. As part of the Madsack Mediengruppe, it leverages over 40 years of industry experience and offers a comprehensive portfolio of services to media professionals and corporate clients. The company maintains a strong market position with diversified competencies and a focus on technical and content innovation. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries such as jQuery, Bootstrap, and Slick Carousel. It integrates Matomo analytics and a consent management platform to ensure GDPR compliance. Hosting appears to be stable and professional, likely provided by Deutsche Telekom. The site is mobile-optimized and SEO-friendly, with good accessibility and performance characteristics. From a security perspective, the website enforces HTTPS and uses a consent management platform for privacy compliance. However, it lacks explicit security policy pages, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The overall security posture is solid but could be improved by adding security headers and formal policies. Overall, the website is professional, trustworthy, and compliant with privacy regulations. It effectively communicates the company's services and corporate identity, supporting a positive user experience and business credibility.

W

WearKraft

wear-kraft.com

68

WearKraft is a specialized supplier of quarrying, mining, and recycling wear parts designed to enhance equipment durability and efficiency. The website positions the company as a B2B provider targeting industrial sectors such as manufacturing and transportation. The digital infrastructure leverages modern web technologies including Google Tag Manager, Cookiebot, and reCAPTCHA, indicating a mature approach to analytics and user experience. Security posture is generally strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are absent. The lack of WHOIS registration data raises concerns about domain legitimacy, but the presence of a privacy policy linked to terex.com suggests affiliation with a reputable parent organization. Overall, the website is professional, safe, and compliant with privacy regulations, but would benefit from enhanced transparency and security disclosures.

T

Terex Corporation

terex.com.au

69

Terex Corporation is a global manufacturer specializing in aerial work platforms and materials processing equipment. The company provides lifecycle solutions aimed at maximizing customer return on investment, positioning itself as a key player in the manufacturing and transportation sectors. The website reflects a professional corporate presence with clear branding and relevant business content targeting industrial and commercial customers. Technically, the website employs modern technologies such as Google Tag Manager, Cookiebot for consent management, and popular JavaScript libraries to enhance user experience and analytics capabilities. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit incident response information. The absence of WHOIS data limits domain trust verification, but the website content and structure indicate a legitimate enterprise. Overall, the site is well-constructed, compliant with privacy regulations, and suitable for its target audience.

P

PERSKIMEDIA Szymon Perski

dydaktyczne.pl

54

Dydaktyczne.pl is a Polish educational e-commerce website specializing in the sale of didactic posters and teaching aids for schools, preschools, and libraries. The company, registered as PERSKIMEDIA Szymon Perski, offers a wide range of educational materials aligned with the current curriculum, targeting children and youth across various educational levels. The website demonstrates a solid market position within the Polish educational sector, supported by professional graphic design and a comprehensive product catalog. Technically, the site employs modern JavaScript frameworks such as Vue.js and Bootstrap, with integrated analytics tools including Matomo and Google Tag Manager, reflecting a mature digital infrastructure. Security posture is good with HTTPS enabled and CSRF protections, though improvements such as DNSSEC and CSP headers are recommended. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website is trustworthy, professional, and well-suited for its educational audience.

T

Terex Corporation

terex.com

70

Terex Corporation is a global manufacturer specializing in aerial work platforms and materials processing equipment. The company provides lifecycle solutions aimed at maximizing customer return on investment, targeting industrial and commercial sectors worldwide. The website reflects a professional corporate presence with a focus on product and service offerings in manufacturing and transportation industries. The digital infrastructure incorporates modern technologies such as Google Tag Manager and Cookiebot for analytics and privacy compliance, indicating a mature digital presence. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit incident response contacts are absent. Overall, the website is trustworthy and professionally maintained, with room for improvement in transparency and security best practices. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and improving accessibility compliance to further strengthen the security and compliance posture.

M

MediSpo, s.r.o.

oberisk.cz

34

Oberisk.cz is a Czech healthcare service website operated by MediSpo, s.r.o., focusing on weight management and obesity treatment through a network of doctors and nutrition therapists. The site offers various services including body composition measurement, weight reduction programs, telemedicine consultations, and access to pharmacotherapy and bariatric surgery support. The business is positioned as a regional healthcare provider with 13 centers and 24 professionals serving over 1400 clients, targeting patients seeking lifestyle changes and obesity treatment. Technically, the website uses a modern JavaScript stack including Google Analytics and Tag Manager for tracking, Bootstrap for responsive design, and several UI libraries. The site is mobile-optimized with good navigation and content quality, though SEO and accessibility are basic. No CMS or hosting provider details are explicitly detected. Performance is moderate. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and published privacy or cookie policies, which are compliance gaps. No incident response or vulnerability disclosure information is provided. The WHOIS data is consistent with the business age and domain registration, supporting legitimacy. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance and security hardening to enhance user trust and regulatory adherence.

Volkshochschule Kaiserslautern is a regional adult education provider in Germany offering a wide range of courses including languages, health, culture, and professional development. The website is built on TYPO3 CMS with modern frontend technologies and provides a professional, well-structured user experience. The institution maintains partnerships with local organizations and promotes community learning initiatives such as a MakerSpace. Security posture is solid with HTTPS and secure login forms, though improvements are recommended in security headers and cookie consent mechanisms. The website is GDPR compliant with a clear privacy policy and terms of service. Overall, the site reflects a trustworthy and credible educational institution with good digital maturity.

S

scena.ai

scena.ai

54

scena.ai is a technology company specializing in AI-driven interactive video and avatar creation solutions. Their platform enables users to create engaging, multilingual interactive videos and AI avatars with voice cloning capabilities, targeting businesses and organizations in marketing, e-learning, and customer engagement sectors. The company positions itself as an innovative SaaS provider with scenario-based dialogue editing and no-code tools, supported by reputable clients and certifications. Technically, scena.ai employs modern JavaScript libraries and cloud hosting with Cloudflare DNS, integrating analytics and marketing tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The website is well-designed, mobile-optimized, and SEO-friendly, providing a professional user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements like enabling DNSSEC and publishing explicit security policies are recommended. Overall, scena.ai demonstrates a mature digital presence with strong business credibility and compliance, suitable for its market niche.

M

Město Hradec nad Moravicí

muhradec.cz

47

The website www.muhradec.cz serves as the official online presence for the town of Hradec nad Moravicí, Czech Republic. It provides comprehensive information about municipal services, local government, cultural events, and public notices. The site targets residents, visitors, and local stakeholders, offering services such as e-podatelna (electronic filing), official announcements, and social services like SENIOR TAXI. The site maintains a consistent brand identity with the town's crest and official colors, and integrates social media channels to enhance community engagement. Technically, the website employs a modern tech stack including jQuery, Bootstrap 4, Swiper, and other JavaScript libraries to deliver a responsive and accessible user experience. The site is mobile-optimized and includes accessibility features, with a clear navigation structure and search functionality. Cookie consent is implemented, indicating attention to privacy compliance. However, no advanced analytics or tracking scripts were detected, suggesting a privacy-conscious approach. From a security perspective, the site uses HTTPS and has a cookie consent mechanism, but lacks visible security headers in the provided HTML content. There is no explicit security policy or incident response information published. The WHOIS data for the domain is unavailable, which reduces trust from a domain registration standpoint, but the official nature of the content and municipal branding strongly support legitimacy. Overall, the site is a well-structured, informative municipal portal with good content quality and user experience. Security posture could be improved by adding security headers and publishing security policies. Domain registration transparency should be verified to enhance trustworthiness.

VortexHealing® Divine Energy Healing is a small, niche holistic healing and spiritual awakening organization founded in 2000. The website provides comprehensive information about their healing system, certified teachers, training programs, testimonials, and resources. Their target audience includes individuals interested in energy healing and spiritual growth. The business model focuses on educational services and community support. Technically, the site uses common web technologies such as jQuery, Bootstrap, and the Yii framework, hosted by Bluehost Inc. The site is mobile responsive with good navigation and content quality. Security posture is moderate with use of CSRF tokens but lacks DNSSEC and security headers. Privacy and cookie policies are absent, indicating compliance gaps. Social media presence is limited to Facebook and YouTube. Overall, the domain registration is consistent with the business history, enhancing credibility.

N

Nestlé Health Science

nestlehealthscience.fr

65

Nestlé Health Science is a prominent healthcare nutrition company offering specialized products to support patient health through nutrition. The website reflects a mature digital presence with a professional design, clear navigation, and compliance with privacy regulations such as GDPR. Technically, the site is built on Drupal CMS and leverages modern JavaScript libraries and analytics tools, ensuring good performance and accessibility. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not publicly visible. The absence of WHOIS data is a notable gap, slightly impacting trust but not detracting from the overall legitimacy given the strong brand presence. Strategic recommendations include publishing detailed security and incident response policies and adding vulnerability disclosure mechanisms to enhance transparency and trust.

D

Deutsche Bischofskonferenz

dbk.de

53

The Deutsche Bischofskonferenz (DBK) website serves as the official online presence of the German Bishops' Conference, providing authoritative information, news, and resources related to the Catholic Church in Germany. It targets German-speaking Catholics, church officials, and the general public interested in religious affairs. The site offers thematic content, service tools such as parish searches and address directories, and maintains a strong social media presence. The business model is non-profit and government-related, focusing on information dissemination and coordination among Catholic dioceses. Technically, the website is built on TYPO3 CMS and leverages modern web technologies including jQuery, Bootstrap, and Owl Carousel. It is hosted on domaincontrol.com nameservers, indicating professional hosting arrangements. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Privacy compliance is robust, featuring a Usercentrics consent management platform and a comprehensive privacy policy in German. From a security perspective, the site enforces HTTPS and uses modern libraries, but lacks explicit security headers such as CSP and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contact is noted. Overall, the security posture is good but could be improved with additional headers and formal vulnerability disclosure mechanisms. The website is safe for general audiences, containing no adult or explicit content. The domain registration data aligns well with the organization's identity, showing no suspicious patterns. The site is trustworthy, professionally maintained, and compliant with relevant regulations. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining up-to-date software components.

O

Obec Nespeky

nespeky.com

50

Obec Nespeky operates an official municipal website serving the local community of Nespeky in the Czech Republic. The site provides comprehensive information including news, official notices, event calendars, and contact details, positioning itself as a trusted local government resource. The website is well-structured, mobile-optimized, and includes accessibility certification, reflecting a commitment to inclusivity and compliance with local regulations such as GDPR. Technically, the site leverages modern JavaScript libraries like jQuery, Bootstrap, Swiper, and Leaflet for interactive maps, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS usage and cookie consent mechanisms, though it lacks explicit security headers and incident response information, which are areas for improvement. The absence of WHOIS data transparency is a notable concern, slightly diminishing trust despite the professional presentation and official nature of the site. Overall, the website is reliable and serves its governmental function effectively, with recommendations to enhance security practices and WHOIS transparency.

O

Obec Hvězdonice

hvezdonice.cz

46

Obec Hvězdonice operates an official municipal website serving the local community in the Czech Republic. The site provides comprehensive information including official announcements, municipal news, event calendars, contact details, and access to various citizen services such as forms and water level monitoring. The website targets residents and citizens of Hvězdonice and nearby areas, fulfilling the role of a local government information portal. The business model is governmental, focusing on transparency and public service. Technically, the website employs a mature technology stack including jQuery, Bootstrap, Highcharts, Leaflet, and Swiper for interactive and responsive features. The CMS appears to be a proprietary or specialized system by Galileo Corporation. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. Performance is moderate, with room for optimization. From a security perspective, the website uses HTTPS and implements cookie consent mechanisms, indicating awareness of privacy regulations. However, no explicit security headers were detected, and WHOIS data for the domain is missing, which raises concerns about domain registration transparency. No major vulnerabilities or tracking scripts were found, suggesting a low-risk profile, but improvements in security headers and domain registration visibility are recommended. Overall, the website is professional, trustworthy, and well-suited for its governmental purpose. The main risk lies in the lack of WHOIS data, which should be investigated to ensure domain legitimacy. Strategic recommendations include enhancing security headers, verifying domain registration, and expanding privacy and security policy disclosures.

Obec Petrov is the official municipal website for the village of Petrov near Prague, Czech Republic. It serves as a comprehensive portal providing residents and visitors with local government information, public notices, event calendars, practical information, and community services. The website is well-structured, primarily in Czech, and targets local citizens and stakeholders. It promotes transparency and community engagement through news updates, official documents, and contact channels. The site also supports mobile users with a dedicated app and email subscription service. Technically, the website employs a variety of modern JavaScript libraries and CSS frameworks including jQuery, Bootstrap, Swiper.js, and Leaflet for mapping. The CMS appears to be custom or government-specific. The site is mobile-optimized with good navigation and accessibility features, though some security headers are not explicitly detected. Cookie consent mechanisms are implemented, and privacy policies are available, indicating a reasonable level of GDPR compliance. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks visible advanced security headers and explicit incident response or security policies. No vulnerabilities or malicious content were detected in the HTML content. The absence of WHOIS data limits domain registration trust analysis, but the official branding and content strongly support legitimacy. Overall, Obec Petrov presents a trustworthy, well-maintained municipal website with good content quality and user experience. Strategic improvements in security headers and transparency around security policies would enhance its security posture and trustworthiness further.

O

Obec Čtyřkoly

ctyrkoly.cz

47

The website www.ctyrkoly.cz serves as the official online presence for the municipality of Čtyřkoly in the Czech Republic. It provides residents and visitors with timely information about local news, events, municipal office activities, waste collection schedules, and community services. The site targets local citizens and stakeholders interested in municipal governance and community engagement. The business model is typical for a government entity, focusing on information dissemination and public service rather than commercial activities. Technically, the website employs a traditional web stack including jQuery, Bootstrap 4, and Swiper.js for UI components and interactivity. The CMS appears to be a custom or regional solution (GCM CMS). The site is mobile-optimized with responsive design and accessible navigation, though accessibility features are basic. Performance is moderate, with no evident critical technical issues. From a security perspective, HTTPS is used, and a cookie consent banner is implemented, indicating some privacy compliance efforts. However, no explicit privacy policy, terms of service, or security incident response information is found. WHOIS data for the domain is unavailable, which limits the ability to fully verify domain legitimacy and trustworthiness. No security headers or advanced security practices are evident in the provided data. Overall, the website is a functional and professional municipal portal with good content quality and user experience. The main risks relate to incomplete privacy and security disclosures and the lack of domain registration transparency. Strategic improvements in these areas would enhance trust and compliance.

MAS Voticko z.s. is a Czech non-profit local action group dedicated to supporting regional development in the Voticko area. The organization focuses on community projects, social coordination, and facilitating access to EU and regional funding programs. Their website provides comprehensive information about their members, projects, strategies, calls for proposals, and contact details, targeting local municipalities, entrepreneurs, non-profits, and residents. The site is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, the website employs modern JavaScript libraries such as jQuery, Bootstrap, Swiper, and Leaflet for maps, indicating a moderate level of digital maturity. The site is mobile-optimized and accessible, with cookie consent mechanisms and privacy policies in place, reflecting good privacy compliance. Security posture is adequate with HTTPS usage and no visible sensitive data exposure, but lacks explicit security headers and incident response information. WHOIS data is unavailable, limiting domain trust assessment, but external references and content suggest legitimacy. Overall, the website is a reliable and professional digital presence for a regional non-profit organization.

L

Land Sachsen-Anhalt

sachsen-anhalt.de

58

The website www.sachsen-anhalt.de serves as the official state government portal for Sachsen-Anhalt, Germany. It provides comprehensive information about the state's ministries, public services, initiatives, news, and job postings. The portal targets citizens, businesses, and interested parties within the region, positioning itself as a trusted and authoritative source of governmental information and services. The business model is that of a government information portal, focusing on transparency and public engagement. Technically, the site is built on TYPO3 CMS with modern frontend technologies including Bootstrap and jQuery. Accessibility is a key focus, with tools like Eye-Able and ReadSpeaker integrated to assist users with disabilities. The site is mobile-optimized and demonstrates good SEO practices. Hosting is managed by Dataport AöR, a known IT service provider for public sector entities. From a security perspective, the site enforces HTTPS and uses security best practices such as secure cookies and accessibility features. However, explicit security headers like Content-Security-Policy are not clearly present, and there is no published security policy or incident response contact. No vulnerability disclosure or security.txt file is found, which could be improved to enhance transparency and security posture. Overall, the website is professional, trustworthy, and well-maintained with a strong focus on accessibility and user experience. Strategic recommendations include implementing a cookie consent mechanism, publishing security and incident response policies, and adding a vulnerability disclosure policy to further strengthen security and compliance.

R

Rehaklinik Seewis AG

rehaklinik-seewis.ch

61

Rehaklinik Seewis AG is a well-established rehabilitation clinic located in Switzerland, specializing in cardiological, psychiatric-psychosomatic, and internistic-oncological rehabilitation services. The clinic operates within a familial atmosphere and is part of the VAMED Schweiz network, which enhances its market position and trustworthiness. The website reflects a professional healthcare service provider with clear communication of services, patient focus, and career opportunities. The target audience primarily includes patients requiring specialized rehabilitation and healthcare professionals seeking employment. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Umbraco CMS, with integrations such as Matomo analytics and Google Maps API, indicating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities, although some security headers and explicit security policies are absent. Overall, the website is trustworthy, compliant with GDPR, and professionally maintained.

I

Innovation Acta S.r.l.

innovationacta.eu

56

Innovation Acta S.r.l. is a specialized consultancy firm based in Italy focused on supporting private and public organizations, researchers, and SMEs in securing EU research funding and managing multinational collaboration projects. Their services span from funding strategy and consortium building to project management, communication, and training. The company maintains a professional online presence with a well-structured website that is mobile optimized and regularly updated with relevant news and calls for proposals. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Font Awesome, ensuring a responsive and user-friendly experience. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, though it lacks explicit security headers and published incident response policies. The domain WHOIS data is privacy protected by EURid, which is typical for .eu domains, and no suspicious patterns were detected. Overall, Innovation Acta demonstrates a credible and professional digital footprint appropriate for its niche consultancy business.

O

Obec Podlesí

obecpodlesi.cz

51

Obec Podlesí operates an official municipal website serving the local community of Podlesí in the Czech Republic. The site provides comprehensive information about local government, community events, official documents, and contact details. It targets residents and visitors seeking municipal services and updates. The website is well-structured with clear navigation and mobile optimization, reflecting a good level of digital maturity for a small government entity. Technically, it employs common JavaScript libraries such as jQuery, Bootstrap, and Swiper.js to enhance user experience. Security posture is moderate; HTTPS is used, and a cookie consent mechanism is implemented, but security headers and explicit privacy policies are lacking. The absence of WHOIS data reduces trust slightly, though the official nature and content quality support legitimacy. Overall, the website is functional and trustworthy but would benefit from enhanced security and privacy transparency.

U

Urssaf

urssaf.fr

57

Urssaf.fr is the official website of the French social security contribution agency, providing personalized support and online services for employers, independent workers, and associations in France. The site offers comprehensive information, declaration services, and legal documentation, positioning itself as a key government resource in the social security sector. The website is professionally designed with consistent branding and good content quality, targeting a broad audience involved in social security contributions. Technically, the site uses a modern technology stack including jQuery, Bootstrap, and the Jahia CMS platform. It is mobile-optimized, accessible, and includes privacy and cookie consent mechanisms compliant with GDPR. Performance is moderate, with a well-structured HTML and CSS foundation. Analytics and chatbot services are integrated for user engagement and data collection. From a security perspective, the site enforces HTTPS, includes CSRF protection, and follows best practices, although explicit security headers could be verified further. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, which is typical for AFNIC-managed .fr domains, and does not detract from the site's legitimacy. Overall, Urssaf.fr presents a low-risk profile with strong business credibility and compliance posture. Strategic recommendations include enhancing visible security headers, publishing incident response contacts, and maintaining up-to-date third-party libraries to sustain security and trust.

C

Conseil de la protection sociale des indépendants (CPSTI)

secu-independants.fr

50

The Conseil de la protection sociale des indépendants (CPSTI) website serves as an official French government portal dedicated to providing social protection services for independent workers. It offers comprehensive information and services related to social contributions, health reimbursements, retirement planning, mediation for disputes, and social aid. The site is well-positioned as a trusted intermediary between independent workers and major social institutions such as Urssaf, Ameli, and Assurance Retraite. The target audience is clearly defined as independent workers in France, and the business model revolves around public service and support.

H

Heureka Group a.s.

heurekadevs.cz

58

HeurekaDevs.cz is a professional technology blog and community platform operated by Heureka Group a.s., a leading e-commerce shopping advisor in Europe. The website focuses on sharing insights, experiences, and developments related to technology and product management within Heureka. It targets developers, product managers, and technology enthusiasts, providing articles, event announcements, and community engagement opportunities. The site is well-branded and consistent with the parent company's identity. Technically, the website uses a modern tech stack including jQuery, Bootstrap, Google Analytics, Google Tag Manager, and the Didomi consent management platform. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Security practices include HTTPS enforcement and cookie consent, but lack explicit security headers and published security policies. The security posture is solid but could be improved by adding security headers, incident response contacts, and vulnerability disclosure information. Privacy compliance is supported by a cookie consent banner and GDPR-related scripts, though no dedicated privacy policy page was found. The absence of WHOIS data limits domain legitimacy verification, which is a concern for trust but the website content and branding strongly align with the reputable Heureka Group. Overall, the website is professional, trustworthy, and well-maintained, but would benefit from enhanced transparency in privacy and security policies and domain registration data to improve trust and compliance assurance.

The website www.1001saboresrm.es serves as an official regional tourism and gastronomy portal for the Region of Murcia, Spain. It promotes local culinary experiences, gastronomic events, and restaurants bearing the 1001 Sabores seal. The platform targets tourists, food enthusiasts, and local residents interested in regional gastronomy, positioning itself as a key government-backed resource for culinary tourism. The business model is primarily promotional, supported by regional government entities, aiming to boost tourism and local gastronomy awareness. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, Slider Revolution, and Google Analytics for user tracking. The site is mobile-optimized with good navigation and content structure, though accessibility features are basic. Performance is moderate, with no major technical issues detected. Privacy policies and cookie policies are present, but the cookie consent mechanism is lacking, which could be improved for GDPR compliance. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries visibly. However, security headers are not explicitly detected, and there is no visible vulnerability disclosure or incident response contact information. The WHOIS data for the domain is unavailable due to query restrictions, limiting the ability to fully verify domain legitimacy. Overall, the site appears trustworthy and professional, with a low risk profile but room for security and privacy enhancements. Strategically, the site should focus on enhancing security headers, implementing explicit cookie consent, and providing clear contact channels for security incidents. These improvements will strengthen compliance and user trust, supporting the site's role as a regional tourism authority.

MicroPayment.com is currently a parked domain sales landing page offering the premium domain name for sale. The site is brokered by AbdulBasit Makrani and targets domain investors or businesses interested in acquiring the domain. The business model is straightforward domain brokerage with inquiry via email, WhatsApp, or contact form. The website uses modern frontend technologies such as Bootstrap 5, jQuery, and Font Awesome, and integrates Google Analytics for visitor tracking. However, the content is minimal and primarily focused on domain sale inquiry. From a technical perspective, the site is moderately optimized with responsive design and basic SEO elements. The SSL configuration is excellent, enforcing HTTPS, but no advanced security headers were detected. The contact form includes a consent checkbox for data collection, indicating some privacy awareness, though no cookie policy or terms of service pages were found. Security posture is moderate but could be improved by adding security headers and explicit privacy and cookie policies. The WHOIS data is missing or indicates the domain is unregistered or expired, which lowers trust and legitimacy scores. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the site is low risk with no adult or explicit content, but the lack of WHOIS data and minimal content limits business credibility. Strategic recommendations include improving security headers, adding comprehensive privacy and cookie policies, and clarifying domain registration status to enhance trust.

2

2024 kerschbaumer group I Website by Kings & Cake Werbeagentur

kerschbaumer-trophies.at

56

Kerschbaumer Trophies is a specialized Austrian e-commerce retailer offering a wide range of trophies, medals, and personalized awards with engraving and printing services. The company targets sports clubs, associations, and individuals seeking customized trophies, positioning itself as a niche market leader in Austria. The website demonstrates a professional design with clear navigation and mobile optimization, leveraging modern web technologies such as jQuery, Bootstrap, and lazy loading for performance. Security posture is solid with HTTPS enforced and secure login forms, though it lacks explicit privacy and cookie policies, security headers, and incident response information, indicating areas for compliance improvement. WHOIS data confirms the legitimacy of the domain and business alignment. Overall, the site is trustworthy and functional but would benefit from enhanced privacy and security disclosures.

F

Familie Krug

krug.de

40

The website www.krug.de represents a personal or family homepage for the Krug family, primarily featuring a simple welcome message and contact information. The site lacks commercial or business-oriented content, focusing instead on providing basic information about the family. The technical infrastructure is modest, utilizing Bootstrap 4 and jQuery for frontend presentation, hosted on a domain managed via GoDaddy's nameservers. There is no evidence of advanced CMS or backend technologies, and the site does not employ analytics, advertising, or tracking tools, indicating a low level of digital maturity. From a security perspective, the website does not demonstrate strong security posture. There is no visible enforcement of HTTPS or presence of security headers, and no privacy or cookie policies are provided, which may raise compliance concerns under GDPR for European users. The contact information is clearly presented, but no incident response or vulnerability disclosure mechanisms are in place. The WHOIS data aligns with the website content, showing a registrant named Thomas Krug, consistent with the family theme, and no privacy protection is used. Overall, the website is safe and family-friendly, with no adult or questionable content detected. However, the lack of security best practices and privacy compliance measures suggests room for improvement. The site is suitable for its apparent purpose as a personal family page but would require significant enhancements to meet business or regulatory standards. Strategic recommendations include implementing HTTPS with proper security headers, adding privacy and cookie policies to comply with GDPR, and establishing basic security and incident response protocols to enhance trust and compliance.

I

Institut für ökologische Wirtschaftsforschung (IÖW)

oekologisches-wirtschaften.de

10

Ökologisches Wirtschaften is a well-established German scientific journal focusing on social-ecological economic topics, bridging research and practical experience in politics and business. It serves a specialized audience interested in sustainable economic development and publishes issues with articles authored by experts. The website is powered by Open Journal Systems, a recognized platform for academic publishing, and is affiliated with reputable institutions such as the Institut für ökologische Wirtschaftsforschung (IÖW) and the oekom verlag publishing house. The content is professionally presented, with clear navigation and good mobile optimization. Technically, the site uses modern JavaScript libraries including jQuery, Bootstrap, and Popper.js, ensuring a responsive and interactive user experience. The hosting is managed via known providers with stable DNS configurations. Security posture is solid with HTTPS enforced and restricted access to subscriber-only PDFs, though the absence of explicit security headers and cookie consent mechanisms suggests room for improvement. No signs of blocking or WAF interference were detected, allowing full content accessibility. Overall, the security posture is good but could be enhanced by implementing security headers, cookie consent, and publishing incident response contacts. The business credibility is high due to institutional affiliations and professional presentation. No vulnerabilities or suspicious patterns were found. Strategic recommendations include improving privacy compliance and security best practices to further strengthen trust and compliance.

B

Bitmovin

bitmovin.com

70

Bitmovin is a technology company specializing in video streaming solutions, including video players, encoding services, analytics, and AI-powered video enhancements. Founded in 2013 and headquartered in Austria, Bitmovin serves a global B2B audience, enabling businesses to deliver high-quality live and on-demand video content across a wide range of devices. The company positions itself as a leader in scalable, reliable, and innovative video workflows, leveraging partnerships with major industry players such as Akamai and NVIDIA. The website reflects a mature digital presence with comprehensive content and clear business focus. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Tag Manager for analytics. Security posture is strong with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are not explicitly detected. Privacy compliance is robust, featuring a detailed privacy policy and cookie consent mechanism aligned with GDPR requirements. No critical security or privacy issues were identified, and the site maintains high professionalism and trustworthiness.

D

Deutsche Säge- und Holzindustrie Bundesverband e.V. (DeSH)

saegewerke.de

58

The website saegewerke.de is the official platform of the Deutsche Säge- und Holzindustrie Bundesverband e.V. (DeSH), a German sawmill and wood industry association. It provides a comprehensive directory of wood suppliers, types of wood, and assortments, targeting industry professionals and businesses in the manufacturing and wood processing sectors. The platform facilitates connections between suppliers and buyers, offering detailed supplier profiles and industry news. The website is well-branded, consistent, and professionally designed, reflecting its role as an industry association hub. Technically, the site uses a modern tech stack including Bootstrap, jQuery, Popper.js, FontAwesome, and Google Maps API. It employs a custom CMS backend and includes a consent management system for GDPR compliance. The site is mobile-optimized and performs moderately well, with basic SEO and accessibility features implemented. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms. However, it lacks explicit published security policies and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, with clear privacy and cookie policies present. The WHOIS data is minimal but consistent with the business's German identity. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include publishing a formal security policy, adding security headers, and providing incident response contact information to enhance trust and security posture.

I

Instituto de Turismo de la Región de Murcia

murciaturistica.es

50

The website www.turismoregiondemurcia.es serves as the official tourism portal for the Costa Cálida region in Murcia, Spain. It is operated by the Instituto de Turismo de la Región de Murcia and provides comprehensive information on tourism activities, accommodations, events, and cultural experiences. The site targets tourists and visitors interested in exploring the Murcia region, offering multilingual support and booking functionalities. Technically, the site employs modern web technologies including Bootstrap, jQuery, Swiper, and integrates multiple tracking and analytics tools such as Google Analytics, Facebook Pixel, and Adform. The website is well-designed with good mobile optimization and clear navigation, reflecting a professional and trustworthy government tourism platform. Security-wise, the site uses HTTPS and secure external scripts but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. WHOIS data is unavailable due to access restrictions, limiting domain trust verification, but the official branding and content quality support legitimacy. Overall, the site is a reliable and informative resource for tourism in Murcia with moderate technical and security maturity.

2

2024 kerschbaumer group I Website by Kings & Cake Werbeagentur

kerschbaumer-trophies.com

50

Kerschbaumer Trophies operates an e-commerce platform specializing in high-quality trophies, medals, and personalized awards primarily targeting sports clubs and organizations in Austria and German-speaking regions. The website offers a broad catalog of products including glass, acrylic, wooden trophies, and specialty trophies by sport, with custom engraving and printing services. The business positions itself as a niche leader with a focus on quality and personalized service, supported by trust signals such as official membership in the Austrian Federal Fire Brigade Association. Technically, the website is built on the JTL Shop platform, leveraging modern JavaScript libraries and Bootstrap for responsive design, ensuring a good user experience across devices. Security posture is solid with HTTPS and secure forms, though the absence of security headers and privacy policies indicates room for improvement. The lack of WHOIS data is a concern for domain legitimacy but does not currently impact the operational status of the site. Overall, the site is professional, trustworthy, and well-optimized for its market segment.

J

JuBla Sissach

jubla-sissach.ch

52

JuBla Sissach is a well-established non-profit youth organization operating in the German-speaking region of Switzerland. The organization focuses on providing leadership opportunities for young adults and organizing events, camps, and activities for children and youth. Their market position is strong as one of the largest Catholic youth associations in the region, emphasizing community engagement and outdoor experiences. The website effectively communicates their mission and services, targeting families and youth interested in social and recreational activities. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, and various UI enhancement libraries, hosted likely on a Swiss cloud provider. The site is mobile-optimized with good SEO practices and moderate performance. However, there is room for improvement in accessibility and security headers implementation. The site uses HTTPS with a strong SSL configuration, ensuring secure communications. From a security perspective, the website demonstrates good baseline practices such as HTTPS enforcement and no visible sensitive data exposure. However, it lacks advanced security headers and formal security policies or incident response information. Privacy compliance is supported by a comprehensive privacy policy document, but cookie consent mechanisms are missing. No vulnerabilities or suspicious activities were detected. Overall, the website presents a low-risk profile with a solid business credibility and trustworthy domain registration. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and compliance.

S

Sozialverband Deutschland e.V.

sovd-kaufhaus.de

55

The Sozialverband Deutschland e.V. (SoVD) Landesverband Niedersachsen operates as a regional non-profit social advocacy organization focused on informing and supporting citizens regarding social policy and social law in Germany. Their website serves as an informational portal with services including consultation, publications, and digital tools. The SoVD Shop is currently under maintenance, indicating ongoing updates to their e-commerce capabilities. The organization maintains a solid market position within the non-profit sector in Germany, targeting a broad audience interested in social welfare and policy. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience and accessibility. The site is mobile-optimized and includes a cookie consent mechanism compliant with GDPR. Analytics are handled via Matomo, and user interaction is supported by the Userlike chatbot. Hosting appears stable with domain nameservers consistent with the organization's infrastructure. From a security perspective, the site enforces HTTPS and implements cookie consent, but lacks explicit security headers and published security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear policies and consent mechanisms. However, the absence of a terms of service page and vulnerability disclosure policy suggests areas for improvement. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could benefit from enhanced security documentation and transparency. The current AI score reflects a good balance of content quality, technical implementation, security posture, and privacy compliance, with room for strategic enhancements.

S

Sozialverband Deutschland e.V.

sovd-verwaltung.de

55

The website www.sovd-nds.de represents the Landesverband Niedersachsen branch of the Sozialverband Deutschland e.V., a non-profit social advocacy organization focused on social welfare, rights, and support services in Lower Saxony, Germany. The site provides comprehensive information about social counseling, campaigns, digital tools, and membership services, targeting members and interested individuals in the social sector. The organization maintains a clear market position as a regional branch of a national social association, offering valuable services such as online calculators, social policy updates, and member support. Technically, the website is built on TYPO3 CMS with modern frameworks like Bootstrap and jQuery, ensuring good mobile optimization, accessibility, and SEO. The site uses HTTPS and implements a detailed cookie consent mechanism with categories for essential, marketing, and chatbot cookies, reflecting good privacy compliance. Security posture is solid with no visible vulnerabilities or exposed sensitive data, though explicit security policies and vulnerability disclosure mechanisms are absent. Overall, the website is professional, trustworthy, and well-maintained, with active social media presence and partner integrations. Recommendations include publishing explicit security and incident response policies and enhancing security headers for improved protection.

Gemeindebetriebe Roggwil (GBR) is a publicly owned municipal utility provider serving the Roggwil community in Switzerland. The organization offers essential services including electricity, water, and telecommunications infrastructure such as a fiber optic network. The website is designed to serve local residents and businesses with information, online services like address changes, and contact details. The business operates under a public law institution model since 2017, reflecting a stable local government affiliation. Technically, the website employs modern frontend technologies including Bootstrap for responsive design, jQuery, and Google reCAPTCHA for form security. The site is mobile optimized and provides a cookie consent mechanism compliant with GDPR requirements. While the site lacks explicit security policy documentation, it enforces HTTPS and uses standard security practices such as session management and CAPTCHA to protect user interactions. From a security perspective, the site demonstrates a good baseline posture with HTTPS and cookie consent but could improve by implementing security headers and publishing incident response or vulnerability disclosure information. No critical vulnerabilities or suspicious content were detected. The domain registration data aligns well with the business identity, enhancing trustworthiness. Overall, the website is professional, trustworthy, and well-suited for its municipal utility purpose. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility compliance to further strengthen the security and user experience posture.

M

Museo Nacional del Prado

museodelprado.es

69

Museo Nacional del Prado is a prestigious national museum in Spain dedicated to fine arts and cultural heritage. It serves a broad audience including tourists, families, researchers, and art enthusiasts by providing exhibitions, educational resources, virtual tours, and access to its extensive art collection. The museum operates under the Spanish Government's Ministry of Culture and Sport, positioning it as a leading cultural institution with a strong market presence in the government and non-profit sectors. Technically, the website employs a modern and diverse technology stack including jQuery, Bootstrap, Google Tag Manager, and TinyMCE, supported by a CDN infrastructure. The site is well-optimized for mobile devices, accessible, and SEO-friendly, reflecting a mature digital presence. The CMS used is GNOSS, which supports semantic web and knowledge graph features. From a security perspective, the site uses HTTPS with excellent SSL configuration and follows best practices such as secure forms and no visible vulnerabilities. However, explicit security headers and a public security policy or incident response contact are not evident, representing areas for improvement. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the website is professional, trustworthy, and secure, with no signs of malicious activity or content safety concerns. It effectively supports the museum's mission and public engagement goals.

S

Sozialverband Deutschland e.V. Landesverband Niedersachsen

sovd-nds.de

53

The Sozialverband Deutschland e.V. Landesverband Niedersachsen is a regional non-profit social association dedicated to providing social law advice, member services, and advocacy in the German state of Niedersachsen. The website serves as an information hub for members and interested parties, offering digital tools, campaigns, and contact options. It holds a solid market position as a regional branch of a national organization, focusing on social welfare, legal advice, and community support. The target audience includes members, social law clients, and the general public interested in social policy. Technically, the website is built on TYPO3 CMS with modern web technologies including Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience. It is hosted on generic servers with multiple nameservers, uses HTTPS with good SSL configuration, and implements GDPR-compliant cookie consent mechanisms. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses cookie consent with opt-in for marketing and chatbot scripts, and avoids exposing sensitive data. However, it lacks publicly available security policies, incident response contacts, and security headers, which are areas for improvement. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations. It effectively supports the organization's mission and member engagement. Strategic recommendations include enhancing security transparency, publishing incident response information, and adding security headers to further strengthen the security posture.

H

Haus der Flüsse - Natura 2000-Informationszentrum des Biosphärenreservates Mittelelbe

haus-der-fluesse.de

58

Haus der Flüsse is a regional informational and educational center dedicated to the Biosphärenreservat Mittelelbe in Germany. It provides visitors with educational exhibits, accessibility services, and organizes events related to nature conservation. The website is well-structured, professionally designed, and targets a broad audience including families, educational groups, and people with disabilities. The business operates as a non-profit or government-affiliated entity with a strong emphasis on accessibility and environmental awareness. Technically, the site is built on TYPO3 CMS with modern frameworks like Bootstrap and jQuery, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information.

B

Biosphärenreservat Mittelelbe

mittelelbe.com

58

The website www.mittelelbe.com represents the Biosphärenreservat Mittelelbe, a well-established and significant biosphere reserve in Germany, focusing on nature conservation, education, and tourism. It is part of a larger UNESCO Biosphärenreservat Flusslandschaft Elbe partnership and provides rich content about its projects, visitor information, and events. The site targets nature enthusiasts, tourists, and educational groups, operating primarily as a non-profit or government-affiliated entity. Technically, the website is built on TYPO3 CMS with modern web technologies including Bootstrap and jQuery. It is mobile-optimized, accessible, and includes a cookie consent mechanism compliant with GDPR. The site loads moderately fast and has good SEO and accessibility features. However, no explicit security headers were detected, and no contact emails or phone numbers are directly visible, which could be improved. Security-wise, the site uses HTTPS and has a cookie consent banner, indicating a good baseline security posture. The absence of WHOIS data for the domain is a notable anomaly that reduces trustworthiness and should be investigated further. No signs of malware, phishing, or adult content were found, and the site appears safe for general audiences. Overall, the website is professional and trustworthy in content and presentation but would benefit from enhanced transparency in domain registration and improved security headers. Strategic recommendations include verifying domain registration details, publishing a vulnerability disclosure policy, and adding explicit contact information to improve business credibility and user trust.

Z

Zug Estates Holding AG

zugestates.ch

59

Zug Estates Holding AG is a Swiss real estate company specializing in sustainable development and management of living spaces primarily in the Zug region. The company emphasizes creating value through sustainable and innovative real estate solutions, targeting investors, tenants, and partners interested in environmentally responsible property management. Their website reflects a professional corporate presence with comprehensive investor relations and sustainability reporting. Technically, the site uses modern JavaScript libraries, Google Tag Manager for analytics, and Usercentrics for cookie consent, hosted on DigitalOcean infrastructure. The website is mobile-optimized and well-structured, providing a good user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of a publicly available security policy and incident response contact is noted. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Swiss PGA is the professional golf association in Switzerland, offering education programs, tournaments, and member services for golf professionals and apprentices. The website is well-structured and targets golf professionals and enthusiasts within Switzerland. It provides comprehensive information about education, tournaments, and membership benefits, positioning itself as a key national association in the golf sector. Technically, the website uses a modern tech stack including Contao CMS, jQuery, Bootstrap, and various JavaScript libraries for sliders and UI enhancements. The site is mobile optimized and performs moderately well, with good SEO and accessibility basics. Analytics are implemented via Google Analytics and Google Tag Manager. From a security perspective, the site enforces HTTPS and uses secure forms for login. However, it lacks important security headers and published security policies. Privacy compliance is partial, with a cookie consent banner but no visible privacy policy or terms of service. WHOIS data confirms the legitimacy of the domain and its alignment with the Swiss PGA organization. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security documentation to improve compliance and user trust.

W

werkraum Digitalmanufaktur GmbH

werkraum.net

63

werkraum Digitalmanufaktur GmbH is a well-established digital agency based in Karlsruhe, Germany, specializing in TYPO3 and Shopware CMS solutions, e-commerce platforms, and custom web development. With over 20 years of experience, the company offers a comprehensive suite of services including web design, SEO, hosting, SaaS development, and digital accessibility. Their market position is strengthened by recognized certifications such as TYPO3 Association Gold Membership and active participation in regional media and business networks. The website reflects a professional and consistent brand image with detailed project references and active news updates, targeting businesses seeking advanced digital solutions. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and analytics tools, optimized for mobile and accessibility. Security practices include HTTPS, cookie consent with opt-out, and CAPTCHA on forms, though some security headers and policies could be improved. Overall, the website is secure, compliant with GDPR, and trustworthy, with no critical vulnerabilities detected.

D

Dietmar Hopp Stiftung GmbH

dietmar-hopp-stiftung.de

52

The Dietmar Hopp Stiftung GmbH is a well-established non-profit foundation based in Germany, focused on funding projects in medicine, education, social welfare, youth sports, and climate protection within the Rhein-Neckar metropolitan region. Founded by Dietmar Hopp, co-founder of SAP, the foundation leverages significant resources to support community and philanthropic initiatives. The website presents a professional and consistent brand image, targeting non-profit organizations and beneficiaries in the region. The business model centers on grant-making and social impact, positioning the foundation as a key regional philanthropic actor. Technically, the website is built on the TYPO3 CMS platform, utilizing modern frontend technologies such as Bootstrap, jQuery, and FontAwesome. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Performance is moderate, with no major technical issues detected. SEO and accessibility features are basic but functional. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism with opt-in options for statistics and marketing cookies, demonstrating good privacy compliance. However, no explicit security policies or incident response contacts are publicly disclosed. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data is consistent and supports the legitimacy of the domain and organization. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving SEO and accessibility features to further strengthen the site's security posture and user trust.