Security Directory

J

Jugendmigrationsdienste (JMD)

jmd-portal.de

56

Jugendmigrationsdienste (JMD) is a large, government-funded non-profit organization in Germany focused on supporting young people aged 12 to 27 with migration backgrounds through counseling, education, and integration services. The website reflects a well-established nationwide network with approximately 500 service points, supported by recognized partners and government initiatives. The content is professionally presented, multilingual, and accessible, targeting youth and stakeholders in migration integration. Technically, the site is built on TYPO3 CMS with modern web technologies including Bootstrap and Mapbox for interactive maps, and uses Matomo for privacy-conscious analytics. Security posture is strong with HTTPS enforced and a cookie consent mechanism, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates good digital maturity and compliance with GDPR, with room for improvement in transparency of security and incident response information.

D

Deutsch-Französischer Bürgerfonds

buergerfonds.eu

55

The Deutsch-Französischer Bürgerfonds website serves as an informational and funding platform dedicated to promoting Franco-German friendship and European cooperation through cultural and social projects. The organization operates as a non-profit entity, targeting German and French citizens and organizations interested in bilateral relations and European integration. The website content is professionally presented in German, with a French partner site linked, reflecting its bi-national focus. The business model centers on advising, networking, and financing relevant projects, positioning the organization as a niche player in the governmental and non-profit sector. Technically, the website is built on the Drupal CMS platform, utilizing modern front-end technologies such as Bootstrap, jQuery, and Google Tag Manager. Cookie consent is managed via Cookiebot, demonstrating compliance with EU privacy regulations. The site is mobile-optimized and exhibits good SEO practices, although some accessibility features could be enhanced. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, but lacks visible security headers and a published security policy or vulnerability disclosure. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected by EURid, which is typical for EU domains and justified for this type of organization. Overall, the domain and website appear legitimate and trustworthy. The overall risk assessment is low, with recommendations to improve security headers, publish privacy and terms documents, and provide clear contact information for security incidents. These steps would enhance compliance and trustworthiness further.

F

Ferrit s.r.o.

ferrit.cz

59

Ferrit s.r.o. is a Czech-based company specializing in manufacturing and servicing global mining transport solutions, including suspended monorail systems, rail transport, trackless machinery, mining processing equipment, and safety devices for mining rescue operations. The company targets mining and industrial transport sectors worldwide, boasting a client base across multiple countries as evidenced by their interactive client map. Their business model focuses on providing comprehensive transport and safety solutions for underground mining operations, supported by over 25 years of industry experience and EU funding projects. The website reflects a professional and consistent brand image with multilingual support and active social media engagement. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Google Analytics, and Google Tag Manager, ensuring responsive design and moderate performance. The site integrates cookie consent mechanisms and secure login/registration forms, indicating attention to privacy and user security. However, some security headers are not explicitly detected, and no public security or incident response policies are found, suggesting room for improvement in transparency and security maturity. Security posture is generally good with HTTPS enforced and secure form handling, but the absence of WHOIS data and domain registration details introduces uncertainty about domain legitimacy. The website shows GDPR compliance through privacy and cookie policies, though terms of service and vulnerability disclosure mechanisms are not evident. Overall, the site is safe, professional, and trustworthy, but would benefit from enhanced security documentation and domain registration transparency. Strategic recommendations include implementing comprehensive security headers, publishing incident response and vulnerability disclosure policies, and verifying domain registration details to strengthen trust and compliance.

K

KULT MINOR - Fond na podporu kultúry národnostných menšín

kultminor.sk

39

KULT MINOR is a Slovak public fund dedicated to supporting the culture of national minorities through grants, scholarships, and cultural programs. The organization operates a website primarily in Slovak, providing information about its programs, calls for proposals, and cultural activities. The website is well-structured, uses Joomla CMS, and integrates common web technologies including jQuery, Bootstrap, and Facebook SDK for social media presence. The domain is registered since 2017 with DNSSEC enabled, indicating a legitimate and stable online presence. However, the site lacks explicit privacy and terms of service policies, which are important for compliance and user trust. Cookie consent is implemented properly, reflecting awareness of privacy regulations. Security posture is generally good with HTTPS and DNSSEC, but could be improved by adding security headers and vulnerability disclosure information.

The website stavbamsk.cz serves as the official platform for the Stavba MSK competition, which promotes and showcases quality construction projects in the Moravian-Silesian Region of the Czech Republic. The site targets both professionals in the construction and architecture sectors and the general public interested in regional development. It provides information about the competition, event results, galleries, and news updates. The business model appears to be a regional promotional and award platform supported by various partners and sponsors. The domain age and WHOIS data confirm a long-standing presence since 2006, reinforcing credibility. Technically, the website is built on WordPress CMS and employs modern web technologies including Bootstrap, jQuery, GSAP, Swiper, and Google reCAPTCHA v3 for form security. The site is mobile-optimized and integrates Google Analytics and Tag Manager for user tracking and marketing insights. Performance is moderate with good design and navigation clarity, though accessibility features are basic. From a security perspective, HTTPS is properly implemented, and forms are protected with reCAPTCHA. However, the absence of security headers and lack of explicit privacy and cookie policies indicate room for improvement in compliance and security posture. No vulnerabilities or exposed sensitive data were detected. The site does not provide incident response or vulnerability disclosure information. Overall, stavbamsk.cz is a credible and professionally maintained regional website with a clear business purpose. To enhance trust and compliance, it should implement privacy and cookie policies, security headers, and consider publishing a security policy or vulnerability disclosure statement.

A

ABSTRACT s.r.o.

stylove.cz

9

STYLOVE.CZ is a Czech media website operated by ABSTRACT s.r.o., focusing on stylish living, architecture, interior design, wellness, and home improvement. The site offers rich editorial content including articles, series, contests, and partnerships with manufacturers and service providers. It targets consumers interested in enhancing their living spaces with style and modern design. The website is part of a network of related sites including BYDLENI.CZ and INTERIER.CZ, indicating a strong presence in the Czech home and lifestyle media market. Technically, the website uses a modern tech stack including Bootstrap, jQuery, and various slider and carousel plugins. It integrates Google Analytics and Google Tag Manager for user tracking and marketing insights. The site is mobile optimized with good navigation and content structure, though accessibility features are basic. Performance is moderate with room for improvement in security headers and privacy compliance. Security posture is moderate; HTTPS is implied but no explicit security headers were detected in the provided data. No privacy or cookie policies were found, which is a compliance gap. The WHOIS data for the domain is missing, which raises concerns about domain registration transparency and legitimacy, though the website content and business information appear professional and trustworthy. Overall, the website is a credible media outlet with good content quality and business credibility but needs to improve privacy compliance and security practices. The lack of WHOIS data is a notable risk factor that should be addressed to enhance trustworthiness.

K

Katholischer Akademischer Ausländer-Dienst

kaad.de

49

The Katholischer Akademischer Ausländer-Dienst (KAAD) is a well-established non-profit organization affiliated with the Catholic Church in Germany, focused on providing scholarships and educational support to postgraduate students and young professionals from developing countries across Africa, Asia, Latin America, Eastern Europe, and the Middle East. With a history spanning over 65 years, KAAD supports leadership development through academic programs, networking, and spiritual guidance. The website reflects a professional and consistent brand image, targeting academics and emerging leaders in global development contexts. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies such as Bootstrap, FontAwesome, and jQuery. It is hosted on Goneo servers, uses HTTPS with good SSL configuration, and demonstrates moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though some accessibility features could be enhanced. From a security perspective, the website enforces HTTPS and uses secure form submissions but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is generally good with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a minor gap. Overall, the KAAD website presents a trustworthy, professional, and secure platform suitable for its educational and non-profit mission. Strategic improvements in security headers, cookie consent, and vulnerability disclosure would further strengthen its security posture and compliance.

Winter-Gala 2024 by David Siedek is a cultural event featuring music, dance, magic, and gourmet dining, held in Gommern, Germany. The website provides detailed information about the event, artists, location, and contact details, targeting a regional audience interested in entertainment and gala shows. The site is professionally designed using Joomla CMS and common web technologies, hosted on a reputable provider. Security posture is adequate with HTTPS enabled but lacks advanced security headers and comprehensive privacy compliance. Contact information is clearly presented, enhancing business credibility.

W

Werbeagentur Schulz-Design e.K.

circus-land.de

50

CHARLES KNIE’S Circus-Land is a family-oriented entertainment park located in Einbeck-Volksen, Germany, offering attractions, animal exhibits, and live shows. It positions itself as the most popular family fun destination in Southern Lower Saxony, targeting families and tourists with ticketed access and annual passes. The website is professionally designed using Joomla CMS and hosted on webgo.de servers, featuring modern web technologies such as jQuery and Bootstrap. It includes a cookie consent mechanism and privacy policy, reflecting basic GDPR compliance. Facebook Pixel is used for user tracking, indicating moderate data collection practices. Security posture is good with HTTPS enforced, but lacks advanced security headers and explicit incident response information. Overall, the site is accessible, trustworthy, and provides clear business contact information.

D

DIAKOVERE

kommunikationswerkstatt-hannover.de

39

Kommunikationswerkstatt Hannover is a communication agency service offered by DIAKOVERE, the largest non-profit social and healthcare organization in Niedersachsen, Germany. The website presents professional agency services targeted at social and healthcare sectors, emphasizing communication expertise within a non-profit framework. The business model focuses on providing specialized communication support to organizations in the social and healthcare domain, leveraging the reputation and scale of DIAKOVERE. Technically, the website is built on Joomla CMS, utilizing modern frontend technologies such as jQuery, Bootstrap, GSAP TweenMax, and LayerSlider. Hosting is managed via kasserver.com, with secure HTTPS connections and cookie consent mechanisms implemented to comply with privacy expectations. The site demonstrates moderate performance and good mobile optimization, although accessibility features are basic. From a security perspective, the site enforces HTTPS and employs cookie consent blocking scripts to limit unauthorized data storage. However, it lacks important security headers and does not provide a security policy or incident response contact, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website is professional and trustworthy, with a solid business credibility score. The absence of privacy and terms of service policies, as well as security headers, slightly lowers the privacy compliance and security posture scores. Strategic enhancements in these areas would improve the site's overall security and compliance standing.

A

ALEA Music

alea-music.com

41

ALEA Music is a small, professional live band service based in Germany specializing in event entertainment including background music and party performances. The website presents a well-structured, content-rich platform showcasing their services, band members, and multimedia content to engage potential clients. The technical infrastructure uses modern web technologies such as Bootstrap, jQuery, and Google Analytics, providing a responsive and user-friendly experience. However, the absence of WHOIS data raises concerns about domain registration legitimacy, though the website content itself is professional and consistent with a legitimate business. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms, indicating room for improvement in compliance and security best practices.

B

Brillinger Orthopädie

brillinger.de

49

Brillinger Orthopädie is a well-established German healthcare provider specializing in orthopaedic and rehabilitation technologies. Recently acquired by Ottobock, it benefits from being part of a large global network, enhancing its market position and service capabilities. The website reflects a professional healthcare business with a clear focus on patient care and quality. Technically, the site is built on TYPO3 CMS, uses modern web technologies, and implements GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS and privacy tools in place, though explicit security headers and policies could be improved. Overall, the site is trustworthy, accessible, and well-structured, serving its target audience effectively.

I

IHK Nürnberg für Mittelfranken

ihk-nuernberg.de

74

IHK Nürnberg für Mittelfranken is a regional chamber of commerce serving the Mittelfranken region in Germany. The organization supports local businesses through advisory services, training, and representation of business interests. Their website reflects a mature digital presence with a structured content hierarchy covering topics such as international trade, sustainability, energy, innovation, and logistics. The target audience includes companies, international professionals, and stakeholders in various sectors. Technically, the site is built on TYPO3 CMS, uses modern JavaScript libraries, and integrates privacy-respecting Matomo analytics alongside a robust cookie consent mechanism. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though some security headers could be improved. The site provides clear contact information including email, phone, and chat support, enhancing business credibility. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

F

Funke Medical

funke-medical.de

45

Funke Medical is a medium-sized German company specializing in manufacturing decubitus therapy systems, seating aids, and mobility aids, positioning itself as a leading provider in the healthcare sector within Germany. The website is professionally designed using WordPress with modern plugins and technologies, including Yoast SEO and Google Analytics, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers and incident response details are missing. Overall, the site is trustworthy, compliant with GDPR, and targets healthcare professionals and patients needing mobility solutions.

K

Katholische Nachrichten-Agentur (KNA)

kna-bild.de

74

KNA-Bild is the image agency of the Catholic News Agency (Katholische Nachrichten-Agentur), providing a specialized service focused on religious, cultural, and social news imagery primarily for German-speaking media professionals and institutions. The website demonstrates a moderate level of digital maturity with the use of JavaScript frameworks such as PrimeFaces and OmniFaces, and includes a cookie consent mechanism with analytics opt-in, reflecting some privacy awareness. Security posture is adequate with HTTPS enforced and IP anonymization in analytics, though security headers are minimal and no explicit privacy policy or terms of service were found on the analyzed page. Contact information is not directly visible, which may impact user trust and support accessibility.

B

buefet e.V.

buefet.de

54

buefet e.V. is a German non-profit organization dedicated to supporting elderly individuals, people with disabilities, and those requiring care to live independently and with social connection in Kirchheim unter Teck. The website presents a clear overview of their services, including assisted living at home, mobility support, recovery assistance, social activities, and counseling. Their market position is that of a local community service provider with a focus on social welfare. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, optimized for mobile devices and SEO-friendly with Yoast SEO integration. The site loads at a moderate speed and offers a good user experience with clear navigation and consistent branding. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks some advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing trust. Overall, the website is trustworthy and professionally maintained, with minor recommendations to improve security headers, cookie consent, and incident response transparency to further enhance compliance and security posture.

T

Turnverein Bissingen e.V.

tv-bissingen.de

10

Turnverein Bissingen e.V. is a local German sports club offering a variety of sports activities and community events. The website serves as an information hub for members and interested parties, providing details about departments, events, and contact information. The site is built on Joomla! CMS with modern frontend technologies and integrates Matomo for analytics and Usercentrics for cookie consent management. The overall technical infrastructure is solid with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies could enhance protection. No critical vulnerabilities or suspicious content were detected. Privacy compliance is good, with a clear privacy policy and consent mechanism. Business credibility is high given the clear presentation of contact information and consistent branding. The site is safe for general audiences and does not contain adult or questionable content.

Katholische Erwachsenenbildung MittenInFranken e. V. is a small regional non-profit organization dedicated to adult education and community engagement in the Ansbach-Neustadt/Aisch region of Germany. The website provides information about events, courses, seminars, and organizational details, targeting adults interested in Catholic adult education. The organization maintains a professional online presence with clear navigation, event listings, and downloadable program brochures. Contact information and privacy policies are clearly presented, supporting transparency and trust. Technically, the website uses a modern tech stack including Bootstrap, jQuery, Font Awesome, and JW Player, hosted on servers associated with internet1.de. It employs Matomo analytics with privacy-conscious configurations and Google reCAPTCHA for bot protection. The site is mobile-optimized and implements a detailed cookie consent mechanism, reflecting good digital maturity. From a security perspective, the website enforces HTTPS and uses cookie consent to comply with GDPR. However, it lacks explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is minimal and domain status is unusual, but the website content and contact details support legitimacy. Overall, the website is well-structured, secure, and compliant with privacy regulations, suitable for its non-profit educational mission. Strategic improvements could include adding explicit security policies and enhancing security headers to further strengthen its security posture.

Pfadfinderinnenschaft St. Georg (PSG) is a well-established German non-profit organization dedicated to empowering girls and young women through scouting activities. Founded in 1947, PSG is affiliated with the global WAGGGS network and serves approximately 9,000 members nationwide. The organization offers membership services, educational programs, international partnerships, and publishes a dedicated magazine. The website reflects a professional and consistent brand image with clear navigation and content relevant to its audience. Technically, the website is built on the Contao CMS platform, utilizing modern web technologies such as Bootstrap and jQuery. It features responsive design and accessibility tools, including a cookie consent mechanism compliant with GDPR. Performance is moderate with room for optimization, and the site employs HTTPS with a good SSL configuration. From a security perspective, the site demonstrates good practices including HTTPS enforcement and cookie consent management. However, it lacks explicit security headers and documented security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed through a detailed privacy policy and cookie banner. Contact information is primarily via a contact form, with no direct emails or phone numbers visible. Overall, PSG's website presents a trustworthy and professional digital presence suitable for its non-profit mission. Strategic improvements in security headers and enhanced transparency around security policies could further strengthen its posture.

K

Kolpingjugend – Kolpingwerk Deutschland

kolpingjugend.de

10

Kolpingjugend Deutschland is a well-established non-profit Catholic youth organization focused on engaging children, youth, and young adults in social projects, volunteer work, and community activities. The organization is democratically structured and rooted in the values of Adolph Kolping, with a strong presence in Germany and links to national and international Kolping organizations. The website serves as an information and engagement platform for members and interested parties, providing news, events, and resources. Technically, the website is built on TYPO3 CMS, leveraging modern frontend libraries such as jQuery and Bootstrap. It is hosted on dot-server.de and includes standard web technologies for responsive design and user interaction. The site implements GDPR-compliant cookie consent mechanisms and privacy policies, reflecting a mature approach to data protection and user privacy. From a security perspective, the site uses HTTPS and includes scripts to allow users to opt out of Google Analytics tracking. However, explicit HTTP security headers are not evident in the provided data, and no dedicated security or incident response policies are published. There are no visible vulnerabilities or exposed sensitive data, indicating a reasonable security posture for a non-profit organization. Overall, the website is professional, trustworthy, and well-aligned with its mission. It provides clear contact information via email and maintains transparency through privacy and imprint pages. Strategic improvements could focus on enhancing security headers, publishing incident response information, and expanding contact options.

Caritasverband Stadt- und Landkreis Hof e.V. is a medium-sized non-profit organization focused on providing social services and community support in the Hof region of Germany. Their offerings include social counseling, volunteer coordination, refugee and integration advice, family support, and care services. The organization maintains a strong regional presence and collaborates with partner entities within the Caritas network and local community institutions. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their audience. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and Matomo analytics, ensuring a responsive and user-friendly experience. Security measures include HTTPS enforcement, cookie consent mechanisms, and use of Google reCAPTCHA for form protection. However, explicit security policies and vulnerability disclosure mechanisms are not present. Overall, the website demonstrates a solid security posture with room for improvement in security headers and incident response transparency. The domain registration data aligns well with the organization's identity, reinforcing trustworthiness. Strategic recommendations include enhancing security headers, publishing a security policy, and implementing a security.txt file to improve transparency and compliance.

E

Europäische Metropolregion Nürnberg

innovationskunst.de

46

The website represents the initiative 'Innovationskunst' under the umbrella of the European Metropolitan Region Nuremberg, focusing on promoting innovation and technology in the region. It serves as a platform to showcase technological leadership, research collaborations, and career opportunities, targeting students, professionals, and companies. The site is well-positioned as a regional innovation hub with strong partnerships from industry leaders and research institutions. Technically, the site is built on TYPO3 CMS with modern frontend technologies including Bootstrap and Matomo analytics, ensuring good performance, mobile optimization, and accessibility. The use of structured data and comprehensive metadata supports SEO and content discoverability. From a security perspective, the site enforces HTTPS, employs cookie consent mechanisms, and uses encrypted email links to protect contact information. While explicit security headers are not fully evident, no critical vulnerabilities or exposed sensitive data were found. Privacy compliance is well addressed with clear policies and consent management. Overall, the website demonstrates a mature digital presence with strong business credibility and compliance posture. Strategic improvements in security headers and incident response transparency could further enhance trust and resilience.

The website kircheinbayern.de serves as an official informational platform for the Catholic Church in Bavaria, operated under the auspices of the Bistum Würzburg. It provides comprehensive information about dioceses, church programs, and community engagement, targeting the general public interested in religious content. The site is built on TYPO3 CMS with modern frontend technologies and integrates privacy-respecting analytics and consent management, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response details are absent. Overall, the site demonstrates a high level of professionalism and trustworthiness appropriate for a government/non-profit religious institution.

B

Bayerisches Staatsministerium für Ernährung, Landwirtschaft, Forsten und Tourismus

genussorte.bayern

71

Genussorte Bayern is a government-supported platform dedicated to promoting the culinary heritage and regional specialties of Bavaria. It serves as an informational and promotional resource for residents and tourists interested in exploring Bavarian food culture, events, and local producers. The website is professionally designed using WordPress and Elementor, featuring interactive maps, event calendars, video galleries, and recipe collections. It is backed by the Bavarian State Ministry for Food, Agriculture, Forestry and Tourism, lending it strong credibility and trustworthiness. Technically, the site employs a modern WordPress ecosystem with various plugins for event management, accessibility, and cookie consent. The site is well-optimized for mobile devices and accessibility, with good SEO practices and performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though HTTP security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive privacy policy and cookie management system that aligns with GDPR requirements. The WHOIS data is privacy protected, which is typical for government-affiliated sites, and does not detract from the site's legitimacy. Overall, Genussorte Bayern presents a low-risk profile with a strong business and security posture, making it a reliable source for Bavarian culinary tourism information.

T

Therme Erding

therme-erding.de

60

Therme Erding operates the world's largest thermal spa near Munich, Germany, offering a wide range of leisure and wellness services including wave pools, numerous water slides, exotic thermal areas, and sauna worlds. The website reflects a well-established hospitality business targeting families and tourists seeking relaxation and entertainment. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates third-party services such as Cookiebot for consent management and Google Tag Manager for analytics and marketing. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks published privacy and security policies, which are recommended for compliance and trust. Overall, the website is professional and trustworthy with room for improvement in privacy transparency and security disclosures.

D

Deutscher Rollstuhl-Sportverband (DRS) e.V.

rollstuhlbasketball.de

37

The website rollstuhlbasketball.de serves as the official information portal for wheelchair basketball in Germany, operated by the Deutscher Rollstuhl-Sportverband (DRS) e.V. It provides comprehensive information about the sport, including news, event schedules, competition details, and national team updates. The site targets both people with disabilities and the general public interested in wheelchair basketball, positioning itself as a key national resource in this niche sports sector. The business model is non-profit and community-focused, emphasizing promotion and support of wheelchair basketball activities in Germany. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and specialized sports plugins like SportsPress and Genius Sports widgets. The site is hosted on servers associated with kasserver.com and uses HTTPS with good SSL configuration. The design is responsive and accessible, with good SEO optimization and structured data implementation enhancing search visibility. From a security perspective, the site employs HTTPS and uses CAPTCHA on contact forms to mitigate spam. While explicit security headers are not fully confirmed, no critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent and supports the legitimacy of the domain and organization. Privacy compliance is well addressed with a comprehensive privacy and cookie policy, including GDPR considerations. Overall, the website demonstrates a mature digital presence with good content quality, technical implementation, and security posture. It effectively serves its community and maintains trustworthiness. Recommendations include enhancing security headers, continuous plugin and core updates, and possibly adding explicit contact emails and phone numbers for improved transparency and user support.

K

Katarina Witt Stiftung gGmbH

katarina-witt-stiftung.de

51

The Katarina Witt Stiftung gGmbH is a German non-profit foundation dedicated to supporting children with disabilities worldwide through projects in sports promotion, medical care, and disaster relief. The foundation leverages donations and partnerships to fund its charitable activities and maintains a professional online presence with clear calls to action for donations and social media engagement. The website is built on TYPO3 CMS and hosted via SchlundTech, reflecting a moderate to good level of technical maturity with responsive design and basic accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies could enhance protection. Privacy compliance is well addressed with a clear privacy policy and GDPR-aligned cookie consent mechanisms. Overall, the website is trustworthy, professionally maintained, and aligned with the foundation's mission.

H

Heiner-Rust-Stiftung

heiner-rust-stiftung.de

54

The Heiner-Rust-Stiftung website represents a small non-profit foundation focused on promoting and supporting sports activities for people with disabilities in Germany. The foundation collaborates with regional partners such as Lotto Niedersachsen and the Sparkassenverband to fund and facilitate inclusive sports projects. The website content is well-structured, professionally designed, and clearly targeted at sports organizations and individuals interested in disability sports inclusion. Technically, the website is built using the RapidWeaver CMS with the Foundry theme and Stacks plugin, leveraging technologies like jQuery, Bootstrap, and Font Awesome. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. No advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks explicit security headers and formal security or incident response policies. Privacy compliance is basic, with a privacy policy and cookie consent banner present but no detailed GDPR compliance indicators or data protection officer contact information. Overall, the website is trustworthy and professional for its non-profit purpose but could enhance its security posture and privacy compliance to better protect users and build further trust.

M

meravis Immobiliengruppe

meravis.de

48

meravis Immobiliengruppe is a well-established real estate company operating primarily in Germany, focusing on rental and sales of residential and commercial properties in Hannover, Hamburg, and North Rhine-Westphalia. With over 65 years of experience, the company offers a broad range of services including property management, project development, and a digital tenant portal. The website reflects a mature digital presence built on TYPO3 CMS with modern frontend technologies and integrates consent management and analytics tools to comply with privacy regulations. Security posture is solid with HTTPS enforced and no critical vulnerabilities detected, though some security headers could be improved. Contact information and social media presence enhance trust and accessibility. Overall, the site is professional, user-friendly, and compliant with GDPR requirements.

S

Stadt Frankfurt am Main - Der Magistrat | Kulturamt Frankfurt am Main

museumsuferfrankfurt.de

46

Museumsufer Frankfurt is a prominent cultural institution managed by the city government of Frankfurt am Main, Germany. It serves as a comprehensive portal for 39 museums, offering detailed information on exhibitions, events, ticketing options, and cultural programs. The website targets a broad audience including local residents, tourists, and cultural enthusiasts, positioning itself as a leading museum hub in the region. The business model focuses on cultural promotion and public engagement through digital means, supported by official city administration. Technically, the website employs a modern tech stack including Bootstrap for responsive design, jQuery, Slick Carousel for interactive elements, and Klaro for cookie consent management. It integrates Matomo analytics to monitor visitor behavior while respecting privacy. The site is well-optimized for mobile devices and accessibility, with clear navigation and multilingual support. Performance is moderate, with scope for further optimization. From a security perspective, the site uses HTTPS and implements a robust cookie consent mechanism. However, it lacks explicit security headers and published security policies or incident response contacts, which are recommended for enhanced security posture. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the official city infrastructure, confirming legitimacy. Overall, Museumsufer Frankfurt presents a professional, trustworthy, and user-friendly digital presence for a government cultural institution. Strategic improvements in security headers and incident response transparency would further strengthen its security and compliance profile.

E

Ein Netz für Kinder

enfk.de

39

Ein Netz für Kinder is a German-language family lifestyle website focused on providing practical advice, product recommendations, and creative ideas for parents and families with children from pregnancy through childhood. The site positions itself as a trusted companion for family life, offering curated content and reviews primarily in the retail sector related to children's products and parenting. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and various JavaScript libraries, hosted on kasserver.com. The site demonstrates good SEO practices and mobile optimization but lacks some privacy compliance features such as cookie consent mechanisms. Security posture is solid with HTTPS and secure login forms, though security headers are missing and no explicit security policies are published. Overall, the website is professional, trustworthy, and safe for general audiences, with room for improvement in privacy and security transparency.

S

Soul Jazzband

soul-jazzband.com

44

Soul Jazzband is a small live music service provider specializing in jazz and soul performances for events such as corporate parties, weddings, and private celebrations. The website presents a professional and consistent brand image with detailed descriptions of services, testimonials, and multimedia content to engage potential clients. The business targets event organizers and private individuals seeking stylish and high-quality live jazz entertainment. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and Google Analytics, with good mobile optimization and SEO practices. However, there is no detected CMS or hosting provider information. Security posture is moderate with no visible security headers and no cookie consent mechanism, which impacts GDPR compliance. The WHOIS data is missing, raising concerns about domain legitimacy and registration status. Overall, the website is functional and professional but would benefit from improved security and compliance measures.

K

Kunstverein Bad Homburg Artlantis e. V.

galerie-artlantis.de

54

Galerie Artlantis is a small non-profit art association based in Bad Homburg, Germany, focused on organizing art exhibitions, cultural events, and promoting local artists. The website serves as a portal for event information, artist presentations, and community engagement. The business operates primarily in the cultural sector with a local/regional market position. Technically, the site is built on WordPress with common plugins such as Slider Revolution and Contact Form 7, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms, which are recommended for GDPR compliance. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.

F

Frankfurter Kunstverein

fkv.de

48

Frankfurter Kunstverein is a small, established cultural institution based in Germany, focusing on contemporary art exhibitions and cultural events. The website is professionally designed using WordPress with multilingual support, targeting art enthusiasts and the local community. The technical infrastructure includes modern JavaScript libraries and Google services, with a cookie consent mechanism implemented via Cookiebot. Security posture is adequate with HTTPS and consent-based tracking, but lacks explicit privacy policies, terms of service, and security headers. No contact or incident response information is provided, which limits transparency and user trust. Overall, the site is accessible and safe, with room for improvement in privacy and security disclosures.

D

Dommuseum Frankfurt

dommuseum-frankfurt.de

41

Dommuseum Frankfurt is a cultural institution focused on exhibiting ecclesiastical art and historical artifacts related to the Frankfurt Cathedral. The website provides detailed information about exhibitions, guided tours, events, and publications, targeting museum visitors and cultural enthusiasts. The museum positions itself as a regional cultural landmark with a strong educational mission. Technically, the site is built on TYPO3 CMS with modern frontend libraries like jQuery and Bootstrap, offering a responsive and user-friendly experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though security headers and explicit policies could be improved. Privacy compliance is strong with GDPR-aligned cookie management and a comprehensive privacy policy. Overall, the website is professional, trustworthy, and well-maintained, supporting the museum's mission effectively.

KHG Erlangen is a small, non-profit community organization serving students and young academics in Erlangen, Germany. The website provides information about their spiritual, social, and support services including regular religious services, community events, counseling, and housing assistance. The organization positions itself as an inclusive and open community welcoming diverse backgrounds. Technically, the website is built on the Contao CMS platform with modern frontend libraries such as jQuery and Bootstrap, hosted on NSHost infrastructure. The site is mobile optimized and offers a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS enabled but lacks visible security headers and a public security policy. Privacy compliance is basic with a privacy policy page present but no cookie consent mechanism. Overall, the website is trustworthy and professional, serving its community effectively.

I

Institut für Religionspädagogik und Lehrkräftefortbildung in Bayern

rpz-bayern.de

39

The Institut für Religionspädagogik und Lehrkräftefortbildung in Bayern (IRL) is a specialized educational institution focused on religious pedagogy and teacher training within Bavaria, Germany. It serves as a regional hub for professional development of religious education teachers, offering courses, events, and resources tailored to various school types. The institute is newly founded in 2025 and operates under the auspices of the Freisinger Bischofskonferenz, emphasizing innovation and quality in religious education. Technically, the website is built on TYPO3 CMS with modern web technologies including Bootstrap and jQuery. It is hosted by Alfahosting, a reputable German hosting provider. The site demonstrates good mobile optimization and user experience, with clear navigation and professional design. However, performance is moderate and accessibility features are basic. From a security perspective, the site uses HTTPS but lacks visible security headers and formal vulnerability disclosure mechanisms. Privacy and cookie policies are not present on the analyzed page, indicating gaps in GDPR compliance. Contact information is comprehensive, including email, phone, physical address, and a contact form with validation. Overall, the website is trustworthy and professional, serving a niche educational market. Strategic improvements in privacy compliance, security headers, and transparency would enhance its security posture and user trust.

E

Erzbistum München und Freising

erzbistum-muenchen.de

51

Erzbistum München und Freising is a large, established religious non-profit organization serving the Catholic community in the Munich and Freising region of Germany. The website provides comprehensive information about religious services, spiritual guidance, educational programs, and social support initiatives. It targets a general audience including families, youth, and adults interested in Catholic life and community activities. The organization maintains a consistent and professional online presence with clear branding and well-structured content.

S

Seelsorgestiftung Oberfranken

seelsorgestiftung-oberfranken.de

44

Die Seelsorgestiftung Oberfranken is a regional non-profit foundation established in 2010 that supports various seelsorgerische (pastoral care) services in the Oberfranken region of Germany. Its primary focus is on supporting TelefonSeelsorge and other pastoral care initiatives in hospitals, police, prisons, senior homes, and for tourists. The website is professionally designed using Drupal 10, with good mobile optimization and accessibility. It integrates a modern cookie consent manager (Klaro) ensuring GDPR compliance. Contact information and donation details are clearly presented, enhancing trust and transparency. The domain registration data aligns well with the organization's stated mission and regional focus, indicating legitimacy.

The website represents the Catholic parish of Schwürbitz, Germany, serving local community members with information about religious services, parish staff, events, and contact details. It is positioned as a small, non-profit religious entity under the Erzbistum Bamberg. The site uses a modern technical stack including Bootstrap, jQuery, and Matomo analytics, hosted on servers consistent with the domain's WHOIS data. Security posture is adequate with HTTPS, cookie consent, and reCAPTCHA integration, though security headers and explicit policies could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is trustworthy, professionally designed, and well-suited for its target audience.

D

DPSG Diözesanverband Bamberg

dpsg-bamberg.de

49

DPSG Diözesanverband Bamberg is a regional non-profit scouting organization in Germany, affiliated with the national Deutsche Pfadfinderschaft St. Georg (DPSG). The website serves as an information hub for members, providing details on events, facilities, and organizational structure. It targets scouts and volunteers within the Bamberg diocese, offering resources such as event calendars, booking inquiries for scout houses, and educational content. The organization maintains a consistent brand presence and clear communication channels, including email, phone, and social media links. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses SEO best practices via Yoast SEO and structured data.

E

Evangelisch-Lutherische Kirche in Bayern

pilgern-bayern.de

44

The website www.pilgern-bayern.de is a well-structured, content-rich platform operated by the Evangelical Lutheran Church in Bavaria, focusing on pilgrimage activities and spiritual engagement within Bavaria. It serves a niche audience of pilgrims and religious community members by providing detailed information on pilgrimage routes, events, spiritual literature, and community networking. The site leverages modern web technologies including Drupal 10 and Bootstrap, ensuring good mobile optimization and accessibility. A cookie consent manager (Klaro) is implemented, reflecting strong privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Contact is primarily via a web form, with no direct emails or phone numbers published. Overall, the site demonstrates a high level of professionalism and trustworthiness appropriate for a non-profit religious organization.

The Katholischer Seelsorgebereich Gottesgarten website serves as an informational portal for the Catholic pastoral care area Gottesgarten in Germany, providing comprehensive details about sacraments, pastoral services, events, and contact information for the local community. The site is well-positioned as a regional non-profit religious community resource, targeting parishioners and residents in the Gottesgarten region. It offers clear navigation, relevant content, and consistent branding aligned with its mission. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Font Awesome, and integrates Matomo analytics for user tracking with privacy considerations. The site is hosted on kirche-bamberg.de infrastructure, uses HTTPS, and includes a cookie consent mechanism compliant with GDPR. Mobile optimization and accessibility are adequately addressed, though some improvements could be made in security headers and accessibility features. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, use of reCAPTCHA, and anonymized analytics tracking. However, explicit security headers are not evident, and no incident response or security policy pages are published. No vulnerabilities or suspicious content were detected. The domain WHOIS data aligns well with the website content, indicating legitimacy and trustworthiness. Overall, the website presents a low-risk profile with a solid privacy and security posture for a non-profit religious organization. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining up-to-date third-party libraries to further strengthen the security posture.

Telefonseelsorge Erlangen is a small, non-profit organization providing free, confidential telephone counseling services to individuals facing acute distress, interpersonal difficulties, and emotional crises. The service operates 24/7 with trained volunteers offering anonymous support. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive privacy and cookie policies, reflecting a strong commitment to user privacy and compliance with GDPR. Technically, the site leverages modern web technologies including jQuery, Bootstrap, and Matomo analytics, hosted on infrastructure associated with kirche-bamberg.de, indicating a stable and reputable hosting environment. Security posture is good with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the website is trustworthy, well-maintained, and aligned with its mission to provide emotional support services in Erlangen, Germany.

L

Landwirtschaftsverlag GmbH

lv.de

46

Landwirtschaftsverlag GmbH operates as a major German media company specializing in agriculture, food, and rural lifestyle content. With over 900 employees and significant revenue, it holds a strong market position among Germany's top 100 media companies. The website reflects a professional digital presence with a focus on publishing and digital media services targeted at agricultural professionals and rural communities. Technically, the site uses modern frameworks like Bootstrap and integrates Google Analytics and Usercentrics for tracking and consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS and anonymized analytics, though explicit security headers and incident response information are absent. Overall, the site is compliant with GDPR and provides clear business information, though lacks direct contact emails or phone numbers on the main pages. The domain registration data is minimal but consistent with the business claims, and no blocking or WAF interference was detected.

N

National Oceanography Centre

ntslf.org

70

The National Tidal and Sea Level Facility (NTSLF) is a UK-based government/non-profit research center specializing in sea level monitoring, coastal flood forecasting, and analysis of sea level extremes. It serves as a key resource for researchers, policy makers, planners, and coastal engineers by providing tidal predictions, storm surge forecasts, and tide gauge data. The website is professionally designed, well-structured, and provides comprehensive content relevant to its audience. It is affiliated with reputable institutions such as the National Oceanography Centre and the University of Liverpool, enhancing its credibility. Technically, the website is built on Drupal 10 with modern libraries including jQuery, Bootstrap, and Leaflet.js for interactive maps. It is hosted with a reputable registrar and uses Azure DNS, with HTTPS enabled ensuring secure communications. The site includes a cookie consent mechanism and links to a comprehensive privacy policy, demonstrating good privacy compliance. Performance and mobile optimization are adequate, and accessibility features are present. From a security perspective, the site employs HTTPS and domain transfer protection but lacks DNSSEC and explicit security headers. There is no published security policy or incident response contact, and no vulnerability disclosure mechanism is evident. No WAF or blocking mechanisms interfere with content access. Overall, the security posture is solid but could be improved with additional security headers and transparency. The overall risk assessment is low, with the site appearing trustworthy and professionally maintained. Strategic recommendations include enabling DNSSEC, publishing a security policy, adding vulnerability disclosure information, and implementing security headers to enhance protection and trust.

J

Joseph-Stiftung

joseph-stiftung.de

55

Joseph-Stiftung is a well-established, church-affiliated real estate organization operating primarily in Bavaria and Saxony, Germany. With over 75 years of experience, it focuses on providing affordable and socially responsible housing solutions, including rental apartments, student housing, and property management services. The organization emphasizes sustainability and integrates economic, ecological, and social dimensions into its operations. Technically, the website is built on WordPress with modern frameworks and libraries, offering good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, serving a broad audience including families, students, and property owners.

K

Kreisbauernverbände Tübingen e.V. und Zollernalb e.V.

landwirtschaft-tuebingen-zollernalb.de

49

The website www.landwirtschaft-tuebingen-zollernalb.de represents the Kreisbauernverbände Tübingen e.V. und Zollernalb e.V., regional agricultural associations in Baden-Württemberg, Germany. It serves as an information and service portal for local farmers and agricultural stakeholders, providing news, events, membership information, and various services. The site positions itself as a trusted regional representative body with a clear focus on supporting agricultural interests and community engagement. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including Bootstrap and JavaScript. It is hosted on Hetzner servers, indicating professional infrastructure. The site is mobile-optimized and includes SEO best practices such as meta tags and Open Graph data. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly configured, and no dedicated security or incident response policies are published. No vulnerabilities or suspicious content were detected. Overall, the security posture is solid but could be improved with additional headers and transparency. The overall risk assessment is low, with the site demonstrating professionalism, legitimacy, and compliance. Strategic recommendations include enhancing security headers, publishing incident response information, and improving accessibility features to further strengthen trust and compliance.

F

Friedrich-Loeffler-Institut

fli.de

47

The Friedrich-Loeffler-Institut is a German federal government research institute specializing in animal health, infectious diseases, and zoonoses. It serves as a national authority and scientific leader in veterinary medicine, providing reference laboratory services, research, and public information. The website reflects a mature digital presence with a consistent brand and comprehensive content targeting researchers, veterinarians, and government stakeholders. Technically, the site is built on TYPO3 CMS, uses Matomo for analytics with user consent, and demonstrates good mobile optimization and accessibility. Security posture is strong with HTTPS, cookie consent, and session management, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site is trustworthy, professional, and compliant with GDPR requirements.