Security Directory

T

Tanzschule TenDance

tanzen-ulm.de

55

Tanzschule TenDance is a local dance school based in Ulm, Germany, offering a variety of dance and fitness courses for children, youth, and adults. Their services include Kindertanzen, Jugend- und Schultanzkurse, HipHop, Paartanz, and fitness classes, positioning them as a community-focused hospitality business in the dance education sector. The website is professionally designed using WordPress and Elementor, with good SEO practices and mobile optimization. The presence of structured data and social media integration enhances their digital presence. Technically, the site uses modern technologies including Cookiebot for GDPR-compliant cookie consent and Microsoft Clarity and Google Tag Manager for analytics and tracking. Security posture is adequate with HTTPS enabled and cookie consent implemented, though additional security headers and policies could improve resilience. No privacy policy or terms of service were found, which is a compliance gap. Overall, the website is trustworthy and serves its business purpose well, but could benefit from enhanced privacy and security documentation.

B

beckers-ulm

cafe-restaurant-stadthaus.de

47

beckers-ulm operates a hospitality business focused on café and restaurant services located in Ulm, Germany. The website highlights their offerings including lunch menus, homemade cakes, and coffee from their own roastery, targeting local customers and visitors. The business maintains a professional online presence with clear contact details and a user-friendly reservation system. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging SEO and privacy plugins to enhance user experience and compliance. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site is trustworthy and well-maintained, supporting the business's local market position effectively.

C

ChurchDesk

churchdesk.com

78

ChurchDesk is a specialized SaaS provider offering comprehensive church management solutions that streamline communication, event planning, and member administration for churches and religious organizations. The company has a solid market position within its niche, supported by a well-structured website that reflects its business focus and professionalism. The technical infrastructure leverages WordPress CMS with Elementor, supported by Cloudflare for DNS and CDN services, and integrates marketing and analytics tools such as HubSpot and Plausible. The website demonstrates good digital maturity with responsive design and adequate SEO optimization. Security posture is strong, with HTTPS enforced, security headers present, and no visible vulnerabilities. Cookie consent and privacy policies indicate GDPR compliance, although explicit security policies and incident response contacts are absent. Overall, the website and domain registration data suggest a trustworthy and legitimate business with room for improvement in security transparency and accessibility.

R

Research & Degrowth International

degrowth.org

58

Research & Degrowth International is a small, non-profit think-and-act tank focused on promoting degrowth principles through research, advocacy, education, and events. The organization targets activists, academics, policymakers, and students interested in sustainable and equitable alternatives to growth-centric economic models. Their offerings include research collaborations, educational programs such as Master's degrees, and event organization at local and international levels. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website is built on WordPress using the Elementor framework, hosted by OVH sas. It employs modern web technologies including jQuery and MediaElement.js, and is optimized for mobile devices with good accessibility and SEO practices. Performance is moderate, with room for improvement in loading speed and security hardening. The domain is well-established since 2009, with proper registrar locks but lacks DNSSEC. Security posture is good with HTTPS enforced and cookie consent mechanisms implemented, but could be enhanced by enabling DNSSEC and adding more security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive privacy policy and GDPR-aligned cookie consent. However, no explicit security or incident response policies are published, and no vulnerability disclosure or security.txt file is present. Overall, the website is trustworthy, safe, and professionally maintained, supporting the organization's mission effectively. Strategic recommendations include enhancing domain security with DNSSEC, publishing incident response and security policies, and continuous monitoring of third-party components to maintain security and compliance.

A

Agenda della Disabilità

agendadelladisabilita.it

63

Agenda della Disabilità is a non-profit organization based in Italy focused on promoting disability inclusion and sustainable community development. The website serves as a platform for community engagement, advocacy, and dissemination of inclusive initiatives. It targets a general audience interested in social inclusion and disability rights. The organization maintains a modest but consistent online presence with active social media channels and event calendars. Technically, the website is built on WordPress using popular plugins such as Elementor, Yoast SEO, and Google Analytics, reflecting a moderate level of digital maturity. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security-wise, the site enforces HTTPS and DNSSEC, indicating a good baseline security posture. However, it lacks some advanced security headers and explicit security policies, which could be improved. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy or terms of service pages. Overall, the website is trustworthy and professional, with no signs of malicious activity or adult content.

R

RPM Invest

rpm-invest.de

41

RPM Invest operates as the strategic investment unit of the Rheinische Post Mediengruppe, focusing on fast-growing technology and digital media companies with proven business models. The company provides capital, expertise, and a broad network to support founders and entrepreneurs through long-term partnerships and flexible investment structures. The website reflects a professional and consistent brand presence, showcasing portfolio companies and investment criteria. Technically, the site is built on WordPress using Elementor and Gravity Forms, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced, though security headers and explicit privacy policies are missing. No blocking or WAF challenges were detected, allowing full content access and analysis.

H

Herr Stratmann Gestaltungswesen

herrstratmann.de

53

Herr Stratmann Gestaltungswesen is a small German-based consultancy specializing in marketing concepts, corporate design, brand development, and digital transformation services. Founded in 2008 by Martin Stratmann, the company offers personalized and strategic support to businesses seeking to enhance their marketing and digital presence. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site is built on WordPress using Elementor and Yoast SEO, ensuring a modern and SEO-friendly infrastructure. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though improvements can be made by adding security headers and incident response information. Privacy compliance is basic, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy and well-positioned for its niche market.

F

Flachsland Zukunftsschulen gemeinnützige GmbH

flachsland-zukunftsschulen.de

48

Flachsland Zukunftsschulen gemeinnützige GmbH is a non-profit educational organization based in Hamburg, Germany, operating bilingual and integrative kindergartens, a combined kindergarten and school facility, and a vocational school for social pedagogy. It is a subsidiary of Kinderwelt Hamburg gGmbH, leveraging over 30 years of experience in child and youth education. The website serves as an informational portal for families and stakeholders, providing details about the institutions, donation options, and contact information primarily via email. The organization targets families and educators seeking quality educational services in Hamburg. Technically, the website is built on WordPress using the Elementor page builder, with standard web technologies such as jQuery and Font Awesome. Hosting is provided by netcup, as inferred from the DNS nameservers. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. No advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and cookie consent mechanisms. There is no published security policy or incident response contact, and no vulnerability disclosure information is available. The WHOIS data is consistent and transparent, with no privacy protection or suspicious patterns, supporting the legitimacy of the domain and organization. Overall, the website presents a professional and trustworthy image suitable for its educational mission. However, improvements in security headers, privacy compliance (cookie consent), and transparency around security policies would enhance its security posture and compliance with GDPR requirements.

K

Kröpelin Projekt GmbH

kroepelin-projekte.de

64

Kröpelin Projekt GmbH is a small German company specializing in digital education solutions, primarily focused on providing customized ILIAS learning management platforms. Their services include platform operation, technical support, software development, training, content conception, and consulting. The company targets education providers, organizations, project portals, and corporate clients, positioning itself as a niche service provider in the education technology sector. The website is professionally designed using WordPress and Elementor, featuring good mobile optimization and clear navigation. Security posture is strong with HTTPS and cookie consent mechanisms, though lacking explicit security policies or incident response contacts. Overall, the site reflects a trustworthy and GDPR-compliant business with a focus on quality service delivery.

S

Sunshine Cinema

sunshinecinema.org

9

Sunshine Cinema is a small non-profit organization operating Africa's first solar-powered mobile cinema network. Their core mission is to empower youth facilitators to deliver social change campaigns, films, and dialogues in rural Southern Africa. The organization leverages solar technology to provide sustainable and accessible cinema experiences, targeting youth and rural communities. The website reflects this mission with focused content and a consistent brand image. Technically, the website is built on WordPress using popular plugins such as Elementor, LayerSlider, and GiveWP, indicating a moderate level of digital maturity. The site is mobile optimized and includes SEO best practices, but lacks some advanced accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a gap for GDPR and other regulations. Overall, the website is trustworthy and professional but would benefit from improved privacy and security disclosures.

M

Maiatsaco Ltd

sugardaddy.date

56

SugarDaddy.date is an established online dating platform specializing in sugar daddy and sugar baby matchmaking, primarily targeting mature adults in Germany and surrounding regions. The business operates under Maiatsaco Ltd, a Cyprus-registered company, and positions itself as Germany’s leading sugar daddy dating agency. The platform offers membership registration for both men and women, emphasizing a safe, discreet, and luxurious dating experience. The website is professionally designed with multilingual support and clear calls to action, reflecting a mature and focused business model in the adult dating sector. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, supported by Cloudflare for DNS and CDN services. It employs modern web technologies including Google Tag Manager and Google reCAPTCHA for security and analytics. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Security posture is solid with HTTPS enforced and domain transfer protections in place, but could benefit from enhanced HTTP security headers and DNSSEC activation. From a security and compliance perspective, the site provides comprehensive privacy, cookie, and terms of service policies, indicating GDPR awareness and user data protection. However, no explicit incident response or vulnerability disclosure policies were found. The content is adult-oriented, focusing on sugar dating, which requires mature audience targeting and appropriate disclaimers. No critical vulnerabilities or suspicious activities were detected, and the domain WHOIS data aligns well with the business claims, supporting legitimacy. Overall, SugarDaddy.date presents a credible and professionally managed online dating service with a good balance of business maturity, technical infrastructure, and security awareness. Strategic improvements in security headers, incident response transparency, and DNSSEC could further enhance trust and resilience.

M

MAIATSACO LIMITED

sugardaddy.ch

60

SugarDaddy.ch is a specialized online dating platform focused on sugar daddy and sugar baby relationships primarily in Switzerland and Germany. The platform emphasizes a safe, discreet, and flexible dating environment without mandatory subscriptions, catering to adults seeking authentic and mutually beneficial relationships. The business is operated by MAIATSACO LIMITED, with transparent company information and a professional web presence. Technically, the site is built on WordPress with Elementor and incorporates modern SEO and security features such as HTTPS and Google reCAPTCHA. However, some security headers are missing, and there is no public incident response or vulnerability disclosure policy, which could be improved. The site uses tracking scripts including Google Tag Manager and a suspicious third-party tracking domain, which may impact user privacy perceptions. Overall, the platform maintains a good security posture and business credibility but could enhance transparency and security practices further.

[

[PIAS]

piasgroup.net

53

PIAS is a well-established independent music company founded in 1982, operating globally with offices in London and Brussels. The company focuses on music distribution, marketing, and licensing services, supporting the independent music community. The website is built on WordPress using Elementor and Yoast SEO, indicating a modern CMS and SEO awareness. However, the site is currently undergoing a redesign, with limited content and no visible privacy or cookie policies. Security posture is moderate with HTTPS enabled but lacks security headers and explicit privacy compliance. The absence of WHOIS data raises concerns about domain registration transparency, though the website branding and external links suggest legitimacy. Strategic improvements in privacy compliance, security headers, and domain registration transparency are recommended.

S

SUN Sportmanagement GmbH

illerlauf-senden.de

46

Iller-Lauf Senden is a regional running event organized by SUN Sportmanagement GmbH, targeting runners of all ages and fitness levels in Germany. The event features multiple race categories including a 10-km main run, youth and kids runs, and walking events, complemented by local markets and a consumer fair. The website is built on WordPress using Elementor and integrates modern web technologies and SEO best practices, hosted likely by a partner domain einsteinmarathon.de. Security posture is good with HTTPS and no exposed sensitive data, though improvements are recommended in security headers and cookie consent mechanisms. Contact information and business details are clearly presented, enhancing business credibility. Overall, the site is professional, trustworthy, and well-structured for its purpose.

F

Fiera Gustarte – Fiera Nazionale dei Territori

fieragustarte.com

57

Fiera Gustarte is a national Italian event focused on promoting local tourism, gastronomy, traditions, sustainability, sport, and art. The website presents a professional and well-structured platform built on WordPress with Elementor, targeting visitors and exhibitors interested in cultural and territorial promotion. The technical infrastructure includes modern tracking tools such as Google Analytics and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled but lacks advanced security headers and visible privacy compliance mechanisms. The absence of WHOIS data raises concerns about domain legitimacy, though the website content and contact information appear credible. Overall, the site serves its business purpose effectively but requires improvements in privacy compliance and domain registration transparency.

G

GET Energy Trading SRL

getenergytrading.com

63

GET Energy Trading SRL is a newly established company (founded 2023) specializing in natural gas trading across key Eastern European markets including Bulgaria, Romania, and Hungary. The company leverages advanced trading tools to provide spot, forward, and structured energy trading solutions. Their website is professionally designed using WordPress and Elementor, reflecting a moderate level of digital maturity with good mobile optimization and clear navigation. However, the technical infrastructure lacks some security best practices such as DNSSEC and security headers, and the Google Analytics plugin is present but not configured, indicating incomplete analytics setup. Privacy compliance is limited, with no cookie consent mechanism detected and only a basic privacy policy available. The domain registration is consistent with the company’s recent founding, registered via a Turkish registrar service, with no privacy protection applied. Overall, the security posture is moderate but could be improved by implementing security headers, enabling DNSSEC, and enhancing privacy compliance. The business credibility is supported by clear company information and consistent branding, though contact details are limited to a contact form without explicit emails or phone numbers. Strategic recommendations include improving security configurations, completing privacy compliance, and properly configuring analytics tools to enhance trust and operational insight.

Alpet Madeni Yağları is a Turkish company specializing in the manufacturing and distribution of lubricants and industrial oils, operating for nearly 20 years under the umbrella of Zeren Group Holding. The company serves a broad industrial and commercial audience with a diverse product portfolio including engine oils, marine lubricants, greases, and complementary products. Their market position is that of a well-established domestic producer with an international distribution network spanning 54 distributors. Technically, the website is built on WordPress using modern tools like Elementor and Yoast SEO, providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy compliance mechanisms such as cookie consent banners. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be verified. Overall, the website is professional and trustworthy, but improvements in security and privacy compliance are recommended.

Ö

Österreichisches Spendengütesiegel

osgs.at

47

The Österreichisches Spendengütesiegel is an Austrian non-profit organization dedicated to certifying charitable organizations to ensure transparency and trust in the donation sector. The website serves as an informational and trust-building platform targeting donors and charitable entities within Austria. It offers certification services and promotes the quality seal as a mark of reliability. Technically, the website is built on WordPress using the Elementor framework, with modern fonts and responsive design elements, providing a good user experience and moderate performance. Security-wise, the site employs HTTPS and several security headers, indicating a solid baseline security posture, though it lacks visible incident response or security policy disclosures. Privacy compliance is limited, with no explicit privacy or cookie policies detected, which could be improved to meet GDPR standards. Overall, the domain registration data aligns well with the website's claims, supporting its legitimacy and trustworthiness.

B

BE MOVIE

be-movie.ch

47

BE MOVIE is a cultural event platform dedicated to showcasing Bernese films through cinema screenings and online streaming. It targets film enthusiasts, families, and youth, offering workshops and awarding film prizes. The website is built on WordPress with Elementor, using modern web technologies and includes social media integration and Google reCAPTCHA for form security. While the site demonstrates good technical implementation and business credibility, it lacks explicit privacy and cookie policies, which impacts its privacy compliance score. Security posture is solid with HTTPS and security headers present, but incident response information is missing. Overall, the website is trustworthy and professionally presented, serving as a regional media event hub.

U

UGL Sicurezza Civile

uglsc.it

10

UGL Sicurezza Civile is a labor union organization focused on protecting the rights and promoting the safety of workers in the civil security sector in Italy. Founded recently in 2023, it operates primarily as a non-profit entity providing advocacy, training, and informational resources to its members. The website serves as a communication platform featuring news, articles, and updates relevant to its target audience of security workers and union members. The organization maintains an active social media presence and offers newsletter subscriptions to keep stakeholders informed. Technically, the website is built on WordPress using the Elementor page builder, supported by a CDN for content delivery. It employs modern web technologies including jQuery and LiteSpeed caching for performance optimization. The site is mobile-optimized and features good SEO practices, although accessibility features are basic. Privacy and cookie policies are clearly presented, indicating compliance with GDPR requirements. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and advanced security headers, which are recommended for enhanced protection. No critical vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the business claims, transparent, and legitimate. Overall, the website presents a professional and trustworthy front for the organization. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include enabling DNSSEC, implementing additional security headers, and publishing explicit security and incident response policies to further strengthen trust and compliance.

B

Bernd Hummel

eurotour25-28.de

10

EuroTour25–28 is a multi-year endurance and climate awareness project led by Ulm-based extreme athlete Bernd Hummel, aiming to connect key European regions through sporting challenges and sustainability advocacy from 2025 to 2028. The project is positioned as a niche initiative promoting European unity and environmental responsibility, supported by partners such as the Einstein-Marathon and Technische Hochschule Ulm. The website is built on WordPress using modern tools like Elementor and Yoast SEO, providing a good user experience with mobile optimization and clear navigation. However, it lacks critical compliance elements such as privacy and cookie policies, and no direct contact information is provided, which limits user trust and GDPR compliance. Security posture is generally good with HTTPS and no visible vulnerabilities, but the absence of security headers and incident response details are areas for improvement.

S

SUN Sportmanagement GmbH

ulmer-klimalauf.de

46

Ulmer Klimalauf is a virtual running event organized by SUN Sportmanagement GmbH, focused on climate protection through community participation. The event encourages participants to collect kilometers by running, walking, or hiking, supporting climate-related projects such as water supply initiatives in Uganda. The website is well-branded, professionally designed, and provides comprehensive information about the event, partners, and sustainability efforts. Technically, the site is built on WordPress with Elementor and uses Cloudflare DNS for performance and security. Security posture is good with HTTPS and no visible vulnerabilities, though security headers and cookie consent mechanisms could be improved. Contact information and privacy policies are clearly presented, supporting GDPR compliance. Overall, the site is trustworthy and serves its target audience effectively.

U

Ulmer Frauenlauf

ulmer-frauenlauf.de

54

Ulmer Frauenlauf is a regional event organizer focused on women's running events in southern Germany. The website provides comprehensive event information, partner promotion, and registration details, targeting female runners and sports enthusiasts. The site is built on WordPress with Elementor and uses modern SEO practices including structured data. Hosting and DNS are managed via Cloudflare, ensuring good performance and security at the infrastructure level. However, the site lacks explicit privacy and cookie policies, and no consent mechanisms are detected, which may pose compliance risks under GDPR. Security posture is moderate with HTTPS enforced but missing security headers and vulnerability disclosure. Overall, the site is professional and trustworthy but could improve privacy compliance and security transparency.

U

Ulmer Firmenlauf

firmenlauf-ulm-neu-ulm.de

53

The Ulmer Firmenlauf website represents a regional corporate running event organizer in southern Germany, focusing on the popular AOK Firmenlauf event. The site provides event information and branding but lacks comprehensive business and contact details. Technically, the website is built on WordPress with Elementor and uses Cloudflare DNS for performance and security. SEO is supported by Rank Math, and analytics are implemented via WordPress.com Stats. Security posture is moderate with HTTPS enabled but missing advanced security headers and policies. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is functional and professional but could improve transparency and security practices.

I

Integral Ad Science

integralads.com

65

Integral Ad Science is a global leader in digital media measurement and optimization, providing actionable data to advertisers, publishers, and platforms to enhance advertising effectiveness. The company offers a broad suite of services including ad fraud detection, brand safety, contextual targeting, and viewability measurement, positioning itself as a critical partner in the advertising technology ecosystem. The website reflects a mature, enterprise-grade digital presence with comprehensive content and global reach, supported by multiple language versions and a strong SEO foundation. Technically, the site is built on WordPress with modern frameworks and integrates advanced marketing and analytics tools such as Google Tag Manager, Hotjar, and Marketo, indicating a high level of digital maturity. Security posture is solid with HTTPS enforced and domain registration protections in place, though there is room for improvement in DNSSEC adoption and security header implementation. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility, with no critical security or content safety concerns.

S

SoftTec GmbH

softtec.de

63

SoftTec GmbH operates a professional website offering hotel software and cloud-based hotel management solutions primarily targeting the hospitality sector in Germany. The website is built on WordPress using Elementor and incorporates modern web technologies such as jQuery and WPRocket for performance optimization. The site is accessible without any WAF or security challenges, indicating a stable hosting environment. However, the website lacks explicit privacy and cookie policies, as well as clear contact information for security incidents or data protection officers, which are critical for GDPR compliance and user trust. Security best practices such as security headers are not evident, suggesting room for improvement in the security posture. Overall, the website presents a good business credibility and technical foundation but requires enhancements in privacy compliance and security transparency.

N

NOZ/mh:n MEDIEN

noz-mhn.de

44

NOZ/mh:n MEDIEN is a large regional media group in Germany offering a diverse portfolio of print and digital media products including newspapers, magazines, and audio content. The company positions itself as a leading regional news provider with a focus on delivering timely and valuable information to its audience. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. The technical infrastructure includes modern plugins and analytics via Matomo, hosted on servers associated with basecom.de. Security posture is solid with HTTPS and cookie consent mechanisms in place, though explicit security policies and incident response information are not published. Overall, the site is trustworthy and compliant with GDPR requirements.

A

Agenti Treviso

agentitreviso.it

58

Agenti Treviso is a well-established association representing commercial agents and representatives in the Province of Treviso, Italy, founded in 1948. The organization provides key services such as legal representation, contractual assistance, and welfare support to its members. The website reflects a professional and consistent brand image, targeting agents of commerce and related stakeholders in the local market. Technically, the site is built on WordPress using Elementor, with modern web technologies and integrations such as Google Tag Manager and Iubenda for privacy compliance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although formal security policies and incident response contacts are not published. Overall, the site demonstrates good digital maturity and compliance with GDPR, providing a trustworthy and user-friendly experience for its audience.

K

KielRegion GmbH

mokwi.de

48

KielRegion GmbH operates the MokWi platform, a regional government-backed initiative focused on providing free, sustainable, and community-oriented digital collaboration tools for projects in the KielRegion of Germany. The platform facilitates project management, networking, and visibility for local initiatives, emphasizing non-profit and sustainable development. The website is professionally designed, well-structured, and targets community groups and organizations within the region. Technically, the site is built on WordPress with modern plugins for SEO, cookie consent, and analytics, hosted on Dogado servers. Security posture is strong with HTTPS, cookie consent management, and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is robust, with clear privacy and cookie policies and GDPR adherence. Overall, the site reflects a trustworthy, professional regional government initiative with good digital maturity and community focus.

S

SoftTec GmbH

hotels-online-buchen.de

62

SoftTec GmbH operates a professional website offering hotel software and cloud hotel program solutions targeted at the hospitality industry in Germany. The website is built on WordPress using Elementor and jQuery, indicating a modern and maintainable technical infrastructure. The site is accessible without any WAF or security challenges, and the content is relevant and professionally presented. However, the website lacks explicit privacy, cookie, and terms of service policies, which are critical for GDPR compliance and user trust. Security headers and incident response information are also missing, which could be improved to enhance the security posture. Overall, the website demonstrates a moderate level of digital maturity with room for improvement in privacy and security compliance.

D

Donaubüro gemeinnützige GmbH

donaufest.de

49

The Donaufest website represents a well-established international cultural festival organized by the Donaubüro gemeinnützige GmbH in Germany. It showcases a rich program of cultural events spanning ten days and involving ten countries along the Danube River. The festival emphasizes cultural exchange, artistic performances, and family-friendly activities, positioning itself as a significant cultural event in the region with recognition such as the EFFE Label. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and Cloudflare for DNS and CDN services. The site is mobile-optimized and presents good design and navigation, although accessibility could be improved. Security posture is strong with HTTPS and security headers in place, but lacks visible cookie consent and formal security policies. Overall, the site is trustworthy and professional, though it would benefit from enhanced privacy compliance and clearer contact information.

E

Einstein-Marathon

einsteinmarathon.de

55

Einstein-Marathon is a well-established sports event organizer focusing on one of the largest running events in southern Germany, attracting over 15,000 participants. The website provides comprehensive information about the event, including registration, race details, results, and partner collaborations. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and Cloudflare DNS for performance and security. The security posture is adequate with HTTPS and no visible sensitive data exposure, but lacks advanced security headers and formal privacy and cookie policies, which are critical for GDPR compliance. Overall, the site is professional and trustworthy but should improve privacy compliance and security disclosures to enhance user trust and regulatory adherence.

K

KielRegion GmbH

kielregion.de

48

KielRegion GmbH is a regional cooperation entity uniting the strengths of the Kreise Rendsburg-Eckernförde, Plön, and the city of Kiel to foster sustainable development in the region. The company focuses on three main thematic areas: WirtschaftsRegion (economic development), MobilitätsRegion (mobility solutions), and ZukunftsRegion (future-oriented projects). It supports networking among political, economic, scientific, and administrative stakeholders and promotes initiatives such as the SprottenFlotte bikesharing system. The website targets regional stakeholders including startups, innovative companies, and traditional businesses within the KielRegion, serving approximately 650,000 residents.

E

European Film Academy

europeanfilmawards.eu

54

The European Film Academy website serves as the official platform for the European Film Awards, providing comprehensive information about upcoming awards, nominees, winners, and related news. The organization operates as a non-profit cultural entity focused on promoting European cinema and supporting film professionals and enthusiasts across Europe. The site features a professional design, clear navigation, and rich multimedia content, reflecting a mature digital presence. Technically, the website is built on WordPress with Elementor and uses modern libraries such as Swiper.js and Yoast SEO for enhanced user experience and search engine optimization. The site is mobile-optimized and accessible, with good performance indicators. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism, aligned with GDPR requirements. However, direct contact information such as emails or phone numbers is not publicly listed, relying instead on contact forms and external press hub links. The domain WHOIS data is privacy protected, which is common and justified for this type of organization. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security headers, publishing explicit security policies, and adding vulnerability disclosure information to further strengthen trust and compliance.

A

AR-PA Turismo cultural

arpaturismocultural.es

46

AR-PA Turismo cultural is a well-established cultural heritage fair organized by the Junta de Castilla y León in Spain, focusing on cultural heritage, innovation, and professional networking. The website is professionally designed using WordPress with Elementor and various plugins, providing a rich user experience with multimedia content and clear navigation. The technical infrastructure is modern and includes SEO and GDPR compliance tools, although a dedicated privacy policy page is not explicitly found. Security posture is good with HTTPS and no visible vulnerabilities, but security headers could be improved. WHOIS data is restricted due to Red.es policies, which is common for .es domains, but the website's content and branding strongly support its legitimacy. Overall, the site is credible, secure, and serves its target audience effectively.

F

Feria Outlet Valladolid

feriaoutletvalladolid.com

58

Feria Outlet Valladolid is a Spanish event organizer specializing in retail outlet fairs offering discounts up to 80% on major brands. The website serves as an information portal for upcoming events, galleries, and participation details, targeting local consumers interested in discounted shopping experiences. The business is relatively new, founded in 2022, and operates primarily in the retail and hospitality sectors within Spain. Technically, the site is built on WordPress using Elementor, with integration of common web technologies such as jQuery and Bootstrap, and hosted behind Cloudflare DNS services. The site demonstrates good digital maturity with structured data, SEO optimization, and mobile responsiveness. Security posture is adequate with HTTPS enforced and GDPR cookie compliance implemented, though additional security headers and DNSSEC could improve resilience. No critical vulnerabilities or suspicious patterns were detected. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though lacking explicit contact emails and terms of service pages.

S

StopDNA

stopdna.eu

60

StopDNA is a non-profit advocacy campaign focused on opposing the European Digital Networks Act, emphasizing risks such as monopolization and loss of internet freedom. The campaign is associated with AIIP, an Italian Internet Provider association, targeting European citizens, businesses, and independent ISPs. The website is built on WordPress using Elementor and Yoast SEO, providing a good user experience with clear navigation and multilingual support. Security posture is adequate with HTTPS enforced, but lacks some security headers and cookie consent mechanisms. Contact information and privacy policy are present, though GDPR compliance indicators are minimal. Overall, the site is professional and trustworthy within its niche.

H

Hotelmarketing Gruppe

hotelmarketing.de

61

Hotelmarketing Gruppe is a specialized marketing service provider focused on developing hotel personalities and branding strategies within the hospitality sector in Germany. The website demonstrates a professional design using WordPress with Elementor and WPRocket plugins, indicating a moderate level of digital maturity. However, the absence of explicit privacy and cookie policies, as well as lack of visible contact information, suggests room for improvement in transparency and user trust. Security posture is basic with no detected security headers and minimal SSL configuration details, which could be enhanced to protect user data and improve compliance. Overall, the website is functional and professional but would benefit from stronger privacy compliance and security measures to elevate trustworthiness and regulatory adherence.

W

wechange eG

wechange.coop

50

wechange eG is a recently founded cooperative based in Germany that develops and operates digital community portals tailored for organizations and municipalities. Their business model focuses on providing cloud-hosted, open source collaboration tools emphasizing data privacy, security, and sustainability. The website is professionally designed using WordPress and Elementor, featuring clear navigation, relevant content, and strong trust signals such as testimonials and partner logos. Technically, the site uses modern technologies and integrates well-known open source tools like Nextcloud, Collabora, BigBlueButton, and Rocket.Chat. Security posture is good with HTTPS and self-hosted EU servers, but could be improved by enabling DNSSEC, adding security headers, and publishing explicit security and incident response policies. Privacy compliance is strong with a comprehensive privacy policy, though a cookie consent mechanism is missing. Overall, the site is trustworthy and well-positioned in its niche.

M

Manageritalia

manageritalia.it

63

Manageritalia is a professional organization serving managers, executives, and professionals in the tertiary sector including commerce, transport, tourism, and services in Italy. The website positions itself as a key reference point offering membership services, networking events, specialized solutions, and a magazine for its audience. The digital infrastructure is built on WordPress with modern plugins such as Elementor and Yoast SEO, ensuring good performance, mobile optimization, and SEO readiness. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security and incident response policies are not publicly visible. Overall, the site is professional, trustworthy, and compliant with GDPR cookie regulations, serving a medium-sized organization in Italy.

A

Ambasciata Di Turchia Ufficio Cultura e Informazioni

turchia.it

49

The website www.turchia.it serves as the official cultural and tourism information portal of the Turkish Embassy's Cultural and Information Office in Italy. It provides comprehensive information about Turkey's destinations, cultural heritage, events, and UNESCO sites, targeting general audiences interested in Turkish tourism and culture. The site is positioned as an authoritative source for promoting Turkey's tourism in Italy, leveraging official branding and social media channels to enhance outreach. Technically, the website is built on WordPress using the Elementor page builder and Yoast SEO plugin, indicating a modern and maintainable infrastructure. It employs Google Analytics and Google Tag Manager for analytics and tracking, with asynchronous script loading to optimize performance. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features are basic. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers such as Content-Security-Policy and HSTS, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. No incident response or vulnerability disclosure information is provided, which could be improved to bolster trust. Overall, the website is trustworthy and professional, with a strong business credibility score. The main risks relate to privacy compliance and security header implementation. Addressing these gaps would improve the site's security posture and regulatory adherence.

Sir Robin Photography is a professional photography service based in Switzerland, specializing in a diverse range of photographic categories including corporate, events, weddings, portraits, artwork, journeys, and documentaries. The website serves as a portfolio showcasing the photographer's work and includes client testimonials and references, targeting individuals and businesses seeking high-quality photography services. The business operates primarily as a small-scale service provider within the media industry. Technically, the website is built on WordPress using the Elementor page builder, leveraging modern web technologies such as jQuery, Google Analytics, Google reCAPTCHA, and Photoswipe for image galleries. The site demonstrates moderate performance and good mobile optimization, with basic accessibility and SEO features. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect its contact form, indicating a reasonable security posture. However, it lacks important security headers and formal security policies, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional and trustworthy, with clear contact information and social media presence. The absence of privacy and cookie policies represents a compliance gap, especially under GDPR regulations. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and establishing a vulnerability disclosure process to enhance security and compliance.

A

Alice Authoring Art

authoringart.ch

45

Alice Authoring Art is a small Swiss-based service provider specializing in professional text quality assurance, offering individually crafted and carefully edited texts for companies, organizations, cultural creators, and private individuals. The website is built on WordPress using Elementor and integrates common analytics tools such as Google Analytics and Clicky Analytics. The technical infrastructure is modern and mobile-optimized, providing a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers and explicit security policies are absent. Privacy compliance is weak due to missing privacy and cookie policies and lack of GDPR indicators. Contact information is limited to social media links without explicit emails or phone numbers. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

H

Hotel Adriatica

casacli.it

35

CasAcli is a hospitality business offering accommodation services near the Vatican in Rome, targeting families, groups, and pilgrims. The website is professionally designed using WordPress with Elementor and optimized for SEO using Yoast. It provides key services including group religious travel accommodation, business meeting events, room rentals, and hospitality services. The business appears to be small-sized and established since 2015, with consistent domain registration data supporting legitimacy. Technically, the site uses modern web technologies and includes Google Analytics for visitor tracking. Security posture is solid with HTTPS and DNSSEC enabled, but lacks some advanced security headers and published security policies. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, the website is functional, trustworthy, and safe for general audiences.

C

Consorzio di Tutela della Denominazione di Origine Controllata Prosecco

prosecco.wine

10

The website www.prosecco.wine represents the Consorzio di Tutela della Denominazione di Origine Controllata Prosecco, an official consortium dedicated to the promotion, protection, and valorization of the Prosecco DOC wine denomination. It serves as an authoritative source of information for consumers, producers, and stakeholders interested in Prosecco, providing educational content, news, sustainability initiatives, and consortium activities. The site targets a mature audience interested in Italian wine culture and the Prosecco DOC brand. Technically, the website is built on WordPress using Elementor and several plugins such as Yoast SEO, Ultimate Member, and Contact Form 7. It integrates Google Analytics and Google Tag Manager for tracking and uses Google reCAPTCHA for form security. The site is mobile-optimized with good SEO practices and moderate performance. However, some security headers are missing, and there is no visible cookie consent mechanism, which could be improved for GDPR compliance. From a security perspective, the site uses HTTPS with a strong SSL configuration and implements reCAPTCHA to protect forms. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is not publicly available, indicating privacy protection, which is justified for this type of consortium. The domain appears legitimate and consistent with the business claims. Overall, the website is professional, content-rich, and trustworthy, with minor areas for improvement in security headers and privacy compliance. It effectively supports the consortium's mission to protect and promote Prosecco DOC.

E

EXPLORiT

explorit.ch

60

EXPLORiT is a multi-generational innovation and leisure center located in Yverdon, Switzerland, offering a variety of services including cinemas, exhibitions, kids' clubs, live music, dining, coworking spaces, and event venues. The website is professionally designed using WordPress and Elementor, supporting multilingual content primarily in French and German. The technical infrastructure includes modern plugins and tracking tools such as Google Analytics and Facebook Pixel, indicating a mature digital presence. Security posture is good with HTTPS enforced and use of reCAPTCHA, though explicit security policies and headers could be improved. Privacy compliance is limited due to the absence of visible privacy and cookie policies. Overall, the site presents a trustworthy and professional business with room for enhanced privacy and security transparency.

F

Fiera Gustarte – Fiera Nazionale dei Territori

fieragustarte.it

58

Fiera Gustarte is an Italian national fair dedicated to promoting local products, craftsmanship, enogastronomic excellence, and cultural heritage. The event targets tourists, exhibitors, and visitors interested in Italian traditions, gastronomy, sustainability, sport, and art. The business model revolves around event organization and exhibition space rental. The website is built on WordPress with Elementor and integrates marketing and analytics tools such as Google Analytics and Facebook Pixel. The site is well-designed, mobile-optimized, and provides clear contact information, but lacks explicit privacy and cookie policies. Security posture is good with HTTPS enabled, but security headers and incident response information are missing. WHOIS data is unavailable, raising concerns about domain legitimacy, though the active and professional website presence suggests recent registration or privacy protection. Overall, the site is functional and trustworthy for general users but would benefit from improved privacy compliance and security transparency.

Promozione Italia APS is an Italian non-profit organization dedicated to coordinating and promoting the Universal Civil Service, particularly environmental and cultural volunteer projects. The website serves as an information hub for prospective volunteers, providing detailed project descriptions, selection calendars, and official government links for application submission. The organization targets young adults aged 18-28 interested in civil service opportunities across various Italian regions. The site reflects a consistent brand identity and professional presentation aligned with its mission. Technically, the website is built on WordPress with popular plugins such as WooCommerce and Elementor, leveraging modern web technologies including Bootstrap and jQuery. The site is moderately performant and well-optimized for mobile devices, though accessibility features could be enhanced. SEO practices are adequately implemented with proper meta tags and structured content. From a security perspective, the site enforces HTTPS and includes standard security headers, indicating a good baseline security posture. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of visible privacy and cookie policies, as well as incident response information, represents compliance and transparency gaps that should be addressed. Overall, the website is trustworthy and professional, serving its non-profit mission effectively. Strategic improvements in privacy compliance and security transparency would further strengthen its position and user trust.

Financecommunity ES is a Spanish-language finance and corporate news media platform operated by LC Publishing Group. It targets finance professionals and stakeholders interested in banking, corporate finance, and related sectors. The website offers news, magazine publications, and sector insights, positioning itself as a niche media outlet within the Spanish and Latin American finance community. Technically, the site is built on WordPress using Elementor, with a modern tech stack including jQuery, Bootstrap, and Google Fonts. It employs a GDPR-compliant cookie consent mechanism and integrates Google Analytics for visitor tracking. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. The WHOIS data is not publicly accessible due to registry restrictions for .es domains, but the website content and partner links indicate legitimacy. Overall, the site is professional, well-branded, and trustworthy, with good SEO and user experience.

L

legalcommunitygermany.com

legalcommunitygermany.com

61

legalcommunitygermany.com is a niche legal news and community platform operated by LC Publishing Group, focusing on German legal sectors such as banking, finance, energy, and pharma. The website provides news articles, event listings, monographs, and newsletters targeting legal professionals and in-house counsel. The platform is part of a broader network of sister sites serving different regions and sectors. Technically, the site is built on WordPress with Elementor and uses modern plugins for SEO, GDPR compliance, and event management. The hosting is managed by Register SPA with standard DNS and no DNSSEC. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and DNSSEC could be improved. No critical vulnerabilities or suspicious content were detected. Privacy compliance is strong with clear policies and consent banners. Overall, the site is professional, trustworthy, and well-positioned in its niche.