Security Directory

F

FONDATION SUISA

fondation-suisa.ch

55

FONDATION SUISA is a Swiss non-profit foundation dedicated to supporting Swiss and Liechtenstein music creators through funding, partnerships, and promotional activities. The website serves as an information hub for funding offers, application submissions, and foundation activities, targeting musicians and cultural organizations. The foundation holds a reputable position in the Swiss cultural sector with a clear mission to promote music. Technically, the website is built on WordPress using a standard theme and plugins, including GDPR compliance tools. It is moderately optimized for performance and mobile devices, with good SEO and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, but lacks advanced security headers and a public vulnerability disclosure policy. WHOIS data confirms the legitimacy and transparency of the domain registration, consistent with the foundation's profile. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could improve security headers and incident response transparency.

R

Raiffeisen Südtirol IPS Genossenschaft

ipsraiffeisen.it

58

Raiffeisen Südtirol IPS Genossenschaft operates as a regional institutional protection scheme securing the solvency and liquidity of 39 Raiffeisen banks, the Raiffeisen Landesbank Südtirol AG, and RK Leasing GmbH in South Tyrol, Italy. The website serves as an information portal providing governance details, annual reports, and news updates targeted at stakeholders within the financial cooperative sector. The business model centers on cooperative financial protection and risk mitigation within the regional banking ecosystem. Technically, the website is built on WordPress using the Avada theme and several plugins including Slider Revolution, Ultimate Member, and Quform. It employs modern web technologies such as jQuery and implements a comprehensive cookie consent mechanism via CookieYes, supporting GDPR compliance. The site is mobile-optimized with good SEO and accessibility basics, though some improvements could be made in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses a detailed cookie consent banner with granular user controls. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies or incident response information suggests room for maturity in security governance. The WHOIS data aligns well with the website’s claims, indicating a legitimate and consistent registration for a financial cooperative. Overall, the website presents a professional and trustworthy digital presence for a regional financial institution. Strategic recommendations include enhancing HTTP security headers, publishing a security policy, and improving accessibility features to further strengthen security posture and user trust.

T

Thomas Mohn

thomasmohn.de

41

Thomas Mohn is a professional photographer and videographer based in Münster, Germany, specializing in business photography, image films, drone footage, advertising films, and event videos. The website presents a well-established small business with a strong regional presence and a focus on authentic visual storytelling for corporate and private clients. The site features positive customer testimonials and showcases client logos, reinforcing trust and credibility. Technically, the website is built on WordPress using Elementor, with modern plugins for enhanced user experience and cookie consent management. Hosting is provided by kasserver.com, and the site is well-optimized for mobile devices with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

Kopfhoch3 is a small technology company based in Münster, Germany, specializing in software development, IT consulting, and project management. The company positions itself as a reliable partner for digitalization projects, targeting businesses and organizations in the Münsterland region. Their website reflects a professional and consistent brand image, supported by structured data and social media presence on LinkedIn. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Borlabs Cookie, ensuring good SEO and privacy compliance practices. The site is well-optimized for performance and mobile devices, providing a good user experience. Security-wise, the website enforces HTTPS and implements cookie consent but lacks advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. Overall, Kopfhoch3 demonstrates a mature digital presence with room for improvement in privacy policy transparency and security documentation.

G

GWS

gws.ms

48

GWS mbH is a German technology company specializing in ERP and business digitalization software solutions, notably the gevis-SUITE. Established in 1999, the company targets businesses seeking comprehensive digital management systems. The website is built on WordPress with modern plugins and themes, hosted likely on Microsoft Azure infrastructure, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and formal policies. Privacy compliance is weak due to absence of privacy and cookie policies and consent mechanisms. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and compliance.

O

Olsberg GmbH

olsberg-guss.com

44

Olsberg GmbH is a German manufacturing company specializing in high-quality cast iron products for various industrial sectors. Operating from three locations in Germany, the company offers comprehensive services including series and hand molding, surface treatment, machining, and logistics. The website reflects a professional and well-structured digital presence, leveraging WordPress with modern plugins and frameworks to deliver a responsive and user-friendly experience. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements such as DNSSEC and enhanced security headers are recommended. Overall, the site demonstrates strong business credibility and compliance with GDPR requirements.

Milchwerke Berchtesgadener Land Chiemgau eG operates a regional dairy cooperative focused on producing high-quality, sustainable dairy products. The website emphasizes values such as quality, origin, sustainability, and fairness, targeting consumers who value responsible agriculture and regional products. The business model is cooperative-based dairy production and retail, positioning itself as a trusted regional brand in Germany. The website is built on the Neos CMS platform using the Flow PHP framework, hosted on servers indicated by the domain's nameservers. The technical infrastructure is modern and supports good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and GDPR-compliant cookie consent. Overall, the website is professional, trustworthy, and aligned with the business's values and market position.

T

Tenbrink.de

tenbrink.de

35

Tenbrink.de is a German-based small business specializing in project coordination for interior construction and furnishing projects across various industries both nationally and internationally. The website presents a professional image with clear business focus and uses modern WordPress technologies and plugins to deliver content and manage user interactions. The presence of GDPR-compliant cookie consent mechanisms and structured data enhances its digital maturity. Security posture is solid with HTTPS enforced and privacy plugins in use, though there is room for improvement in security headers and published policies. Overall, the website is trustworthy, well-maintained, and suitable for its target audience.

O

ONI-Wärmetrafo GmbH

oni.de

41

ONI-Wärmetrafo GmbH is a German-based company specializing in energy-efficient industrial and server cooling solutions. The company offers comprehensive services from concept creation to final assembly, targeting industrial clients and server infrastructure operators. The website reflects a professional B2B service provider with a clear focus on energy sector cooling technologies. The digital infrastructure is built on WordPress with modern plugins and technologies such as Usercentrics for consent management and Google Analytics 4 for analytics. The site is mobile-optimized and SEO-friendly, indicating a mature digital presence. Security posture is adequate with HTTPS enabled and consent mechanisms in place, though explicit security policies and contact information for incident response are missing. Overall, the domain registration and hosting align with the business profile, supporting legitimacy. Strategic improvements include publishing privacy and terms policies and enhancing security headers and contact transparency.

B

Benedikt IT Services e.U.

bits.at

59

Benedikt IT Services e.U. (BITS) is a small Austrian IT service provider specializing in personal programming and professional website development. The company targets graphic designers, agencies, and clients seeking pixel-accurate, SEO-friendly, and responsive websites. Their business model focuses on custom web development, ongoing maintenance, and content management support, leveraging a network of collaborators for graphic and textual services. The website presents a professional portfolio showcasing various projects, indicating a solid market presence within its niche. Technically, the website is built on WordPress using the Elementor framework, with a modern tech stack including PHP, JavaScript, and MySQL. The site is mobile-optimized and performs moderately well, though some accessibility and SEO enhancements could be made. Security-wise, HTTPS is enforced, but the absence of security headers and cookie consent mechanisms indicates room for improvement in compliance and hardening. Overall, the security posture is moderate with no critical vulnerabilities detected, but the lack of explicit security policies and incident response contacts suggests limited formal security governance. The domain WHOIS data aligns well with the business identity, supporting legitimacy. The site uses minimal tracking via Plausible Analytics, respecting user privacy. Strategically, BITS should enhance its security headers, implement GDPR-compliant cookie consent, and publish clear security and incident response policies to strengthen trust and compliance. These steps will improve their security posture and business credibility in a competitive IT services market.

E

EUFCN

eufcn.com

47

EUFCN is a well-established non-profit association founded in 2008 that supports and promotes the European film industry through a network of over 100 film commissions across 32 countries. The organization focuses on facilitating networking, information exchange, and professional development within the audiovisual sector. Their website reflects a professional and consistent brand presence, showcasing partnerships with key industry players and media partners. Technically, the site is built on WordPress using modern plugins and frameworks, with good mobile optimization and SEO practices. Security measures include HTTPS and Google reCAPTCHA, though improvements such as DNSSEC and security headers are recommended. Overall, the website demonstrates a solid security posture and business credibility, though privacy and terms of service documentation appear to be missing or not detected in the provided content.

I

ILIAS open source e-Learning e.V.

ilias.de

51

ILIAS open source e-Learning e.V. operates a mature and well-established open-source learning management system widely used by educational institutions, companies, and public sector organizations primarily in Germany and Europe. The platform offers a comprehensive LMS solution with strong community involvement and professional support services. The website is built on WordPress with modern plugins and provides multilingual content in German and English. Security practices include HTTPS, GDPR-compliant cookie consent, and encoded emails to protect contact information. However, formal security policies and vulnerability disclosure mechanisms could be improved. Overall, the site demonstrates a high level of professionalism, trustworthiness, and technical maturity.

K

Kammerer Solutions

kammerer-solutions.it

43

Kammerer Solutions is a small technology service provider based in Brixen, Italy, specializing in software development, web design, and data protection services. The company targets small to medium-sized businesses or individuals seeking customized digital solutions. The website is professionally designed using WordPress and Elementor, featuring clear navigation and relevant content in German. Contact information is prominently displayed, enhancing business credibility. Technically, the site uses modern web technologies including Google reCAPTCHA for form security, but lacks some advanced security headers and DNSSEC for domain protection. The SSL configuration is good, ensuring encrypted communications. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Overall, the site is functional, trustworthy, and well-positioned for its market segment.

A

AIIP - Associazione Italiana Internet Provider

aiip.it

59

AIIP is a well-established Italian association representing small and medium Internet providers, advocating for high standards, regulatory support, and institutional relations to foster the growth of Italy's Internet market. The website is built on a modern WordPress infrastructure with common plugins and technologies, providing a professional and user-friendly experience. Security posture is solid with HTTPS and GDPR-compliant cookie consent, though explicit security policies and vulnerability disclosures are absent. Overall, the site reflects a credible and trustworthy organization with consistent WHOIS data and clear contact information.

P

Pixels Brand

pixelsbrand.de

48

Pixels Brand is a creative digital communication agency specializing in web development, design, and digital marketing services with a strong focus on delivering measurable results. The company targets businesses seeking to enhance their online presence through modern websites, e-commerce solutions, branding, and marketing strategies. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive service descriptions. Multiple language versions indicate an international approach, primarily targeting German and Portuguese-speaking markets. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various analytics and marketing tools such as Google Tag Manager, Google Analytics, Facebook Pixel, and Calendly for scheduling. Hosting appears to be managed by Pressidium, a reputable WordPress hosting provider. The site implements GDPR-compliant cookie consent mechanisms with multi-language support, demonstrating a commitment to privacy compliance. From a security perspective, the site uses HTTPS with good SSL configuration and employs cookie consent to manage tracking scripts. However, no explicit security headers were detected in the HTML content, and no published security or incident response policies were found. No vulnerabilities or exposed sensitive data were identified. The WHOIS data shows consistent domain usage, though hosting DNS suggests Portuguese infrastructure while the site targets Germany, which aligns with the company's international presence. Overall, Pixels Brand presents a trustworthy, professional digital agency with a solid technical foundation and good privacy practices. Strategic improvements in security headers and published security policies could further enhance their security posture and trustworthiness.

W

Sign in - Matomo

wfstat.com

45

The website wfstat.com serves as a login portal for the Matomo analytics platform, an open-source web analytics solution focused on privacy and data control. The platform targets website administrators and analytics professionals seeking an alternative to commercial analytics services. The site is technically hosted on AWS infrastructure with domain registration via Amazon Registrar, Inc., indicating a modern cloud-based deployment. The content is minimal, primarily providing access to the analytics dashboard with no public-facing business or contact information. The technical infrastructure leverages Matomo's own JavaScript and PHP-based analytics framework, with HTTPS enabled and token-based authentication for user sessions. However, the site lacks visible security headers and public privacy or cookie policies, which are critical for compliance and user trust. Overall, the security posture is moderate but could be improved with enhanced headers and explicit policies. The domain is newly registered in 2023, consistent with a new or recently deployed service. No suspicious or malicious indicators were found, and the content is safe for general audiences.

P

Pixels Brand

pixelsbrand.com

11

Pixels Brand is a Portuguese digital communication agency specializing in web development, design, branding, and digital marketing services. Established in 2013, the company has built a solid market position with a portfolio of notable clients and projects, targeting businesses seeking to enhance their digital presence and marketing effectiveness. Their business model focuses on delivering customized digital solutions including corporate websites, e-commerce platforms, and integrated marketing campaigns. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and jQuery, enhanced by analytics and marketing tools like Google Tag Manager, Google Analytics, and Facebook Pixel. The site demonstrates good digital maturity with responsive design, SEO optimization, and a comprehensive cookie consent mechanism supporting GDPR compliance. From a security perspective, the site uses HTTPS with a clientTransferProhibited domain status, indicating domain transfer protection. However, DNSSEC is not enabled, and some recommended HTTP security headers are missing. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed through detailed cookie policies and consent management. Overall, Pixels Brand presents a professional, trustworthy, and technically sound online presence with minor areas for security enhancement. The risk profile is low, and the company appears credible and compliant with relevant privacy regulations.

S

Stiftung Phonoproduzierende

stiftungphonoproduzierende.ch

52

Stiftung Phonoproduzierende is a Swiss non-profit cultural foundation dedicated to promoting culture in the field of sound carrier production and usage. Funded by a portion of copyright remuneration claims from Swiss phonoproducers, it supports cultural events, competitions, education, and projects related to the Swiss music scene. The foundation operates with a clear non-commercial, charitable purpose and maintains a small organizational size. The website is professionally designed using WordPress with modern plugins such as Yoast SEO and Ninja Forms, including GDPR-compliant cookie consent and Google reCAPTCHA for form security. The site is multilingual, primarily in German, and provides clear contact information including a physical address and email, but no phone support.

F

FONDATION SUISA

suisa-stiftung.ch

56

FONDATION SUISA is a Swiss non-profit foundation dedicated to supporting and promoting Swiss and Liechtenstein music creators. The foundation operates primarily through funding offers, partnerships, and international presence initiatives to foster the local music scene. Their website serves as an information hub for funding applications, foundation details, and music promotion activities. Technically, the site is built on WordPress using modern plugins and themes, including React and Gutenberg blocks, ensuring a contemporary digital presence with good mobile optimization and SEO practices. Security-wise, the site employs HTTPS and standard security headers, with a GDPR-compliant privacy and cookie policy, though it lacks explicit security and incident response policies. Overall, the site is professional, trustworthy, and well-aligned with its non-profit cultural mission.

W

Webwerk

webwerk.ch

52

Webwerk is a small Swiss technology service provider specializing in professional Apple Mac support, web design, and internet services. The company targets Apple users and clients seeking web presence solutions, operating primarily in Schaffhausen, Switzerland. Their website reflects a focused business model offering a range of services including Macintosh support, emergency services, private training, remote support, and web hosting. The site is professionally designed with clear navigation and German language content, supporting their local market position. Technically, the website is built on WordPress CMS using popular plugins such as Yoast SEO, Contact Form 7, Complianz GDPR, and LayerSlider. The infrastructure includes modern JavaScript libraries and Google Maps integration. Performance is moderate with good mobile optimization and basic accessibility features. However, some PHP warnings visible in the HTML source indicate minor backend issues that should be addressed. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism compliant with GDPR. While no critical vulnerabilities are evident, the absence of explicit security headers and incident response policies suggests room for improvement. The domain registration is privacy protected but consistent with the business age and profile, indicating legitimacy. Overall, Webwerk presents a trustworthy and professional online presence suitable for its niche market. Strategic improvements in backend error handling, security header implementation, and publishing security policies would enhance their security posture and compliance maturity.

S

Sud Avesnois Invest

sud-avesnois-invest.com

49

Sud Avesnois Invest is a regional government entity focused on economic development and business support within the Sud Avesnois community in France. The website serves as a portal for businesses and entrepreneurs seeking to establish, develop, or network in the region, highlighting strategic location advantages and available services such as aid, networking, and meeting facilities. The site is well-branded and professionally maintained, reflecting its government affiliation and regional focus. Technically, the website is built on WordPress with Elementor and integrates modern analytics tools like Matomo and HubSpot, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though improvements are recommended in DNSSEC and security headers to enhance protection. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information, supporting its credibility as a government service platform.

Q

Quadriga Communication GmbH

quadriga-communication.de

49

Quadriga Communication GmbH is a specialized PR agency focused on the finance and publishing sectors, offering services such as communication strategies, corporate publishing, event management, and product communication. The company positions itself as a trusted partner for financial institutions and publishers, leveraging a broad network and expertise to enhance client reputation and product sales. The website reflects a professional and consistent brand image with clear service offerings and client references. Technically, the site is built on WordPress using the Avada theme and several plugins for enhanced UI and multimedia content. The site is mobile-optimized and SEO-friendly but lacks some privacy and security policy disclosures. Security posture is generally good with HTTPS enabled and secure forms, but missing security headers and incident response information are noted. Overall, the site is trustworthy and professionally maintained but would benefit from improved privacy compliance and security transparency.

The Schweizerische Interpretengenossenschaft SIG is a Swiss cooperative organization dedicated to supporting performing artists by providing free consultation, managing remuneration claims for broadcast performances, advocating for artists' rights, and offering a comprehensive information platform. The website targets artists in Switzerland and serves as a trusted resource for legal and financial support related to artistic performances. Technically, the site is built on WordPress with jQuery, featuring a responsive design and good SEO practices, though some accessibility features could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and incident response disclosures. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

W

WHY Portugal

whyportugal.org

43

WHY Portugal is a specialized non-profit organization serving as the official music export office for Portugal, founded in 2016. It supports Portuguese music professionals and artists by facilitating international exposure, export opportunities, and collaboration within the global music industry. The website reflects a focused business model targeting music industry stakeholders and international markets, with strong ties to national cultural organizations and European music export networks. Technically, the website is built on WordPress with a moderate tech stack including Google Analytics and Elementor, offering a good user experience and mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and DNSSEC, and no explicit security or incident response policies are publicly available. Privacy compliance is partial, with a terms and conditions page referencing GDPR but no cookie consent mechanism. Overall, the website is professional, trustworthy, and content-rich, serving its niche audience effectively.

A

AH Lasereinsatztechnik GmbH

ah-laser.de

57

AH Lasereinsatztechnik GmbH is a German manufacturing company specializing in advanced laser processing technologies including 2D and 3D laser cutting, water jet cutting, CNC bending, and welding. Founded in 1991, the company operates from Hardthausen am Kocher and serves industrial clients requiring precision manufacturing and integrated logistics. The website reflects a mature business with a broad service portfolio and a strong partner network. Technically, the site is built on the Neos CMS platform using modern JavaScript libraries and frameworks, delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response policies are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

S

Serima

serima.it

10

Serima is an established Italian company specializing in advertising technology and signage solutions, with over 40 years of experience. Their website presents a professional and well-structured digital presence, offering a wide range of products including stickers, banners, clothing, flags, vehicles, photo printing, and more. The target audience primarily consists of businesses and organizations seeking customized advertising and signage solutions. Technically, the website is built on WordPress using the Avia Framework and common plugins such as Yoast SEO and WPML for multilingual support. The site is mobile-optimized and demonstrates good SEO practices, though performance is moderate. Security-wise, the site uses HTTPS with a valid SSL certificate and implements a cookie consent mechanism, but lacks visible security headers and published privacy or security policies. No critical vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the business claims, supporting legitimacy.

M

Manni Nössing

manninossing.it

56

Manni Nössing is a small, family-owned winery based in Brixen, Italy, specializing in white wines with a strong emphasis on terroir and character. Founded in 1999, the business has established a niche market position, particularly known for its Kerner wine. The website reflects a professional and consistent brand image, targeting wine enthusiasts and buyers interested in regional Italian wines. The business model relies on direct contact sales and distribution through dealers, eschewing online payment options in favor of personal communication. Technically, the site is built on WordPress with modern web technologies and includes SEO and mobile optimization features. Security posture is good with HTTPS, cookie consent, and secure form handling, though some security headers and explicit policies are missing. Privacy compliance is basic but present, with a GDPR-compliant privacy policy and cookie banner. Overall, the site is trustworthy and well-maintained, with clear contact information and business legitimacy confirmed by WHOIS data.

Heliks is a specialized climbing center located in Bruneck, Italy, offering a wide range of climbing and bouldering activities, courses for all ages, private lessons, summer camps, and a bar. The business targets climbing enthusiasts including families, children, and youth, positioning itself as a local community hub for climbing sports and recreation. The website is professionally designed using WordPress with WooCommerce and Elementor, providing booking capabilities and rich content in German with Italian language support. Social media integration and newsletter subscription enhance community engagement. Privacy and cookie policies are present and GDPR compliant, reflecting a mature approach to data protection. The domain is secured with DNSSEC and HTTPS, indicating a good security posture.

N

NOEX AG

noex.ag

63

NOEX AG is a German company specializing in the environmentally responsible and legally compliant recycling of electrical and electronic waste. As a subsidiary of Entsorgungsgesellschaft Niederrhein (EGN), it serves over 1,400 customers across Germany and Europe, providing services including collection, transport, processing, compliance management, and monitoring. The company positions itself as a reliable partner transforming old electrical appliances into raw materials for the future. The website is professionally designed, content-rich, and clearly targeted at businesses requiring compliant disposal solutions. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and plugins. It is mobile-optimized and performs moderately well. Security posture is good with HTTPS enforced, though some security headers are missing. Privacy and cookie policies are present and GDPR compliant, reflecting a mature approach to data protection. No WAF or blocking mechanisms were detected, and the website content is fully accessible. WHOIS data is unavailable due to privacy protection, which is justified for this business type. Contact information is comprehensive and consistent with the business claims. Overall, the site demonstrates a solid security posture and business credibility with room for improvement in security headers and incident response transparency. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure policies, and maintaining regular security audits to strengthen trust and compliance further.

S

Stadt Graz

graz.at

68

Stadt Graz operates the official city portal for the capital of Styria, Austria, providing comprehensive information and services related to municipal administration, citizen services, tourism, and local news. The website serves as a central hub for residents and visitors, offering access to city plans, webcams, political news, and community programs. It maintains a strong market position as the authoritative source for city-related information and services. Technically, the website is built on the ico-cms platform, leveraging modern web technologies including PHP, JavaScript libraries such as PDF.js, Three.js, and Bootstrap for responsive design. The site demonstrates good digital maturity with mobile optimization, accessibility features, and SEO best practices. Analytics tools like Matomo/Piwik and Google Analytics are used with a clear cookie consent mechanism, reflecting compliance with privacy regulations. From a security perspective, the site enforces HTTPS and uses session management cookies appropriately. However, explicit security headers are not clearly detected, and there is no publicly available security policy or incident response contact information. No vulnerabilities or suspicious content were identified, indicating a generally secure posture suitable for a government website. Overall, Stadt Graz's website is a professional, trustworthy, and well-maintained digital presence that effectively supports its public service mission. Strategic improvements in security header implementation and transparency around security policies would further enhance its security posture and user trust.

E

egeplast international GmbH

egeplast.de

50

egeplast international GmbH is a medium-sized German manufacturer specializing in innovative plastic piping systems for the transport of water, gases, data, and electricity. With a presence in over 30 countries, the company serves industrial and infrastructure clients, positioning itself as a reliable and innovative player in the energy and transportation sectors. The website reflects a professional and well-branded digital presence, supporting multiple languages and optimized for SEO and mobile devices. Technically, the site is built on WordPress with modern plugins and frameworks, hosted by a reputable provider, and implements HTTPS with good security practices including reCAPTCHA and cookie consent mechanisms. However, it lacks a dedicated security policy or vulnerability disclosure page, which could improve transparency and incident response readiness. Overall, the domain registration and WHOIS data align well with the company's profile, indicating legitimacy and trustworthiness.

K

komptech.com

komptech.com

53

Komptech.com is a professional website representing a company specializing in environmental technology, particularly in waste management and biomass processing machinery. The company targets business clients in the transportation and energy sectors, offering industrial equipment and technology solutions. The website demonstrates a good level of digital maturity with a modern WordPress CMS, optimized performance, and SEO best practices. However, the absence of explicit privacy and cookie policies and lack of visible contact information limit its privacy compliance and user trust. Security posture is generally good with HTTPS and some security headers, but could be enhanced by adding more explicit security policies and incident response contacts. The WHOIS data is missing or protected, which reduces domain trustworthiness and suggests a need for further verification of domain registration details. Overall, the website is professional and safe, but improvements in privacy compliance and transparency are recommended.

P

PRÄZI GROUP

praeziflachstahl.de

54

PRÄZI GROUP is a well-established manufacturing company specializing in precision flat steel products since 1904. The website reflects a professional B2B industrial focus with multilingual support and modern digital infrastructure. The company maintains a consistent brand presence and targets industrial clients primarily in Germany and possibly broader European markets. Technically, the site is built on WordPress with contemporary plugins such as Cookiebot for consent management and Weglot for translations, indicating a mature digital presence. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published security policies. Privacy compliance is partially met with cookie consent but no visible privacy policy or terms of service on the homepage. Overall, the website is trustworthy and professional but could improve transparency and security documentation.

A

Alber AG/SpA

alber.it

51

Alber AG/SpA is a well-established Italian manufacturing company specializing in hosiery and tights, with origins dating back to the 1960s. The company operates internationally with a focus on quality, innovation, and customer service. Their website reflects a mature digital presence built on WordPress with extensive use of marketing and analytics tools, indicating a strong digital marketing strategy. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though improvements can be made in security headers and explicit privacy documentation. The domain registration data supports the legitimacy and longevity of the business. Overall, the website is professional and trustworthy but could enhance privacy and security transparency.

I

Internet Privatstiftung Austria - Internet Foundation Austria

internetstiftung.at

52

Internet Privatstiftung Austria operates as a foundational entity dedicated to fostering the development and orderly access to internet networks and services within Austria. It holds a pivotal role in managing the .at domain and supports various subsidiaries that enhance internet infrastructure, cybersecurity, and project funding. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, it leverages WordPress CMS, Matomo analytics, and cookie consent mechanisms to ensure privacy compliance. Security posture is strong with HTTPS enforcement and privacy-conscious analytics, though some security headers could be improved. Overall, the site is trustworthy, well-branded, and aligned with its mission.

A

Acri

acri.it

60

Acri is a well-established Italian non-profit organization representing banking foundations and savings banks, with a history dating back to 1912. It coordinates significant social, cultural, and economic development initiatives funded by its members, managing substantial assets and disbursing billions of euros over the years. The website reflects a professional and consistent brand presence, targeting stakeholders in the finance and non-profit sectors. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics platforms, demonstrating a moderate to good level of digital maturity. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are absent. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information and partner links.

O

Only Stage

onlystage.co.uk

60

Only Stage is a UK-based arts management and production company specializing in representing artists, organizing tours, and producing shows, recordings, documentaries, and competitions. The company also offers consulting and communication services within the performing arts sector. Their website demonstrates a professional and consistent brand presence, targeting performing arts professionals and cultural institutions. Technically, the site is built on WordPress with a modern plugin ecosystem, including event calendars and portfolio management tools, and integrates Iubenda for privacy and cookie compliance. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are not published. Overall, the website is well-structured, accessible, and compliant with GDPR, reflecting a mature digital presence. The WHOIS lookup failed due to querying an invalid subdomain, but the domain itself appears legitimate and established. Strategic recommendations include publishing security policies, adding vulnerability disclosure mechanisms, and enhancing accessibility.

O

Onetrend

onetrend.pl

51

Onetrend is a digital marketing agency based in Warsaw, Poland, founded in 2019. The company focuses on integrated marketing solutions including SEO, content preparation, and website development. The website is professionally designed using WordPress and modern web technologies, targeting businesses seeking digital marketing services. The technical infrastructure includes WordPress CMS, Google Tag Manager, Cookiebot for consent management, and various JavaScript libraries. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks DNSSEC and advanced security headers. Privacy compliance is partial due to absence of explicit privacy and terms of service pages. Overall, the website presents a credible and professional business presence with room for improvement in security and compliance documentation.

S

Servicestelle digitaleSenior:innen

digitaleseniorinnen.at

47

Servicestelle digitaleSenior:innen is a non-profit educational organization based in Austria, operated by the Österreichisches Institut für angewandte Telekommunikation (ÖIAT). The organization focuses on supporting education providers and trainers in delivering digital literacy and inclusion programs tailored for senior citizens. Their offerings include practical training courses, learning materials, and a quality seal to certify outstanding digital education services for seniors. The website is professionally designed, well-structured, and targets both educators and senior learners, positioning itself as a niche leader in digital senior education within Austria. Technically, the website is built on WordPress 6.8.3 with modern web technologies including JavaScript libraries such as Leaflet.js for mapping and Matomo for privacy-focused analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with caching and minification evident. Security posture is strong with HTTPS enforced and multiple security headers present, though explicit cookie consent mechanisms and published security policies are lacking. From a security perspective, the site shows maturity with no visible vulnerabilities or exposed sensitive data. The use of Matomo analytics aligns with privacy-conscious data collection, and GDPR compliance is supported by a comprehensive privacy policy. However, the absence of a cookie consent banner and incident response information are areas for improvement. WHOIS data confirms the legitimacy and transparency of the domain registration, consistent with the organization's profile. Overall, the website presents a low-risk profile with strong business credibility and technical implementation. Strategic recommendations include implementing explicit cookie consent, publishing security and incident response policies, and adding vulnerability disclosure information to enhance trust and compliance.

The Österreichisches Ökologie-Institut is a well-established non-profit organization focused on ecological research and sustainability initiatives in Austria. Founded in 1985, it operates through interdisciplinary projects, public participation, and educational activities. The website reflects a professional and consistent brand image, targeting environmentally conscious audiences and stakeholders in sustainability. Technically, the site is built on WordPress with modern plugins and offers good mobile optimization and accessibility. Security posture is solid with HTTPS and form validations, though it lacks explicit security headers and incident response information. Privacy compliance is strong, with clear privacy and cookie policies aligned with GDPR. Overall, the site is trustworthy and credible, with no signs of malicious activity or content safety concerns.

D

Deutsche Bundesstiftung Umwelt

dbu.de

56

The Deutsche Bundesstiftung Umwelt (DBU) is a prominent German environmental foundation focused on funding innovative and sustainable projects primarily targeting the medium-sized business sector. Established in 1990, DBU has a strong market position as one of Europe's largest environmental foundations, offering project funding, scholarships, and fellowships. The website reflects this mission with comprehensive content, clear navigation, and a professional design that supports its credibility and outreach. Technically, the website is built on WordPress with modern JavaScript libraries and multilingual support via WPML. Hosting is managed through Deutsche Telekom's name servers, indicating a reliable infrastructure. The site is mobile-optimized and performs moderately well, with good SEO and accessibility features. Analytics are handled via Plausible, a privacy-focused service, indicating a moderate user tracking level with good privacy compliance. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security or incident response policies, which are areas for improvement. No vulnerabilities or suspicious activities were detected. Privacy compliance is generally good, with a comprehensive privacy policy present, but the absence of a cookie consent mechanism is a minor gap. Overall, the DBU website is a trustworthy, professional, and well-maintained platform that effectively supports the foundation's mission. Strategic enhancements in security policies and privacy mechanisms would further strengthen its posture and user trust.

G

GIGAMED

gigamed.org

58

Gigamed is a regional business incubator and entrepreneurial support organization based in the Hérault Méditerranée area of France. Founded in 2023, it offers tailored services including business incubation, coworking spaces, and innovation development, particularly targeting startups and entrepreneurs in tourism and other sectors. The website reflects a professional and consistent brand presence with clear navigation and relevant content aimed at its target audience of entrepreneurs and investors. Technically, the site is built on WordPress with modern themes and scripts, hosted by OVH sas, and demonstrates good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and domain protections in place, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is supported by a cookie consent mechanism and a privacy policy, though terms of service and security policies are absent. Overall, the site is trustworthy and well-positioned for its business purpose.

A

Ajitora.asia

ajitora.asia

49

Ajitora.asia presents itself as a small-scale website branded as "The Asia Tiger from Cyberspace," with content dating back to 2015. The site uses WordPress with the Divi theme and Yoast SEO plugin, indicating a moderate level of digital maturity. The technical infrastructure is standard for small business or personal websites, with some modern JavaScript usage and a cookie consent mechanism in place. However, the absence of a privacy policy and terms of service pages, as well as lack of visible contact information, limits its compliance and business credibility. Security posture is basic with HTTPS enabled but no advanced security headers detected, and no vulnerability disclosure or incident response information available. Overall, the site is accessible without WAF or security challenges, but improvements in privacy compliance and security best practices are recommended.

D

Diagonale – Festival des österreichischen Films

diagonale.at

52

Diagonale – Festival des österreichischen Films is a prominent Austrian cultural festival dedicated to showcasing Austrian cinema. The website serves as a comprehensive platform for festival programming, film awards, industry networking, and educational film mediation. It targets film professionals, enthusiasts, and the general public interested in Austrian film culture. The organization maintains a strong market position as a leading film festival in Austria with significant governmental and cultural sponsorships. Technically, the website is built on WordPress with modern plugins such as WPML for multilingual support and Real Cookie Banner Pro for GDPR-compliant consent management. The site demonstrates good performance, mobile optimization, and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable digital presence for the festival.

D

D'Filmakademie

dfilmakademie.lu

52

D'Filmakademie is a Luxembourg-based film academy dedicated to promoting cinema and audiovisual arts within the country. It organizes key cultural events such as the Lëtzebuerger Filmpräis, supports film professionals, and fosters community engagement through various activities and membership programs. The organization holds a significant position in Luxembourg's cultural landscape, supported by official sponsors including the Chamber of Commerce Luxembourg, CNA, and FilmFund Luxembourg. Technically, the website is built on WordPress, utilizing modern plugins and frameworks such as WPBakery Page Builder, Smart Slider 3, and Contact Form 7. It employs standard web technologies including jQuery, Tailwind CSS, and integrates Google Analytics and Tag Manager for analytics. Hosting is provided by OVH, a reputable provider. The site is mobile-optimized with good SEO practices and a professional design. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and publicly available security policies or incident response documentation. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the hosting provider and shows no suspicious patterns, supporting the legitimacy of the domain. Overall, the website demonstrates a strong commitment to privacy compliance and user experience, with clear contact information and trust indicators. Strategic improvements include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen the security posture.

N

novomind

novomind.com

65

novomind AG is a technology company specializing in software solutions for digital commerce and customer service. Their portfolio includes products for digital commerce platforms, customer service software, AI agents, and data platforms, targeting businesses seeking to enhance their digital sales and customer interaction capabilities. The company positions itself as a comprehensive provider offering both software products and professional services such as integration, long-term support, and custom software development. The website reflects a professional and modern digital presence, indicating a medium-sized enterprise based in Germany with a clear B2B focus. Technically, the website is built on WordPress using the Elementor page builder, incorporating modern web technologies such as jQuery and Google Tag Manager for analytics and marketing. The site is mobile-optimized and includes GDPR-compliant cookie consent management via Usercentrics. Performance is moderate with good SEO and accessibility basics, though some improvements in accessibility could be made. From a security perspective, the site enforces HTTPS and uses consent management for tracking scripts, but lacks explicit published security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain reduces the overall trust score, as it prevents verification of domain ownership and age, which is unusual for a professional business domain. Overall, novomind AG presents a trustworthy and professional digital commerce software provider with a solid technical foundation and good privacy compliance. Strategic recommendations include enhancing security transparency, publishing incident response and vulnerability disclosure policies, and improving WHOIS data transparency to strengthen trust and compliance posture.

D

Digital Campus Zollverein

campus-zollverein.de

47

Digital Campus Zollverein is an educational and innovation hub based in Germany, focusing on digital transformation and technology development. The website presents a professional and well-structured platform built on WordPress with the Divi theme, targeting students, researchers, and digital professionals. The business model revolves around providing digital education, innovation projects, and community engagement at the Zollverein site. Technically, the site uses modern web technologies and plugins, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is credible and trustworthy but would benefit from enhanced privacy and security measures.

L

L'Associazione I Borghi più belli d’Italia

borghipiubelliditalia.it

44

L'Associazione I Borghi più belli d’Italia is a well-established non-profit organization dedicated to promoting the cultural and historical heritage of Italy's small towns. Founded in 2002, it certifies and supports over 360 Borghi, positioning itself as a leader in cultural tourism within Italy. The website serves as a comprehensive platform for information, events, publications, and community engagement targeting tourists and cultural enthusiasts. Technically, the site is built on WordPress with modern plugins and frameworks, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS, DNSSEC, and cookie consent mechanisms, though additional security headers and vulnerability disclosure policies could enhance trust. Overall, the site reflects a mature digital presence aligned with its mission and audience.

A

Aachen-Termine

aachen-kalender.de

59

Aachen-Kalender.de is a localized event calendar platform focused on providing comprehensive listings of cultural, sports, and community events in Aachen and its surrounding region. The website targets residents and visitors interested in staying informed about local happenings. It leverages WordPress CMS with popular plugins such as The Events Calendar and Yoast SEO to deliver structured event data and optimized search engine presence. The platform offers event search, filtering, and calendar export features, enhancing user engagement and utility. Technically, the website is built on a modern WordPress infrastructure with Elementor for design and jQuery for interactivity. It employs HTTPS with proper security headers, ensuring secure data transmission and basic protection against common web threats. The site is mobile-optimized and provides good accessibility and SEO features, although some accessibility enhancements could be beneficial. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and security headers but lacks explicit privacy and cookie policies, as well as incident response contact information. No vulnerabilities or suspicious activities were detected in the provided content. The absence of cookie consent mechanisms and privacy documentation represents compliance gaps, particularly under GDPR regulations. Overall, Aachen-Kalender.de is a trustworthy and professionally maintained local event platform with solid technical foundations. To enhance its security posture and regulatory compliance, it should implement comprehensive privacy and cookie policies, introduce consent mechanisms, and provide clear incident response contacts.

B

BigWetFish

bigwetfish.hosting

69

BigWetFish is a UK and Ireland based web hosting and domain registration provider established in 2015. The company offers a range of hosting services including single website hosting, reseller hosting, and enterprise hosting, targeting businesses and individuals in the UK and Ireland. Their market position is strong within their regional niche, supported by positive customer reviews and a focus on customer service with 24/7 support availability. Technically, the website is built on WordPress with modern plugins and themes, leveraging Cloudflare DNS for performance and security. The site is well-optimized for SEO and mobile devices, providing a good user experience. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though DNSSEC is not enabled and security headers are missing, representing areas for improvement. Privacy compliance is weak due to the absence of explicit privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, the website is professional, trustworthy, and technically sound, with room to enhance privacy and security transparency.