Security Directory

K

Koordinierungsstelle für Hospiz- u. Palliativversorgung in Deutschland

koordinierung-hospiz-palliativ.de

48

The website www.koordinierung-hospiz-palliativ.de serves as the official coordination center for hospice and palliative care services in Germany. It provides informational resources, including multilingual explanatory videos, targeting patients, relatives, healthcare institutions, and care providers. The site positions itself as a national non-profit entity focused on improving access and awareness of hospice and palliative care. Technically, the site is built on the Contao CMS platform, utilizing jQuery and jQuery UI for interactive elements. The infrastructure supports HTTPS with good SSL configuration, but lacks advanced security headers and cookie consent mechanisms. The content is well-structured, professionally presented, and accessible, though mobile optimization and accessibility could be improved. Security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of a security policy and incident response contacts is noted. Overall, the site is trustworthy and credible, with clear contact information and consistent branding.

1

123map GmbH & Co. KG

123map.de

8

123map GmbH & Co. KG is a specialized company providing services, consulting, and software development in the field of geographic information systems (GIS) for over 20 years. Their offerings include online maps, geocoding, vector maps for graphic programs, and related software solutions targeting businesses and professionals requiring geospatial data and tools. The company operates primarily in Germany and maintains a small business profile with a focused niche market position. Technically, the website is built with standard HTML5, CSS3, and JavaScript, hosted under a reputable registrar (Key-Systems GmbH). The site is accessible, uses HTTPS, but lacks advanced security headers and DNSSEC, indicating moderate digital maturity. The website design and content are basic but consistent with the business focus, with limited mobile optimization and SEO features. From a security perspective, the site employs HTTPS and domain transfer protection but does not implement DNSSEC or security headers, which are recommended for enhanced protection. No forms or contact details are present on the main page, and no privacy cookie consent mechanism is implemented, which may impact GDPR compliance. No signs of tracking or advertising technologies were found, suggesting minimal user data collection. Overall, the website presents a moderate risk profile with no critical security issues detected. Strategic improvements in security headers, DNSSEC, and privacy compliance would enhance trust and protection. The domain's long registration history and consistency with business claims support legitimacy and credibility.

G

Gemeinsamer Bundesausschuss

g-ba.de

58

The Gemeinsamer Bundesausschuss (G-BA) is a central German government institution responsible for regulating healthcare services and ensuring quality in the healthcare system. The website serves as the official portal for disseminating information about the G-BA's work, including guidelines, decisions, public meetings, and innovations in healthcare. It targets healthcare professionals, policymakers, patients, and the general public interested in healthcare regulation in Germany. The site is well-branded, professionally designed, and provides comprehensive content relevant to its mission. Technically, the website employs modern web technologies including Matomo for privacy-conscious analytics, deferred JavaScript loading, and SVG graphics for branding. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured navigation. Hosting appears stable and professional, with no signs of blocking or WAF interference. From a security perspective, the site uses HTTPS with strong SSL configuration and respects user privacy by disabling cookies in analytics and honoring Do Not Track signals. However, it lacks explicit security headers and does not publicly disclose security policies or incident response procedures. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong regarding the privacy policy, but cookie consent mechanisms are absent. Overall, the G-BA website is a trustworthy, authoritative source with high content quality and professional presentation. It demonstrates a solid security posture with room for improvement in transparency and security header implementation. The domain registration data aligns well with the website's purpose, reinforcing legitimacy. Strategic recommendations include enhancing security headers, adding cookie consent, and publishing security and vulnerability disclosure policies.

M

Martinushaus Aschaffenburg

martinushaus.de

52

Martinushaus Aschaffenburg is a non-profit community and educational center located in the heart of Aschaffenburg, Germany. It operates under the Diocese of Würzburg and offers a variety of services including community meeting spaces, educational programs, and event venue rentals. The website reflects a well-established regional institution with a clear mission to provide open doors and hearts to visitors. The business model focuses on community engagement and educational offerings supported by the church diocese. Technically, the website is built on Joomla CMS with a Yootheme template and leverages modern frameworks such as UIkit and jQuery. It integrates Matomo analytics for user tracking and Usercentrics for GDPR-compliant cookie consent management. The site is mobile-optimized, accessible, and performs moderately well. Hosting appears to be via GoDaddy, indicated by the domain's nameservers. From a security perspective, the site enforces HTTPS and includes CSRF tokens in scripts, indicating good security hygiene. However, it lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is strong with clear privacy and cookie policies. Overall, the website is professional, trustworthy, and well-aligned with its non-profit mission. Recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen security posture and trust.

J

Jugendhaus St. Kilian

jugendhaus-st-kilian.de

49

Jugendhaus St. Kilian is a non-profit youth and educational center located in Miltenberg, Germany, affiliated with the Diocese of Würzburg. The organization provides accommodation, conference facilities, catering, and educational programs primarily targeting school classes, families, and youth groups. The website is professionally designed using Joomla CMS with modern frameworks such as Bootstrap and UIkit, and integrates privacy-compliant tools like Usercentrics for consent management and Matomo for analytics. Contact information and legal disclosures are clearly presented, enhancing trust and transparency. The domain registration and DNS setup are consistent with the organization's regional and operational profile, indicating legitimacy and stability. Technically, the website employs a modern tech stack and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism in place. No incident response or security policy pages were found, suggesting an area for improvement. Overall, the website presents a trustworthy and professional digital presence for a regional non-profit organization focused on youth services and education. The risk profile is low, with no indications of malicious activity or content safety concerns.

H

Haus Volkersberg - KdÖR Diözese Würzburg

volkersberg.de

51

Haus Volkersberg is a well-established educational and hospitality institution located in Germany, offering youth education, adult learning, and conference facilities. It operates under the Diocese of Würzburg and serves a broad audience including youth groups, adults, and families. The website reflects a mature organization with comprehensive content, clear navigation, and professional design. Technically, it is built on Joomla CMS with modern UI frameworks and privacy-conscious analytics. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. WHOIS data is limited but consistent with the institution's profile. Overall, the site is trustworthy and compliant with GDPR requirements.

S

Schmerlenbach

schmerlenbach.de

52

Schmerlenbach is a well-established conference and hospitality center operated under the Bistum Würzburg, offering modern meeting facilities, accommodation, and catering services in a natural setting in Germany. The website reflects a professional and comprehensive digital presence, targeting business travelers, event organizers, families, and groups. It is positioned as a top-tier conference hotel with recognized certifications and awards. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance, mobile optimization, and SEO. Security posture is solid with HTTPS and cookie consent management, though some security headers could be improved. Overall, the site demonstrates strong business credibility and compliance with GDPR. No blocking or WAF interference was detected, allowing full content access and analysis.

B

Burkardushaus Würzburg

burkardushaus.de

51

Burkardushaus Würzburg is a well-established, church-affiliated conference and event center located in the historic city center of Würzburg, Germany. The website presents a professional and comprehensive overview of their services, including conference rooms, guest accommodations, and event hosting. The business targets educational providers, companies, and church institutions, emphasizing hospitality, service, and sustainability. The site is built on Joomla CMS with modern UIkit framework and integrates privacy-conscious analytics and consent management tools.

Q

Quatro

quatro.sk

64

Quatro is a leading Slovak financial services company specializing in installment payment solutions for consumer goods and services. Operating since 1999 and part of the VÚB Intesa Sanpaolo banking group, it serves nearly a million Slovak customers through a network of over 5000 retail and e-commerce partners. The website reflects a mature digital presence with good content quality, clear navigation, and mobile optimization. Technically, it employs modern JavaScript libraries, Google Analytics, and Google Tag Manager with GDPR-compliant consent mechanisms. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy and professionally maintained, supporting the company's market leader position.

W

Custom e-commerce řešení pro B2B i B2C | E-shop na míru

web-revolution.cz

51

The website web-revolution.cz presents a professional custom e-commerce solutions provider targeting demanding B2B and B2C clients. With over 15 years of experience, the company offers tailored e-shop development, complex integrations, and dedicated support. The site is built using modern technologies such as Framer and is hosted with Cloudflare DNS services, indicating a contemporary digital infrastructure. Google Analytics is employed for user behavior tracking, though privacy and cookie policies are notably absent, which may impact compliance and user trust. Security posture is moderate with HTTPS enabled but lacks explicit security headers and incident response information. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy compliance and security transparency are recommended to enhance trust and regulatory adherence.

E

ESSOX s.r.o.

essox.cz

70

ESSOX s.r.o. is a leading Czech non-bank financial services provider specializing in consumer financing solutions including vehicle loans, installment purchases, cash loans, and credit cards. The company is part of the Komerční banka and Société Générale financial groups, which enhances its market credibility and financial backing. The website reflects a mature digital presence with comprehensive service offerings and strong branding consistency. Technically, the site employs modern web technologies such as Google Tag Manager and Swiper.js, and it is optimized for mobile devices with good accessibility and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, ESSOX presents a trustworthy and professional online presence aligned with its business stature.

B

B2C, s.r.o.

dezeta.cz

45

Papírnictví DEZETA is an e-commerce and physical retail business operated by B2C, s.r.o., specializing in office, school, and paper products. The company has a local market presence in the Czech Republic, with a physical store located at Thákurova 7, Prague 6, and an online shop offering a wide range of stationery and related products. The website is built using modern JavaScript frameworks, specifically Vue.js, providing a responsive and user-friendly shopping experience. However, the site lacks some advanced security and privacy features such as cookie consent mechanisms and security headers. The WHOIS data confirms the legitimacy and consistency of the domain registration with the business information provided on the site.

O

Office Pro s.r.o.

mujnavrh.cz

43

Office Pro s.r.o. operates a professional e-commerce platform specializing in office furniture and accessories, primarily serving the Czech market. The website offers a unique 3D office design tool enabling customers to create and customize office layouts online, enhancing user engagement and service differentiation. The company maintains a consistent brand presence with active social media channels and a comprehensive privacy and cookie policy aligned with GDPR requirements. Technically, the site leverages modern JavaScript libraries including Babylon.js for 3D rendering, and integrates multiple analytics and advertising pixels for marketing optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies could enhance trust. The absence of WHOIS data limits domain transparency, but the website's professional content and business indicators suggest legitimate operations. Overall, the site is well-positioned in its niche with moderate technical maturity and good compliance practices.

O

Office Pro s.r.o.

officepro.cz

42

Office Pro s.r.o. is a Czech company specializing in office furniture and accessories, offering recognized brands such as OFFICE PRO and HOBIS. The company targets business customers seeking quality office chairs, desks, and custom furniture solutions. Their website provides detailed product information, a 3D office design tool, and a blog with relevant content. Technically, the website employs modern analytics and marketing technologies including Google Tag Manager, Facebook Pixel, TikTok Pixel, and Microsoft Clarity, with HTTPS enabled ensuring secure connections. However, the absence of WHOIS data and lack of visible privacy and terms of service pages indicate areas for improvement in transparency and compliance. Security posture is generally good but could benefit from enhanced HTTP security headers and clearer incident response contacts. Overall, the site is professional, content-rich, and safe for general audiences, supporting a medium-sized business with a solid market position in the Czech Republic.

O

Office Pro s.r.o.

hobis.cz

44

Office Pro s.r.o. operates a professional website focused on the sale and custom manufacturing of ergonomic office furniture under the HOBIS brand. The company leverages a long tradition associated with the HON manufacturer, emphasizing quality, ergonomics, and functionality to enhance workplace productivity. The website targets businesses and office environments seeking modern, ergonomic furniture solutions. Technically, the website employs modern analytics and marketing technologies including Google Analytics, Facebook Pixel, TikTok Pixel, and Microsoft Clarity, alongside a cookie consent mechanism to comply with privacy regulations. The site is served over HTTPS with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks explicit security headers and visible security policies. The absence of WHOIS data limits domain registration trust analysis, but the website content and certifications provide strong trust signals. Overall, the site is professional, content-rich, and trustworthy from a business perspective.

C

CNW computer network s.r.o.

cnw.cz

50

CNW computer network s.r.o. is a small Czech Republic-based IT services company specializing in complex IT solutions including customized app development, network design and installation, cloud services, and support. The company positions itself as a reliable partner for both business and home IT needs, emphasizing long-standing expertise and ISO 9001:2015 certification as trust signals. Their website is professionally designed, mobile-optimized, and provides clear navigation and relevant content targeting businesses and home users. Technically, the site is built on WordPress with modern technologies such as Leaflet.js and Google reCAPTCHA, ensuring a secure and user-friendly experience. Security posture is good with HTTPS enforced and form protection via reCAPTCHA, though improvements could be made by adding security headers and a cookie consent mechanism. The absence of WHOIS data limits domain trust verification, but the website content and certifications support legitimacy. Overall, CNW demonstrates a mature digital presence with room for enhanced privacy compliance and security transparency.

The website bastlirna.hwkitchen.cz is currently inaccessible due to a Cloudflare Turnstile CAPTCHA security challenge, which prevents direct content access and analysis. No business information, contact details, or policies are available on the page. The WHOIS query returned no registration data, indicating either privacy protection or a non-registered domain, which reduces trustworthiness. The technical infrastructure relies on Cloudflare for security and content delivery, but no further technology stack or CMS details are discernible. The security posture cannot be fully assessed due to the blocked content, but the absence of visible security headers or policies is a concern. Overall, the site presents a high risk due to lack of transparency and accessibility.

The website login.webspaceconfig.de serves as a customer login portal for managing hosting projects, targeting customers who use hosting services. The platform appears to be a small-scale technology service focused on project management within the hosting sector, primarily serving a German-speaking audience. The site uses modern web technologies including JavaScript ES modules, React framework, and Font Awesome icons, indicating a contemporary technical infrastructure. Hosting is provided by agenturserver as inferred from the nameservers. The website performance is moderate with basic mobile optimization and accessibility features. Security posture is adequate with HTTPS enforced and password fields properly masked; however, the absence of explicit security headers and privacy policies indicates room for improvement. Analytics are implemented via etracker, reflecting moderate user tracking but lacking clear privacy compliance mechanisms. Overall, the site is functional but lacks comprehensive privacy, security, and contact disclosures, which impacts trust and compliance. Strategic improvements in security headers, privacy policies, and contact transparency are recommended to enhance the security posture and user trust.

I

Internetagentur dd-media.de

kalirevier.net

50

kalirevier.net is a regional online portal dedicated to promoting local businesses, shops, and services within the Kalirevier mining region in central Germany. The platform offers categorized listings including delivery and pickup services, online shops, and regional information, targeting residents and visitors interested in local commerce. The site is operated and sponsored by Internetagentur dd-media.de, a local internet agency, indicating a small but focused business model with a community-centric approach. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and Owl Carousel, with Matomo analytics and Usercentrics consent management ensuring GDPR compliance. The site is served over HTTPS, providing a secure browsing experience. However, the WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy and longevity. No direct company contact emails or phone numbers are published, though a contact form is available. Security policies and incident response information are not publicly disclosed, which could be improved to enhance trust. Overall, the website is professionally designed with good content quality and user experience, but the lack of WHOIS transparency and limited contact details slightly reduce business credibility.

I

Internetagentur dd-media.de

werratal-wetter.de

50

The website www.werratal-wetter.de serves as a regional weather data and information portal focused on the Kalirevier area in Germany. It provides current and historical weather data, local event information, and regional news links. The site is operated by Internetagentur dd-media.de, a small agency specializing in regional digital services. The business model centers on providing free weather data and regional content to residents and visitors, supported by related regional sites and a marketplace. Technically, the site uses a modern technology stack including Bootstrap, jQuery, and Matomo analytics, with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS and cookie consent management, though it lacks advanced security headers and explicit incident response information. Privacy compliance is well addressed with GDPR-aligned policies and a Usercentrics consent mechanism. Overall, the site is professional, trustworthy, and well-branded for its niche regional audience.

I

Internetagentur dd-media.de

werratal-news.de

47

werratal-news.de is a regional news portal operated by Internetagentur dd-media.de, serving the Mittleres Werratal and Waldhessen regions in Germany. The site provides local news, event calendars, weather updates, and cultural information, positioning itself as a trusted source for residents and regional stakeholders. The business model focuses on digital regional news dissemination and community engagement through a well-structured website with categorized content and social media integration. Technically, the website employs a moderate technology stack including jQuery, Bootstrap, FontAwesome, and Matomo analytics, combined with a cookie consent manager compliant with GDPR. The site is mobile-optimized with good navigation and SEO practices, although some outdated libraries like jQuery 1.11.2 present potential security risks. Hosting details are not explicitly identified, but HTTPS is enforced with a good SSL configuration. From a security perspective, the site demonstrates good practices such as HTTPS, privacy-respecting analytics, and cookie consent mechanisms. However, it lacks advanced security headers like Content-Security-Policy and does not provide a security policy or vulnerability disclosure page. No critical vulnerabilities or exposed sensitive data were detected, but updating outdated libraries and enhancing security headers is recommended. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its regional audience effectively. Strategic improvements in security posture and transparency would further enhance its credibility and resilience.

D

Deutscher Fachverlag GmbH

dfv.de

57

Deutscher Fachverlag GmbH operates the dfv Mediengruppe, one of Europe's largest independent business media companies. The company publishes over 100 specialist media titles across 17 industries, including print, digital, and live events. Their offerings include specialist magazines, newspapers, digital content, specialist books, and over 140 annual events. The website reflects a mature digital presence with modern technologies such as Next.js, React, and integrated privacy management tools. Security posture is strong with HTTPS and security headers in place, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

B

Betriebs-Berater

betriebs-berater.com

50

Betriebs-Berater is a German professional publication specializing in tax, business law, accounting, and labor law content targeted at tax advisors, accountants, and legal professionals. The website offers newsletters, articles, and event information, operating under a subscription-based model. It is likely owned or affiliated with Rudolf Müller Verlag GmbH, as indicated by multiple links to ruw.de, a known publishing group. The site is well-branded and consistent, with a professional design and good content quality.

RUW Fachkonferenzen operates as a German-language platform organizing professional conferences. The website serves as an informational hub for event attendees and professionals interested in specialized conferences. The business model focuses on event organization and dissemination of conference-related information, targeting a niche audience within Germany. The website is built on WordPress and incorporates standard web technologies including JavaScript and Facebook Pixel for marketing and tracking purposes. While the site is accessible and mobile-optimized, it lacks comprehensive privacy and security disclosures, which impacts its overall trustworthiness. Security posture is moderate with no detected WAF or blocking mechanisms, but absence of security headers and explicit policies suggests room for improvement. The domain WHOIS data is minimal but does not raise immediate concerns about legitimacy. Strategic recommendations include enhancing privacy transparency, implementing security best practices, and providing clear contact and incident response information to improve compliance and user trust.

SendCockpit is a German-based email marketing software provider operated by Clever Elements GmbH, established in 2008. The company offers a SaaS platform enabling tens of thousands of customers to send email campaigns daily, with a strong emphasis on abuse prevention and compliance. The website analyzed is an abuse desk page dedicated to reporting and managing email abuse incidents, reflecting a mature approach to user identity verification and spam monitoring integrated with major ISPs. The business targets email marketers and companies requiring compliant email marketing solutions.

W

WBS GRUPPE

wbs-gruppe.de

56

WBS GRUPPE is a leading German education provider specializing in online and offline training and further education services. The company operates under six strong brands, targeting individuals seeking professional development and vocational training. Their market position is strong within Germany and internationally, focusing on digital education solutions. The website is built on TYPO3 CMS and integrates modern consent management tools such as Cookiebot, reflecting a mature digital infrastructure. The site demonstrates good SEO, accessibility, and mobile optimization, supporting a positive user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. Overall, the website reflects a professional and trustworthy educational institution with strong GDPR compliance and transparent cookie policies.

C

chemmedia AG

knowledgeworker.com

65

chemmedia AG operates the Knowledgeworker platform, a comprehensive E-Learning software suite designed for corporate clients. Their offerings include an AI-integrated authoring tool, a learning management system, a scenario-based digital coach, and a microlearning app. The company emphasizes GDPR compliance, data privacy, and high-quality, modular learning solutions. The website is professionally designed, mobile-optimized, and integrates modern analytics and marketing tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS and consent management, though some security headers could be enhanced. The absence of WHOIS data is notable but does not detract from the overall legitimacy given the professional presentation and client references. Strategic recommendations include enhancing security headers and publishing explicit security policies.

U

unimess GmbH

anwaltskanzlei-marketing.de

42

The website represents unimess GmbH, a specialized marketing agency focused on legal professionals such as lawyers and tax advisors in Germany. Their services include internet presence creation, marketing consulting, print media, and office equipment for law firms. The company positions itself as an experienced niche player with a nationwide clientele. Technically, the website uses a modern frontend stack including Bootstrap, jQuery, and Matomo analytics configured for privacy by disabling cookies. The site is responsive and well-structured, providing a professional user experience. Security posture is moderate; while HTTPS is assumed, no explicit security headers or policies are visible, and no cookie consent mechanism is implemented despite analytics usage. WHOIS data aligns with the company branding, indicating legitimacy. Overall, the site is professional and trustworthy but could improve in security and privacy compliance aspects.

The website www.werbeagentur-juwelier.de represents unimess GmbH, a small specialized advertising agency focused on jewelers and jewelry manufacturers. The company offers services including internet agency solutions, marketing, and advertising tailored to this niche market. The website content is professional and consistent with the business focus, targeting German-speaking jewelers and related manufacturers. The technical infrastructure employs modern front-end libraries such as jQuery, Bootstrap, and Font Awesome, with Matomo analytics integrated for user tracking without cookies. The site is mobile optimized and provides a good user experience with clear navigation and design consistency. However, contact information is not explicitly visible on the main page, and no forms or social media links are present in the analyzed content.

U

unimess GmbH

jobs-ueberall.de

41

Jobs-ueberall.de is a German job listing portal operated by unimess GmbH, providing job offers from various clients across Germany. The site targets a broad audience seeking employment opportunities in multiple sectors. The platform offers a job finder search form and links to employer websites for detailed job information. The business model centers on aggregating and displaying client job offers to job seekers. Technically, the site uses a modern frontend stack including Bootstrap, jQuery, and Slick Carousel, with Matomo analytics configured to disable cookies, reflecting some privacy awareness. However, no cookie consent mechanism is present. Security posture is moderate with no detected security headers and unknown SSL configuration from provided data. WHOIS data aligns with the company branding and domain ownership, supporting legitimacy. Overall, the site is functional, professionally designed, and mobile optimized but could improve in privacy compliance and security best practices.

M

MOGLI - Multidisciplinary artist making music, movies and more

mogliofficial.com

51

MOGLI Official Website represents a multidisciplinary artist focused on music, movies, and related media content. The website serves as a portfolio and e-commerce platform, targeting a general audience interested in artistic and musical content. The business is small-scale, with a niche market position supported by active social media presence and digital distribution channels. The domain is registered since 2017, consistent with the artist's established presence. Technically, the website is built on WordPress with WooCommerce and the Avada theme, integrating modern tracking tools like Google Analytics and Facebook Pixel. The site is mobile optimized and SEO friendly, though performance is moderate. Security posture is adequate with HTTPS enabled but lacks DNSSEC and some security headers, indicating room for improvement. Security-wise, no critical vulnerabilities or blocking mechanisms were detected. However, the absence of privacy and cookie policies reduces compliance maturity. No incident response or security policy information is publicly available. Overall, the site is trustworthy but would benefit from enhanced privacy compliance and DNS security. Strategically, the website should prioritize implementing comprehensive privacy and cookie policies, enable DNSSEC, and add security headers to strengthen its security posture and regulatory compliance. Enhancing transparency and contact information would also improve business credibility and user trust.

M

Matthias Buhl Vermögensberatung

matthiasbuhl.de

54

Matthias Buhl Vermögensberatung is a small, professional financial advisory service based in Gießen, Germany, specializing in personalized financial planning, asset management, insurance, and real estate financing. The website is well-structured, uses modern WordPress technologies including the Avada theme and Slider Revolution, and is optimized for SEO with Yoast. The business presents strong trust indicators such as client testimonials and professional certifications. Security posture is good with HTTPS enabled and no obvious vulnerabilities, though improvements like security headers and incident response contacts could enhance it further. Privacy compliance is basic with a privacy policy present but no explicit cookie consent mechanism. Overall, the website is professional, trustworthy, and serves its target audience effectively.

H

HELENA HARFST

helenaharfst.de

58

HELENA HARFST is a small German-based sustainable fashion brand specializing in durable, timeless clothing designed and produced in Germany. The company emphasizes regional craftsmanship, zero-waste production, and offers a curated e-commerce platform with unisex and limited edition collections. The website is professionally designed using WordPress and WooCommerce with modern marketing integrations such as Google Analytics, Facebook Pixel, and Mailchimp. Security posture is strong with HTTPS enforced and standard security headers, though improvements like Content-Security-Policy and incident response information could enhance trust. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the website presents a trustworthy, professional retail platform with a clear brand identity and good user experience.

G

GINKGO - natürlich bauen

ginkgo-ing.de

61

GINKGO - natürlich bauen is a small German company specializing in natural and sustainable architectural building services. Their website presents a professional image with a focus on private and international clients interested in natural building and architectural design. The company leverages WordPress CMS with the Avada theme and integrates SEO and analytics tools such as Yoast SEO and Google Analytics, indicating a moderate level of digital maturity. Hosting is provided via Microsoft Online, ensuring reliable infrastructure. Security posture is solid with HTTPS enforcement, standard security headers, and GDPR-compliant cookie consent mechanisms. However, the site lacks explicit security policies and incident response information, which could be improved to enhance trust and compliance. Overall, the website is well-designed, mobile-optimized, and trustworthy, with no signs of malicious content or vulnerabilities.

I

Isabella "Bella" Reicheneder

bellareicheneder.de

60

Isabella "Bella" Reicheneder operates a professional website focused on set design, creative production, and interior design services, targeting clients in the media and creative industries. The website presents a consistent brand image with a clear description of services and notable project highlights, positioning the business as a niche creative service provider. The digital infrastructure is built on WordPress using the Avada theme and Fusion Builder, supported by SEO optimization via Yoast and visitor analytics through Google Analytics. Hosting is provided by rzone.de, with domain registration consistent with the business history dating back to 2014. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms in place, although additional security headers could enhance protection. Contact information is limited but includes a verified company email address. Overall, the website is professional, secure, and compliant, with moderate performance and good mobile optimization.

T

The DONA Foundation

dona.net

65

The DONA Foundation is a Geneva-based non-profit organization dedicated to fostering Digital Object Architecture standards, promoting pilot applications of these standards, and administering the Global Handle Registry. The organization targets technology professionals and entities interested in interoperability across information systems. Their market position is that of a niche leader in digital object standards and identifier systems with an international scope. The website content is professional and consistent with the organization's mission, providing clear information about their work, governance, and recent events. Technically, the website is built on Drupal 8 CMS, utilizing standard web technologies such as jQuery and FontAwesome. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. No advanced hosting or platform details are evident. Security headers and explicit HTTPS enforcement details are not visible, indicating room for improvement in security hardening. From a security perspective, the site shows no immediate vulnerabilities or exposed sensitive data. However, the lack of security headers, cookie consent mechanisms, and vulnerability disclosure policies suggests a moderate security posture. The absence of WHOIS data for the domain reduces trust from a domain registration standpoint, though the website content and organizational details support legitimacy. Overall, the site is a credible and professional resource for its niche audience but would benefit from enhanced security practices, privacy compliance improvements, and clearer contact information to strengthen trust and compliance.

I

Industrie- und Handelskammer Bonn/Rhein-Sieg

ihk-bonn.de

50

The Industrie- und Handelskammer Bonn/Rhein-Sieg (IHK Bonn/Rhein-Sieg) is a regional chamber of commerce serving the Bonn and Rhein-Sieg economic region in Germany. It acts as a key institution supporting local businesses through consultation, training, certification, and advocacy services. The website reflects a well-established organization with a clear focus on business development, vocational training, and regional economic growth. The target audience includes companies, apprentices, founders, and members of the chamber. The business model is that of a public law institution representing commercial interests in the region.

C

cronn GmbH

cronn.de

58

cronn GmbH is a medium-sized German technology company specializing in custom software development, test automation, UI/UX design, IT consulting, and AI development. Operating from Bonn, Hamburg, and Białystok, it serves business clients with agile and modern technology solutions. The company maintains a strong market position with notable clients such as Telekom, Adobe, and Deutsche Post DHL, supported by certifications like ISO 9001 and ISO 27001, and positive employer ratings on Kununu. Technically, the website is well-built with modern Java and open-source technologies, fast performance, and good mobile optimization. Analytics are implemented with privacy-conscious tools like Fathom, supplemented by a tracking pixel from SalesViewer. Security posture is solid with HTTPS and secure forms, though improvements are recommended in security headers and published policies. Overall, the site is professional, trustworthy, and compliant with GDPR, though cookie consent and incident response disclosures could be enhanced.

A

Asociace neformálního vzdělávání

anev.cz

50

Asociace neformálního vzdělávání (ANEV) is a Czech non-profit association specializing in non-formal education for youth workers and related professionals. The organization offers training, coaching, publications, and project coordination to improve the quality and innovation in youth education. The website is well-structured, content-rich, and targets educators and youth workers primarily in Czechia and Slovakia. Technically, the site is built on WordPress with common plugins and uses HTTPS with a cookie consent mechanism, indicating a moderate level of digital maturity. However, the absence of a privacy policy and WHOIS transparency reduces compliance and trust levels. Security posture is adequate with SSL but lacks advanced security headers. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

Dystopia digital is a small digital-first creative collective founded in 2020, specializing in technology-driven creative services including UI/UX design, ecommerce, marketplace development, 3D and motion design, and branding. The company serves a diverse client base across sectors such as real estate, finance, lighting design, movie production, and architecture, positioning itself as a niche provider of innovative digital solutions. The website showcases a portfolio of client projects, reflecting a professional and consistent brand image. Technically, the website is built using modern frameworks such as Nuxt.js and Tailwind CSS, hosted on DigitalOcean, and optimized for fast performance and mobile responsiveness. The site lacks a CMS and does not include analytics or tracking scripts, indicating a focus on privacy and simplicity. However, accessibility features are basic, and SEO optimization is minimal. From a security perspective, the site uses HTTPS with good SSL configuration but lacks important security headers and published security policies. There is no evidence of privacy, cookie, or terms of service policies, nor incident response or vulnerability disclosure information. Contact information is limited to email addresses without phone numbers or physical addresses. These gaps reduce the overall security and compliance posture. Overall, the website is professional and trustworthy with a moderate security posture but requires improvements in privacy compliance, security best practices, and transparency to enhance trust and regulatory adherence.

C

Cookies lišta, s.r.o.

cookieslista.cz

49

Cookies lišta, s.r.o. is a Czech-based small technology company specializing in providing comprehensive cookie consent and GDPR compliance solutions tailored for websites. Their offerings include a cookie consent bar, privacy policy generator, and ongoing legislative and technological updates, positioning them as a niche player in the compliance software market. The company collaborates with legal experts and web design studios to ensure both legal accuracy and technical quality. Their market focus is primarily on Czech businesses needing to comply with evolving cookie legislation effective from 2022 and beyond. Technically, the website is built on WordPress and leverages modern JavaScript libraries and third-party services such as Google Analytics, Google Tag Manager, Facebook Pixel, Hotjar, and Smartsupp live chat. The site demonstrates good SEO practices, mobile optimization, and a user-friendly interface with clear navigation and professional design. Consent management is robust, with scripts loaded conditionally based on user consent, reflecting a mature digital compliance posture. From a security perspective, the site enforces HTTPS and implements consent-based script loading to protect user privacy. However, no explicit security headers were detected, suggesting room for improvement in hardening the site against common web threats. The absence of WHOIS data due to privacy protection is typical for small businesses and does not raise immediate concerns given the professional presentation and clear contact information. Overall, the website presents a low-risk profile with strong compliance focus, good technical implementation, and transparent business operations. Strategic recommendations include enhancing security headers, maintaining up-to-date third-party script audits, and possibly publishing a formal security policy to further build trust.

C

Circle – Hub für Urban Mining

circle-hub.de

52

Circle Hub is a German-based platform and network dedicated to promoting circular economy and urban mining practices within the construction and environmental sectors. The website showcases a broad partner ecosystem including construction companies, environmental labs, consulting firms, and recycling specialists, emphasizing sustainable building and resource efficiency. The business model revolves around facilitating collaboration and knowledge exchange among stakeholders to advance circular economy initiatives. Technically, the site is built on Silverstripe CMS 5.4 with modern frontend technologies like Bootstrap and Swiper.js, offering good mobile responsiveness and user experience. Security posture is moderate with HTTPS implied but lacking explicit security headers and formal security policies. Privacy compliance is strong with a clear cookie consent mechanism and GDPR-aligned cookie policy. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

D

DGNB GmbH

dgnb.de

57

DGNB GmbH is a well-established non-profit organization founded in 2007, recognized as Europe's largest network for sustainable building and the second largest worldwide. The organization offers a comprehensive certification system (DGNB Zertifizierung), educational programs through the DGNB Akademie, and a digital networking platform (myDGNB). Their market position is strong within the sustainability and construction sectors, supported by over 2,800 member organizations and more than 11,000 certified projects globally. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support.

B

BDE Bundesverband der Deutschen Entsorgungs-, Wasser- und Kreislaufwirtschaft e. V.

bde.de

55

BDE Bundesverband der Deutschen Entsorgungs-, Wasser- und Kreislaufwirtschaft e. V. is a prominent German industry association representing Europe's largest network of private circular economy companies. The organization focuses on advocacy, information dissemination, training, and networking within the waste management, water, and recycling sectors. Their website reflects a professional and consistent brand image, targeting companies and stakeholders in the circular economy sector primarily in Germany and Europe. The business model centers on providing member services, industry representation, and policy influence. Technically, the website is built on a Django-based CMS platform, utilizing modern JavaScript libraries such as jQuery and Slick Carousel for interactive elements. The site is mobile-optimized with good SEO practices and moderate performance. Security measures include HTTPS enforcement and CSRF protection on forms, though additional security headers and explicit security policies are absent. The security posture is solid but could be enhanced by publishing incident response contacts and vulnerability disclosure policies. Privacy compliance is well addressed with a clear privacy policy, cookie consent banner, and GDPR adherence. Contact information is comprehensive, including multiple emails, phone numbers, and physical addresses, enhancing business credibility. Overall, the website is trustworthy, professionally maintained, and serves its target audience effectively. Strategic improvements in security transparency and accessibility could further strengthen its position.

B

bvse-Bundesverband Sekundärrohstoffe und Entsorgung e.V.

bvse.de

54

The bvse-Bundesverband Sekundärrohstoffe und Entsorgung e.V. is a well-established German industry association representing approximately 1,000 medium-sized companies in the secondary raw materials, recycling, and waste disposal sectors. It holds a leading market position as the largest industry association in Germany and Europe for this sector. The organization provides a range of services including market news, seminars, quality seals, and political advocacy to support its members and promote sustainable circular economy practices. The website content is professionally presented in German, targeting industry professionals and stakeholders in the recycling and waste management fields. Technically, the website is built on Joomla CMS with modern frontend technologies such as Bootstrap 5 and jQuery, ensuring good mobile responsiveness and accessibility. The site uses HTTPS with strong SSL configuration and includes a cookie consent mechanism that limits cookie usage to essential session cookies. No major security vulnerabilities or tracking technologies were detected, indicating a privacy-conscious and secure digital infrastructure. From a security perspective, while HTTPS and secure login forms are implemented, the site lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. The WHOIS data aligns well with the website's business claims, showing consistent domain registration and no privacy protection, supporting legitimacy. Overall, the site is professional, secure, and compliant with GDPR requirements, serving as a credible resource for the recycling industry. Strategic improvements in security transparency and incident response readiness would further strengthen its posture.

D

Digital Hub Logistics & Commerce | Coworking und Community für Startups in der Logistik

digitalhublogistics.hamburg

61

The website www.digitalhub.hamburg appears to be a digital hub platform likely targeting technology and innovation sectors in Hamburg. However, due to the presence of a restrictive WHOIS response and truncated HTML content dominated by technical scripts, the full business scope and services cannot be confidently assessed. The site is built on the Wix platform, indicating a modern but possibly small-scale digital presence. The lack of visible contact information, privacy policies, and terms of service suggests limited transparency and compliance maturity. Security posture is basic with no advanced headers or policies detected, and the site likely employs a web application firewall or security mechanism that restricts full content access. Overall, the site presents a low trust profile due to limited accessible information and privacy-protected WHOIS data.

M

Messe München GmbH

bau-muenchen.com

63

BAU München is a globally recognized trade fair organizer specializing in architecture, building materials, and systems. The website serves as a comprehensive platform for event information, exhibitor registration, and industry insights, targeting architects, planners, investors, and craftsmen. The site is professionally designed, mobile-optimized, and uses modern web technologies including web components and elastic search for enhanced user experience. Privacy compliance is robust, leveraging Usercentrics CMP and providing a comprehensive privacy policy in German. Security posture is strong with HTTPS, security headers, and domain transfer protections, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, the website reflects a mature, trustworthy, and well-managed digital presence aligned with Messe München GmbH's brand and business objectives.

The website www.freischaltportal.de currently serves only a 404 Not Found error page, indicating that the requested content is unavailable or the site is misconfigured. There is no accessible business information, metadata, or structured data to analyze. The lack of content prevents any meaningful assessment of the company's market position, services, or target audience. Technically, the site does not provide any detectable technologies, scripts, or security headers, and no HTTPS or SSL details are available from the provided data. Security posture is minimal due to the absence of content and security best practices. Overall, the site appears inactive or improperly maintained, resulting in a very low trust and credibility score.

V

Vorreiter-Magazin

vorreiter-magazin.de

66

The Vorreiter-Magazin website serves as a regional informational platform focused on fostering cooperation with European neighboring countries, particularly within the context of Niedersachsen, Germany. It appears to be a government or public sector publication promoting Interreg programs and regional collaboration. The website is built on WordPress using the Avada theme and incorporates several plugins such as Borlabs Cookie for cookie consent and Slider Revolution for content presentation. Social media presence is established via Facebook, Instagram, and YouTube channels. Technically, the site is moderately optimized with good mobile responsiveness and basic SEO practices. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit security policies. No privacy policy or terms of service pages were found, which is a compliance gap. Contact information is not explicitly provided on the homepage, limiting direct communication channels. Overall, the site is trustworthy and safe for general audiences, with no adult or questionable content detected.