Security Directory

T

The HISTORY Channel

history.com

56

The HISTORY Channel website (www.history.de) serves as the German-language digital presence for a pay-TV channel specializing in history documentaries and related content. It offers TV programming schedules, streaming options via HISTORY Play, educational materials, and a blog. The site targets a general audience interested in history and documentary content, positioning itself as a reputable media provider in the German market. The business model revolves around pay-TV subscriptions and digital streaming partnerships, notably with Amazon Prime Video Channels. The website is professionally designed, with consistent branding and comprehensive content that supports its market position.

W

Waldorf-Stiftung im Bund der Freien Waldorfschulen e.V.

waldorf-stiftung.de

43

The Waldorf-Stiftung im Bund der Freien Waldorfschulen e.V. is a German non-profit foundation dedicated to supporting and funding initiatives related to Waldorf education and pedagogy founded by Rudolf Steiner. The foundation targets Waldorf schools, educators, and supporters of Waldorf pedagogy, providing financial resources and promoting educational projects. The website reflects a well-established position within the Waldorf education community in Germany, emphasizing transparency and community engagement through detailed project disclosures and news updates. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, utilizing modern JavaScript libraries such as jQuery, Slick Carousel, Parsley.js, and Magnific Popup. The site is mobile-optimized with good SEO practices and moderate performance. Hosting appears to be managed via domaincontrol.com name servers, likely GoDaddy, though exact hosting details are not disclosed. From a security perspective, the site enforces HTTPS and implements a GDPR-compliant cookie consent mechanism with an opt-out for Google Analytics tracking. However, explicit security headers are not detected, and no formal security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the analysis. The WHOIS data is minimal but consistent with the website's purpose and domain name. Overall, the website presents a professional, trustworthy, and compliant digital presence for the foundation. Strategic improvements could include enhancing security headers, publishing security policies, and adding a vulnerability disclosure mechanism to strengthen the security posture further.

F

fitness-rezervace.cz

fitness-rezervace.cz

47

fitness-rezervace.cz operates a specialized online reservation and information system primarily targeting fitness centers, gyms, yoga studios, and various sports facilities in the Czech Republic. Established in 2011, the company offers a comprehensive software solution that includes user management, payment integration, live streaming capabilities, and advanced features such as turnstiles, vouchers, and REST API for developers. Their market position is that of a niche leader within the Czech fitness and sports reservation software sector, supported by a small but focused business model emphasizing customization and client support. The website reflects a professional and consistent brand image with clear business information and contact details.

E

eMOTION fitness

emotionfitness.cz

42

Emotion fitness is a modern fitness center located in Plzeň, Czech Republic, established in 2020. The business offers a variety of fitness services including state-of-the-art TECHNOGYM equipment, group classes such as yoga, pilates, TRX, and specialized children's exercise programs. Additional wellness services include physiotherapy, cosmetics, massages, maderotherapy, solarium, and a café bar, targeting local residents and families. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing purposes. Hosting is provided by WEDOS, a Czech hosting provider, consistent with the business location. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and explicit cookie consent mechanisms are lacking, representing areas for improvement. Overall, the website is trustworthy and well-positioned in its local market segment.

B

Beton Union Plzeň s.r.o.

betonunion.cz

55

Beton Union Plzeň s.r.o. is a regional specialist company focused on the production, transportation, and placement of concrete and mortar mixtures primarily serving western Czech Republic. The company operates multiple concrete plants and offers customized concrete mixes supported by laboratory testing and professional consulting. Their website reflects a medium-sized manufacturing and transportation business with a clear market position and professional branding. Technically, the website uses modern JavaScript libraries and frameworks, is mobile optimized, and implements cookie consent mechanisms, though it lacks some security headers and explicit privacy policy documentation. Security posture is moderate with HTTPS enabled but could be improved by adding security headers and incident response information. The absence of WHOIS data reduces domain trustworthiness, but the website content and social media presence support legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security documentation.

S

SPARROW

sp-sparrow.cz

45

SPARROW is a small family-owned business based in the Czech Republic specializing in the manufacture and retail of sportswear and fitness clothing, with over 25 years of experience. The company offers custom club clothing, costumes, and jerseys, leveraging high-quality imported materials and modern production technologies. Their website serves as an e-commerce platform showcasing their product range and custom design services. Technically, the website uses a legacy jQuery version and BohemiaSoft e-commerce platform scripts, with Google Tag Manager and Google Analytics for tracking. While the site is accessible and mobile-optimized, some technical issues such as outdated libraries and malformed script tags were identified. Security posture is moderate with HTTPS enforced and basic cookie consent mechanisms, but lacks advanced security headers and updated libraries. The absence of WHOIS data and a formal privacy policy page reduces trust and compliance confidence. Overall, the site is functional and professional but would benefit from technical and compliance improvements.

PURO Bistro is a small hospitality business located in Göttingen, Germany, specializing in high-quality bistro, café, and bar services with a focus on organic and locally sourced products. The website presents a well-structured and visually appealing digital presence emphasizing their menu offerings, team, and contact information. The business targets local residents and visitors seeking quality food and beverages in a relaxed atmosphere with terrace seating. Technically, the website uses modern front-end technologies including Bootstrap, FontAwesome, and jQuery-based plugins, hosted on netcup.net infrastructure. The site is mobile-optimized and SEO-friendly but lacks advanced CMS or analytics integrations. Security posture is good with HTTPS enabled and no visible vulnerabilities, though security headers and incident response policies are absent. Overall, the site is trustworthy and professional, though improvements in privacy compliance (cookie consent) and security best practices are recommended. No forms or data collection mechanisms are present, reducing privacy risks. Social media links are generic and could be enhanced with direct company profiles. Strategically, PURO Bistro should focus on enhancing privacy and security transparency, adding cookie consent, and possibly integrating analytics to better understand user engagement while maintaining compliance with GDPR.

L

LUKAS Hydraulik GmbH

lukas.com

59

LUKAS Hydraulik GmbH is a well-established German manufacturer specializing in hydraulic products for rescue equipment and industrial applications. With a history dating back to the 1940s and a domain registered since 1995, the company operates as a subsidiary of IDEX Corporation, reinforcing its market credibility. The website effectively communicates the company's expertise, product range, and global dealer network, targeting industrial clients, rescue services, and job seekers. Technically, the site is built on Joomla CMS with modern front-end libraries and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and CSRF protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong, featuring a comprehensive privacy policy and cookie consent mechanism. Overall, the site reflects a professional and trustworthy corporate presence.

H

Higher Logic

connectedcommunity.org

72

Higher Logic is an established enterprise-level technology company specializing in online community software that connects organizations and people to foster real conversations and engagement. Their platform targets businesses and organizations seeking to build and manage online communities effectively. The website demonstrates a mature digital presence with professional design, clear navigation, and comprehensive content describing their services and value proposition. Technically, the site is built on WordPress CMS with a modern technology stack including Yoast SEO, Google Tag Manager, Hotjar, and Piwik PRO for analytics and marketing optimization. The site is mobile-optimized, accessible, and SEO-friendly, indicating a high level of digital maturity. Cookie consent mechanisms comply with GDPR, and extensive tracking and marketing tools are employed responsibly. From a security perspective, the website enforces HTTPS, uses security headers, and implements CSRF protection tokens. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a published security policy, incident response information, or vulnerability disclosure reduces transparency and could be improved to enhance trust. Overall, the website presents a low-risk profile with strong business credibility and technical implementation. The main risk factor is the lack of WHOIS data, which limits domain registration trust assessment. Strategic recommendations include publishing explicit security and incident response policies and verifying domain registration details to improve legitimacy and trustworthiness.

T

Tomáš Michálek, fyzická osoba

meteo-roven.cz

49

The website meteo-roven.cz serves as a regional weather information portal focused on eastern Czech Republic, providing real-time data from multiple local meteorological stations. It also offers additional services such as webcams and an e-shop for weather-related products. The business appears to be a small, locally focused entity operated by an individual, with a domain age consistent with its operational history since 2016. The website uses a modern frontend technology stack including Bootstrap 4, jQuery, and various UI plugins, hosted on infrastructure associated with the WEDOS registrar and nameservers. The site is mobile responsive and offers a generally good user experience, though some minor code quality issues are present as evidenced by PHP notices in the navigation menu.

G

Gábor Szilvia

aszodiuzletek.hu

48

Aszodiuzletek.hu is a Hungarian e-commerce price comparison and product recommendation platform launched in 2023. It aggregates product offers from multiple partner webshops, providing users with a centralized place to find competitive prices and product information. The website targets general consumers interested in shopping across various categories including electronics, fashion, home goods, and adult products. The platform emphasizes ease of use, quick price comparison, and access to special offers. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, and Google reCAPTCHA v3 for bot protection. The site is mobile optimized and features a structured navigation system with extensive product categories and partner listings. Security posture is moderate with HTTPS enforced and reCAPTCHA implemented, but lacks explicit security headers and published security policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. The domain registration is recent and consistent with the business profile, indicating legitimacy. Overall, the site presents a professional and functional e-commerce aggregator with room for improvement in security and privacy compliance.

O

Oshkosh Corporation

oshkoshsseries.com

64

Oshkosh S-Series is a specialized product line under the established Oshkosh Corporation, focusing on front discharge concrete mixers. The website serves as a product and support portal targeting construction and industrial customers, offering detailed product information, parts and service support, and innovation features. The site is professionally designed using HubSpot CMS and integrates modern marketing and analytics tools, reflecting a mature digital presence. Security posture is adequate with HTTPS and domain protections, though improvements like DNSSEC and security policies are recommended. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the site demonstrates strong business credibility and technical implementation, suitable for an enterprise-level industrial manufacturer.

O

Oshkosh Corporation

oshkoshairport.com

62

Oshkosh Airport Products is a division of Oshkosh Corporation specializing in the design and manufacture of Airport Rescue and Firefighting (ARFF) vehicles for airports worldwide. The company holds a strong market position as a leading manufacturer with a comprehensive dealer network and aftermarket support, offering high-performance ARFF trucks and innovative solutions such as electric ARFF vehicles. The website reflects a professional and consistent brand presence aligned with Oshkosh Corporation's corporate identity. Technically, the website is built on the HubSpot CMS platform, leveraging modern marketing and analytics tools including Google Analytics, Google Tag Manager, Hotjar, and Facebook Pixel. The site is mobile-optimized with good SEO and accessibility features, though some improvements in accessibility and security headers could be made. Performance is moderate, with a well-structured navigation and rich content. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, explicit security headers are not fully implemented, and no dedicated security or incident response policies are visible. The WHOIS data is unavailable, which limits domain registration trust analysis, but the website content and branding strongly support legitimacy. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements in security headers, accessibility, and visible policy links would enhance trust and compliance further.

O

Oshkosh AeroTech

oshkoshaerotech.com

65

Oshkosh AeroTech is a specialized provider of ground support equipment and comprehensive airport solutions, leveraging the strength and legacy of its parent company, Oshkosh Corporation. The company focuses on delivering technology-driven products and aftermarket customer care to airports, airlines, ground handlers, and military clients. Their product portfolio includes electric ground support equipment, gate equipment, defense aviation ground equipment, and airport operational services. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the website is built on the HubSpot CMS platform, utilizing modern JavaScript libraries such as Swiper.js and jQuery, and integrates Google Tag Manager and HubSpot Analytics for tracking. Hosting is managed via AWS infrastructure, ensuring reliable performance and scalability. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. From a security perspective, the site enforces HTTPS and employs domain status locks to prevent unauthorized changes. However, it lacks DNSSEC and explicit security headers, and does not provide visible security policies or incident response information. Privacy compliance is partial, with a comprehensive privacy policy linked to the parent company but no cookie consent mechanism detected. Contact information is primarily via web forms, with no explicit emails or phone numbers listed. Overall, the website demonstrates a solid business credibility and technical foundation but could improve in privacy compliance and security transparency to enhance trust and regulatory adherence.

E

Evangelische Schulstiftung in Mitteldeutschland St. Johannes

schulstiftung-ekm.de

39

The Evangelische Schulstiftung in Mitteldeutschland St. Johannes operates as a large non-profit educational foundation managing 42 educational institutions across the German states of Saxony, Saxony-Anhalt, and Thuringia. It serves over 7,000 students with a staff of approximately 900, offering a broad range of school types including primary, secondary, and special education. The foundation also provides career opportunities and professional development programs, positioning itself as a key regional player in evangelical education. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, and various UI libraries, delivering a responsive and well-structured user experience. While performance is moderate, the site is mobile-optimized and SEO-friendly. Analytics are handled via Matomo/Piwik, reflecting a moderate level of user tracking with some privacy considerations. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security policies or incident response contacts, which are areas for improvement. Privacy compliance is strong regarding GDPR with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a notable gap. Overall, the website is professional, trustworthy, and well-aligned with its educational mission. Strategic enhancements in security headers, cookie consent, and incident response transparency would further strengthen its security posture and compliance.

M

McNeilus Truck and Manufacturing

mcneilusgarbagetrucks.com

62

McNeilus Truck and Manufacturing operates a professional website focused on refuse and recycling collection vehicles, parts, and innovative waste management technologies. The company is positioned as an industry leader with a strong backing from its parent company, Oshkosh Corporation. The website targets municipalities, waste management companies, and fleet operators, offering a comprehensive range of garbage trucks including electric models, parts, and services. The content is well-structured and professionally presented, reflecting a mature business with a large operational scale. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies such as Google Tag Manager, jQuery, and various marketing and analytics tools. Hosting is supported by AWS infrastructure, ensuring reliable performance. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Privacy and cookie policies are implemented with consent mechanisms, indicating good compliance with GDPR and related regulations. From a security perspective, the site enforces HTTPS and uses domain transfer protection. However, DNSSEC is not enabled, and some security headers are not explicitly present, suggesting room for improvement. No vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contact is noted. Overall, the security posture is solid but could be enhanced with additional best practices. The domain registration data aligns well with the business claims, showing a consistent and legitimate ownership history. The website links to multiple corporate subsidiaries and social media channels, reinforcing trustworthiness. There are no indications of malicious content or blocking mechanisms. Strategic recommendations include enabling DNSSEC, publishing security policies, and enhancing security headers to further strengthen the security and compliance posture.

P

Pastoralverbund Lippe | Detmold

pv-lippe-detmold.de

54

Pastoralverbund Lippe | Detmold is a small non-profit religious organization serving the local community in Detmold, Germany. The website provides information about religious services, community groups, spiritual guidance, and social support initiatives. It targets parishioners and local residents interested in Catholic church activities. The organization maintains a consistent and professional online presence with a clear focus on community engagement and spiritual services. Technically, the website is built on TYPO3 CMS with modern frontend libraries and integrates a GDPR-compliant cookie consent mechanism via Cookiebot. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is good with HTTPS enforced and cookie consent properly managed, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website is trustworthy and compliant with privacy regulations, reflecting a mature digital infrastructure for a small non-profit entity.

D

Deutsche Atlantische Gesellschaft e.V.

ata-dag.de

38

The Deutsche Atlantische Gesellschaft e.V. is a German non-profit organization dedicated to informing and engaging the public on German and European security policy, NATO objectives, and transatlantic relations. The organization operates through events, seminars, lectures, podcasts, and publications, targeting individuals and entities interested in security and defense topics. Their market position is that of an established, reputable non-profit within the government and policy sector in Germany. Technically, the website is built on WordPress, utilizing common libraries such as jQuery, Bootstrap, and Font Awesome, with SEO optimization via Yoast. Hosting appears to be managed through kasserver.com. The site is moderately performant, mobile-optimized, and includes analytics via Matomo, reflecting a reasonable level of digital maturity. From a security perspective, the site enforces HTTPS and uses CAPTCHA on contact forms, alongside a cookie consent mechanism. However, it lacks explicit security headers, a published security policy, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with no explicit privacy policy or terms of service pages found. Overall, the website presents a professional and trustworthy front for the organization, with good content quality and business credibility. Security and privacy practices could be enhanced to meet higher compliance standards and improve user trust.

S

Stadtwerke Hammelburg GmbH

stadtwerke-hammelburg.de

53

Stadtwerke Hammelburg GmbH is a regional utility company serving the Hammelburg area in Germany, providing essential services including electricity, gas, water, heat supply, and telecommunications via their HAB-Net DSL service. The company also operates local amenities such as the Saaletalbad swimming pool and parking facilities. Their market position is that of a trusted regional provider with a diversified portfolio catering to both residential and business customers. The website reflects a professional and consistent brand image with clear service offerings and customer support channels. Technically, the site is built on Joomla CMS with modern frontend technologies and includes a comprehensive GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS enforced and CSRF protections, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is accessible, well-structured, and trustworthy, supporting the company's credibility in the regional energy and telecommunications sectors.

D

Doppstadt

doppstadt.de

61

Doppstadt is a well-established German company specializing in manufacturing and providing sustainable recycling solutions tailored to diverse industrial needs. With over 60 years of experience, the company holds a strong market position supported by a comprehensive product portfolio including mobile shredding, screening, and composting technologies. The website reflects a mature digital presence with professional design, multilingual support, and active content updates. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and analytics tools, hosted on Versatel infrastructure. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers and explicit incident response policies are absent. Overall, the domain registration and WHOIS data align well with the business claims, indicating high legitimacy and trustworthiness.

M

MacQueen

macqueeneq.com

63

MacQueen is a regional leader in providing environmental and emergency equipment solutions across multiple Midwestern states in the United States. Their business model focuses on B2B sales and service of specialized equipment for municipalities, emergency responders, and environmental service providers. The website reflects a professional and consistent brand presence with clear navigation and detailed product offerings. Technically, the site is built on the HubSpot CMS platform, leveraging modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and Hotjar, indicating a mature digital marketing infrastructure. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and explicit privacy policies suggests room for improvement. The lack of WHOIS registration data is a notable concern, potentially impacting trust from a domain legitimacy perspective. Overall, the site is safe for general audiences and demonstrates good business credibility and technical implementation.

C

Chaport

chaport.com

8

Chaport is a technology company offering an all-in-one customer messaging software platform that integrates multi-channel live chat, chatbots, and knowledge base functionalities. Positioned as a leading solution in customer messaging, Chaport targets businesses seeking to enhance customer communication and support. The website is built on WordPress with modern SEO and analytics tools, indicating a moderate level of digital maturity. However, the absence of WHOIS registration data raises questions about domain legitimacy, though the website content and branding appear professional and consistent. Security posture is moderate with no detected security headers and missing visible privacy and cookie policies, suggesting room for improvement in compliance and security transparency. Overall, Chaport presents as a functional SaaS business with a good user experience but would benefit from enhanced security and compliance disclosures.

M

Messer Medical

messermedical.hu

42

Messer Medical is a Hungarian healthcare service provider specializing in oxygen therapy and sleep therapy equipment and services. The company targets patients with chronic oxygen deficiency and medical professionals requiring high-quality therapeutic devices. The website reflects a medium-sized business with a national presence, supported by contracts with the National Health Insurance Fund of Hungary since 2004. The site uses WordPress with a professional theme and common plugins, providing a good user experience and mobile optimization. However, it lacks critical privacy and cookie policies, which impacts compliance and user trust. Security posture is moderate with HTTPS enabled but missing security headers and incident response contacts. Overall, the website is professional and trustworthy but requires improvements in privacy compliance and security best practices.

B

Bayerische Musikakademie Marktoberdorf

modakademie.de

43

The Bayerische Musikakademie Marktoberdorf is a regional Bavarian music academy focused on providing a wide range of music education services including vocal and instrumental courses, choir and orchestra leadership training, and music pedagogy. It serves musicians, educators, and enthusiasts primarily within Bavaria, Germany. The website reflects a medium-sized educational institution with a professional and consistent brand presence, supported by its parent organization, the Bayerischer Musikrat. Technically, the website employs a modern tech stack with Bootstrap, jQuery, and third-party integrations for user consent and reviews, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit incident response policies. Overall, the site is accessible, well-structured, and trustworthy with no signs of malicious content or blocking mechanisms.

B

Bayerischer Musikrat

bayerischer-musikrat.de

45

The Bayerischer Musikrat is a prominent non-profit cultural organization dedicated to promoting music culture in Bavaria. It operates various projects, competitions, and funding programs targeting musicians, music associations, and cultural stakeholders. The website reflects a well-established entity with a clear focus on community engagement and cultural enrichment. Technically, the site employs a modern tech stack including Bootstrap and jQuery, with a cookie consent mechanism via Usercentrics, indicating GDPR compliance awareness. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. Overall, the site is professional, trustworthy, and serves its target audience effectively.

J

Jahn GmbH & Co. KG

jahntextil.de

54

Jahn GmbH & Co. KG is a well-established German family-owned manufacturer specializing in technical textiles, with a history dating back to 1896. The company offers a broad range of textile manufacturing and processing services including knitting, laminations, composites, and textile printing. Operating multiple production sites in Germany, Jahn serves industrial clients requiring innovative textile solutions. The website is built on WordPress with modern plugins and frameworks, providing a professional and responsive user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and incident response information are absent. Overall, the domain registration and website content align well, indicating a trustworthy and credible business presence.

B

Bayerischer Musikrat

blkm.de

45

The Bayerischer Landes-Musikrat (BLKM) website serves as a regional non-profit platform promoting music education, cultural projects, and networking within Bavaria. It is supported by four key partners, including three Bavarian State Ministries and the Bayerischer Musikrat e.V., positioning it as a significant governmental and cultural entity in the region. The site offers extensive information on music projects, education, funding, competitions, and research, targeting musicians, educators, and cultural organizations. Technically, the website employs a modern tech stack with Bootstrap and jQuery, enhanced by Usercentrics for GDPR-compliant cookie management. While the site is well-structured and professionally designed with good navigation and mobile optimization, it lacks explicit security headers and detailed contact information on the homepage. Security posture is moderate with HTTPS enforced and cookie consent implemented, but improvements are recommended in security headers and incident response disclosures. Overall, the website is trustworthy, safe, and compliant with privacy regulations, serving its audience effectively with room for technical and security enhancements.

I

IdeenExpo GmbH

ideenexpo.de

62

IdeenExpo GmbH operates Europe's largest youth event focused on technology and natural sciences, attracting hundreds of thousands of young talents biennially. The company organizes interactive exhibitions, workshops, and stage shows to inspire youth and connect them with future career opportunities in STEM fields. Their market position is strong within the education sector in Germany, supported by a professional and consistent brand presence across multiple digital channels. Technically, the website is built on Drupal 9 with modern front-end frameworks and integrates analytics tools like Matomo and Facebook Pixel, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement, cookie consent mechanisms, and antibot protections, though some security headers could be improved. Overall, the site is well-optimized for performance, accessibility, and SEO, providing a high-quality user experience. Privacy compliance is robust with clear policies and consent management, though explicit terms of service and incident response details are lacking. The domain registration data aligns well with the website content, indicating legitimacy and trustworthiness.

Hanau engagiert is an official government information portal operated by the City of Hanau, Germany, aimed at providing Ukrainian refugees with comprehensive support and integration services. The website offers detailed guidance on housing, medical care, education, employment, and volunteer opportunities, positioning itself as a trusted local government resource. The platform is well-branded with consistent city logos and maintains an active social media presence to engage its target audience effectively. Technically, the website leverages a modern tech stack including Bootstrap 5, jQuery, and Matomo analytics with a strong emphasis on user privacy through explicit cookie consent mechanisms. It is hosted on servers managed by aspiria.de, with DNS and WHOIS data consistent with a legitimate government service. The site is mobile-optimized and provides a good user experience with clear navigation and multilingual support. From a security perspective, the site enforces HTTPS and employs privacy-conscious analytics but lacks explicit security headers and a public security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with GDPR-aligned policies and cookie management in place. Overall, Hanau engagiert demonstrates a solid digital maturity for a government service portal, with good content quality, technical implementation, and privacy compliance. Strategic improvements could focus on enhancing security headers, publishing security policies, and establishing a vulnerability disclosure process to further strengthen trust and resilience.

Hanau Bäder GmbH is a public service company operating swimming pools and sauna facilities in Hanau, Germany. The company provides recreational and wellness services including indoor and outdoor swimming, sauna experiences, aqua fitness, courses, and events targeting families and local residents. The website reflects a well-structured and professionally maintained digital presence consistent with a medium-sized municipal or regional service provider. Technically, the site uses a modern tech stack including jQuery, Bootstrap, FontAwesome, and Matomo analytics, built on the IMPERIA CMS platform. Accessibility features and cookie consent mechanisms are implemented, demonstrating compliance with GDPR and user inclusivity. Security posture is adequate with HTTPS usage and no visible vulnerabilities, though security headers and incident response policies could be improved. Overall, the website is trustworthy, user-friendly, and aligned with the business's public service mission.

M

Mehrgenerationenhaus Ingelheim

mgh-ingelheim.de

50

Mehrgenerationenhaus Ingelheim is a local non-profit community center in Ingelheim am Rhein, Germany, providing a wide range of social, cultural, educational, and health-related services to residents of all ages. The organization focuses on fostering community engagement, volunteering, and multi-generational interaction. Their website reflects a well-structured and community-oriented approach with clear contact information and social media presence on Facebook and Instagram. Technically, the website is built on TYPO3 CMS with Bootstrap 4 and uses several JavaScript libraries including jQuery 1.11.3, FontAwesome, and Slick Slider. The site is mobile responsive and includes a cookie consent mechanism compliant with GDPR. However, some technical improvements could be made, such as updating jQuery to a more secure version and implementing security headers. From a security perspective, the site uses HTTPS and has a cookie consent banner, but lacks explicit security policies, incident response information, and security headers. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is consistent with the website's community focus and shows no privacy protection, indicating transparency. Overall, the website is trustworthy, safe, and professionally maintained, with minor technical and security enhancements recommended to improve its posture and compliance further.

Z

Zweckverband Zulassungsstelle Coburg

zulassungsstelle-coburg.de

10

Zweckverband Zulassungsstelle Coburg operates as a joint vehicle registration and driver licensing authority serving the city and district of Coburg, Germany. The website provides essential public services including vehicle registration, driver licensing, online application portals, and appointment scheduling. It targets local residents and vehicle owners, positioning itself as a trusted local government entity with clear contact channels and official branding. Technically, the website is built on WordPress using the Enfold theme and Avia framework, incorporating modern web technologies such as jQuery and Google Maps integration. The site is mobile-optimized with good navigation and content quality, although accessibility features are basic. Performance is moderate, and SEO practices are adequately implemented. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, it lacks explicit HTTP security headers and does not provide visible incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the business purpose, though registrant details are minimal. Overall, the website demonstrates a solid security posture and privacy compliance suitable for a government service portal. Recommendations include enhancing security headers, publishing incident response contacts, and improving accessibility. The risk level is low, with no signs of malicious activity or content safety concerns.

B

biodiversityDS

biodiversitydatascience.com

56

Biodiversity Data Science is a specialized research and educational platform focused on leveraging data science tools to support biodiversity conservation and the United Nations 2030 Agenda for Sustainable Development. The website offers research publications, project descriptions, data science courses, code resources, and a podcast to engage researchers, policymakers, and environmental stakeholders. The platform positions itself as a niche player in the environmental data science domain with a strong emphasis on marine biodiversity and climate change impacts. Technically, the website is built using the Jekyll static site generator and incorporates modern front-end libraries such as Bootstrap, jQuery, and Font Awesome. It demonstrates good mobile optimization, clear navigation, and SEO best practices. Google Analytics is used for user tracking, indicating moderate data collection practices. However, no privacy or cookie policies are present, which is a compliance gap. From a security perspective, the site lacks visible security headers and formal security policies. The WHOIS data is missing or indicates the domain may not be registered, which raises concerns about domain legitimacy and trustworthiness. No forms or sensitive data inputs are present, reducing immediate risk exposure. Overall, the security posture is moderate but could be improved with better policy disclosures and technical hardening. The overall risk assessment suggests the website is a credible source of biodiversity data science content but requires improvements in domain registration transparency, privacy compliance, and security best practices to enhance trust and reduce potential vulnerabilities.

B

Bezecný s.r.o.

bezecny.cz

43

Bezecný s.r.o. is a small Czech company specializing in comprehensive engineering geodesy services including surveying, building measurements, and project documentation. Established since 1990, the company serves clients involved in construction and industrial projects, with a portfolio including major industrial zones and commercial centers. The website presents a professional image with clear service descriptions and contact information, targeting local businesses and construction professionals. Technically, the website uses a modern frontend stack with Bootstrap, jQuery, and various UI libraries, providing a responsive and user-friendly experience. However, there is no evidence of a CMS or advanced backend technologies. Performance is moderate with good mobile optimization but basic accessibility and SEO features. Security posture is moderate; the site uses CAPTCHA and GDPR consent on its contact form but lacks visible HTTPS confirmation and security headers in the provided data. The absence of WHOIS registration data is a concern for domain legitimacy, although the website content and contact details appear consistent and professional. Overall, the site is functional and business-appropriate but would benefit from improved security practices, clear privacy and cookie policies, and verified domain registration information to enhance trust and compliance.

A

Acción Episcopal Adveniat

adveniat.org

48

Acción Episcopal Adveniat is a German Catholic charitable organization dedicated to supporting impoverished communities in Latin America and the Caribbean. The organization operates primarily through donations and campaigns within the Catholic community in Germany, focusing on sustainable development projects initiated by local church counterparts. Their key services include project funding, scholarship programs, and environmental initiatives such as solar energy support. The website is well-branded and consistent with the organization's mission, targeting donors and supporters interested in Latin American aid.

F

Ferrit s.r.o.

ferrit.cz

59

Ferrit s.r.o. is a Czech-based company specializing in manufacturing and servicing global mining transport solutions, including suspended monorail systems, rail transport, trackless machinery, mining processing equipment, and safety devices for mining rescue operations. The company targets mining and industrial transport sectors worldwide, boasting a client base across multiple countries as evidenced by their interactive client map. Their business model focuses on providing comprehensive transport and safety solutions for underground mining operations, supported by over 25 years of industry experience and EU funding projects. The website reflects a professional and consistent brand image with multilingual support and active social media engagement. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Google Analytics, and Google Tag Manager, ensuring responsive design and moderate performance. The site integrates cookie consent mechanisms and secure login/registration forms, indicating attention to privacy and user security. However, some security headers are not explicitly detected, and no public security or incident response policies are found, suggesting room for improvement in transparency and security maturity. Security posture is generally good with HTTPS enforced and secure form handling, but the absence of WHOIS data and domain registration details introduces uncertainty about domain legitimacy. The website shows GDPR compliance through privacy and cookie policies, though terms of service and vulnerability disclosure mechanisms are not evident. Overall, the site is safe, professional, and trustworthy, but would benefit from enhanced security documentation and domain registration transparency. Strategic recommendations include implementing comprehensive security headers, publishing incident response and vulnerability disclosure policies, and verifying domain registration details to strengthen trust and compliance.

A

ALEA Music

alea-music.com

41

ALEA Music is a small, professional live band service based in Germany specializing in event entertainment including background music and party performances. The website presents a well-structured, content-rich platform showcasing their services, band members, and multimedia content to engage potential clients. The technical infrastructure uses modern web technologies such as Bootstrap, jQuery, and Google Analytics, providing a responsive and user-friendly experience. However, the absence of WHOIS data raises concerns about domain registration legitimacy, though the website content itself is professional and consistent with a legitimate business. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms, indicating room for improvement in compliance and security best practices.

M

Missionsprokur der Don Bosco Schwestern

fmamission.de

59

The Missionsprokur der Don Bosco Schwestern is a small German non-profit organization dedicated to supporting development aid projects worldwide, primarily through the efforts of the Don Bosco Sisters. The website clearly communicates its mission, provides donation options, and highlights key projects in various countries. The organization maintains a consistent brand presence and offers transparent contact and banking information to foster trust with donors. Technically, the site is built on the siteswift CMS platform, utilizing modern JavaScript libraries such as jQuery and Swiper.js, and implements a cookie consent mechanism compliant with GDPR. Security posture is adequate with HTTPS and CSRF protections, though some security headers are missing and no explicit security policies are published. Overall, the site is professional, accessible, and trustworthy, with moderate analytics tracking via Matomo and no signs of malicious content or blocking mechanisms.

V

VIDES Freiwilligendienst

vides-freiwilligendienst.net

63

VIDES Freiwilligendienst is a non-profit organization affiliated with the Don Bosco Sisters, providing international volunteer opportunities primarily in education and social services for young adults. The organization has a well-structured website offering detailed information about volunteer placements, preparation, and support, targeting socially engaged youth interested in global solidarity. The website is professionally designed, mobile-optimized, and uses modern web technologies including jQuery, Swiper.js, and a proprietary CMS (siteswift). Privacy and cookie consent mechanisms are implemented in compliance with GDPR standards. However, the WHOIS data for the domain is missing or inaccessible, which raises concerns about domain registration transparency despite the professional appearance of the site. Security posture is generally good with HTTPS and CSRF protections, but lacks explicit security policies or incident response contacts. Overall, the website is trustworthy and serves its non-profit mission effectively, though domain registration verification is recommended.

K

Kolpingjugend – Kolpingwerk Deutschland

kolpingjugend.de

10

Kolpingjugend Deutschland is a well-established non-profit Catholic youth organization focused on engaging children, youth, and young adults in social projects, volunteer work, and community activities. The organization is democratically structured and rooted in the values of Adolph Kolping, with a strong presence in Germany and links to national and international Kolping organizations. The website serves as an information and engagement platform for members and interested parties, providing news, events, and resources. Technically, the website is built on TYPO3 CMS, leveraging modern frontend libraries such as jQuery and Bootstrap. It is hosted on dot-server.de and includes standard web technologies for responsive design and user interaction. The site implements GDPR-compliant cookie consent mechanisms and privacy policies, reflecting a mature approach to data protection and user privacy. From a security perspective, the site uses HTTPS and includes scripts to allow users to opt out of Google Analytics tracking. However, explicit HTTP security headers are not evident in the provided data, and no dedicated security or incident response policies are published. There are no visible vulnerabilities or exposed sensitive data, indicating a reasonable security posture for a non-profit organization. Overall, the website is professional, trustworthy, and well-aligned with its mission. It provides clear contact information via email and maintains transparency through privacy and imprint pages. Strategic improvements could focus on enhancing security headers, publishing incident response information, and expanding contact options.

A

Aktion West-Ost e.V.

aktion-west-ost.de

43

Aktion West-Ost e.V. is a small non-profit umbrella organization representing four Catholic youth associations within the BDKJ framework. The organization focuses on international youth work and political education aimed at fostering encounters and exchanges between Central and Eastern Europe. Their mission centers on overcoming East-West boundaries through personal contacts and shared experiences. The website reflects this mission with content in German and English, highlighting projects, publications, and social media engagement. Technically, the website is built on the ProcessWire CMS and leverages a modern JavaScript and CSS stack including jQuery, SlickNav, Slippry, and others to provide a responsive and user-friendly experience. Hosting is managed via kasserver.com, a known hosting provider. The site demonstrates moderate performance and basic SEO and accessibility features. From a security perspective, the site uses HTTPS (assumed), but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and security hardening. No incident response or vulnerability disclosure information is published. No sensitive data exposure or vulnerable libraries were detected in the provided content. Overall, the website is professional, trustworthy, and well-aligned with its non-profit mission. However, improvements in privacy compliance, security headers, and contact transparency would enhance its security posture and user trust.

B

Bundesarbeitsgemeinschaft der Freien Wohlfahrtspflege (BAGFW) e. V.

bagfw.de

50

The Bundesarbeitsgemeinschaft der Freien Wohlfahrtspflege (BAGFW) e. V. is a well-established German non-profit umbrella organization representing the leading free welfare associations. The website clearly communicates its mission to secure and develop social work through collaborative initiatives and social policy activities. It targets social welfare organizations, policymakers, and the general public interested in social welfare in Germany. The organization has a strong market position as a key coordinating body in the social welfare sector. Technically, the website is built on TYPO3 CMS with a modern frontend stack including Bootstrap, jQuery, and accessibility features. It is mobile-optimized and provides a good user experience with clear navigation and relevant content. The site uses HTTPS and implements a cookie consent mechanism compliant with GDPR, employing Piwik/Matomo for analytics. From a security perspective, the site enforces HTTPS and cookie consent but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the organization's identity and history, supporting legitimacy and trustworthiness. Overall, the website is professional, secure, and compliant with privacy regulations, serving its audience effectively. Strategic improvements in security headers and published security policies could further enhance its security posture.

D

digitalfabriX GmbH

digitalfabrix.de

69

digitalfabriX GmbH is a German-based company specializing in digital solutions for public administrations, municipalities, and government entities. The company offers a range of services including digital transformation consulting, custom software development, process automation, and digital future strategies. With over 20 years of experience and more than 1000 public sector customers, digitalfabriX holds a strong market position in the government technology sector. Their website reflects a professional and consistent brand image targeting public sector clients. Technically, the website is built on the Umbraco CMS platform and leverages modern web technologies such as jQuery, Bootstrap, and Matomo analytics. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Cookie consent and privacy compliance mechanisms are well implemented, reflecting GDPR adherence. The site uses HTTPS with excellent SSL configuration, though security headers could be improved. From a security perspective, the website shows good practices including HTTPS enforcement, anti-CSRF tokens in forms, and no visible vulnerabilities or exposed sensitive data. However, there is no explicit security policy or incident response information published, and no vulnerability disclosure or security.txt file is found. The domain WHOIS data aligns well with the website content, indicating legitimacy and trustworthiness. Overall, the website is professional, secure, and compliant with privacy regulations, serving a specialized niche in public sector digitalization. Strategic improvements in security headers and transparency around security policies could further enhance trust and security posture.

R

Regens Wagner Burgkunstadt

regens-wagner-burgkunstadt.de

49

Regens Wagner Burgkunstadt is a medium-sized non-profit organization based in Germany that provides comprehensive social services for people with disabilities. Their offerings include housing, education, employment, open help, leisure activities, day care, accompanying services, care, and pastoral care. The website reflects a well-structured and professionally maintained digital presence, leveraging auctores CMS and common web technologies such as jQuery and Bootstrap. The site is mobile-optimized and accessible, with clear navigation and relevant content for its target audience. From a security perspective, the website employs HTTPS with good SSL configuration and includes CSRF tokens in forms, indicating attention to basic security practices. However, it lacks several important security headers and does not provide explicit incident response or vulnerability disclosure information. Privacy compliance is supported by a comprehensive GDPR-aligned privacy policy, though no explicit cookie consent mechanism is observed. Contact information is clearly presented, including phone numbers and a company email address, enhancing business credibility. Overall, the website is trustworthy and safe, with no adult or explicit content detected. The domain registration data aligns well with the website's content and business purpose, supporting legitimacy. Strategic improvements in security headers, incident response transparency, and cookie consent would further enhance the site's security posture and compliance. The organization maintains active social media channels on Facebook, YouTube, and Instagram, supporting community engagement and outreach.

N

Nordic Chamber of Commerce in the Czech Republic

nordicchamber.cz

46

The Nordic Chamber of Commerce in the Czech Republic is a well-established organization founded in 2005 that serves as a platform connecting Nordic and Czech businesses. It promotes Nordic values such as transparency, sustainability, and innovation through events, membership benefits, and specialized programs like Diversity Awards and Mentoring Exchange. The website reflects a professional and consistent brand image targeting Nordic and Czech business communities. Technically, the site uses modern JavaScript libraries and Google Tag Manager for analytics, hosted on a Czech hosting provider, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and secure forms, though it lacks explicit security policies and cookie consent mechanisms. The domain WHOIS data aligns well with the website's claims, indicating legitimacy and trustworthiness. Overall, the site is a credible and professional business platform with room for improvement in privacy and security transparency.

D

Durbaszka

durbaszka.pl

33

The website durbaszka.pl represents a small mountain lodging facility named Górski Ośrodek Pod Durbaszką located in Poland. It offers accommodation, full board meals, educational and recreational facilities targeting tourists and organized school groups. The business operates in the hospitality sector with a local market focus. Technically, the website is built on Joomla! CMS using common front-end libraries such as jQuery and Font Awesome. The site has basic mobile optimization and moderate performance but lacks advanced SEO and accessibility features. Security posture is weak with no visible HTTPS enforcement or security headers, and no privacy or cookie policies are present. Contact information is minimal, limited to a Facebook social media link, and no direct emails or phone numbers are provided on the homepage. Overall, the site is functional but requires improvements in security, privacy compliance, and contact transparency to enhance trust and professionalism.

D

Deutschsprachige Provinz der Don Bosco Schwestern

donboscoschwestern.net

63

The website represents the Deutschsprachige Provinz der Don Bosco Schwestern, a Catholic women's religious order active since 1922 in Germany and Austria. Their mission focuses on education, accompaniment, and housing for children and youth. The organization maintains a professional online presence with clear branding, comprehensive content, and active social media channels. Technically, the site uses a modern CMS (siteswift), jQuery, and various UI libraries, with a cookie consent manager ensuring GDPR compliance. Security posture is moderate with CSRF protections and consent mechanisms but lacks visible HTTP security headers and published security policies. WHOIS data is unavailable, which slightly reduces domain trust but does not detract from the site's professionalism. Overall, the site is a credible, well-maintained digital asset for a non-profit religious organization.

S

Salesianer Don Boscos

donbosco.at

60

Salesianer Don Boscos is a well-established non-profit Catholic religious order operating in Austria since 1903, focusing on social and youth services including education, pastoral care, and community support. The organization maintains a professional and content-rich website that effectively communicates its mission and services to socially disadvantaged youth and the general public. The site is supported by a modern technical infrastructure using the siteswift CMS and various JavaScript libraries, ensuring good user experience and mobile optimization. Security posture is moderate with CSRF protections and cookie consent mechanisms in place, though explicit security headers and incident response policies are absent. Privacy compliance is strong with clear privacy and cookie policies and GDPR consent management. Overall, the website reflects a credible and trustworthy organization with transparent contact information and active social media presence.

T

Technology Fund

technologyfund.ch

44

The Technology Fund is a Swiss-based financial entity focused on supporting innovative climate technology companies through loan guarantees. Their website clearly communicates their mission to reduce greenhouse gas emissions by enabling Swiss companies to access non-dilutive funding. The site features testimonials from industry leaders and partners, enhancing credibility and trust. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and integrates Google Analytics and Tag Manager for tracking. Security measures include HTTPS and Google reCAPTCHA for form protection, though some security headers and explicit policies are missing. Privacy compliance is partially addressed with a privacy policy but lacks a cookie consent mechanism. Overall, the website is professional, well-branded, and targets Swiss climate-tech startups and stakeholders.