Security Directory

S

Schönstatt-Institut Marienbrüder e.V.

smj-deutschland.de

10

The website www.smj-deutschland.de represents the Schönstatt Mannes Jugend, a German non-profit youth religious organization. It serves as an official information portal about the organization's work, principles, and diocesan branches. The site targets members and interested individuals within Germany, providing community, spiritual education, and event information. The business model is typical for a small non-profit focused on youth and religious community building. Technically, the site is built on the Jimdo Creator CMS platform, hosted by Jimdo, and uses standard web technologies including jQuery and Facebook SDK for social integration. The site is mobile-optimized with good navigation and content quality. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a clear privacy policy and cookie mechanism. Overall, the site is professional, trustworthy, and safe for general audiences.

Q

Quickborn AK

quickborn-ak.de

10

Quickborn AK is a German non-profit organization dedicated to cultural and educational activities, primarily organizing events such as the Silvestertagung and Augustwoche that focus on social, political, and spiritual themes. The website serves as an information hub for these events and the organization's history and mission. The target audience includes community members interested in cultural dialogue and education. Technically, the website is built on WordPress using a modern theme and plugins, hosted on a reputable German hosting provider. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced but lacks advanced security headers and incident response information. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and professionally maintained, suitable for its non-profit educational purpose.

Pfadfinderinnenschaft St. Georg (PSG) is a well-established German non-profit organization dedicated to empowering girls and young women through scouting activities. Founded in 1947, PSG is affiliated with the global WAGGGS network and serves approximately 9,000 members nationwide. The organization offers membership services, educational programs, international partnerships, and publishes a dedicated magazine. The website reflects a professional and consistent brand image with clear navigation and content relevant to its audience. Technically, the website is built on the Contao CMS platform, utilizing modern web technologies such as Bootstrap and jQuery. It features responsive design and accessibility tools, including a cookie consent mechanism compliant with GDPR. Performance is moderate with room for optimization, and the site employs HTTPS with a good SSL configuration. From a security perspective, the site demonstrates good practices including HTTPS enforcement and cookie consent management. However, it lacks explicit security headers and documented security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed through a detailed privacy policy and cookie banner. Contact information is primarily via a contact form, with no direct emails or phone numbers visible. Overall, PSG's website presents a trustworthy and professional digital presence suitable for its non-profit mission. Strategic improvements in security headers and enhanced transparency around security policies could further strengthen its posture.

K

Kolpingjugend – Kolpingwerk Deutschland

kolpingjugend.de

10

Kolpingjugend Deutschland is a well-established non-profit Catholic youth organization focused on engaging children, youth, and young adults in social projects, volunteer work, and community activities. The organization is democratically structured and rooted in the values of Adolph Kolping, with a strong presence in Germany and links to national and international Kolping organizations. The website serves as an information and engagement platform for members and interested parties, providing news, events, and resources. Technically, the website is built on TYPO3 CMS, leveraging modern frontend libraries such as jQuery and Bootstrap. It is hosted on dot-server.de and includes standard web technologies for responsive design and user interaction. The site implements GDPR-compliant cookie consent mechanisms and privacy policies, reflecting a mature approach to data protection and user privacy. From a security perspective, the site uses HTTPS and includes scripts to allow users to opt out of Google Analytics tracking. However, explicit HTTP security headers are not evident in the provided data, and no dedicated security or incident response policies are published. There are no visible vulnerabilities or exposed sensitive data, indicating a reasonable security posture for a non-profit organization. Overall, the website is professional, trustworthy, and well-aligned with its mission. It provides clear contact information via email and maintains transparency through privacy and imprint pages. Strategic improvements could focus on enhancing security headers, publishing incident response information, and expanding contact options.

K

Katholische junge Gemeinde

kjg.de

10

Katholische junge Gemeinde (KjG) is a well-established Catholic youth organization in Germany, focusing on youth engagement, social projects, and community activities. The organization maintains a professional and content-rich website that serves as a hub for information, events, and resources for its members and the public. The site targets youth and young adults interested in Catholic community involvement and social advocacy. KjG operates as a non-profit entity with a medium organizational size and a strong presence in Germany, supported by regional branches and partnerships with other youth and social organizations.

J

Jugendverbände der Gemeinschaft Christlichen Lebens

j-gcl.org

10

The website j-gcl.org represents the Jugendverbände der Gemeinschaft Christlichen Lebens (J-GCL), a non-profit Catholic youth organization in Germany. It serves as an informational and engagement platform for youth members, focusing on faith, community, and social responsibility. The organization has a long-standing presence since 2001, reflected in the domain age and content maturity. The site offers resources, regional group information, and opportunities for involvement, targeting students and young adults within the Catholic community in Germany. Technically, the website is built on WordPress with a modern plugin ecosystem including Yoast SEO and Gutenberg block extensions, ensuring good SEO and content management capabilities. The site is mobile-optimized and provides a user-friendly navigation experience. Hosting and domain registration are managed by reputable providers, with HTTPS enabled and basic security practices in place. However, DNSSEC is not enabled, and additional security headers could enhance the security posture. From a security perspective, the site shows no signs of blocking or WAF interference, and no critical vulnerabilities are evident in the HTML content. Privacy compliance is addressed with a privacy and cookie policy, including consent mechanisms, aligning with GDPR requirements. Contact information is primarily via contact forms, with no direct emails or phone numbers exposed in the HTML. Overall, the website demonstrates a solid digital presence for a small non-profit organization, with good content quality, technical implementation, and business credibility. Security practices are adequate but could be improved with DNSSEC and enhanced HTTP headers. The site is safe for general audiences and maintains a trustworthy and professional image.

I

Internationaler Bauorden

bauorden.de

10

Internationaler Bauorden is a small non-profit organization based in Germany that facilitates volunteer and cultural exchange programs. Their website is built on WordPress and uses common plugins such as Events Manager and Real Cookie Banner to manage events and ensure GDPR compliance. The site is well-structured, mobile-optimized, and provides comprehensive privacy and cookie policies, reflecting a good level of digital maturity. Security posture is strong with HTTPS enforced and standard security headers present, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website presents a trustworthy and professional image suitable for its target audience of volunteers and socially engaged individuals.

D

DJK-Sportverband e.V.

djk.de

57

DJK-Sportverband e.V. is a well-established non-profit sports federation in Germany, founded in 1920, that promotes sports activities underpinned by Christian and inclusive values. The organization targets sports clubs, athletes of all ages and abilities, and community members interested in ethical and inclusive sportsmanship. Their key services include diverse sports offerings, inclusion initiatives, prevention of sexualized violence, and organizing major sports events such as the Bundessportfest. The website reflects a strong community focus and a commitment to social responsibility.

C

Christliche Arbeiterjugend Deutschland

caj.de

52

Christliche Arbeiterjugend Deutschland (CAJ) is a well-established non-profit Christian youth organization in Germany, focusing on social justice, education, and community engagement. The website serves as an information hub for news, events, and organizational activities, targeting young people interested in Christian worker youth movements. The organization has a strong national presence with international connections, founded in 1947, and the international CAJ dates back to 1925. The website content is professionally presented in German, with consistent branding and active social media channels.

B

Bund der St. Sebastianus Schützenjugend

bdsj.de

59

Bund der St. Sebastianus Schützenjugend (BdSJ) is a large non-profit youth organization in Germany with approximately 30,000 members. The organization focuses on social, sporting, and religious youth work, emphasizing cultural and political education within the framework of the Schützenjugend tradition. The website serves as an information hub for the federal association, providing news, project details, and resources for members and interested parties. The organization is well-established, founded in 1961, and maintains a strong presence through its six diocesan associations and over 1,200 brotherhoods. Technically, the website is built on the Alkacon Mercury CMS platform, utilizing modern web technologies including HTML5, CSS3, JavaScript, and jQuery. Accessibility features are implemented via the EyeAble plugin, and the site is mobile-optimized with good SEO practices. The site uses HTTPS with an excellent SSL configuration, ensuring secure communications. Privacy and cookie policies are comprehensive and GDPR compliant, with a consent mechanism in place. Security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the site lacks explicit security policy or incident response information and does not publish a security.txt file. Contact information is clearly presented, including email, phone, physical address, and a contact form with privacy consent. Social media sharing is integrated but no direct official social media profiles are linked. Overall, the website is professional, trustworthy, and well-maintained, reflecting the organization's credibility and commitment to its members. Strategic improvements could include adding explicit security policies and enhancing security headers to further strengthen the security posture.

The website agvnet.de represents the Arbeitsgemeinschaft katholischer Studentenverbände (AGV) e.V., a small non-profit organization uniting Catholic student corporations in Germany. The site provides information about the association's activities, including dialogue seminars with politicians and church representatives, targeting Catholic students and affiliated groups. The organization maintains a niche position within the German Catholic student community, focusing on advocacy and event organization. Technically, the website is built on WordPress using the Divi theme and Yoast SEO plugin, hosted by webgo.de. The site is moderately performant, mobile-optimized, and SEO-friendly, with a clean and professional design. Privacy and cookie policies are implemented with GDPR compliance, though no explicit terms of service or security policies are present. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks visible security headers and explicit incident response information. No vulnerabilities or suspicious elements were detected. The WHOIS data is minimal but consistent with the organization's profile and domain age. Overall, the website presents a trustworthy and professional front for a small non-profit organization, with room for improvement in security headers and explicit policy disclosures to enhance compliance and trustworthiness.

A

Aktion West-Ost e.V.

aktion-west-ost.de

43

Aktion West-Ost e.V. is a small non-profit umbrella organization representing four Catholic youth associations within the BDKJ framework. The organization focuses on international youth work and political education aimed at fostering encounters and exchanges between Central and Eastern Europe. Their mission centers on overcoming East-West boundaries through personal contacts and shared experiences. The website reflects this mission with content in German and English, highlighting projects, publications, and social media engagement. Technically, the website is built on the ProcessWire CMS and leverages a modern JavaScript and CSS stack including jQuery, SlickNav, Slippry, and others to provide a responsive and user-friendly experience. Hosting is managed via kasserver.com, a known hosting provider. The site demonstrates moderate performance and basic SEO and accessibility features. From a security perspective, the site uses HTTPS (assumed), but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and security hardening. No incident response or vulnerability disclosure information is published. No sensitive data exposure or vulnerable libraries were detected in the provided content. Overall, the website is professional, trustworthy, and well-aligned with its non-profit mission. However, improvements in privacy compliance, security headers, and contact transparency would enhance its security posture and user trust.

Z

Zusage

zusage.global

45

Zusage is a German-language platform dedicated to strengthening civil society, likely operating as a non-profit or advocacy organization. The website is built on WordPress and incorporates modern consent management and analytics tools such as Usercentrics and Matomo, indicating a moderate level of digital maturity. The site is accessible without any WAF or blocking mechanisms, and the content is safe for general audiences with no adult or questionable material detected. However, the absence of publicly available WHOIS data and privacy policy reduces transparency and trustworthiness to some extent. Security posture is moderate, with no detected security headers and unknown SSL configuration, suggesting room for improvement in technical security measures.

A

arbeit für alle e.V.

josefstag.de

47

The website josefstag.de represents a German non-profit initiative focused on youth social work and youth employment assistance under Catholic auspices. It serves as an informational and networking platform for the annual Josefstag event, which raises awareness and promotes youth participation in social and democratic processes. The site is affiliated with reputable Catholic organizations such as the Bundes der Deutschen Katholischen Jugend (BDKJ) and related partners. Technically, the site is built on TYPO3 CMS, uses Matomo for privacy-conscious analytics, and is hosted with INWX, a German registrar. The site demonstrates good design, accessibility, and SEO practices, with a clear cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers could be improved. Contact information is limited on the site, with no direct emails or phone numbers found, which is typical for such non-profit informational sites. Overall, the site is trustworthy, professional, and well-maintained.

B

Bund der Deutschen Katholischen Jugend (BDKJ)

generation-jetzt.de

46

Generation Jetzt! is a German non-profit youth advocacy campaign operated under the umbrella of the Bund der Deutschen Katholischen Jugend (BDKJ). The initiative focuses on promoting democratic participation and generation justice for children, adolescents, and young adults. The website serves as a platform for information dissemination, event promotion, and engagement with the target audience. Technically, the site is built on TYPO3 CMS with Bootstrap for responsive design and uses Matomo analytics configured for privacy-conscious tracking. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting its mission effectively.

K

KKV Landesverband Bayern der Katholiken in Wirtschaft und Verwaltung e.V.

kkv-bayern.de

57

KKV Landesverband Bayern der Katholiken in Wirtschaft und Verwaltung e.V. is a regional non-profit association focused on Catholic professionals in Bavaria, providing educational events, publications, and community engagement centered on social and economic issues from a Catholic perspective. The website serves as an information hub with event listings, news, and resources for members and interested parties. Technically, the site is built on the Alkacon Mercury CMS platform, uses Matomo for analytics, and integrates accessibility tools to ensure inclusivity. The site is well-structured, mobile-optimized, and implements GDPR-compliant privacy and cookie policies. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. WHOIS data aligns with the organization's identity, supporting legitimacy. Overall, the site presents a professional and trustworthy digital presence for a small non-profit organization.

The website katholische-kirche-hof.de serves as the official online presence for the Catholic parish community in Hof, Germany, affiliated with the Archdiocese of Bamberg. It provides parishioners and visitors with comprehensive information about church services, events, pastoral contacts, community groups, and news. The site targets local community members and religious followers, offering a non-profit service model focused on community engagement and spiritual support. The business operates within the government and non-profit sectors, emphasizing religious and community services.

Caritasverband Stadt- und Landkreis Hof e.V. is a medium-sized non-profit organization focused on providing social services and community support in the Hof region of Germany. Their offerings include social counseling, volunteer coordination, refugee and integration advice, family support, and care services. The organization maintains a strong regional presence and collaborates with partner entities within the Caritas network and local community institutions. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their audience. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and Matomo analytics, ensuring a responsive and user-friendly experience. Security measures include HTTPS enforcement, cookie consent mechanisms, and use of Google reCAPTCHA for form protection. However, explicit security policies and vulnerability disclosure mechanisms are not present. Overall, the website demonstrates a solid security posture with room for improvement in security headers and incident response transparency. The domain registration data aligns well with the organization's identity, reinforcing trustworthiness. Strategic recommendations include enhancing security headers, publishing a security policy, and implementing a security.txt file to improve transparency and compliance.

S

Stadt Hof

hof.de

63

Stadt Hof is the official municipal government website for the city of Hof in Bavaria, Germany. It serves residents and visitors by providing city information, public services, and tourism-related content. The website is built on TYPO3 CMS, a widely used open-source content management system favored by government entities. The site demonstrates a moderate level of digital maturity with a professional design, good mobile optimization, and clear navigation. It employs privacy-conscious analytics through a self-hosted Matomo instance and integrates Usercentrics for consent management, reflecting compliance with privacy regulations. However, explicit privacy policies and terms of service were not found in the provided content, indicating room for improvement in transparency and compliance documentation. Security posture is adequate with HTTPS enforced, but lacks visible security headers and published security policies or incident response information.

The website ssb-hoferland.de serves as the official online presence of the Seelsorgebereich Hofer Land, a Catholic church community in Germany. It provides parishioners and visitors with comprehensive information about church services, events, pastoral staff, and community life. The site targets local community members and operates as a non-profit religious information portal. The business model focuses on community engagement and service rather than commercial activities. The website maintains a consistent brand identity aligned with its religious mission and regional focus.

E

Europäische Metropolregion Nürnberg

innovationskunst.de

46

The website represents the initiative 'Innovationskunst' under the umbrella of the European Metropolitan Region Nuremberg, focusing on promoting innovation and technology in the region. It serves as a platform to showcase technological leadership, research collaborations, and career opportunities, targeting students, professionals, and companies. The site is well-positioned as a regional innovation hub with strong partnerships from industry leaders and research institutions. Technically, the site is built on TYPO3 CMS with modern frontend technologies including Bootstrap and Matomo analytics, ensuring good performance, mobile optimization, and accessibility. The use of structured data and comprehensive metadata supports SEO and content discoverability. From a security perspective, the site enforces HTTPS, employs cookie consent mechanisms, and uses encrypted email links to protect contact information. While explicit security headers are not fully evident, no critical vulnerabilities or exposed sensitive data were found. Privacy compliance is well addressed with clear policies and consent management. Overall, the website demonstrates a mature digital presence with strong business credibility and compliance posture. Strategic improvements in security headers and incident response transparency could further enhance trust and resilience.

V

Verein EMN Europäische Metropolregion Nürnberg e. V.

transform-emn.de

64

The website transform-emn.de represents the Verein EMN Europäische Metropolregion Nürnberg e. V., focusing on supporting the automotive supplier industry in the Nürnberg metropolitan region through a transformation network. The project aims to assist small and medium-sized enterprises in adapting to the mobility transition towards alternative drives, digitalization, and sustainability by offering free services such as networking, technology transfer, qualification, and new business field development. The site is well-structured, professionally designed, and optimized for SEO and accessibility, leveraging TYPO3 CMS and modern web components. Security posture is strong with HTTPS, security headers, and a cookie consent mechanism, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates a high level of business credibility and technical maturity, with a moderate level of user tracking via Google Analytics. The domain registration is consistent with the business claims, hosted by a professional provider. No critical vulnerabilities or suspicious patterns were detected.

Č

České dráhy, a.s.

ceskedrahy.cz

53

České dráhy, a.s. is the largest Czech railway carrier with a nearly 200-year tradition, providing passenger and freight transport services along with related services such as certification, testing, repairs, education, and IT solutions. The company holds a strong market position in the Czech Republic and is expanding its presence internationally. The website reflects a mature digital infrastructure built on Drupal 10, with modern web technologies and good mobile optimization. Privacy and cookie policies are implemented with GDPR compliance, and user tracking is conducted responsibly with IP anonymization. Security posture is moderate with room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and well-aligned with the company's business profile.

D

DoToho!

dotoho.pro

48

DoToho! is a Czech mentoring platform dedicated to supporting small and medium-sized enterprises (SMEs) by connecting them with experienced entrepreneurs, mentors, and experts. The platform offers a variety of services including mentoring, expert consultations, workshops, networking events, and a digital library of practical business videos. It targets SME owners and managers in the Czech Republic, aiming to foster business growth through practical knowledge sharing and community building. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content about its offerings and community testimonials. Technically, the site uses modern web technologies, integrates Google reCAPTCHA for form security, and complies with GDPR through clear privacy and cookie policies. Security posture is strong with HTTPS and no visible vulnerabilities, though some security headers could be improved. WHOIS data is privacy protected but consistent with a legitimate business domain. Overall, DoToho! presents a trustworthy, well-established platform for SME mentoring in the Czech market.

E

Emerald Technology Ventures

emerald.vc

68

Emerald Technology Ventures is a well-established venture capital firm specializing in sustainable industrial innovation. With over €1 billion in commitments and a portfolio of more than 90 companies, Emerald connects startups with corporate partners and institutional investors to accelerate green technologies. The website targets corporates, institutional investors, governments, and entrepreneurs, offering services such as CVC-as-a-Service and Emerald Sprints. The company is based in Switzerland and has a strong market position in the energy and industrial innovation sectors. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Fonts, Google Maps API, HubSpot forms, and advanced animation libraries like Lottie and GSAP. It demonstrates excellent performance, mobile optimization, accessibility, and SEO practices. Analytics and marketing tools such as Google Analytics, HubSpot, and LinkedIn Insight Tag are used with appropriate consent mechanisms. From a security perspective, the site enforces HTTPS, employs multiple security headers, uses reCAPTCHA on forms, and avoids exposing sensitive data. However, it lacks a dedicated security policy and incident response contact information, which are recommended for enhanced transparency and readiness. Privacy compliance is strong with clear privacy and cookie policies and GDPR indicators. Overall, the website presents a professional, trustworthy, and secure digital presence aligned with the company's business goals. Strategic recommendations include publishing a security policy, adding incident response contacts, and implementing a vulnerability disclosure program to further strengthen security posture and stakeholder trust.

Y

YellowMap AG

yellowmap.com

62

YellowMap AG is a German technology company specializing in GDPR-compliant mapping and geo-location solutions, offering products such as SmartMaps, FilialFinder, and Click & Collect. With over 25 years of experience, they position themselves as a trusted provider of cloud-based location services hosted in ISO 27001 certified German data centers. Their business model focuses on B2B SaaS and full-service offerings, targeting enterprises seeking privacy-conscious geo solutions. Technically, the website employs modern frameworks like Vue.js and integrates privacy-respecting analytics tools such as Matomo and Leadinfo. The site is well-designed, mobile-optimized, and provides comprehensive content and contact information. Security posture is strong with HTTPS and data privacy by design, though some improvements in security headers and incident response transparency are recommended. WHOIS data is missing, which raises some legitimacy concerns but is offset by the professional web presence and trust signals. Overall, YellowMap AG demonstrates a mature digital infrastructure and a strong commitment to privacy and security.

F

Fachstelle für katholische Kinder- und Jugendarbeit im Dekanat Coburg

bdkj-coburg.de

56

The website 'jugend-im-dekanat-coburg.de' serves as the official online presence for the Fachstelle für katholische Kinder- und Jugendarbeit im Dekanat Coburg, a regional non-profit youth pastoral organization affiliated with the Erzdiözese Bamberg in Germany. It provides comprehensive information on youth activities, events, organizational news, and support services for youth and volunteers in the Coburg and Lichtenfels regions. The site targets young people, youth workers, and volunteers involved in church-related youth work. The business model is non-commercial, focusing on community and pastoral support within the church framework. Technically, the website is built on the alkacon Mercury CMS platform, utilizing JavaScript, Matomo analytics for privacy-conscious tracking, and accessibility enhancements via the eyeAble plugin. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Hosting appears to be managed by the church's infrastructure, ensuring reliability. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. The domain registration aligns well with the organizational identity, indicating legitimacy and trustworthiness. Overall, the website is professional, trustworthy, and well-suited for its target audience. Strategic improvements could include adding security headers, publishing a security policy, and introducing a vulnerability disclosure mechanism to enhance security posture and transparency.

P

Pfarrei Evangelisch unter der Veste

heiligkreuz-coburg.de

44

The website 'heiligkreuz-coburg.de' serves as the official online presence for the Pfarrei 'Evangelisch unter der Veste', a coalition of four evangelical-lutheran congregations in Coburg, Germany. It provides community members and visitors with information about church services, events, groups, and digital communication tools such as the Churchpool app. The site is well-structured, content-rich, and targets local churchgoers and interested individuals. Technically, the site is built on Drupal 10, uses modern JavaScript libraries, and implements a GDPR-compliant cookie consent mechanism via Klaro. The site is mobile-optimized and accessible, with good SEO practices.

The website kircheinbayern.de serves as an official informational platform for the Catholic Church in Bavaria, operated under the auspices of the Bistum Würzburg. It provides comprehensive information about dioceses, church programs, and community engagement, targeting the general public interested in religious content. The site is built on TYPO3 CMS with modern frontend technologies and integrates privacy-respecting analytics and consent management, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response details are absent. Overall, the site demonstrates a high level of professionalism and trustworthiness appropriate for a government/non-profit religious institution.

K

Kinder- und Jugendkulturzentrum „Alte Spinnerei am Bahnhof“ Kulmbach

alte-spinnerei.info

58

The Kinder- und Jugendkulturzentrum „Alte Spinnerei am Bahnhof“ in Kulmbach is a local non-profit youth cultural center offering a wide range of activities and events for children, teenagers, and young adults aged 6 to 27. Their services include open operation hours, creative workshops, sports activities, holiday programs, and a mobile alcohol-free cocktail bar called SOFTBAR. The center emphasizes community engagement and youth participation. Technically, the website is built on TYPO3 CMS with Bootstrap for responsive design, providing a good user experience and accessibility. Security posture is moderate with no visible security headers and no explicit cookie consent mechanism, but no critical vulnerabilities were detected. WHOIS data is unavailable, likely due to privacy protection, but the website content and contact details appear legitimate and consistent with a local government or community organization. Overall, the site is professional, trustworthy, and well-targeted to its audience.

S

Stadtwerke Kulmbach

stadtwerke-kulmbach.de

40

Stadtwerke Kulmbach is a municipal utility provider serving the Kulmbach region in Germany, offering essential services such as electricity, natural gas, water supply, wastewater management, and public recreational facilities like swimming pools and an ice stadium. The company positions itself as customer-oriented and innovative, targeting local residents and businesses. The website reflects a medium-sized regional utility with a focus on community engagement and service transparency through news updates and social media presence. Technically, the website is built on the TYPO3 CMS platform, utilizing jQuery and related plugins, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS usage but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and safe for general audiences.

V

Volkshochschulen Kulmbach Stadt und Land

vhs-kulmbachstadtundland.de

47

Volkshochschulen Kulmbach Stadt und Land operates as a regional adult education provider offering a broad range of courses in areas such as politics, culture, health, languages, and digital learning. The website serves as a comprehensive portal for course information, registration, and institutional details, targeting adult learners in the Kulmbach district of Germany. The organization holds recognized certifications such as EFQM 2023, enhancing its credibility in the education sector. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including jQuery and FontAwesome, with accessibility tools like eyeAble and a robust cookie consent mechanism via Klaro. The site is mobile-optimized, SEO-friendly, and provides a good user experience with clear navigation and relevant content. From a security perspective, the site enforces HTTPS and employs cookie consent for privacy compliance. However, it lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or suspicious activities were detected, and the domain registration data aligns well with the website content, indicating legitimacy. Overall, the website presents a trustworthy, professional, and user-friendly platform for adult education services with good privacy compliance and moderate security posture. Strategic improvements in security headers and incident response transparency could further enhance its security maturity.

R

REVILAK® Kartografien Bender Verlagsgesellschaft mbH

map-one.eu

43

map|ONE is a digital interactive city map platform primarily serving German municipalities, citizens, tourists, and local businesses. The service offers detailed digital city maps with routing, measuring, and information tools, positioning itself as a niche GIS and mapping solution provider. The website is professionally designed with good mobile optimization and clear navigation, targeting a general audience interested in city information and navigation. The business is represented by REVILAK® Kartografien Bender Verlagsgesellschaft mbH, a small-sized company based in Germany, with partnerships including TOPO graphics Geoinformationssysteme GmbH.

B

Bayerisches Staatsministerium für Ernährung, Landwirtschaft, Forsten und Tourismus

genussorte.bayern

71

Genussorte Bayern is a government-supported platform dedicated to promoting the culinary heritage and regional specialties of Bavaria. It serves as an informational and promotional resource for residents and tourists interested in exploring Bavarian food culture, events, and local producers. The website is professionally designed using WordPress and Elementor, featuring interactive maps, event calendars, video galleries, and recipe collections. It is backed by the Bavarian State Ministry for Food, Agriculture, Forestry and Tourism, lending it strong credibility and trustworthiness. Technically, the site employs a modern WordPress ecosystem with various plugins for event management, accessibility, and cookie consent. The site is well-optimized for mobile devices and accessibility, with good SEO practices and performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though HTTP security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive privacy policy and cookie management system that aligns with GDPR requirements. The WHOIS data is privacy protected, which is typical for government-affiliated sites, and does not detract from the site's legitimacy. Overall, Genussorte Bayern presents a low-risk profile with a strong business and security posture, making it a reliable source for Bavarian culinary tourism information.

F

Frankenwald Tourismus

frankenwald-tourismus.de

46

Frankenwald Tourismus operates a regional tourism website focused on promoting the Frankenwald area in northern Bavaria, Germany. The site provides information on outdoor activities, accommodations, events, and regional highlights, targeting tourists interested in nature and active vacations. The business model centers on destination marketing and visitor engagement, with booking and event promotion services integrated. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery and Fancybox, and is hosted via Schlund Technologies. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security posture is adequate with HTTPS enabled, but lacks visible security headers and explicit privacy or cookie policies. Contact information is available primarily via phone numbers linked in news articles and implied contact pages. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

G

Greatnet.de GmbH

greatnet.de

54

Greatnet.de GmbH is a small German webhosting provider specializing in affordable domain registration and webspace services with servers located in Germany. Their offerings target small to medium businesses and individuals seeking professional web presence solutions. The website presents clear pricing and service descriptions, emphasizing .de domains and webhosting packages with included email and FTP services. Technically, the site uses basic HTML, CSS, and JavaScript without advanced frameworks or CMS detected. Performance and mobile optimization are moderate to basic. Security posture is average with cookie consent implemented but lacking advanced security headers and explicit HTTPS confirmation in the provided data. WHOIS data is limited due to DENIC privacy policies but shows consistent domain status and nameservers aligned with the business domain. Overall, the site is professional, trustworthy, and safe with no adult or questionable content detected.

C

contrast. nicolefleischer

contrastagentur.de

38

Contrastagentur.de is a small creative advertising agency based in Pegnitz, Germany, led by Nicole Fleischer. The company offers services including advertising, flyers, posters, logos, and web design, targeting businesses and individuals seeking creative marketing solutions. The website content is minimal but clearly communicates the core services and contact information. The market position appears to be local and small-scale with a focus on creative advertising. Technically, the website is built with basic HTML and CSS without modern frameworks or CMS detected. Hosting is provided by greatnet.de as indicated by the nameservers. The site lacks mobile optimization and accessibility features, and no analytics or tracking technologies are present. Performance is likely moderate given the simple structure. From a security perspective, the site does not show evidence of HTTPS usage or security headers, which is a significant concern. No privacy or cookie policies are present, indicating non-compliance with GDPR requirements. No incident response or security policies are disclosed. The WHOIS data is consistent with the website domain and business type, supporting legitimacy. Overall, the security posture is weak, and privacy compliance is lacking. The overall risk is moderate due to the lack of security best practices and privacy compliance, but no critical vulnerabilities or malicious content were detected. Strategic improvements in security, privacy policies, and technical modernization are recommended to enhance trust and compliance.

B

Benediktinerabtei Maria Laach

maria-laach.de

61

The website maria-laach.de represents the Benedictine Abbey Maria Laach, a religious and cultural institution in Germany. The site primarily serves as an informational platform about the abbey, its history, and visitor services. The business model is non-commercial, targeting general visitors and those interested in religious and cultural heritage. The website uses WordPress with Elementor and WP Rocket, indicating a modern CMS and optimization tools. Performance and mobile optimization are adequate, though accessibility features are basic. Security posture is moderate but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No WAF or blocking mechanisms were detected, and the site content is accessible and safe for general audiences.

H

hostix GmbH

hostix.de

44

hostix GmbH operates the website hostix.de, providing affordable webhosting services including domain registration, PHP and MySQL hosting, SSD-based webspace, and free SSL certificates. The company targets private and commercial customers primarily in Germany, leveraging its own server infrastructure located at multiple German data centers including the DECIX internet exchange in Frankfurt. The website is professionally designed with clear navigation and relevant content, supporting a good user experience and trustworthiness. Technically, the site uses standard web technologies such as PHP, MySQL, and JavaScript, with moderate performance and basic mobile optimization. Security practices include automatic SSL certificate provisioning and HTTPS support, though explicit security headers and incident response contacts are not evident. Privacy compliance is supported by a comprehensive privacy policy, but lacks a visible cookie consent mechanism. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and consistency.

B

Babiel GmbH

babieldns.de

67

Babiel GmbH is a German digital transformation and digital experience company with over 30 years of expertise, operating as part of the CONET Group. The company specializes in strategic consulting and implementation of digital business experiences, serving enterprises and public institutions. Their service portfolio includes digital advisory, customer and citizen experience management, data intelligence, AI, software development, and cloud services. The website is built on Drupal 11, featuring modern consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS and cookie consent mechanisms, though the absence of a published security policy and incident response details indicates room for improvement. The missing WHOIS registration data for the domain raises concerns about domain legitimacy, though the website content and business information appear professional and trustworthy. Overall, Babiel GmbH presents as a credible and established digital services provider with a solid online presence but should address domain registration transparency and enhance security disclosures.

B

Bundesarbeitsgemeinschaft der Freien Wohlfahrtspflege (BAGFW) e. V.

bagfw.de

50

The Bundesarbeitsgemeinschaft der Freien Wohlfahrtspflege (BAGFW) e. V. is a well-established German non-profit umbrella organization representing the leading free welfare associations. The website clearly communicates its mission to secure and develop social work through collaborative initiatives and social policy activities. It targets social welfare organizations, policymakers, and the general public interested in social welfare in Germany. The organization has a strong market position as a key coordinating body in the social welfare sector. Technically, the website is built on TYPO3 CMS with a modern frontend stack including Bootstrap, jQuery, and accessibility features. It is mobile-optimized and provides a good user experience with clear navigation and relevant content. The site uses HTTPS and implements a cookie consent mechanism compliant with GDPR, employing Piwik/Matomo for analytics. From a security perspective, the site enforces HTTPS and cookie consent but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the organization's identity and history, supporting legitimacy and trustworthiness. Overall, the website is professional, secure, and compliant with privacy regulations, serving its audience effectively. Strategic improvements in security headers and published security policies could further enhance its security posture.

D

Diakonie Katastrophenhilfe

diakonie-katastrophenhilfe.de

65

Diakonie Katastrophenhilfe is a well-established German non-profit humanitarian aid organization with over 70 years of experience supporting people affected by natural disasters, war, and displacement worldwide. The organization operates numerous projects globally, focusing on disaster relief, reconstruction, and preventive measures. Their website reflects a strong commitment to transparency, featuring recognized certifications such as the DZI-Spendensiegel and partnerships with reputable networks like Brot für die Welt and Act Alliance. The target audience includes donors, churches, NGOs, and the general public interested in humanitarian aid. Technically, the website is built on TYPO3 CMS and employs modern web technologies including Google Tag Manager for analytics, Sentry for error monitoring, and Usercentrics for consent management. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Performance is moderate, with good mobile responsiveness and clear navigation. From a security perspective, the site enforces HTTPS and uses consent management to comply with GDPR. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the organization's identity, showing no privacy protection and reputable name servers, supporting the domain's legitimacy. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable platform for donors and stakeholders. Strategic improvements could include publishing detailed security policies and incident response information to enhance security posture and stakeholder confidence.

B

Brot für die Welt

brot-fuer-die-welt.de

65

Brot für die Welt is a well-established German non-profit organization focused on global development aid, working with local partners in over 80 countries. The website reflects a mature digital presence built on TYPO3 CMS, featuring multilingual support, clear donation pathways, and educational resources. The organization demonstrates strong transparency and trust signals, including the DZI donation seal and detailed project information. Technically, the site uses modern frameworks and consent management tools, ensuring GDPR compliance and a good user experience across devices. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers could be enhanced. Overall, the site is professional, trustworthy, and aligned with the organization's mission and audience.

D

digitalfabriX GmbH

digitalfabrix.de

69

digitalfabriX GmbH is a German-based company specializing in digital solutions for public administrations, municipalities, and government entities. The company offers a range of services including digital transformation consulting, custom software development, process automation, and digital future strategies. With over 20 years of experience and more than 1000 public sector customers, digitalfabriX holds a strong market position in the government technology sector. Their website reflects a professional and consistent brand image targeting public sector clients. Technically, the website is built on the Umbraco CMS platform and leverages modern web technologies such as jQuery, Bootstrap, and Matomo analytics. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Cookie consent and privacy compliance mechanisms are well implemented, reflecting GDPR adherence. The site uses HTTPS with excellent SSL configuration, though security headers could be improved. From a security perspective, the website shows good practices including HTTPS enforcement, anti-CSRF tokens in forms, and no visible vulnerabilities or exposed sensitive data. However, there is no explicit security policy or incident response information published, and no vulnerability disclosure or security.txt file is found. The domain WHOIS data aligns well with the website content, indicating legitimacy and trustworthiness. Overall, the website is professional, secure, and compliant with privacy regulations, serving a specialized niche in public sector digitalization. Strategic improvements in security headers and transparency around security policies could further enhance trust and security posture.

T

Therme Erding

therme-erding.de

60

Therme Erding operates the world's largest thermal spa near Munich, Germany, offering a wide range of leisure and wellness services including wave pools, numerous water slides, exotic thermal areas, and sauna worlds. The website reflects a well-established hospitality business targeting families and tourists seeking relaxation and entertainment. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates third-party services such as Cookiebot for consent management and Google Tag Manager for analytics and marketing. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks published privacy and security policies, which are recommended for compliance and trust. Overall, the website is professional and trustworthy with room for improvement in privacy transparency and security disclosures.

N

NOSTALGIE

nostalgie-radio.de

49

NOSTALGIE is a well-established German radio station specializing in nostalgic music from the 60s to the 90s, targeting German-speaking adults who enjoy classic hits. The website offers live streaming, podcasts, event promotions, and a dedicated mobile app, positioning itself as a prominent media brand in Germany's radio broadcasting sector. The business model revolves around digital and traditional radio broadcasting supplemented by advertising and promotional events. Technically, the site is built on Drupal 10, leveraging modern analytics and consent management tools, with good mobile optimization and moderate performance. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response policies are absent. Overall, the website is professional, trustworthy, and compliant with GDPR regulations, with clear contact channels and social media presence.

D

Deutscher Rollstuhl-Sportverband (DRS) e.V.

rollstuhlbasketball.de

37

The website rollstuhlbasketball.de serves as the official information portal for wheelchair basketball in Germany, operated by the Deutscher Rollstuhl-Sportverband (DRS) e.V. It provides comprehensive information about the sport, including news, event schedules, competition details, and national team updates. The site targets both people with disabilities and the general public interested in wheelchair basketball, positioning itself as a key national resource in this niche sports sector. The business model is non-profit and community-focused, emphasizing promotion and support of wheelchair basketball activities in Germany. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and specialized sports plugins like SportsPress and Genius Sports widgets. The site is hosted on servers associated with kasserver.com and uses HTTPS with good SSL configuration. The design is responsive and accessible, with good SEO optimization and structured data implementation enhancing search visibility. From a security perspective, the site employs HTTPS and uses CAPTCHA on contact forms to mitigate spam. While explicit security headers are not fully confirmed, no critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent and supports the legitimacy of the domain and organization. Privacy compliance is well addressed with a comprehensive privacy and cookie policy, including GDPR considerations. Overall, the website demonstrates a mature digital presence with good content quality, technical implementation, and security posture. It effectively serves its community and maintains trustworthiness. Recommendations include enhancing security headers, continuous plugin and core updates, and possibly adding explicit contact emails and phone numbers for improved transparency and user support.

N

Niedersächsischer Basketballverband e.V.

nbv-basketball.de

59

The Niedersächsischer Basketballverband e.V. is a regional sports association dedicated to basketball activities in Niedersachsen, Germany. The website serves as an official portal providing news, event schedules, educational and registration portals for basketball players, clubs, and fans within the region. It positions itself as a key information hub for basketball in Niedersachsen, operating as a non-profit entity. The site is primarily targeted at the local basketball community and stakeholders involved in the sport's development and organization. Technically, the website is built on the AmphiCMS platform, featuring responsive design and accessibility features. It integrates a consent management platform to comply with cookie regulations and includes social media links to official channels, enhancing community engagement. Security-wise, the site uses HTTPS and implements basic consent mechanisms but lacks explicit security headers and detailed privacy or security policies. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. Overall, the website is professional, trustworthy, and well-structured but would benefit from enhanced privacy and security documentation to meet higher compliance standards.