Security Directory

A

AgrarBündnis

agrarbuendnis.de

55

AgrarBündnis is a German non-profit alliance comprising 26 independent organizations focused on agriculture, environmental protection, and socio-economic issues in farming. The website serves as an information hub, sharing projects, discussion papers, and press releases relevant to sustainable agriculture and environmental advocacy. The organization positions itself as an established and credible entity within its sector, targeting stakeholders interested in sustainable and socially responsible agriculture. Technically, the website is built on TYPO3 CMS, leveraging modern frontend libraries such as jQuery, Bootstrap, and FontAwesome. Hosting is managed via cyon.ch, a reputable Swiss hosting provider. The site demonstrates moderate performance and good mobile optimization, though accessibility features could be enhanced. SEO is basic but functional, with proper meta tags and canonical URLs. From a security perspective, the site uses HTTPS with a good SSL configuration and implements a cookie consent mechanism compliant with GDPR. However, explicit security headers are not detected, and no public security or incident response policies are available. Google Analytics is used with IP anonymization, indicating moderate user tracking. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website is professional, trustworthy, and safe for general audiences. The absence of contact emails and phone numbers on the homepage slightly reduces direct user engagement potential. Strategic improvements in security headers, accessibility, and public security policies would enhance the site's security posture and compliance.

A

Aktion Agrar

aktion-agrar.de

54

Aktion Agrar is a German non-profit organization dedicated to advocating for sustainable, ecological, and socially responsible agriculture. The website serves as a platform to disseminate information, campaign materials, and newsletters to supporters and the general public interested in agricultural reform. The organization targets a general audience including farmers, activists, and environmentally conscious individuals. Technically, the website is built on WordPress, leveraging popular plugins such as Yoast SEO Premium for search engine optimization and Matomo for privacy-focused analytics. The site demonstrates good mobile optimization and a professional design, contributing to a positive user experience. Security-wise, the site uses HTTPS and asynchronous script loading but lacks explicit security headers and detailed security or privacy policies, which are areas for improvement. The WHOIS data is minimal and lacks detailed registrant information, which slightly impacts the trustworthiness assessment but does not negate the legitimacy of the organization based on website content and technical setup.

B

Bund der Deutschen Landjugend e.V.

landjugend.de

59

The Bund der Deutschen Landjugend e.V. (BDL) is Germany's largest youth association focused on empowering young people in rural areas through projects, education, and community engagement. The organization has a strong market position with approximately 100,000 members and a clear mission to sustain rural living and youth participation. The website reflects a professional and modern digital presence, leveraging Astro framework and React components, with good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates high trustworthiness and compliance with GDPR, supported by transparent contact information and organizational details.

E

Evangelische Akademie für Land und Jugend e.V.

kilr.de

52

The Evangelische Akademie für Land und Jugend e.V. is a small non-profit educational organization based in Germany, focusing on youth, rural communities, and church-related educational programs. Their website presents a professional and well-structured digital presence, offering tailored educational events, workshops, and an online library. The organization maintains active social media channels and provides clear contact information, enhancing trust and engagement with their target audience. Technically, the website is built on WordPress with modern plugins and themes, ensuring good performance and mobile optimization. Security measures include HTTPS enforcement and a comprehensive cookie consent mechanism via Borlabs Cookie, supporting GDPR compliance. However, explicit security policies and incident response information are not publicly available, which could be improved. Overall, the site reflects a mature digital infrastructure suitable for its educational mission, with a strong emphasis on privacy and user experience.

The Deutsche Vernetzungsstelle Ländliche Räume (DVS) is an official German government information portal focused on rural development and the EU's Common Agricultural Policy. It provides comprehensive resources including funding information, news, events, and job listings targeted at stakeholders in agriculture, environment, and regional planning. The platform is affiliated with the Bundesanstalt für Landwirtschaft und Ernährung (BLE), ensuring authoritative content and trustworthiness. Technically, the website is built on TYPO3 CMS, uses Matomo for privacy-conscious analytics, and implements strong privacy and cookie consent mechanisms. The site is well-structured, mobile-optimized, and accessible, reflecting a mature digital presence. Security posture is solid with HTTPS and basic security headers, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

V

Verband der Bildungszentren im ländlichen Raum (VBLR)

jung-laendlich-vielfaeltig.de

63

The website jung-laendlich-vielfaeltig.de represents a non-profit educational project led by the Verband der Bildungszentren im ländlichen Raum (VBLR) focused on youth political education and extremism prevention in rural Germany. The project collaborates with schools and the federal 'Respekt Coaches' program, supported by the German Federal Ministry for Family Affairs. The site provides detailed information about the project, its goals, offerings, and contact persons, targeting young people and educators in rural areas. Technically, the site is built on the RoSys® Truevision CMS with Turbolinks, featuring responsive design and moderate performance. Security posture is adequate with HTTPS usage but lacks visible security headers and explicit cookie consent mechanisms. Contact information is clearly presented, but no social media or analytics scripts are detected, indicating a privacy-conscious approach. WHOIS data aligns well with the business purpose, showing no suspicious patterns. Overall, the site is professional, trustworthy, and content-rich, serving its educational mission effectively.

E

esistfreitag

esistfreitag.store

67

esistfreitag is a small German e-commerce business specializing in urban-themed gifts and lifestyle products such as prints, posters, pins, postcards, greeting cards, city maps, magazines, fashion, and notebooks. The website is built on the Shopify platform, leveraging modern web technologies and integrations with marketing and analytics tools like Facebook Pixel and Mailchimp. The site is well-structured, mobile-optimized, and provides comprehensive privacy and cookie policies compliant with GDPR. Security posture is good with HTTPS enforced and domain registration consistent with business claims, although additional security headers and a formal security policy could enhance trust. Overall, the website presents a professional and trustworthy online retail presence targeting a general audience interested in urban lifestyle products.

T

Tapehouse

tapehouse-productions.de

58

Tapehouse is a small media agency based in Cologne and Bonn, Germany, specializing in social media marketing, image films, and audio recordings. The company targets small and medium-sized enterprises in the local region, offering full-service media solutions. The website is built on the Wix platform, leveraging Wix Thunderbolt framework and integrates Google Analytics and Google Tag Manager for visitor tracking. The technical infrastructure is modern and mobile-optimized, though SEO and accessibility features are basic. Security posture is adequate with HTTPS enabled and some script-based security hardening, but lacks explicit security headers and formal policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve transparency and compliance.

Kinderkrippe St. Augustin Coburg operates a website primarily serving as an informational portal for a local childcare facility in Coburg, Germany. The site is currently under reconstruction, offering limited content but includes essential features such as a cookie consent banner and links to privacy and imprint pages. The target audience is parents and guardians seeking childcare services. Technically, the website employs legacy JavaScript libraries like jQuery 1.7.2, integrates Matomo analytics for visitor tracking, and uses Google reCaptcha for bot protection. Hosting appears to be managed via internet1.de, with a CMS likely based on Alfresco. Security posture is moderate with HTTPS enforced and cookie consent mechanisms in place; however, the absence of modern security headers and use of outdated libraries present potential risks. Privacy compliance is addressed through a clear cookie banner and privacy policy, though no terms of service or security policy pages are found. Overall, the website is functional but basic, with room for modernization and enhanced security.

K

KiTa St. Augustin Coburg

kindergarten-coburg.de

58

KiTa St. Augustin Coburg is a local childcare provider in Coburg, Germany, offering services including Kinderkrippe, Kindergarten, and Vorschule with a focus on pedagogical care and education in a family-centered environment. The website is professionally designed, targeting families seeking trusted childcare services. Technically, the site uses OpenCms with Apollo theme, integrates Matomo analytics for privacy-conscious tracking, and is hosted on servers indicated by the domain's nameservers. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS and cookie consent implemented, but lacks some security headers and incident response information. Overall, the site is trustworthy and compliant with GDPR, with clear contact details and no suspicious content.

Schloss Tutzing operates as a conference and seminar venue under the Evangelische Akademie Tutzing brand, offering event hosting, guest accommodations, and cultural activities primarily in Germany. The website targets professionals and organizations seeking a historic and inspiring location for meetings and workshops. The business model centers on hospitality and educational services with a medium-sized market presence. Technically, the site is built on WordPress 6.0 with a modern theme and SEO plugin, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, though improvements in security headers and incident response transparency are recommended. Overall, the site is professional and trustworthy with no critical security issues detected.

P

Pfarrei St. Martin weismain

stmartin-weismain.de

10

The website represents the Catholic parish St. Martin in Weismain, Germany, serving as an informational portal for parishioners and visitors. It provides details about church services, staff, committees, sacraments, and upcoming events, positioning itself as a local community and religious resource. The site targets local residents and church members, operating as a non-profit religious organization with a small organizational size. Technically, the website is built on the alkacon Mercury CMS platform, utilizing JavaScript, OpenStreetMap for location services, and Matomo for analytics. The hosting is managed via rzone.de nameservers. The site demonstrates good mobile optimization, accessibility features, and SEO practices, with moderate performance. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with a comprehensive privacy policy and cookie banner. Overall, the website is trustworthy, professionally maintained, and safe for general audiences. Strategic improvements could focus on enhancing security headers and publishing security policies to further strengthen the security posture.

P

Pfarrei St. Heinrich und Kunigunde Burgkunstadt

pfarrei-burgkunstadt.de

59

Pfarrei St. Heinrich und Kunigunde Burgkunstadt is a local parish church serving the community in Burgkunstadt, Germany. The website provides comprehensive information about religious services, sacraments, community news, and events, targeting local parishioners and visitors. It is part of the Erzbistum Bamberg diocese network and collaborates with nearby parishes. The site is well-structured, accessible, and includes GDPR-compliant privacy and cookie policies. Contact information is clearly presented, supporting community engagement. Technically, the website is built on the Alkacon Mercury CMS platform, using modern web technologies including JavaScript, Bootstrap, and Matomo analytics for privacy-conscious tracking. The site is mobile-optimized and includes accessibility features such as the eyeAble plugin. Hosting is provided by internet1.de, with DNS configured accordingly. Performance is moderate, with good SEO and accessibility practices. From a security perspective, the site uses HTTPS (assumed from canonical URLs and external scripts), employs cookie consent mechanisms, and avoids exposing sensitive data. However, explicit security headers are not visible in the provided data, and no incident response or security policy pages are found. The site does not show signs of vulnerabilities or malicious content. The WHOIS data indicates a consistent and legitimate domain registration appropriate for a local parish. Overall, the website demonstrates a solid digital presence for a small non-profit religious organization, balancing user experience, privacy, and accessibility. Strategic improvements could include enhancing security headers, publishing a security policy, and formalizing incident response contacts to strengthen trust and compliance.

P

Pfarrei St. Michael Mainroth

pfarrei-mainroth.de

10

Pfarrei St. Michael Mainroth is a small, non-profit Catholic parish serving the local community in Germany. The website provides comprehensive information about church services, parish teams, community groups, and events, targeting parish members and local residents. The business model focuses on religious and community services with a long historical background dating back to 1308. Technically, the website is built on the Alkacon Mercury CMS platform, uses Matomo for analytics, and integrates accessibility features and cookie consent mechanisms, reflecting a moderate to good digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies are not explicitly presented. Overall, the site is trustworthy, well-structured, and compliant with GDPR requirements, making it a reliable resource for its audience.

The website ulf-lichtenfels.de presents itself as a deal aggregator primarily featuring affiliate product listings from Amazon across various consumer categories such as electronics, home & kitchen, beauty, clothing, and toys. The domain is currently marked as for sale, indicating it may not be an active business entity but rather a parked domain monetized through affiliate marketing. The site is designed with a modern aesthetic using Google Fonts and responsive layouts, providing a good user experience for deal seekers. However, it lacks fundamental business and compliance information such as privacy policies, contact details, and terms of service. Technically, the site employs standard web technologies including HTML5, CSS3, and JavaScript with asynchronous fetch calls for search and tracking. It uses affiliate tracking mechanisms with delayed link activation to mitigate bot traffic. Despite these, there is no visible HTTPS enforcement or security headers in the provided data, which weakens the security posture. The absence of WHOIS registration data and the domain's for-sale status raise concerns about legitimacy and trustworthiness. From a security perspective, the site shows minimal implementation of best practices. The lack of privacy and cookie policies, no contact or incident response information, and missing security headers represent compliance and security gaps. The affiliate marketing model is evident but without transparency or user data protection assurances. Overall, the risk level is moderate to high due to these factors. Strategically, the site should prioritize establishing clear business identity, implementing HTTPS and security headers, publishing privacy and cookie policies, and providing contact and incident response information to improve trust and compliance. These steps will enhance user confidence and reduce potential legal and security risks.

E

Evangelisch-Lutherischer Dekanatsbezirk Michelau

dekanat-michelau.de

10

The Evangelisch-Lutherischer Dekanatsbezirk Michelau is a regional religious non-profit organization serving 20 church communities in the Obermain, Itz, and Rodach regions of Germany. The website provides comprehensive information about their religious services, community events, pastoral care, and educational offerings. The organization targets local community members, families, and individuals seeking spiritual support and church-related activities. The site is well-branded, consistent, and professionally maintained, reflecting a trusted regional institution. Technically, the website is built on Drupal 10 CMS with Bootstrap for responsive design and Klaro for GDPR-compliant cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. No advanced security headers were detected, but HTTPS is used, and no vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with clear policies and consent mechanisms. Security posture is adequate but could be improved by adding explicit security policies, incident response contacts, and security.txt files. No advertising or tracking services are used, indicating a privacy-conscious approach. Overall, the website is safe, trustworthy, and suitable for its community-focused mission.

Lebensfenster.de is a German non-profit website operated by the Internetseelsorge of the Archdiocese of Bamberg, providing spiritual guidance, counseling, and social support services primarily to the general public seeking pastoral care. The website is well-structured, professionally designed, and offers comprehensive content in German, including spiritual impulses, counseling contacts, and information on social issues. It maintains strong affiliations with official church and social service organizations, enhancing its credibility and trustworthiness. Technically, the site employs modern web technologies such as Bootstrap, jQuery, JWPlayer, and Matomo analytics, hosted on a German hosting provider with secure HTTPS connections. Privacy compliance is well addressed through a detailed cookie consent mechanism and GDPR-aligned privacy policy. Security posture is solid with HTTPS, reCAPTCHA, and privacy-respecting analytics, though some security headers could be improved. Overall, the site presents a low-risk profile with no detected vulnerabilities or suspicious content.

Ö

Ökumenische Kur- und Urlauberseelsorge Bad Staffelstein

kurseelsorge-bad-staffelstein.de

10

The Ökumenische Kur- und Urlauberseelsorge Bad Staffelstein website serves as a digital platform for spiritual care and community engagement in Bad Staffelstein, Germany. It provides detailed event information, pastoral contacts, and resources for visitors and locals interested in ecumenical services and cultural activities. The site is positioned as a small non-profit entity focused on local community support and spiritual well-being. Technically, the website is built on the Alkacon Mercury CMS platform, utilizing modern web technologies including JavaScript and Matomo analytics for privacy-conscious user tracking. The site demonstrates good mobile optimization and excellent accessibility features, ensuring broad usability. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers and incident response policies are not evident, suggesting areas for improvement. No critical vulnerabilities or suspicious activities were detected. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic enhancements in security policies and technical optimizations could further strengthen its posture and user trust.

G

Gesundheitseinrichtungen des Bezirks Oberfranken (GeBO)

gebo-med.de

47

Gesundheitseinrichtungen des Bezirks Oberfranken (GeBO) is a regional healthcare provider in Germany specializing in psychiatric, psychosomatic, and somatic medical services. The organization operates multiple clinical and care facilities across Oberfranken, offering comprehensive healthcare, rehabilitation, and educational services including nursing training. The website is built on TYPO3 CMS with a professional design and clear navigation, targeting patients, healthcare professionals, and prospective employees. Technically, the site uses modern frameworks and privacy-conscious analytics (Matomo with cookies disabled), hosted likely via Deutsche Telekom domains. Security posture is adequate with HTTPS enabled but lacks explicit security headers and published privacy/cookie policies, representing compliance gaps. Contact information is detailed and trustworthy, supporting business credibility. Overall, the site is well-positioned in its market with good digital maturity but should improve privacy and security disclosures to enhance compliance and trust.

D

DPSG Bad Staffelstein Stamm Andechs-Rothenau

dpsg-badstaffelstein.de

52

DPSG Bad Staffelstein is a local non-profit scouting organization in Germany, providing youth scouting activities and community engagement. The website serves as an information hub for members and the local community, featuring news, event calendars, and details about scouting stages and campsites. The site is built on WordPress with a modern tech stack including Bootstrap and jQuery, and it demonstrates good digital maturity with mobile optimization and cookie consent compliance. Security posture is solid with HTTPS and cookie management, though some security headers and incident response details are absent. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

Caritasverband für den Landkreis Lichtenfels e.V. is a regional non-profit organization providing a wide range of social services including child and youth welfare, family support, senior care, and integration assistance. The website reflects a well-structured and professionally maintained digital presence, targeting local communities in Germany. The organization leverages modern web technologies such as Bootstrap, jQuery, and Matomo analytics, ensuring a balance between functionality and privacy compliance. Security measures include HTTPS, cookie consent management, and use of Google reCAPTCHA to protect forms. However, there is room for improvement in implementing security headers and explicit incident response policies. Overall, the website is trustworthy, accessible, and compliant with GDPR requirements, supporting the organization's mission effectively.

R

Regens Wagner Burgkunstadt

regens-wagner-burgkunstadt.de

49

Regens Wagner Burgkunstadt is a medium-sized non-profit organization based in Germany that provides comprehensive social services for people with disabilities. Their offerings include housing, education, employment, open help, leisure activities, day care, accompanying services, care, and pastoral care. The website reflects a well-structured and professionally maintained digital presence, leveraging auctores CMS and common web technologies such as jQuery and Bootstrap. The site is mobile-optimized and accessible, with clear navigation and relevant content for its target audience. From a security perspective, the website employs HTTPS with good SSL configuration and includes CSRF tokens in forms, indicating attention to basic security practices. However, it lacks several important security headers and does not provide explicit incident response or vulnerability disclosure information. Privacy compliance is supported by a comprehensive GDPR-aligned privacy policy, though no explicit cookie consent mechanism is observed. Contact information is clearly presented, including phone numbers and a company email address, enhancing business credibility. Overall, the website is trustworthy and safe, with no adult or explicit content detected. The domain registration data aligns well with the website's content and business purpose, supporting legitimacy. Strategic improvements in security headers, incident response transparency, and cookie consent would further enhance the site's security posture and compliance. The organization maintains active social media channels on Facebook, YouTube, and Instagram, supporting community engagement and outreach.

B

Basilika Vierzehnheiligen

vierzehnheiligen.de

59

Basilika Vierzehnheiligen is a religious and cultural institution located in Bad Staffelstein, Germany. The website serves as an official portal providing comprehensive information about church services, events, visitor information, and historical context. It targets pilgrims, local community members, and visitors interested in the basilica and its activities. The business model is non-profit, focusing on cultural and religious service provision. The site maintains a strong regional presence as a religious landmark with a consistent and professional brand image. Technically, the website is built on the Alkacon Mercury CMS platform, utilizing JavaScript, Matomo analytics for privacy-conscious tracking, and OpenStreetMap for location services. The site is mobile-optimized, accessible, and moderately performant. It integrates accessibility features and provides a cookie consent mechanism compliant with GDPR. From a security perspective, the site enforces HTTPS and employs cookie consent for external content. However, it lacks explicit security policy documentation and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is minimal but consistent with the website's legitimacy. Overall, the site demonstrates a good security posture with room for improvement in transparency and security policy publication. The overall risk assessment is low, with recommendations to enhance security documentation, implement security headers, and publish incident response information to strengthen trust and compliance.

The website steinach-rodach-main.de serves as the official online presence of the Catholic parish Schwürbitz, located in the Lichtenfels-Obermain pastoral area in Germany. It provides parishioners and visitors with comprehensive information about church services, community events, staff, and sacraments. The site targets local community members and those interested in parish activities, operating as a non-profit religious community service platform. The content is well-organized, professionally presented, and primarily in German, reflecting its local audience focus. Technically, the website employs a modern technology stack including Bootstrap for responsive design, jQuery, Font Awesome, and specialized plugins like FancyBox and Revolution Slider for enhanced user experience. It uses FlexiWeb CMS inferred from AJAX glossary features and is hosted on servers associated with internet1.de. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance characteristics. From a security perspective, the site enforces HTTPS, uses Google reCAPTCHA for bot protection, and implements a cookie consent mechanism compliant with GDPR. Matomo analytics is used with anonymous tracking fallback to respect user privacy. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and could be improved. No vulnerabilities or exposed sensitive data were found in the analyzed content. Overall, the website demonstrates a solid security posture and good privacy compliance, with clear contact information and trust indicators such as official email addresses and imprint pages. The domain registration details align with the website content, indicating legitimacy and trustworthiness. Strategic recommendations include enhancing security headers, ensuring CSRF protection on forms, and publishing a dedicated security policy to further strengthen trust and compliance.

The website for Kath. Pfarramt St. Kilian serves as the official online presence of the Catholic parish in Bad Staffelstein, Germany. It provides parishioners and visitors with comprehensive information about church services, sacraments, community groups, staff, events, and contact details. The site is positioned as a local religious community portal under the Archdiocese of Bamberg, targeting local residents and church members. The business model is non-profit, focusing on community engagement and religious service information. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Font Awesome, and specialized plugins like Revolution Slider and JWPlayer. It uses Matomo analytics with privacy-conscious configurations and Google reCAPTCHA for bot protection. The site is mobile optimized and uses a CMS likely based on FlexiWeb, with hosting provided by internet1.de. Performance is moderate with good SEO and basic accessibility features. From a security perspective, the site enforces HTTPS and implements a GDPR-compliant cookie consent mechanism. While some security headers are not explicitly detected, the site follows best practices such as anonymized analytics fallback and bot protection. No vulnerabilities or exposed sensitive data were found. However, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It effectively serves its community purpose with clear contact information and consistent branding. Strategic recommendations include enhancing security headers, publishing security policies, and adding a vulnerability disclosure channel to strengthen security posture and trust.

E

Evangelisch-Lutherische Kirche in Bayern

vernetzte-kirche.de

44

Vernetzte Kirche & Intranet is a specialized IT department within the Evangelisch-Lutherische Kirche in Bayern, focusing on developing the church's intranet and supporting digital presence for church communities in Bavaria. Their offerings include sample websites, event calendars, training, and individual web projects, targeting church institutions and members. The website is professionally designed using Drupal 10, with good mobile optimization and accessibility. Privacy compliance is well addressed with a clear privacy policy and cookie consent management. Security posture is solid with HTTPS and anti-bot measures, though some security headers and policies could be improved. Overall, the site reflects a trustworthy and professional governmental/non-profit entity with a clear mission and audience.

C

Churchpool GmbH

churchpool.com

58

Churchpool GmbH operates a digital platform focused on religious communities, offering a mobile app that connects local and global faith groups. The website presents a well-structured, multilingual interface emphasizing community engagement features such as news, groups, chat, and event management. The business targets church members and religious organizations primarily in Germany, positioning itself as a niche community app provider. Technically, the site uses standard web technologies including Bootstrap and jQuery, with moderate performance and good mobile optimization. However, there is no evidence of advanced CMS or hosting details. Security posture is limited by lack of visible HTTPS enforcement and missing security headers, which should be addressed to improve trust and compliance. Privacy and cookie policies are present, indicating awareness of GDPR requirements, but no explicit incident response or security policy pages are found. WHOIS data is unavailable, reducing domain trustworthiness, though the website content and footer copyright suggest a legitimate small business entity. Overall, the site is functional and professional but would benefit from enhanced security measures and transparency.

V

Vernetzte Kirche

evangelische-termine.de

51

Evangelische Termine is a specialized event calendar platform serving the Evangelical Lutheran Church community in Bavaria, Germany. It offers a searchable calendar of church-related events, location-based event discovery, and user login functionality for event submissions. The platform is supported by the Vernetzte Kirche organization and promotes mobile applications for iPhone and Android to enhance accessibility. The website content is well-structured, professionally designed, and consistent with its non-profit religious mission. Technically, the site uses a modern tech stack including Bootstrap 5, jQuery, and FontAwesome, hosted on a provider associated with the domain's nameservers. The site is mobile optimized and provides basic accessibility features. However, there is room for improvement in SEO and security headers implementation. The login form uses secure POST methods, but no advanced security policies or vulnerability disclosures are present. From a security perspective, the site shows a moderate security posture with no visible critical vulnerabilities or exposed sensitive data. The absence of security headers and cookie consent mechanisms are notable gaps. Privacy compliance is partially met with a privacy policy page but lacks cookie consent and detailed GDPR indicators. The domain WHOIS data aligns well with the website's purpose and shows no suspicious patterns, supporting a high legitimacy score. Overall, Evangelische Termine is a trustworthy, well-maintained platform with a clear community focus. Strategic improvements in security headers, privacy compliance, and transparency around incident response would enhance its security posture and user trust.

The website represents the Catholic Deanery of Bayreuth, a regional religious institution providing comprehensive information about church services, community institutions, counseling centers, and news relevant to the local Catholic community. It serves as an official communication platform under the Archdiocese of Bamberg, targeting residents and parishioners in Bayreuth and surrounding areas. The site is well-structured with clear navigation and a professional design consistent with its religious and community-oriented mission. Technically, the website employs a modern technology stack including Bootstrap, jQuery, and Matomo analytics, hosted on a German provider with secure HTTPS connections. Privacy compliance is well addressed through a detailed cookie consent mechanism and a comprehensive privacy policy in German, aligned with GDPR requirements. Security posture is good with HTTPS and bot protection via Google reCAPTCHA, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected, and the site maintains high trustworthiness through official contact information and partner links.

S

Schlosskirchenmusik Bayreuth

schlosskirchenmusik-bayreuth.de

60

Schlosskirchenmusik Bayreuth is a small non-profit organization dedicated to church music at the Schlosskirche in Bayreuth, Germany. It organizes liturgical music, concerts, and provides training for part-time church musicians. The website reflects a well-structured community-focused entity with clear contact information and event listings. Technically, the site uses the Alkacon Mercury CMS, integrates Matomo for privacy-conscious analytics, and includes accessibility features via the EyeAble plugin. The site is hosted on German infrastructure with HTTPS enforced, ensuring secure communications. Security posture is good but could be enhanced with additional HTTP security headers and formal security policies. Privacy compliance is strong with a clear cookie consent mechanism and a comprehensive privacy policy. Overall, the site presents a trustworthy and professional image suitable for its community and non-profit mission.

T

TelefonSeelsorge Ostoberfranken

telefonseelsorge-ostoberfranken.de

47

TelefonSeelsorge Ostoberfranken is a well-established non-profit organization founded in 1969, providing free crisis counseling services primarily via telephone, online, and local in-person support. The website serves as an informational and access portal for these services, targeting individuals in emotional or psychological distress within the Ostoberfranken region of Germany. The organization is supported financially by the Seelsorge-Stiftung Oberfranken, enhancing its credibility and trustworthiness. Technically, the website is built on Drupal 9, leveraging Bootstrap and FontAwesome for responsive and accessible design. Hosting is provided by hosteurope.de, a reputable provider. The site is mobile-optimized and offers a clear navigation structure, although some SEO and accessibility features could be improved. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, which are recommended for compliance with EU regulations. No incident response or security policies are published, and no vulnerability disclosure information is available. The WHOIS data shows a domain age consistent with the organization's founding date, supporting legitimacy, though registrant details are minimal. Overall, the website is professional, trustworthy, and serves its non-profit mission effectively. Strategic improvements in security headers, privacy compliance, and transparency around security policies would enhance its posture and user trust.

F

Fachstelle für katholische Kinder- und Jugendarbeit im Dekanat Bayreuth / BDKJ-Regionalverband Bayreuth

jugend-im-dekanat-bayreuth.de

60

The website represents the Fachstelle für katholische Kinder- und Jugendarbeit im Dekanat Bayreuth and the BDKJ-Regionalverband Bayreuth, focusing on youth pastoral work and church-related youth services in the Bayreuth region of Germany. It provides comprehensive information on events, youth programs, prevention of sexual violence, and support for volunteers. The site is affiliated with the Erzbistum Bamberg, indicating a strong institutional backing. Technically, the site is built on the Alkacon Mercury CMS platform, uses Matomo for analytics, and integrates accessibility tools such as Eye-Able, demonstrating a commitment to inclusivity and privacy. The website is well-structured, mobile-optimized, and GDPR compliant with clear cookie consent mechanisms. Security posture is good with HTTPS enforced, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site is trustworthy, professional, and serves its non-profit mission effectively.

Pfarrei St. Franziskus Eckersdorf is a small non-profit Catholic parish serving the local community in Eckersdorf, Germany. The website provides parishioners and visitors with information about church services, events, contact details, and parish groups. It is positioned as a local religious community hub with a focus on spiritual and community services. The site is well-branded, consistent, and offers good content quality tailored to its audience. Technically, the website uses a modern tech stack including Bootstrap, jQuery, and Matomo analytics, hosted on internet1.de with proper HTTPS configuration. The site is mobile optimized and provides basic accessibility features. Security posture is good with HTTPS, cookie consent, and reCAPTCHA integration, though some security headers could be improved. Privacy compliance is strong with a clear cookie banner and privacy policy in German, aligned with GDPR requirements. Contact information is clearly presented with verified email and phone details. Overall, the website is trustworthy, professional, and suitable for its non-profit religious purpose.

The website st-hedwig-bayreuth.de represents the Catholic parish St. Hedwig Bayreuth, providing detailed information about religious services, community events, and pastoral activities. It serves a local audience in Bayreuth, Germany, focusing on parishioners and community members. The site is part of the Diocese of Bamberg's digital presence and offers resources such as event calendars, sacraments information, and kindergarten services. Technically, the website uses a modern tech stack including Bootstrap, jQuery, and JW Player, hosted on servers associated with internet1.de. The site is mobile-optimized and includes accessibility features, though these could be enhanced further. Security-wise, HTTPS is enforced, and cookie consent mechanisms comply with GDPR, though some security headers could be improved. No critical vulnerabilities or suspicious patterns were detected. Overall, the site is professional, trustworthy, and well-aligned with its non-profit religious mission.

The website nepomuk-bayreuth.de serves as the official online presence for the Catholic parish offices of St. Johannes Nepomuk and Heilig Geist in Bayreuth, Germany. It provides parishioners and local community members with information about church services, events, staff, and contact details. The site is positioned as a local religious institution focused on community engagement and spiritual services. The business model is non-profit, serving the religious and social needs of its audience. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, Font Awesome, and specialized plugins such as Revolution Slider and JWPlayer. It uses a CMS likely based on FlexiWeb and is hosted on infrastructure associated with kirche-bamberg.de. The site is mobile-optimized and includes accessibility features, though these could be enhanced. Performance is moderate, with room for improvement in SEO and accessibility. From a security perspective, the site enforces HTTPS and uses a cookie consent banner with granular user controls. It integrates Google reCAPTCHA for bot protection and Matomo analytics with options for anonymous tracking, demonstrating a commitment to privacy compliance. However, it lacks advanced security headers like Content-Security-Policy and does not publish a security.txt or vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professional, with clear contact information and links to official Catholic organizations. It contains no adult or questionable content and is suitable for a general audience. Recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving SEO and accessibility to further strengthen its digital maturity and security posture.

F

For Future Bündnis

for-future-buendnis.de

59

For Future Bündnis is a German non-profit organization focused on climate protection activism, operating a network of over 50 local groups across Germany. The website serves as a hub for networking, event organization, and knowledge sharing, targeting individuals interested in climate activism. The organization holds a reputable position in the non-profit sector, evidenced by certifications such as the Phineo Wirkt-Siegel and support from the German Environment Agency (UBA). The business model centers on community engagement and empowerment rather than commercial activities. Technically, the website is built on WordPress using the Divi theme, enhanced with plugins for event management, cookie consent, and analytics. The infrastructure is modern and well-maintained, with good mobile optimization and SEO practices. Hosting is managed via UI-DNS, and the site employs HTTPS with strong SSL configuration, ensuring secure communications. Security posture is solid, with appropriate security headers, privacy-respecting analytics via Matomo, and a comprehensive cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a dedicated security policy or incident response contact, which could be improved to enhance trust and compliance. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It effectively supports the organization's mission while maintaining a secure and user-friendly online presence. Strategic recommendations include publishing explicit security policies, enhancing accessibility, and considering a vulnerability disclosure policy to further strengthen security culture.

C

CURACON GmbH Wirtschaftsprüfungsgesellschaft

curacon.com

54

CURACON GmbH Wirtschaftsprüfungsgesellschaft is a well-established German auditing and consulting firm specializing in the healthcare, social economy, public sector, and church sectors. With over 500 employees across 14 locations and a client base exceeding 2,500, CURACON offers comprehensive services including auditing, corporate consulting, tax, and legal advice. The company is positioned among the top 20 auditing firms in Germany, supported by a strong brand and multiple subsidiaries that complement its service portfolio. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and integrating marketing and analytics tools such as HubSpot and Microsoft Clarity. The site is well-optimized for SEO, mobile-friendly, and provides a good user experience with clear navigation and professional design. Security practices include HTTPS enforcement and a robust cookie consent mechanism, although explicit security headers and a published security policy are absent. The security posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is strong, with GDPR-aligned policies and consent management. The WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the website reflects a mature digital presence with high trustworthiness and professionalism. Strategic recommendations include enhancing security headers, publishing a formal security policy and incident response contacts, and continuous monitoring of third-party scripts to maintain security and compliance standards.

I

InnoCoding GmbH

innocoding.com

60

InnoCoding GmbH is a specialized digitalization and funding consultancy company based in Münster, Germany, focusing on medium-sized enterprises. Their services encompass web and app development, funding application support, and data science solutions. The company positions itself as a full-service provider with a strong emphasis on quality, transparency, and customer proximity. The website reflects a professional and modern digital presence, leveraging TYPO3 CMS and integrating advanced analytics and marketing tools such as Google Analytics, Matomo, and Microsoft Clarity. Security practices include HTTPS enforcement and cookie consent mechanisms, although some security headers could be improved. The absence of WHOIS registration data is a notable concern for domain legitimacy verification but does not detract from the professional appearance and trust signals on the website. Overall, InnoCoding GmbH presents a credible and trustworthy business with a solid technical infrastructure and compliance posture.

S

SALESDOCk s.r.o.

salesdock.com

68

SALESDOCk s.r.o. is a professional B2B sales consulting company specializing in building and optimizing sales departments for tech startups, scaleups, and large tech companies. Their market position is strong, supported by over 400 clients and positive testimonials, with key services including sales academies focused on prospecting, go-to-market strategies, sales processes, and value-based selling. The company operates primarily in the technology sector and is based in the Czech Republic. Technically, the website is built on Webflow CMS and integrates modern marketing and analytics tools such as Google Tag Manager, Microsoft Clarity, Pardot, and ZoomInfo pixels, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced, cookie consent mechanisms, and use of reCAPTCHA, though explicit security headers and policies could be improved. The WHOIS data is unavailable, which slightly reduces trust but the professional content and business registration details support legitimacy. Overall, the website is well-designed, user-friendly, and compliant with privacy regulations, making it a credible and trustworthy online presence for the company.

D

Digitální architekti

digitalniarchitekti.cz

58

Digitální architekti is a Czech Republic based small technology company specializing in professional data and web analytics services. Their website presents a professional image with consistent branding and clear messaging targeting businesses seeking to leverage data insights. The technical infrastructure is built on WordPress CMS with modern plugins and integrations such as Google Tag Manager and Cloudflare DNS, indicating a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and published policies. Overall, the website is well designed, mobile optimized, and SEO friendly, supporting a positive user experience and trustworthiness.

I

Institut Duhovka

duhovkainstitut.cz

59

Institut Duhovka operates the Duhovka Montessori Teacher Training Institute, providing internationally recognized AMS Montessori diploma programs and online courses focused on Early Childhood and Elementary education. The institute is positioned as a reputable educational provider with accreditations from AMS and MACTE, targeting educators, directors, and parents seeking Montessori certification. The website demonstrates a professional and consistent brand presence with comprehensive content and clear navigation. Technically, the site uses modern tracking and analytics tools such as Google Tag Manager and Facebook Pixel, with cookie consent mechanisms ensuring GDPR compliance. Security posture is generally strong with HTTPS enforced, though the absence of explicit security headers suggests room for improvement. The lack of WHOIS registrant data is a notable concern for domain legitimacy verification, but the overall trust signals from accreditations, testimonials, and contact transparency mitigate this risk. Strategic recommendations include enhancing security headers, publishing explicit security policies, and verifying domain registration details to strengthen trust and compliance.

D

Duhovka Group, a.s.

duhovka-prace.cz

52

Duhovka Group, a.s. operates a bilingual Czech-English Montessori educational system in Prague, offering services from preschool through gymnasium and teacher training. The website focuses on career opportunities within the group and presents a professional, well-structured digital presence. The organization is medium-sized with over 500 children enrolled and multiple subsidiary institutions. Technically, the site uses modern web technologies including jQuery, Google Tag Manager, and a comprehensive cookie consent mechanism, indicating a mature digital infrastructure. Security posture is moderate with good privacy compliance but lacks explicit security policies or incident response contacts. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the website content and business information are consistent and professional. Overall, the site is safe, well-optimized, and trustworthy for its target audience.

M

Mateřská škola Duhovka s.r.o.

duhovkaskolka.cz

52

Mateřská škola Duhovka s.r.o. operates a private Czech-English Montessori preschool and nursery in Prague, serving children aged 2 to 6 years. The institution emphasizes Montessori pedagogy with accredited teachers and bilingual education, positioning itself as a reputable provider in the early childhood education sector in Prague. The website reflects a professional and consistent brand image with comprehensive information about programs, staff, and educational philosophy. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, and Facebook Pixel, with a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response contacts could be improved. The absence of WHOIS data reduces domain trustworthiness but the overall business credibility remains high due to transparent contact details and positive user testimonials. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and adding terms of service for completeness.

D

DUHOVKA GROUP, a.s.

duhovkagroup.cz

52

Duhovka Group is a well-established Czech private educational organization founded in 2008, offering a comprehensive bilingual Montessori education system in Prague. Their services span from nurseries and kindergartens to elementary schools, an eight-year gymnasium, and a Montessori institute for teacher training. The website reflects a professional and consistent brand image with clear communication of their educational philosophy and offerings. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, and cookie consent mechanisms, ensuring a good user experience and compliance with GDPR regulations. Security posture is moderate with HTTPS usage and cookie consent but lacks explicit security headers and detailed security policies. The absence of WHOIS data reduces domain transparency and trustworthiness, though the business presence and content quality mitigate this concern. Overall, the site is well-positioned in the education sector with strong digital maturity but could improve security and domain registration transparency.

D

Deutscher Landwirtschaftsverlag GmbH

dlv.de

67

Deutscher Landwirtschaftsverlag GmbH operates a comprehensive media platform focused on agriculture and forestry sectors in Germany. The website serves as a hub for their media brands, subscription services, events, and digital content. It targets professionals and enthusiasts in the agricultural and forestry industries, offering a broad portfolio of magazines, special issues, and digital media. Technically, the site is built on Drupal 10 with modern frontend technologies like Tailwind CSS and Swiper.js, ensuring good mobile optimization and user experience. Security posture is solid with HTTPS, cookie consent mechanisms, and no visible vulnerabilities, though explicit security headers could be improved. Privacy compliance is strong with clear GDPR-aligned policies and consent management. Overall, the site reflects a professional, trustworthy media company with a strong digital presence and good business credibility.

The website bydleni.com is a minimal placeholder page that directs users to bydleni.cz, likely related to housing or real estate services in the Czech Republic. The domain is well-established, created in 2002, and registered with a reputable registrar. However, the website itself lacks substantive content, metadata, or any business or contact information, indicating it is not a fully developed site but rather a redirect or landing page. From a technical perspective, the site shows no evidence of modern web technologies, frameworks, or CMS usage. There are no scripts, forms, or tracking mechanisms detected. The hosting provider is linked to the registrar, but no advanced security configurations such as DNSSEC or security headers are present. The site’s performance and mobile optimization cannot be fully assessed due to minimal content but are likely poor. Security posture is weak due to the absence of HTTPS confirmation in the provided data, lack of security headers, and no visible privacy or cookie policies. The domain registration is legitimate and consistent with the website’s minimal claims, but the lack of security best practices and compliance documentation is a concern. No vulnerabilities or malicious indicators were found, but the site’s minimalism limits comprehensive security evaluation. Overall, the website presents a low-risk profile due to its minimal content and lack of data collection but scores low on content quality, technical implementation, and privacy compliance. Strategic recommendations include enhancing website content, implementing HTTPS and security headers, publishing privacy and cookie policies, and providing clear contact and business information to improve trust and compliance.

S

Space X-Chimp

mycyberuniverse.com

69

My Cyber Universe is a specialized technology blog founded in 2013 by Arthur Gareginyan, focusing on web development, cybersecurity, and software engineering topics. The site serves a niche audience of developers and tech enthusiasts, providing educational content, tutorials, and insights. It is supported by the Space X-Chimp team, which also manages related digital properties and an online store. The website demonstrates a consistent brand identity and maintains active content updates, reflecting a stable presence in its niche. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, and integrates third-party services such as Google Analytics, Google Adsense, and Disqus for comments. The site is well-structured with responsive design elements, good SEO practices, and moderate performance. However, it lacks some advanced security headers and a cookie consent mechanism, which are important for compliance and user trust. From a security perspective, the site uses HTTPS with a strong SSL configuration, and no obvious vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a notable anomaly that reduces overall trustworthiness, although the website content and business information appear legitimate. Privacy policies and terms of use are present and comprehensive, but cookie policy and incident response information are missing. Overall, the website presents a low-risk profile with good content quality and technical implementation but would benefit from improved privacy compliance and enhanced security headers. The lack of WHOIS transparency is a concern that should be addressed to improve trust and legitimacy perception.