Security Directory

V

Verlag Haus Altenberg GmbH

verlag-agentur-altenberg.de

52

Verlag Haus Altenberg GmbH operates a professional German-language e-commerce platform specializing in Christian and youth work related products including books, religious articles, and music. The website targets Christian multipliers, associations, individual companies, and dioceses primarily within Germany. The business model focuses on online retail combined with agency and publishing services, positioning itself as a niche provider in the religious and youth work sector. The site demonstrates consistent branding and good content quality with clear navigation and mobile optimization. Technically, the platform uses eZ Publish CMS with modern libraries such as jQuery and Bootstrap, and employs Matomo analytics for privacy-respecting user tracking. Security posture is moderate with room for improvement in HTTP security headers and explicit incident response policies. Privacy compliance is strong with GDPR-aligned cookie consent mechanisms and comprehensive privacy policies. Overall, the website is trustworthy and professionally maintained, though contact information is not explicitly visible on the main pages.

Eberspächer Hydraulik is a medium-sized manufacturing company based in Germany specializing in hydraulic systems and components. The website presents a professional and consistent brand image targeting industrial and infrastructure clients. The technical infrastructure relies on Bootstrap 3 and Font Awesome, indicating a moderately modern but not cutting-edge technology stack. The website is accessible and mobile-optimized with good user experience but lacks advanced SEO and accessibility features. Security posture is moderate with no detected security headers or explicit SSL configuration details. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is limited to a contact form without explicit emails or phone numbers. Overall, the website is functional and professional but would benefit from enhanced security, privacy, and compliance features.

F

Fenster Koch Gmbh & Co.KG

fenster-koch.de

43

Fenster Koch Gmbh & Co.KG is a well-established German company specializing in manufacturing and servicing windows, doors, sliding doors, and related glass constructions. With over 70 years of experience, the company positions itself as a traditional yet innovative provider offering comprehensive project handling from consultation to implementation. Their market focus includes private homeowners and commercial clients seeking high-quality, secure, and design-oriented building products. The website reflects a professional and consistent brand image with detailed project references and certifications such as the ift logo, enhancing trustworthiness. Technically, the website employs modern JavaScript libraries including jQuery, Lottie animations, and ScrollMagic for enhanced user experience. It integrates Google Analytics and Tag Manager for visitor tracking and marketing insights. Hosting is managed via kasserver.com, and the site is mobile-optimized with good SEO practices. However, explicit CMS or framework usage is not detected. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site uses HTTPS and includes secure contact forms with privacy consent checkboxes. No explicit security headers or incident response policies are published, which could be improved. No vulnerabilities or exposed sensitive data were detected in the HTML content. Cookie consent is implemented, supporting GDPR compliance. WHOIS data aligns well with the website's claims, indicating a trustworthy domain registration. Overall, Fenster Koch's website demonstrates a solid digital presence with good business credibility and privacy compliance. Strategic enhancements in security headers, incident response transparency, and accessibility would further strengthen their posture. The site is safe for general audiences and free from adult or questionable content.

B

Brunata Minol

minol.de

57

Brunata Minol is a leading German service provider specializing in metering, IoT, and energy management solutions tailored for the housing and real estate sectors. Their offerings include heating cost billing, water and heat meters, smoke detector services, E-Mobility solutions, and energy certificates, positioning them as a comprehensive partner for landlords, property managers, and tenants. The company operates under the Minol-ZENNER-Gruppe umbrella, indicating a strong corporate backing and market presence. Technically, the website is built on the Contao Open Source CMS platform, leveraging modern JavaScript libraries such as jQuery and jQuery UI. The site is well-structured, mobile-optimized, and incorporates accessibility and SEO best practices. Hosting is managed via Managed IP, consistent with enterprise-grade infrastructure. The site employs HTTPS with good SSL configuration and includes cookie consent mechanisms aligned with GDPR requirements. From a security perspective, the website demonstrates solid practices including secure forms, no visible vulnerabilities, and privacy compliance. However, it lacks explicit security policy and incident response pages, which could enhance transparency and trust. The WHOIS data aligns well with the website's claims, showing consistent domain registration and no suspicious patterns. Overall, the site reflects a professional, trustworthy, and mature digital presence suitable for its target audience in the energy and real estate sectors. Strategic improvements could focus on publishing dedicated security and incident response information to further strengthen security posture and user confidence.

F

Fliesen Lang GmbH & Co KG

fliesen-lang-gmbh.de

56

Fliesen Lang GmbH & Co KG is a small, established tile laying specialist operating in Kirchheim unter Teck, Germany. The company offers a range of services including consultation, planning, and installation of tiles and natural stone for residential and commercial properties. Their website reflects a professional local business with clear service descriptions and contact information. Technically, the site is built on the IONOS MyWebsite CMS platform, uses modern web technologies like HTML5, CSS3, and JavaScript libraries such as jQuery and swipebox, and is hosted by IONOS with HTTPS enabled, ensuring secure connections. However, the site lacks privacy and cookie policies, security headers, and incident response information, which are important for compliance and security posture. Overall, the website is functional, well-branded, and trustworthy but could improve in privacy compliance and security best practices.

Wenzelburger KG is a medium-sized German company specializing in the production and supply of high-quality construction materials including transport concrete, aggregates such as gravel, sand, and crushed stone, as well as logistics and earthworks services. With over 60 years of regional presence, the company serves primarily B2B clients in the construction and infrastructure sectors. The website reflects a professional and consistent brand image, providing comprehensive contact information and business details. Technically, the site is built on WordPress using popular plugins and themes, hosted by Hetzner Online GmbH, and demonstrates moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and well-maintained, though improvements in security and privacy practices are recommended.

F

Festool

festool.de

65

Festool GmbH is a well-established German manufacturer and retailer of high-quality power tools and system solutions targeted at professional craftsmen. Founded in 1925, the company holds a strong market position as a premium brand in the manufacturing and retail sectors. Their website reflects a professional and comprehensive digital presence, offering detailed product information, customer support, and e-commerce capabilities. The target audience is clearly professional tradespeople seeking reliable and tailored power tool solutions. Technically, the website employs modern technologies such as Vue.js, Google Tag Manager, and Usercentrics for consent management, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities. Privacy compliance is robust, with clear GDPR-aligned privacy and cookie policies and a consent mechanism. Business credibility is high, supported by transparent contact information, legal company data, and consistent branding. Overall, the website demonstrates a mature and secure digital infrastructure suitable for a large enterprise in the manufacturing industry.

S

Stadtwerke Nürtingen GmbH

sw-nuertingen.de

61

Stadtwerke Nürtingen GmbH is a regional utility company providing essential services including electricity, gas, water, district heating, and highspeed internet to the Nürtingen area in Germany. The company emphasizes regional economic support and customer-centric service, offering digital tools such as mobile apps and online customer portals to enhance user experience. Their market position is that of a trusted regional energy and telecommunications provider with a medium-sized operational footprint. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, with modern JavaScript libraries and a responsive design ensuring good performance and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved and incident response information is not publicly detailed. Overall, the website is professional, trustworthy, and compliant with GDPR, serving a general audience without any adult or questionable content.

M

Männer GmbH & Co. KG

maenner-containerdienst.de

56

Männer GmbH & Co. KG is a certified German waste disposal and logistics company specializing in container services and tailored waste management solutions. The company targets commercial clients requiring professional disposal and transport of various waste types. Their website reflects a regional market position with clear service offerings and contact information. Technically, the site is built on Joomla CMS with modern frameworks like Bootstrap and includes consent management and Matomo analytics, indicating a moderate level of digital maturity. Security posture is good with HTTPS and CSRF protections, though additional security headers and explicit policies could enhance it. Overall, the site is professional, GDPR compliant, and trustworthy with no blocking or suspicious indicators.

A

AWG Mode

awg-mode.de

69

AWG Mode is a German-based e-commerce retailer specializing in affordable fashion for the entire family, including women, men, and children, as well as home decoration, traditional costumes, and sportswear. The company positions itself as a provider of quality yet budget-friendly clothing with fast shipping and a focus on top brands. The website is professionally designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content tailored to family consumers. Technically, the site leverages modern technologies including Shopware CMS, Cookiebot for consent management, Google Analytics 4, and various marketing and tracking tools, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies in German, reflecting GDPR adherence. However, contact information and explicit security policies are not readily found, which could be improved. Overall, the domain registration data aligns with the business claims, supporting legitimacy and trustworthiness.

Volksbank Mittlerer Neckar eG is a regional cooperative bank in Germany focused on providing banking and financial services to private customers. The website targets private customers and emphasizes the strength of the cooperative banking group. The site uses modern web technologies including Angular and Angular Material, with performance monitoring via Dynatrace. The technical infrastructure appears solid with HTTPS enabled and a professional design, although some security best practices such as security headers and explicit privacy policies are missing. No signs of blocking or WAF interference were detected, allowing full content access. Overall, the site is professional and trustworthy but could improve transparency and compliance by adding privacy, cookie, and security policies.

H

hagebau Gebrüder Ott Baustoffe GmbH

hagebau-ott.de

67

hagebau Gebrüder Ott Baustoffe GmbH is a well-established regional building materials retailer in Germany, operating since 1928 with locations in Kirchheim and Nürtingen. The company offers a broad range of construction and building supplies, supported by digital tools such as configurators and integrated data interfaces to optimize customer ordering processes. The website reflects a mature digital presence with modern technologies including SAP Hybris Commerce, Usercentrics for consent management, and Piwik PRO for analytics. Security posture is solid with HTTPS and consent mechanisms in place, though some security headers could be improved. Privacy compliance is partially addressed via a consent management platform, but explicit privacy and terms of service pages were not found in the provided content. Overall, the site is professional, trustworthy, and well-optimized for SEO and user experience.

K

Kreissparkasse Esslingen-Nürtingen

ksk-es.de

69

Kreissparkasse Esslingen-Nürtingen operates a comprehensive online banking platform serving both private and corporate customers in Germany. The website offers a wide range of financial products including checking accounts, credit cards, loans, insurance, investment products, and real estate services. The bank positions itself as a trusted regional financial partner with a strong local presence and multiple customer engagement channels including phone, chat, and social media. The site is professionally designed with clear navigation and mobile optimization, reflecting a mature digital infrastructure. Technically, the website leverages modern web technologies and likely uses Adobe Experience Manager as its CMS. It employs JavaScript, CSS, and React components for dynamic content delivery. The site is well-optimized for SEO and accessibility, with a moderate performance profile. Security measures include HTTPS enforcement, session timeout warnings, and cookie consent management, although explicit security headers could be further verified. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring comprehensive privacy and cookie policies aligned with GDPR requirements. However, no explicit security policy or incident response contact information was found. The domain WHOIS data is consistent with the website's branding and location, supporting legitimacy and trustworthiness. Overall, the website demonstrates a high level of professionalism, security, and user experience suitable for a major regional bank. Strategic recommendations include enhancing transparency around security policies, publishing vulnerability disclosure information, and verifying security headers to further strengthen the security posture.

F

Power tools for professional craftsmen | FLEX - FLEX

flex-tools.com

47

The website www.flex-tools.com presents a professional online presence for FLEX, a company specializing in power tools and accessories targeted at professional craftsmen. The site highlights system solutions for renovation, metalworking, automotive, and natural stone work, indicating a focus on manufacturing and industrial sectors. The technical infrastructure leverages modern web technologies such as Next.js and React, with integrations for analytics and consent management, reflecting a moderate level of digital maturity. However, the absence of WHOIS registration data and lack of visible privacy and cookie policies indicate gaps in transparency and compliance. Security posture is moderate with no detected blocking mechanisms or WAF, but missing security headers and unclear SSL configuration suggest room for improvement. Overall, the site is functional and professional but would benefit from enhanced compliance and security measures to improve trust and risk posture.

K

KÖ8 Shopping Center Köngen

koe8.de

55

KÖ8 Shopping Center Köngen is a local retail and family activity center based in Germany, targeting general audiences with offers and events for families. The website presents a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern web technologies including service workers, Cookiebot for consent management, and responsive design, hosted on UI-DNS infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not published. Privacy compliance is good with a clear privacy policy and cookie consent dialog. Overall, the site is trustworthy and well-maintained for its business scope.

R

Romina Mineralbrunnen GmbH

romina.de

48

Romina Mineralbrunnen GmbH is a well-established mineral water bottling company based in Reutlingen-Rommelsbach, Germany, with a strong regional presence primarily in Baden-Württemberg and neighboring regions. The company produces and distributes popular mineral water brands EiszeitQuell and SilberBrunnen, operating multiple production lines and employing around 130 staff. Their business model focuses on manufacturing and regional distribution through beverage and food retail channels, including bio markets and hospitals. The website reflects a professional and consistent brand image with clear navigation and relevant content for their target audience. Technically, the website is built on WordPress using standard JavaScript libraries such as jQuery and Swiper.js. It demonstrates good mobile optimization and SEO practices, though accessibility features are basic. The site uses HTTPS with no detected blocking or WAF challenges, and includes a cookie consent mechanism compliant with GDPR requirements. Analytics tracking via Google Analytics is implemented but disabled by default pending user consent. From a security perspective, the site employs HTTPS and cookie consent best practices but lacks explicit security headers and a dedicated security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is consistent with the business claims, showing no suspicious patterns and supporting the legitimacy of the domain. Overall, Romina Mineralbrunnen GmbH presents a trustworthy and professional online presence with good compliance and security posture for its business size and sector. Recommendations include enhancing security headers, publishing a security policy, and providing incident response contacts to further strengthen trust and compliance.

B

Brändle Präzisionsteile GmbH

braendle-honen.de

52

Brändle Präzisionsteile GmbH is a specialized German manufacturing company focusing on precision machining techniques such as honing and deep hole drilling. The company targets industrial clients requiring high-quality precision parts and offers services including quality assurance and consulting. Their market position is that of a niche precision parts manufacturer with a clear B2B business model. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses common analytics and marketing tools such as Google Tag Manager, eTracker, and Cookiebot for consent management. Hosting appears to be provided by 1&1 IONOS, inferred from nameservers. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility is basic. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. However, explicit security headers like CSP or X-Frame-Options are not evident in the provided data, suggesting room for improvement. No vulnerabilities or exposed sensitive data were detected. Incident response and security policies are not publicly documented. Overall, the website presents a low-risk profile with strong privacy compliance and business credibility. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining up-to-date software to mitigate potential vulnerabilities.

L

Lions Club Nürtingen-Teck/Neuffen

lc-nttn.de

54

The Lions Club Nürtingen-Teck/Neuffen is a small, regional non-profit organization focused on social support and fundraising activities within the Nürtingen-Kirchheim/Teck area in Germany. Founded in 2004, the club engages in community service projects, primarily benefiting children, youth, and families in need. Their key fundraising events include the Lions Advent calendar and the local duck race, which support regional youth organizations and hospice services. The website reflects a consistent brand identity aligned with the international Lions Club movement and provides clear information about their mission and activities. Technically, the website is built on WordPress using common plugins and frameworks such as WPBakery Page Builder, Bootstrap, and Slider Revolution. It is served over HTTPS with a valid SSL certificate, ensuring secure connections. The site is moderately optimized for performance and mobile devices, though accessibility and SEO optimizations are basic. No advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the site lacks several best practices such as security headers and explicit incident response contacts. There is no cookie consent mechanism despite GDPR applicability, and no vulnerability disclosure or security policy pages are present. However, no critical vulnerabilities or exposed sensitive data were found. The WHOIS data is consistent with the website's claims, showing a stable and legitimate domain registration. Overall, the website is trustworthy and professional for its non-profit purpose but could improve in privacy compliance and security hardening to better protect visitors and demonstrate regulatory adherence.

L

Lions Club Nürtingen-Kirchheim/Teck

lionsclub-nuertingen-kirchheim.de

45

The Lions Club Nürtingen-Kirchheim/Teck is a local non-profit organization affiliated with the international Lions movement, focusing on community service, fundraising, and social projects in the Nürtingen-Kirchheim/Teck region of Germany. Their website provides information about their activities, supported projects, and club leadership, targeting local community members, donors, and supporters. The club operates through events such as the Entenrennen and Adventskalender, generating funds to support various social initiatives. Technically, the website is built on WordPress using popular plugins like WPBakery Page Builder, Slider Revolution, and Yoast SEO, hosted by webgo.de. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security is adequate with HTTPS enforced, but lacks advanced security headers and explicit security policies. From a security perspective, the site shows no signs of vulnerabilities or exposed sensitive data. However, it lacks a cookie consent mechanism and detailed privacy or security policies, which are important for GDPR compliance. No incident response or vulnerability disclosure information is provided. The WHOIS data aligns well with the website's claims, indicating a legitimate and consistent registration. Overall, the website is trustworthy, professionally presented, and serves its purpose well as a community non-profit portal. Strategic improvements in privacy compliance and security headers would enhance its security posture and regulatory adherence.

L

Lions Club Nürtingen-Kirchheim/Teck

lcnk.de

45

Lions Club Nürtingen-Kirchheim/Teck is a small, regionally focused non-profit organization affiliated with the international Lions movement. The club engages in charitable activities and fundraising events such as the Entenrennen and Advent calendar to support social, cultural, and educational projects locally and beyond. Their website provides comprehensive information about their mission, activities, and supported initiatives, targeting community members and donors interested in social welfare. Technically, the site is built on WordPress using common plugins like WPBakery, Slider Revolution, and Yoast SEO, hosted by webgo.de. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enforced, but lacks some security headers and cookie consent mechanisms. No forms or direct data collection are present on the homepage, reducing privacy risks. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness.

I

IITR Datenschutz GmbH

iitr.de

64

IITR Datenschutz GmbH is a German-based company specializing in data protection and information security services. They provide a range of solutions including external data protection officer services, compliance kits, audits, certifications, and online training. Their target audience includes small and medium-sized enterprises as well as larger organizations seeking cost-effective and expert data protection solutions. The company maintains a strong market position with certified products and a professional online presence supported by client testimonials and social media engagement. Technically, the website is built on Joomla CMS with Bootstrap framework, offering a responsive and well-structured user experience. Security measures include HTTPS enforcement and CAPTCHA-protected forms, though some security headers are missing. Privacy compliance is partially addressed but lacks explicit privacy and cookie policies in the visible content. WHOIS data shows no privacy protection but has an unusual domain status that warrants further verification. Overall, the website demonstrates a solid business credibility and technical maturity with room for improvement in privacy and security transparency.

Expertise AI is a technology company specializing in AI-powered conversational agents designed to enhance B2B sales and marketing efforts. Their platform offers advanced chat and voice AI solutions that engage, qualify, and enrich prospects in real time, integrating seamlessly with major CRM systems like HubSpot and Salesforce. Positioned as a leading AI chatbot solution in the HubSpot Marketplace, Expertise AI targets sales and marketing teams seeking to improve lead conversion and pipeline generation through automation and personalization. Technically, the website leverages a modern stack including React and Next.js, supported by robust analytics and performance monitoring tools such as Google Analytics, Microsoft Clarity, and DebugBear. The site demonstrates excellent design quality, mobile optimization, and SEO practices, reflecting a mature digital infrastructure. Security is well addressed with HTTPS enforcement, SOC2 Type II and GDPR compliance, and enterprise-grade encryption, although some minor compliance gaps such as the absence of a cookie consent banner were noted. The security posture is strong with no detected vulnerabilities or exposed sensitive data. However, the lack of a public vulnerability disclosure or incident response contact information suggests room for improvement in transparency and readiness. Overall, the domain appears legitimate despite privacy-protected WHOIS data, which is common for SaaS providers. The company maintains trust through certifications, customer testimonials, and a partner ecosystem. Strategically, Expertise AI is well positioned in the AI SaaS market with a comprehensive product offering and strong compliance credentials. Continued focus on privacy compliance enhancements and security transparency will further strengthen their market trust and regulatory alignment.

H

Holidu GmbH

tomas-travel.online

67

Holidu GmbH operates the Holidu Smart Destination platform, providing innovative and comprehensive destination management solutions tailored for tourism destinations and hosts. The company leverages advanced technology combined with personal service to optimize marketing and booking processes for vacation rentals and related services. Their market position is strong, supported by multiple subsidiary brands and a medium-sized operation based in Germany. Technically, the website employs modern frameworks such as React and Tailwind CSS, hosted on AWS infrastructure, with good performance and mobile optimization. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though explicit security policy documentation and incident response contacts are absent. Overall, the site is professional, trustworthy, and compliant with GDPR, with extensive analytics and marketing integrations. The domain registration data aligns well with the business claims, indicating legitimacy and consistency.

S

Stadt Bad Dürkheim

bad-duerkheim.de

65

The website www.bad-duerkheim.de serves as the official municipal portal for the city of Bad Dürkheim in Germany. It provides comprehensive information about local government services, cultural events, tourism, and citizen services. The site is well-structured and targets residents, tourists, and local businesses, positioning itself as a key information hub for the region. The business model is typical of a government entity, focusing on public service delivery and community engagement. Technically, the website is built on the Ionas4 CMS platform, utilizing modern web technologies including SystemJS, Lit Web Components, and jQuery for legacy support. The site demonstrates good mobile optimization, accessibility, and SEO practices. Hosting is managed via Telekom Domains, indicating a stable and reputable infrastructure. From a security perspective, the site enforces HTTPS with strong SSL configurations and uses integrity attributes on scripts and fonts to prevent tampering. However, it lacks explicit security headers such as Content-Security-Policy and does not publish a security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is safe, professional, and trustworthy, with minor gaps in privacy and security policy disclosures. It does not contain any adult or questionable content, making it suitable for a general audience.

W

Westfalen-Blatt

westfalen-blatt.de

59

Westfalen-Blatt is a well-established regional news media company serving the Ostwestfalen-Lippe region in Germany. The website offers comprehensive news coverage, including local events, sports, and classifieds, supported by subscription and advertising revenue models. It is part of the larger Zeitungsgruppe Münster media group, indicating a strong market position in regional media. The site is professionally designed with consistent branding and good content quality targeting a general audience in Germany.

S

Stadtverwaltung Schifferstadt

schifferstadt.de

65

The website www.schifferstadt.de serves as the official digital presence of the Stadtverwaltung Schifferstadt, the local government administration of Schifferstadt, Germany. It provides comprehensive information and services related to living, governance, culture, tourism, economy, and environmental initiatives in the city. The site targets residents, visitors, and local businesses, offering structured navigation and a broad range of municipal services. The business model is that of a government entity focused on public service delivery and community engagement. Technically, the website employs modern web technologies including AngularJS, SystemJS, and the Ionas CMS platform. It is hosted on German infrastructure with nameservers indicating regional providers. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Security is robust with HTTPS enforced and script integrity checks, although explicit security headers and policies could be enhanced. From a security and compliance perspective, the site implements a cookie consent mechanism and uses an accessibility tool (eye-able). However, it lacks explicit privacy policy, terms of service, and vulnerability disclosure pages, which are recommended for full GDPR compliance and transparency. No critical vulnerabilities or suspicious activities were detected. The WHOIS data aligns well with the website's government nature, showing consistent registration and hosting. Overall, the site is professional, trustworthy, and well-suited for its public service role. Strategic improvements include publishing comprehensive privacy and security policies, enhancing security headers, and providing incident response contacts to strengthen compliance and user trust.

S

Stadt Speyer

speyer.de

62

The website www.speyer.de is the official digital presence of the city of Speyer, Germany, serving as a comprehensive portal for tourism, culture, city services, and public information. It positions itself as a trusted source for residents and visitors, highlighting Speyer's UNESCO World Heritage status and providing rich content on local attractions, events, and services. The site targets tourists, local citizens, and cultural enthusiasts, offering multilingual support and accessible design. Technically, the site employs modern web technologies including the ionas4 CMS, SystemJS module loader, AngularJS directives, and integrates analytics tools such as Google Analytics and Matomo. It features responsive design and accessibility enhancements, including the eye-able accessibility tool and cookie consent management compliant with GDPR. Performance is moderate, with good mobile optimization and SEO practices. From a security perspective, the site enforces HTTPS and implements privacy and cookie policies with user consent mechanisms. However, it lacks explicit security headers and published incident response or vulnerability disclosure policies. No critical vulnerabilities or suspicious content were detected. The WHOIS data is minimal but consistent with a legitimate municipal domain. Overall, the website demonstrates a strong business credibility and technical maturity suitable for a government entity, with room for improvement in security policy transparency and technical security headers. The risk profile is low, with no indications of malicious activity or compliance failures.

D

Diakonisches Werk Württemberg

diakonie-wuerttemberg.de

55

Diakonisches Werk Württemberg is a large non-profit social service organization based in Germany, focusing on providing a wide range of social welfare services including disability support, health and care, youth and family assistance, migration aid, and international disaster relief. The organization holds a strong regional leadership position in Württemberg and operates with a comprehensive digital presence including a well-structured website, social media channels, and online member services. The website is built on TYPO3 CMS and integrates privacy-conscious technologies such as Matomo analytics with IP anonymization and a robust cookie consent mechanism. Security posture is solid with HTTPS enforced and secure login forms, though there is room for improvement in publishing explicit security policies and headers. Overall, the site demonstrates professionalism, trustworthiness, and compliance with GDPR requirements.

C

CURACON GmbH Wirtschaftsprüfungsgesellschaft

curacon.de

53

CURACON GmbH Wirtschaftsprüfungsgesellschaft is a large, well-established German auditing and consulting firm specializing in healthcare, social economy, public sector, and church sectors. With over 500 employees across 14 locations, it offers comprehensive services including auditing, consulting, tax, and legal advice. The company is positioned among the top 20 auditing firms in Germany and operates several subsidiaries to cover specialized areas such as IT security and interim management. The website reflects a professional and consistent brand image with rich content and clear navigation, targeting institutional clients in its sectors. Technically, the site is built on TYPO3 CMS with integrations for marketing and analytics via HubSpot and Microsoft Clarity, and it implements a robust cookie consent mechanism.

D

Der evangelische Fachverband für Teilhabe (BeB)

beb-ev.de

62

Der evangelische Fachverband für Teilhabe (BeB) is a German non-profit organization affiliated with Diakonie, dedicated to advocating for people with disabilities and mental illnesses. It represents over 600 evangelical institutions and initiatives, focusing on improving social and political conditions to promote full participation and inclusion. The website provides comprehensive information about its activities, publications, events, and membership services, targeting stakeholders in social and disability sectors. Technically, the site is built on WordPress with modern plugins and good accessibility and SEO practices. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, serving as a credible platform for its mission.

K

Katholische Nachrichten-Agentur GmbH

kna.de

56

Katholische Nachrichten-Agentur GmbH (KNA) is a specialized German news agency focusing on religious, social, cultural, and ethical topics. Founded in 1952 and operating under the parent company PubliKath GmbH, KNA offers a range of news services including full news feeds, thematic services, and image services. The website is professionally designed, content-rich, and targets media professionals, religious communities, and the general public interested in religion and social issues. The business model revolves around subscription-based news delivery and specialized thematic news services. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies such as jQuery and bxSlider for interactive content. The site is mobile optimized with good SEO practices, though accessibility features are basic. Performance is moderate, with no critical technical issues detected. Hosting details are not explicitly identified. From a security perspective, the site enforces HTTPS with excellent SSL configuration but lacks visible security headers and public security policies. No vulnerabilities or exposed sensitive data were found. Privacy compliance is generally good with a comprehensive privacy policy and terms of service, but the absence of a cookie consent mechanism is a notable gap. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy, professionally maintained, and aligned with its business purpose. Strategic improvements include implementing cookie consent, enhancing security headers, and publishing incident response information to strengthen compliance and security posture.

D

Deutschsprachige Provinz der Don Bosco Schwestern

donboscoschwestern.net

63

The website represents the Deutschsprachige Provinz der Don Bosco Schwestern, a Catholic women's religious order active since 1922 in Germany and Austria. Their mission focuses on education, accompaniment, and housing for children and youth. The organization maintains a professional online presence with clear branding, comprehensive content, and active social media channels. Technically, the site uses a modern CMS (siteswift), jQuery, and various UI libraries, with a cookie consent manager ensuring GDPR compliance. Security posture is moderate with CSRF protections and consent mechanisms but lacks visible HTTP security headers and published security policies. WHOIS data is unavailable, which slightly reduces domain trust but does not detract from the site's professionalism. Overall, the site is a credible, well-maintained digital asset for a non-profit religious organization.

S

Salesianer Don Boscos

donbosco.at

60

Salesianer Don Boscos is a well-established non-profit Catholic religious order operating in Austria since 1903, focusing on social and youth services including education, pastoral care, and community support. The organization maintains a professional and content-rich website that effectively communicates its mission and services to socially disadvantaged youth and the general public. The site is supported by a modern technical infrastructure using the siteswift CMS and various JavaScript libraries, ensuring good user experience and mobile optimization. Security posture is moderate with CSRF protections and cookie consent mechanisms in place, though explicit security headers and incident response policies are absent. Privacy compliance is strong with clear privacy and cookie policies and GDPR consent management. Overall, the website reflects a credible and trustworthy organization with transparent contact information and active social media presence.

S

Salesianer Don Boscos

donbosco.de

47

The Deutsche Provinz der Salesianer Don Boscos operates as a well-established non-profit religious organization focused on youth education, social work, and pastoral care primarily in Germany but with a global outreach. Their website reflects a mature digital presence with comprehensive content about their mission, services, and community engagement. The organization targets children, youth, families, and potential employees or volunteers, offering a broad range of social and educational services. Technically, the website is built on the eZ Platform CMS, uses Bootstrap for responsive design, and integrates privacy-conscious analytics via Matomo. The hosting is managed by a reputable German provider, Schlundtech, ensuring stable infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though improvements are possible by adding security headers and explicit cookie consent mechanisms. Contact information is transparent and professional, supporting trust and credibility. Overall, the site is safe, professional, and well-aligned with the organization's mission.

F

Frankfurt du bist so wunderbar

frankfurtdubistsowunderbar.de

41

Frankfurt du bist so wunderbar is a local online magazine and blog dedicated to urban life in Frankfurt, Germany. It serves as a cultural and culinary guide, providing curated content for residents and enthusiasts of the city. The website leverages Drupal 10 CMS and modern web technologies to deliver a responsive and visually appealing user experience. It maintains an active social media presence across Instagram, Facebook, Pinterest, and TikTok, enhancing community engagement. However, the site lacks explicit privacy policy and terms of service pages, which are important for compliance and user trust. The cookie consent banner indicates GDPR awareness and usage of Google Analytics for anonymized statistics. Security posture is moderate with room for improvement in security headers and incident response transparency. Overall, the website is professionally designed, content-rich, and trustworthy, but could benefit from enhanced privacy and security documentation.

S

Stuttgarter Verlagskontor SVK GmbH

svk.de

44

Stuttgarter Verlagskontor SVK GmbH operates as a full-service publishing distributor primarily serving the German book trade and resellers. The company distributes products from over 50 publishers and provides an online order portal and service centers tailored for trade customers and publishers. The website is professionally designed, content-rich, and clearly targeted at its business audience. Technically, the site is built on WordPress with common libraries such as jQuery and Bootstrap, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit security policies. Privacy compliance is partially met with a comprehensive privacy policy but no cookie consent mechanism. Overall, the site is trustworthy and credible with clear contact information and legal disclosures.

T

Technology Fund

technologyfund.ch

44

The Technology Fund is a Swiss-based financial entity focused on supporting innovative climate technology companies through loan guarantees. Their website clearly communicates their mission to reduce greenhouse gas emissions by enabling Swiss companies to access non-dilutive funding. The site features testimonials from industry leaders and partners, enhancing credibility and trust. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and integrates Google Analytics and Tag Manager for tracking. Security measures include HTTPS and Google reCAPTCHA for form protection, though some security headers and explicit policies are missing. Privacy compliance is partially addressed with a privacy policy but lacks a cookie consent mechanism. Overall, the website is professional, well-branded, and targets Swiss climate-tech startups and stakeholders.

C

Cambridge University Press & Assessment

teachcambridge.org

62

Teach Cambridge is a specialized educational platform providing OCR teachers with access to a wide range of teaching resources, including assignments, examiner reports, exemplars, past papers, and training materials. The platform is positioned as a secure, personalized website under the reputable Cambridge University Press & Assessment brand, targeting educators involved in OCR qualifications. The business model focuses on supporting teachers with high-quality, official resources to enhance learner assessment preparation. Technically, the website is built using modern React technology, hosted with Cloudflare DNS services, and integrates analytics tools such as Google Tag Manager and Hotjar for user behavior insights. The site demonstrates good mobile optimization and a professional design, although accessibility and SEO optimizations are basic. Security-wise, the site enforces HTTPS and uses clientTransferProhibited domain status, but lacks DNSSEC and advanced security headers. No explicit security or incident response policies are published, indicating room for improvement in transparency and compliance. Overall, the website is trustworthy, safe, and well-aligned with its educational mission, but could benefit from enhanced security practices and clearer contact channels.

U

University Admissions Tests UK (UAT-UK)

esat-tmua.ac.uk

54

University Admissions Tests UK (UAT-UK) is a specialized educational service offering three computer-based admissions tests (ESAT, TMUA, TARA) for entry into top UK universities. The service is a collaboration between Imperial College London and the University of Cambridge, leveraging Pearson VUE's global test center network. The website is professionally designed, mobile-optimized, and provides comprehensive information about test dates, registration, bursaries, and access arrangements. Technically, the site uses WordPress CMS with modern performance and privacy tools, including Google Tag Manager and a cookie consent plugin. Security posture is good with HTTPS and no exposed sensitive data, though explicit security policies and incident response contacts are absent. Privacy compliance is strong with clear cookie and privacy policies and opt-in consent mechanisms. The domain is long-established, registered directly with Nominet, and consistent with the site's UK educational focus, indicating high legitimacy and trustworthiness.

The website wegweiser-kita-schule-frankfurt.de serves as an informational portal focused on childcare and school services in Frankfurt am Main. It is a collaborative effort between the city's school authority and a media partner, providing structured listings and search functionalities for parents and residents. The site uses modern web technologies such as Ionic Framework and Angular, ensuring a responsive and user-friendly experience, particularly on mobile devices. However, the site lacks explicit contact information, cookie consent mechanisms, and comprehensive privacy or security policies, which are important for compliance and user trust. Security headers are not detected, indicating room for improvement in security posture. Overall, the site appears legitimate and professionally maintained but could benefit from enhanced privacy and security features.

A

art kaleidoscope | Das Kunstmagazin für Frankfurt/Main und dem Rhein-Main Gebiet

artkaleidoscope.de

58

The website artkaleidoscope.de serves as a regional art magazine focused on Frankfurt/Main and the Rhein-Main area, providing quarterly publications, interviews, stories, and reports on current art events, artists, and exhibitions in museums, galleries, and off-spaces. The target audience primarily consists of art enthusiasts and cultural consumers within the region. The business model revolves around media publication and digital content delivery, including a mobile app. Technically, the site is built on Weblication CMS, uses HTTPS, and integrates etracker analytics for user tracking with a cookie consent mechanism. The design and content quality are good, with clear navigation and mobile optimization. Security posture is moderate, with HTTPS enabled but lacking explicit security headers and detailed privacy policies. Contact is available via a web form, but no direct emails or phone numbers are provided. Overall, the site is safe, professional, and trustworthy for general audiences.

K

k/c/e Marketing GmbH

museumsufercard.de

53

The MuseumsuferCard website represents a well-established cultural offering managed by k/c/e Marketing GmbH in cooperation with the Kulturamt der Stadt Frankfurt am Main. It provides annual access cards to 39 museums and cultural events in Frankfurt and surrounding areas, targeting culture enthusiasts, families, and tourists. The site is professionally designed with clear navigation, mobile optimization, and rich content describing the product offerings and benefits. Technically, the site uses modern JavaScript libraries such as Swiper.js, integrates Google Tag Manager and Facebook Pixel for analytics and marketing, and employs Usercentrics for GDPR-compliant consent management. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is good with a clear privacy policy and cookie consent mechanism. Contact information is comprehensive, enhancing business credibility. Overall, the site scores high on professionalism, trustworthiness, and user experience.

CITY CARD is a regional cultural discount card service focused on providing residents and visitors of Frankfurt and the Rhein-Main area with exclusive 2for1 offers and discounts across events, leisure, gastronomy, and shopping. The website presents a professional and content-rich platform with a clear focus on cultural and lifestyle benefits, targeting a general audience interested in local cultural engagement. The business model revolves around membership and promotional partnerships with local vendors and event organizers, positioning CITY CARD as a key player in the regional cultural discount market. Technically, the website employs a moderate technology stack including jQuery, Google Tag Manager, and Usercentrics for consent management. The site is served over HTTPS with basic privacy compliance mechanisms in place, including a privacy policy and cookie consent banner. However, there is room for improvement in security headers and mobile optimization. The site features extensive image-based animations to promote offers, enhancing user engagement but potentially impacting performance. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and default denial of tracking until user consent. Google Analytics is integrated but disabled by default, respecting privacy regulations. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests a moderate security maturity level. Overall, CITY CARD's website is trustworthy, professionally maintained, and compliant with GDPR requirements. Strategic enhancements in security headers, mobile responsiveness, and explicit policy disclosures would further strengthen its security posture and user trust.

G

Genussakademie Frankfurt

genussakademie.com

59

Genussakademie Frankfurt is a well-established culinary school and event organizer founded in 2004, offering a wide range of cooking courses, tastings, private dining experiences, and culinary travel options primarily targeting consumers interested in gastronomy and cooking in the Frankfurt region. The website demonstrates a solid technical infrastructure with the use of modern JavaScript libraries, Google Tag Manager, and a consent management platform, reflecting a mature digital presence. Security posture is adequate with HTTPS enabled and consent mechanisms in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting a positive user experience and business credibility.

W

WWF Schweiz

pandaclub.ch

66

WWF Schweiz operates the Panda Club website as a child-friendly educational platform focused on wildlife and environmental awareness. The site leverages WordPress CMS with modern technologies including jQuery, Google Tag Manager, and Usercentrics for consent management. The website is well-branded, consistent, and professionally designed to engage children with interactive and informative content about animals and conservation efforts. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is robust, linking to a comprehensive GDPR-compliant privacy policy managed by WWF Schweiz. Overall, the site represents a trustworthy and legitimate non-profit entity with a clear mission and audience.

D

Duda.news

duda.news

59

Duda.news is a German online media platform providing current news and educational content specifically tailored for children, with a regional focus on Cologne and global topics. The site offers a variety of content including children's news, an animal ABC, a lexicon, and interactive tips, positioning itself as a niche educational news provider. The platform is built on WordPress CMS, utilizing common plugins such as Yoast SEO, Contact Form 7, and cookie consent tools, indicating a moderate level of digital maturity and technical infrastructure. The website is well-structured, mobile-optimized, and regularly updated, reflecting good content quality and user experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements in security headers and vulnerability disclosure mechanisms are recommended. Overall, the site demonstrates a trustworthy and professional presence with no signs of malicious activity or adult content, making it suitable for its target audience of children and families.

S

ScalaZ

afrika-junior.de

47

Afrika-Junior is an educational website operated by ScalaZ, targeting children and parents with informative content about Africa. The platform offers a variety of educational materials including articles, media content such as videos and music, quizzes, and interactive games. It positions itself as a niche non-profit educational resource with a focus on African knowledge and culture. The website is hosted on Alfahosting and built using Wolf CMS, indicating a small-scale but functional technical infrastructure. The site demonstrates basic to good digital maturity with a clean design, clear navigation, and a cookie consent mechanism, though mobile optimization and accessibility are basic. Security posture is moderate with HTTPS enabled but lacking advanced security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is safe, trustworthy, and compliant with GDPR requirements, though it could benefit from enhanced security practices and more comprehensive business and incident response information.

Z

Zentrale für Unterrichtsmedien im Internet e.V.

zum.de

54

Zentrale für Unterrichtsmedien im Internet e.V. (ZUM) is a German non-profit organization dedicated to promoting digital education and open teaching materials since 1997. The website serves as a portal offering various educational platforms and tools, targeting educators, students, and learners interested in digital and open educational resources. The organization operates on a volunteer basis and is funded through donations, emphasizing free and accessible teaching content. Technically, the website is built on WordPress with modern plugins and libraries, including interactive H5P content and privacy-focused Matomo analytics. The site is well-structured, mobile-optimized, and provides clear navigation and relevant content. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the site reflects a mature, trustworthy educational platform with strong compliance to GDPR and privacy standards.

A

Anafra

smicro.eu

56

Anafra operates a specialized e-commerce platform focused on server hardware, components, and IT services, prominently featuring Supermicro builds. The website targets IT professionals and businesses in European markets, offering a broad catalog of products and services including virtual private servers, IT management, hosting, and warranty services. The platform supports multiple languages and currencies, enhancing accessibility for its target audience. Technically, the website employs a modern tech stack with jQuery, Google Tag Manager, Microsoft Clarity, and live chat integrations, indicating a mature digital infrastructure. Performance and mobile optimization are adequate, though accessibility features could be improved. Security posture is solid with HTTPS enforcement, captcha on login forms, and cookie consent mechanisms, but lacks explicit security headers and published security policies. Overall, the website is professional, trustworthy, and compliant with GDPR cookie consent requirements, though it would benefit from enhanced transparency in security and privacy policies.