Security Directory

Č

Český internet s.r.o.

prihlasse.cz

51

Přihlaš.se is a Czech-based user authentication platform operated by Český internet s.r.o., providing login services via popular social networks such as Facebook, Google, Seznam, and Apple, as well as traditional email and password methods. The service targets general internet users primarily within the Czech Republic, offering a streamlined authentication experience to reduce password management burdens. The website is professionally designed with consistent branding and clear navigation, supporting a good user experience. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, and FontAwesome icons, hosted likely by Wedos based on registrar data. The site is mobile-optimized and uses HTTPS, but lacks some advanced security headers and cookie consent mechanisms, indicating room for improvement in privacy compliance and security hardening. From a security perspective, the site demonstrates a moderate security posture with secure form inputs and encrypted connections. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests limited transparency in security governance. No critical vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website presents a moderate risk profile with a stable domain history and consistent business information. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance trust and security posture significantly.

ČESKÝ INTERNET s.r.o. is a well-established Czech company operating since 1999, specializing in providing internet content and advertising services primarily in the real estate, construction, and accommodation sectors. The company operates several high-traffic portals such as ČESKÉSTAVBY.cz, ČESKÉREALITY.cz, and ČESKÉUBYTOVÁNÍ.cz, attracting over a million monthly visitors. Their business model focuses on connecting users seeking real estate and housing information with advertisers and service providers, leveraging their extensive network and targeted marketing solutions. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Analytics, Google Tag Manager, and Facebook SDK, complemented by a GDPR-compliant consent management system (AppConsent TCF2). The site is mobile-optimized with good SEO practices and structured data enhancing search visibility. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and integrates GDPR consent mechanisms, but lacks visible security headers such as CSP or HSTS, which could enhance protection against common web threats. No forms or sensitive data exposure were detected, and no vulnerabilities were apparent in the provided content. However, the absence of WHOIS registration data reduces domain trustworthiness and should be investigated. Overall, the website presents a professional and trustworthy front with comprehensive business information and privacy compliance. Strategic improvements in security headers and domain registration transparency would further strengthen their security posture and business credibility.

I

Immanuel Albertinen Diakonie

immanuel.de

58

Immanuel Albertinen Diakonie is a large non-profit organization operating in the healthcare and social services sectors primarily in Hamburg, Berlin-Brandenburg, and Südthüringen regions of Germany. The website presents a comprehensive overview of their services including hospitals, specialized medical centers, rehabilitation, nursing care, hospices, addiction and disability assistance, psychosocial counseling, educational institutions, and child day care centers. Their market position is strong regionally with multiple subsidiaries and partner institutions. The website is built on TYPO3 CMS and demonstrates good technical maturity with modern design, mobile optimization, and accessibility features. However, it lacks visible privacy and cookie policies, and no explicit security headers were detected, which are areas for improvement. Contact information is clearly provided, and the site links extensively to related domains within their organizational ecosystem.

E

Elisabeth-Klinik gGmbH

elisabeth-klinik.de

64

Elisabeth-Klinik gGmbH is a well-established medical institution in Germany specializing in orthopaedic and rheumatologic care. It operates under the church-sponsored Josefs-Gesellschaft Köln and serves a broad patient base with modern facilities and experienced staff. The website reflects a professional healthcare provider with comprehensive service offerings and a strong market position in its sector. Technically, the site is built on ASP.NET Web Forms with a CMS named TWT Publisher, hosted on Deutsche Telekom infrastructure. The site is mobile-optimized and accessible, with good SEO practices. Security posture is adequate with HTTPS and some security headers, but lacks explicit security policies and cookie consent mechanisms. Analytics are performed via etracker, indicating moderate user tracking with GDPR compliance. Overall, the site is trustworthy and professional, though improvements in privacy and security transparency are recommended.

H

HELIOS Software GmbH

helios.de

52

HELIOS Software GmbH is a specialized technology company offering network software solutions including file servers, print servers, workflow automation, and cloud-based products. Their market position is that of an established provider with decades of experience, targeting enterprise and professional users requiring reliable cross-platform file and print services. The website presents a professional image with detailed product information and support resources, although some modern web practices like cookie consent and security policies are missing. Technically, the website uses legacy JavaScript libraries such as jQuery 1.9.1 and plugins like carouFredSel and prettyPhoto. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. No CMS or hosting provider details are explicitly identified. External links are primarily to trusted domains such as app stores and Google. From a security perspective, the site lacks visible security headers and published security or incident response policies. The use of outdated JavaScript libraries may pose vulnerabilities. No sensitive data is exposed in the HTML, and no tracking or analytics scripts were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and professional but could improve its security posture and privacy compliance to better align with modern standards and regulations.

5

50Hertz

mccs-gridcontrol.com

60

50Hertz, under the Elia Group umbrella, operates the MCCS website to promote its Modular Control Centre System, a cutting-edge grid control platform designed to facilitate the integration of 100% renewable energy by 2032. The company positions itself as a leader in energy transition technology, offering modular, scalable software solutions for TSOs and energy system operators. The website content is professionally crafted, targeting industry professionals and partners, and emphasizes collaboration and innovation in energy system operations. Technically, the website is built on a modern Sitecore CMS platform with Bootstrap 4 and includes advanced features such as video backgrounds and modular navigation. It employs standard analytics tools like Google Analytics and Matomo Tag Manager, with a clear cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses cookie consent banners but lacks explicit security policy and incident response information. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is not publicly available, likely due to privacy protection, but the domain and website content align with a legitimate, established energy sector business. Overall, the website presents a strong business and technical profile with good security hygiene, though improvements in transparency around security policies and incident response would enhance trust and compliance.

C

CarStore AS

car-store.no

64

CarStore AS operates the Carstore.no website, a professional Norwegian platform specializing in the sale of quality-tested used cars from multiple brands. The company offers a comprehensive range of services including used car sales, trade-ins, financing, and warranty programs under Carstore Care. The website targets Norwegian consumers seeking a safe and straightforward used car buying experience. Technically, the site is built on modern frameworks such as React and Next.js, integrated with Sitecore CMS, and employs Google Tag Manager and Usercentrics for analytics and consent management. The site is well-optimized for performance, mobile responsiveness, and accessibility. Security posture is strong with HTTPS enforced and consent mechanisms in place, though some security headers could be improved. The WHOIS data shows an anomalous domain creation date in the future, which slightly impacts trust but does not detract from the overall legitimacy indicated by the website content and external references. Overall, Carstore.no presents a trustworthy, professional, and user-friendly platform for used car transactions in Norway.

H

Hedin IT AB

carstore.fi

57

Carstore.fi is a Finnish online platform specializing in the sale of used cars, operated by Hedin IT AB, a Swedish company. The website offers a wide range of carefully selected used vehicles, including electric, hybrid, petrol, and diesel cars, targeting consumers in Finland seeking reliable and competitively priced automobiles. The business model focuses on retail sales, trade-ins, and additional services such as car maintenance and warranty through Carstore Care. The company has a solid market position as a specialist in used cars with a professional online presence and clear customer engagement channels. Technically, the website is built using modern web technologies including React and Next.js, hosted likely on Microsoft Azure infrastructure, and managed via Sitecore CMS. It employs Google Tag Manager and Usercentrics for analytics and consent management, ensuring compliance with GDPR. The site is mobile-optimized, accessible, and SEO-friendly, providing a fast and user-friendly experience. From a security perspective, the site enforces HTTPS, uses standard security headers, and does not expose sensitive data. However, DNSSEC is not implemented, and there is no publicly available security policy or incident response information. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, carstore.fi demonstrates a high level of professionalism, security, and compliance suitable for its business domain. Strategic recommendations include implementing DNSSEC, publishing a dedicated security policy, and adding a vulnerability disclosure mechanism to further enhance trust and security posture.

C

Carstore Sverige

carstore.se

59

Carstore Sverige operates as a specialized online and physical retailer of used cars in Sweden, offering a wide range of vehicles from multiple brands along with additional services such as car valuation, financing, and warranty programs. The company is part of the Hedin Mobility Group and has established a strong market presence since its domain registration in 2018. The website is built on a modern tech stack including Sitecore CMS and Next.js, hosted on Azure, ensuring good performance and mobile optimization. Security measures such as HTTPS, security headers, and consent management are properly implemented, although DNSSEC is not enabled. Privacy policies and cookie consent mechanisms are present and comprehensive, supporting GDPR compliance. However, no explicit incident response or vulnerability disclosure policies are found. Overall, the site demonstrates a high level of professionalism, trustworthiness, and technical maturity.

E

Erzdiözese Freiburg

ebfr.de

44

The Erzdiözese Freiburg website serves as the official digital presence of one of Germany's largest Catholic archdioceses, providing extensive information on faith, pastoral care, education, social services, and community engagement. The site targets a broad audience including parishioners, families, youth, and church staff within the Freiburg region. It offers structured navigation and a variety of resources reflecting its role as a major religious institution. Technically, the website is built on Edith CMS, leveraging modern JavaScript libraries like jQuery and AblePlayer, and uses Matomo for analytics with privacy-conscious configurations. Hosting and content delivery are managed via w-commerce.de and related domains. Security posture is adequate with HTTPS enforced, but lacks explicit security headers and published security policies. Privacy compliance is limited due to missing visible privacy and cookie policies. Overall, the site is professional, trustworthy, and well-branded, but could improve transparency and security practices.

I

IEEE CS

ieee.cz

51

The website represents the official online presence of the IEEE Czechoslovakia Section, a regional professional organization serving over 600 members in the Czech and Slovak Republics since 1992. It provides information about local chapters, student branches, events, and membership benefits, targeting professionals and students in electrical and electronics engineering. The site is well-branded with IEEE logos and structured data, reflecting a professional and credible organization. Technically, the site is built on WordPress with common plugins and demonstrates moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and formal privacy or cookie policies. WHOIS data is unavailable, which slightly reduces trust but is not uncommon for regional non-profit organizations. Overall, the site is safe, professional, and trustworthy for its intended audience.

M

Mám Dron

mamdron.sk

52

Mám Dron is a Slovak non-profit association dedicated to supporting drone users through information dissemination, insurance services, job listings, and educational courses. The website serves as a hub for drone pilots, companies, institutions, and government bodies interested in drone technology and regulation. The association appears to be well-positioned within its niche market in Slovakia, focusing on community support and technological solutions for drone operations. Technically, the website is built on WordPress using Elementor and Yoast SEO, with integration of Google Analytics and cookie consent mechanisms, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced, but lacks some advanced security headers and formal security policies. Privacy compliance is partial due to the absence of a privacy policy and terms of service pages. Overall, the site is professional and trustworthy but could improve in transparency and security documentation.

The domain slcp.info currently hosts no accessible website content, returning a 404 Not Found error page. The WHOIS data is incomplete, lacking critical registration details such as creation and expiry dates, registrant organization, and nameservers, which suggests the domain is either inactive or improperly configured. Due to the absence of content, no business information, contact details, or security policies are available for analysis. The technical infrastructure appears minimal with no detected technologies or frameworks, and the site lacks HTTPS, security headers, and privacy compliance mechanisms. Overall, the website's security posture is weak, and its legitimacy is questionable given the lack of WHOIS transparency and active content.

The Národné centrum robotiky is a Slovak national research center specializing in robotics and artificial intelligence. Established in 2015, it serves as a leading institution in industrial, mobile, aerial robotics, and related sensor and AI technologies. The website reflects a professional research organization with a focus on collaboration, education, and technological advancement in robotics. The technical infrastructure is based on WordPress CMS with common web technologies and moderate performance. Security posture is adequate with HTTPS and DNSSEC enabled, but lacks advanced HTTP security headers and visible privacy compliance mechanisms. The absence of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security practices.

Slovenská komora stavebných inžinierov (SKSI) is a Slovak professional chamber representing authorized construction engineers. The organization provides membership services, professional examinations, educational programs, and maintains official registers and public portals. The website reflects a national authoritative position within the construction engineering sector in Slovakia, targeting professionals and stakeholders in this industry. Technically, the site uses a modern CMS (BUXUS), standard JavaScript libraries like jQuery and RequireJS, and integrates Google Analytics and Facebook Pixel for tracking. The site is mobile optimized with good navigation and professional design. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though it lacks some security headers and a cookie consent mechanism. WHOIS data confirms legitimacy and consistency with the organization's identity. Overall, the website is a reliable and professional digital presence for SKSI.

Z

Zväz automobilového priemyslu Slovenskej republiky

zapsr.sk

46

Zväz automobilového priemyslu Slovenskej republiky (ZAP SR) is a well-established industry association representing automotive manufacturers, importers, and suppliers primarily in Slovakia. Founded in 2003, it serves as a key platform for advocacy, networking, education, and industry statistics. The website reflects a professional and consistent brand presence with active content including news, events, and partnerships with recognized European automotive organizations. Technically, the site is built on WordPress with modern plugins and themes, hosted by a reputable provider with DNSSEC and HTTPS enabled, ensuring a secure and reliable user experience. Security posture is solid with room for improvement in HTTP security headers and vulnerability disclosure practices. Privacy compliance is strong, featuring GDPR-aligned policies and cookie consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness within its sector.

D

DEHN s.r.o.

dehn.cz

64

DEHN s.r.o. is a Czech-based company specializing in lightning and surge protection as well as safety equipment for buildings, electrical and electronic systems, and human life protection. The company leverages over a century of expertise, positioning itself as a trusted provider in the energy and industrial sectors. Their website offers comprehensive product information, educational resources, and service offerings, targeting professional and business customers. The digital presence is supported by a modern Drupal 10 CMS infrastructure, enhanced with cookie consent management and analytics tools such as Google Tag Manager and Datadog RUM. The site is well-structured, mobile-optimized, and provides clear contact information and social media links, reinforcing business credibility.

The website nes.sk represents a domain registered since 2003 in Slovakia, indicating a long-standing presence. The site appears to use modern web technologies such as React and Ant Design for its user interface, suggesting a moderate level of digital maturity. However, the content provided is minimal and mostly technical styling information, with no visible business descriptions, contact information, or user-facing content. Security posture is moderate with HTTPS and DNSSEC enabled, but lacks important security headers and privacy compliance documentation. Overall, the site is accessible without WAF or security challenges, but lacks comprehensive content and compliance features.

H

HUMUSOFT

humusoft.cz

59

HUMUSOFT is a Czech technology company specializing in technical calculations, simulations, and modeling of physical problems, offering software sales, consulting, training, and high-performance workstations. The company has a strong market position in the Czech Republic with a history dating back to 1991 and a domain registered since 1995. Their key services include MATLAB & Simulink, COMSOL Multiphysics, dSPACE systems, consulting, and training programs. The website is professionally designed, bilingual (Czech and English), and targets technical professionals and organizations requiring advanced simulation and computing solutions. Technically, the website uses modern web technologies such as Materialize CSS, jQuery, Google Tag Manager, and Google Analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are missing. Overall, the website is trustworthy, compliant with GDPR, and provides clear contact information and social media presence. No suspicious or malicious content was detected, and the site is safe for general audiences.

M

Marpex, s.r.o.

marpex.sk

42

Marpex, s.r.o. is a Slovakian company specializing in automation technology solutions, serving industrial manufacturing and logistics sectors. The company offers a broad portfolio including sensor technology, RFID systems, inspection cameras, wireless signal transmission, and 3D building scanning. They emphasize comprehensive project delivery from design to post-warranty service, positioning themselves as a reliable partner in automation. Their market presence is supported by partnerships with reputable technology brands and ISO 9001:2015 certification, indicating quality management commitment. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Analytics, and reCAPTCHA for form security. The site is mobile-optimized and provides embedded multimedia content to enhance user engagement. However, some areas such as security headers and explicit privacy policies are lacking, which could be improved to enhance security posture and compliance. Security-wise, the site uses HTTPS and Google reCAPTCHA, which are positive indicators. No critical vulnerabilities or exposed sensitive data were detected. The absence of security headers and formal privacy and cookie policies represent compliance gaps, especially under GDPR. The WHOIS data aligns well with the website's business claims, supporting legitimacy. Overall, the website is professional and trustworthy with good business credibility and technical implementation. Strategic improvements in privacy compliance and security best practices would strengthen the site's risk posture and user trust.

A

Accura s.r.o

accura.io

54

Accura s.r.o is a specialized cybersecurity consulting firm founded in 2016, focused on protecting critical infrastructure and industrial control systems (ICS/OT) from advanced cyber threats. Their market position is that of a niche expert providing comprehensive OT and IT cybersecurity services, incident response, and training primarily targeting industrial enterprises, government organizations, and multinational corporations in sectors such as energy and manufacturing. The company emphasizes reliable operations and cross-sector expertise to safeguard business-critical assets. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, and various UI libraries, delivering a responsive and professional user experience. Hosting and domain registration are managed via NameCheap with privacy protection enabled. The site shows good SEO practices but lacks some advanced security headers and DNSSEC, indicating moderate digital maturity. From a security posture perspective, the site uses HTTPS and domain transfer protection but lacks visible security policies, privacy and cookie policies, and incident response contact details. No vulnerabilities or exposed sensitive data were detected, but improvements in security headers and privacy compliance are recommended to enhance trust and regulatory adherence. Overall, the website is professional and trustworthy with a solid business foundation but would benefit from enhanced privacy disclosures, security best practices, and transparency to improve compliance and user confidence.

K

KOBOLD Messring GmbH

kobold.com

51

KOBOLD Messring GmbH is a German-based manufacturer specializing in industrial measuring and control equipment focused on flow, pressure, level, and temperature measurement. The company holds a strong international market position as a leading instrumentation engineering enterprise, offering a broad portfolio of products and automation solutions tailored for diverse industrial sectors. Their website reflects a professional and comprehensive digital presence with multi-language support and detailed product showcases. Technically, the website is built on MATRIX-CMS with jQuery and integrates Matomo analytics and Google Tag Manager, both managed with user consent to ensure privacy compliance. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some improvements in accessibility and security headers could be made. From a security standpoint, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security policies or incident response contacts. No vulnerabilities or suspicious scripts were detected. The absence of WHOIS data for the domain is a concern but does not detract significantly from the overall legitimacy given the professional content and valid contact information. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

S

SEZ-KES

sez-kes.sk

44

SEZ-KES is a Slovakian organization serving electrical engineering professionals by providing memberships, access to standards, publications, conferences, and seminars. The website is professionally designed with clear navigation and a consistent brand presence, targeting industry professionals in Slovakia. Technically, the site uses modern web technologies including Google Analytics, Tag Manager, and reCAPTCHA, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and basic protections, though improvements in security headers and published policies are recommended. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, but contact information and incident response details are lacking. Overall, the domain registration aligns well with the business claims, supporting legitimacy and trustworthiness.

The website cadkon.eu is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The page contains no business information, contact details, privacy or cookie policies, or any forms. The only external resource loaded is a Google Fonts stylesheet. The WHOIS data indicates the domain is registered through a cloud hosting provider, HBS CLOUD SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, which does not directly match any business identity, suggesting the domain may be under hosting control rather than active business use. Due to the blocked content and lack of information, the website's technical maturity and security posture cannot be fully assessed. No security headers or SSL details are available from the content. Overall, the site lacks transparency, business credibility, and compliance indicators.

I

Ing. Anton Gérer – ATP Journal

e-automatizacia.sk

52

The website www.e-automatizacia.sk serves as an online catalog and information portal dedicated to industrial automation products and services, primarily targeting professionals and companies in Slovakia's automation sector. It features product categories such as control systems, drives, human-machine interfaces, industrial software, and measuring instruments, alongside industry news and the ATP Journal magazine content. The site operates on the BUXUS CMS platform and integrates legacy technologies like jQuery 1.4.2 and RequireJS, with Google Analytics for user tracking. While the design and content quality are good and navigation is clear, mobile optimization and accessibility are basic. Security posture is moderate, with HTTPS presumably enabled but lacking visible security headers and using outdated JavaScript libraries that may pose risks. Privacy compliance is addressed through a cookie consent banner and a basic privacy policy page, though terms of service and incident response policies are absent. Overall, the site is legitimate and consistent with its business purpose but would benefit from technical and security improvements.

P

PPA Controll

ppacontroll.sk

48

PPA CONTROLL, a. s. is a Slovak-based engineering and supplier company specializing in electrical systems, measurement, regulation, and process automation primarily for the energy and industrial sectors. The company maintains a strong market position with a medium-sized business model focused on B2B services, supported by several subsidiaries. Their website reflects a professional digital presence with good content quality, clear navigation, and modern technology usage including WordPress CMS, Google Maps API, and analytics tools. Security posture is solid with HTTPS enforcement and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the company demonstrates a trustworthy and credible online presence aligned with its business operations.

S

Spreadshop

spreadshop.de

60

Spreadshop is a German-based e-commerce platform specializing in print-on-demand merchandising solutions tailored for creators, companies, and institutions. It offers a free online shop setup with integrated design, printing, and fulfillment services, positioning itself as a risk-free and flexible partner in the creator economy. The platform supports over 350 customizable products and integrates with popular social media and e-commerce platforms to enhance reach and sales. Technically, the website leverages modern web technologies including React and Next.js, hosted on a CDN infrastructure ensuring fast performance and excellent mobile optimization. The site demonstrates good SEO and accessibility practices, with comprehensive metadata and structured content. Security is robust with HTTPS enforcement and multiple security headers, although explicit security policies and incident response contacts are not publicly detailed. The security posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed through detailed privacy and cookie policies with active consent mechanisms, reflecting GDPR adherence. Business credibility is high, supported by certifications such as amfori and OEKO-TEX, and a consistent, professional brand presence across multiple social media channels. Overall, Spreadshop presents a trustworthy, professional, and technically mature platform with a strong market position in the print-on-demand e-commerce sector. Strategic improvements could include publishing dedicated security and incident response policies to further enhance transparency and trust.

S

Spreadshop

spreadshop.net

65

Spreadshop is a well-established e-commerce platform specializing in print-on-demand merchandise, enabling creators and businesses to design, sell, and distribute custom products without upfront inventory. The platform offers extensive product customization, integration with popular e-commerce platforms, and a user-friendly interface that supports creators in monetizing their brands. Technically, the website leverages modern frameworks such as Next.js and React, with a robust content delivery network and cookie consent mechanisms ensuring compliance and performance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the site presents a professional, trustworthy, and user-centric experience with a high degree of technical maturity.

D

Deutscher Mobilitätspreis

mobilitaetspreis.de

47

The Deutscher Mobilitätspreis website serves as a platform for a German mobility award initiative, focusing on promoting innovation and sustainable transportation solutions. The site targets professionals and organizations in the transportation sector, offering information about awards and mobility projects. The website is built on WordPress, utilizing popular plugins for SEO and multilingual support, hosted on kasserver.com. The technical infrastructure is modern but lacks visible advanced security headers and privacy compliance features. Security posture is moderate with room for improvement in policy transparency and technical safeguards. Overall, the site is professional and safe for general audiences but would benefit from enhanced privacy and security measures to improve trust and compliance.

G

Gesellschaft für Informatik e.V.

ocdcpro.de

55

OCDCpro is an educational and innovation-focused project operated by the Gesellschaft für Informatik e.V., aiming to promote European sovereignty in semiconductor technology through an open-source chip design competition for students and young talents. The project leverages open-source toolchains to foster learning and collaboration among students and educators in relevant technical fields, with industry partnerships enabling practical chip fabrication opportunities. The website is professionally designed using TYPO3 CMS, with good mobile optimization and clear navigation. Privacy compliance is well addressed with a cookie consent mechanism and a comprehensive privacy policy linked to the parent organization's domain. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site reflects a trustworthy and credible educational initiative with a moderate to high level of technical maturity.

G

Gesellschaft für Informatik e.V.

ki-hub-kunststoffverpackungen.de

54

The KI-Hub Kunststoffverpackungen website represents a government-funded initiative by the Gesellschaft für Informatik e.V., focusing on leveraging Artificial Intelligence to enhance sustainability and circular economy practices in plastic packaging. The initiative comprises two innovation labs working collaboratively to optimize the lifecycle of plastic packaging from design to recycling. The website is professionally designed, primarily in German with an English version available, and targets industry professionals, researchers, and policymakers interested in AI and sustainability. Technically, the website is built on TYPO3 CMS with Bootstrap for responsive design and Leaflet.js for interactive maps. It employs Matomo for privacy-conscious analytics and implements a cookie consent mechanism with opt-in options. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some security headers and explicit security policies are absent. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks a published security policy and incident response contacts, which are recommended for enhanced trust and compliance. The WHOIS data is minimal but consistent with the website's institutional affiliation, indicating legitimacy. Overall, the website scores well on content quality, technical implementation, security posture, privacy compliance, and business credibility, making it a trustworthy and professional platform for its intended audience.

F

FutuRSI

futursi.de

51

FutuRSI is a collaborative initiative supported by six partner institutions and funded by the Klaus Tschira Foundation, aiming to conceptualize a German research software institution. The website serves as an informational and advocacy platform targeting researchers, research software engineers, and academic stakeholders in Germany. The initiative focuses on fostering a sustainable future for research software and its developers through collaboration and career advancement. Technically, the website is built using the Hugo static site generator, leveraging modern web standards including HTML5, CSS, and JavaScript, with Google Fonts integration. The site is mobile-optimized with good navigation and content structure, though accessibility features are basic. No advanced CMS or dynamic backend is detected, indicating a lightweight and maintainable infrastructure. From a security perspective, the website uses HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks explicit security headers and formal security policies such as incident response or vulnerability disclosure. Privacy compliance is partially addressed with a privacy policy present, but no cookie consent mechanism is implemented. The absence of contact emails or phone numbers on the homepage limits direct communication channels, relying instead on a contact form. Overall, the website presents a trustworthy and professional image with a clear educational and collaborative mission. The security posture is adequate but could be improved with additional headers and policies. Privacy compliance is basic but acceptable given the nature of the site. The risk level is low, with no indications of malicious activity or content safety concerns.

B

BYTE Challenge

byte-challenge.de

55

BYTE Challenge is a German-based digital learning platform focused on providing free, individualized, and interdisciplinary educational courses primarily targeting students, university students, trainees, and schools. The platform offers a broad range of courses covering digital skills, computer science fundamentals, orientation for post-school careers, and advanced topics such as AI and sustainability. The website is professionally designed with multilingual support (German, English, Ukrainian) and clear navigation, reflecting a strong commitment to accessibility and user experience. Technically, the website is built on WordPress with WooCommerce and several plugins enhancing functionality such as multilingual support, user management, and event calendars. The tech stack includes modern frontend libraries like Bootstrap and Swiper for responsive design and interactive elements. Performance is moderate with good mobile optimization and SEO practices. From a security perspective, the site enforces HTTPS and uses security-conscious plugins, but lacks some advanced security headers and a visible cookie consent mechanism, which is a compliance gap. No explicit security policy or incident response contacts are published, which could be improved to enhance trust and readiness. Overall, BYTE Challenge presents a trustworthy and professional educational service with a solid technical foundation and good privacy compliance. Strategic improvements in cookie consent and security transparency would further strengthen its security posture and regulatory adherence.

G

Gesellschaft für Informatik e.V.

common-grounds-forum.org

54

The Common Grounds Forum is a youth-focused community initiative operated by Gesellschaft für Informatik e.V., targeting young people aged 14 to 30 to engage in digital and education policy advocacy in Germany. The platform serves as a hub for developing digital policy positions and bringing youth demands to national digital summit stages. The website is professionally designed, content-rich, and clearly targeted at its audience with a strong emphasis on community events and policy demands. Technically, the site is built on TYPO3 CMS with Bootstrap and integrates privacy-respecting analytics via Matomo. Security posture is good with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is strong with a clear cookie consent mechanism and GDPR-aligned privacy policy hosted on the parent organization's domain. Contact information is transparent, though no explicit security or incident response policies are published. Overall, the website is trustworthy, well-maintained, and aligned with its stated mission.

M

mas.to

mas.to

69

mas.to is an independent Mastodon server providing a federated social networking platform within the fediverse. It offers users a fast, up-to-date, and engaging environment to participate in decentralized social media. The website demonstrates a consistent brand and clear focus on Mastodon-based social networking services, targeting a general audience interested in privacy-respecting social platforms. Technically, the site employs modern web technologies including Mastodon 4.4.8, React, and ES modules, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement, script integrity checks, and nonce usage, although explicit security headers and incident response policies are not published. Privacy compliance is adequate with accessible privacy and terms pages, but lacks a cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, with room for improvement in transparency and security documentation.

The Gesellschaft für Informatik e.V. (GI) operates the GI Radar newsletter, a biweekly publication focused on informatics topics, primarily targeting its members and the broader informatics community in Germany. The website serves as an archive for these newsletters dating back to 2017, providing valuable historical and topical content. The organization is a well-established non-profit entity in the technology sector with a clear mission to disseminate information and foster community engagement. Technically, the website is built on TYPO3 CMS and hosted via domaindiscount24.net nameservers. The site demonstrates moderate performance and basic mobile optimization. While the content is well-structured and professionally presented, there is room for improvement in accessibility and SEO practices. The site lacks explicit privacy and cookie policies, and no advanced security headers or incident response information are present, indicating potential areas for enhancement in security posture. From a security perspective, the site is accessible without WAF or blocking mechanisms, but it lacks visible security best practices such as security headers and incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of privacy and cookie policies reduces compliance confidence, especially regarding GDPR. Overall, the website is trustworthy and professional, with strong business credibility but moderate technical and security maturity. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance the site's security posture and user trust.

G

Gesellschaft für Informatik e.V. (GI)

informatik-monitor.de

53

The website informatik-monitor.de is an educational platform operated by Gesellschaft für Informatik e.V., focusing on the state of computer science education in Germany. It provides detailed reports, comparative data across federal states, and forecasts related to informatics teaching in secondary schools. The site targets educators, policymakers, and researchers interested in informatics education. Technically, the site is built on TYPO3 CMS with Bootstrap, offering a responsive and accessible user experience. Security-wise, the site uses HTTPS (assumed), implements cookie consent with privacy-conscious defaults, and employs Piwik (Matomo) analytics with denied ad and analytics storage by default. However, no explicit privacy policy or terms of service were found, and security headers are not evident in the provided data. Overall, the site is professional, trustworthy, and safe for general audiences.

F

FERI

feri.de

71

FERI is a German-based financial services company specializing in multi-asset management and global investment solutions. With over 30 years of experience, it targets sophisticated private wealth and institutional investors, offering independent research and asset management services. The website reflects a professional and consistent brand image, emphasizing trust and expertise in the finance sector. Technically, the site uses modern web technologies including Cookiebot for consent management and Google Tag Manager for analytics, hosted on Colt's infrastructure. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website demonstrates a mature digital presence aligned with its business model and regulatory compliance requirements.

V

Viatris Inc.

viatris.com

65

Viatris Inc. is a global healthcare company founded in 2020, focused on empowering people worldwide to live healthier lives at every stage. The company operates in the pharmaceutical sector, offering a broad portfolio of healthcare products and services with a strong emphasis on access, affordability, and sustainability. The website reflects a mature digital presence with extensive international localization and professional branding. Technically, the site uses modern web technologies including jQuery, Bootstrap, and Google Tag Manager, and implements cookie consent mechanisms to comply with privacy regulations. Security posture is moderate with HTTPS usage and cookie consent but lacks visible advanced security headers or published security policies. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trustworthiness but does not overshadow the overall professional presentation and business legitimacy. Strategic recommendations include enhancing security transparency, publishing privacy and terms policies explicitly, and investigating the WHOIS anomaly to ensure domain registration integrity.

B

Boiron

boiron.com

71

Boiron is a globally recognized leader in homeopathic medicines, offering a range of healthcare solutions focused on personalized and respectful treatment. The website presents a professional and modern digital presence, utilizing contemporary web technologies such as Next.js and Google Tag Manager for analytics and marketing. The content is well-structured and targets patients and healthcare professionals worldwide, emphasizing safety and efficacy in homeopathy. However, the absence of publicly available WHOIS data raises questions about domain registration transparency. Security practices are adequate with HTTPS and cookie consent mechanisms, but the lack of explicit privacy policies and security headers suggests room for improvement. Overall, the website is trustworthy and professional but would benefit from enhanced transparency and security documentation.

LEO Pharma is a well-established healthcare company specializing in medical dermatology and thrombosis treatments, with a history dating back to 1908. The French localized website www.leo-pharma.fr presents a professional and comprehensive digital presence, targeting patients, healthcare professionals, and potential employees. The company emphasizes patient support, research and development, and sustainable growth. The website is hosted on Microsoft Azure and uses modern technologies including Sitecore CMS and React, ensuring a robust and scalable infrastructure. Privacy and cookie compliance are well implemented, with detailed cookie declarations and GDPR-aligned privacy policies. Security posture is strong with HTTPS enforced and no evident vulnerabilities or exposed sensitive data. Overall, the website reflects a mature digital presence consistent with a large healthcare enterprise.

A

AidantK+

aidantkplus.fr

60

AidantK+ is a French healthcare support platform dedicated to informing and assisting close caregivers of cancer patients. The website offers a scientifically validated Mini-Zarit questionnaire to assess caregiver burden and provides information on available aids and support resources. The platform targets a niche audience of caregivers, positioning itself as a valuable informational resource in the healthcare non-profit sector. Technically, the website employs modern JavaScript frameworks such as Turbo-Rails and Stimulus, uses Bootstrap for responsive design, and integrates analytics tools like Matomo and Google Tag Manager. Hosting and DNS are managed via Cloudflare, ensuring good performance and security. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and formal privacy policies are absent. No contact information or incident response channels are publicly available, which limits transparency. Overall, the website is professional, trustworthy, and safe for general audiences, but could improve compliance and security transparency.

C

COMM Santé

comm-sante.com

35

COMM Santé is a specialized communication agency based in Bordeaux, France, focusing exclusively on the healthcare sector. The company offers a range of services including digital and social media management, press relations and influence, strategic communication, medical education and training, event management, and management of learned societies. The website presents a professional and consistent brand image targeting healthcare professionals and organizations. Technically, the site is built on WordPress with common modern web technologies such as jQuery, Google Fonts, and Google reCAPTCHA, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, though accessibility could be improved. Security posture is decent with HTTPS and CAPTCHA integration, but lacks visible security headers and published security policies. Privacy compliance is partially addressed through a GDPR cookie consent mechanism, but the absence of a clear privacy policy and terms of service pages is a gap. The WHOIS data is missing or unavailable, which raises some concerns about domain registration legitimacy, though the active and professional website presence mitigates this somewhat. Overall, the site is functional and professional but would benefit from enhanced transparency and security documentation.

The domain key4.live currently hosts a default Apache2 Debian welcome page indicating that the web server is installed but no active website or business content is present. There is no evidence of a functioning business, no contact information, no privacy or cookie policies, and no security measures such as HTTPS or security headers. The WHOIS data is unavailable or unsupported for this .live TLD, providing no registrar or registrant information, which further reduces trustworthiness. Technically, the site runs on Apache2 on Debian Linux but lacks modern web features, accessibility, and SEO optimization. Security posture is minimal with no HTTPS and no security headers. Overall, the site appears to be a placeholder or inactive domain with no commercial or operational presence.

TeamResa appears to be a business focused on online event registration and management, including one-to-one meetings and business meeting organization. The domain was registered in 2015 with OVH sas, a reputable registrar, and is currently active until 2026. However, the website content is currently unavailable, displaying a message that the requested URL is not in service. This limits the ability to assess the company's current market position or operational status. The only contact information available is an email address ([email protected]). No privacy, cookie, or terms of service policies are present, and no phone numbers or physical addresses are provided. From a technical perspective, the website lacks detectable technologies, scripts, or frameworks, and no security headers or HTTPS information were found in the provided data. DNSSEC is not enabled, and the domain has standard protection flags against deletion and transfer. The minimal content and lack of technical implementation suggest the site may be inactive or under maintenance. Security posture is weak due to the absence of HTTPS, security headers, and privacy compliance indicators. No incident response or vulnerability disclosure information is available. The domain registration data is consistent and stable, but the lack of operational website content and security best practices significantly reduces trustworthiness. Overall, the website is currently non-functional with poor content quality and technical implementation. Strategic recommendations include restoring website availability, implementing HTTPS and security headers, adding privacy and cookie policies, and providing comprehensive contact and incident response information to improve trust and compliance.

K

Klosterportal | Originale Produkte und Dienstleistungen aus Klöstern

klosterportal.org

53

The website www.klosterportal.org is an e-commerce platform specializing in original products and services from monasteries, targeting a general audience interested in such niche products. The site is built on WordPress using the Divi theme and incorporates plugins such as GeoDirectory and CleanTalk for anti-spam protection. The technical infrastructure is moderately mature, with standard web technologies and a responsive design, but lacks advanced security headers and explicit privacy compliance documentation. Security posture is adequate with HTTPS enabled and anti-spam measures, but could be improved by implementing security headers and formal privacy and cookie policies. Overall, the site presents a professional and trustworthy front but lacks some compliance and security best practices.

The website www.ordensjahr.de represents a non-profit initiative by German religious orders offering a voluntary year of community living, prayer, work, and learning. It targets individuals at various life stages seeking spiritual and personal growth through immersion in religious community life. The site is built on TYPO3 CMS, indicating a mature technical infrastructure with moderate performance and good mobile optimization. Security posture is adequate with HTTPS implied, but lacks explicit security headers and published security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and well-branded, though improvements in security and privacy transparency are recommended.