Security Directory

E

Ecosia GmbH

ecosia.co

73

Ecosia GmbH operates Ecosia.org, a green search engine dedicated to environmental sustainability by using 100% of its profits to plant trees worldwide. The company positions itself as the largest tree-planting movement via search engine technology, targeting environmentally conscious users globally. Their business model focuses on generating revenue through search advertising and dedicating all profits to climate action projects, with transparent monthly financial reporting to build trust. Technically, the website employs modern JavaScript frameworks (likely Vue.js), integrates Google Tag Manager for analytics, and uses a robust consent management platform (Didomi) to ensure privacy compliance. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. From a security perspective, Ecosia enforces HTTPS, implements standard security headers, and manages cookie consent effectively. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. The absence of WHOIS data due to privacy protection is consistent with privacy-conscious business practices and does not detract from the site's legitimacy. Overall, Ecosia.org demonstrates a strong security posture, excellent content quality, and high business credibility, making it a trustworthy platform for users seeking an eco-friendly search engine alternative.

B

Bayerischer Rundfunk

br-klassik.de

62

BR-KLASSIK is a digital platform operated by Bayerischer Rundfunk, a major German public broadcaster, focusing on classical music, jazz, and cultural content. The website offers rich multimedia content including radio, television, podcasts, concert videos, and cultural news, targeting classical music enthusiasts and culturally interested audiences primarily in Germany. The site is professionally designed with consistent branding and clear navigation, supporting a high-quality user experience across devices. Technically, the site uses modern JavaScript libraries and analytics tools, with good mobile optimization and accessibility features. Security posture is strong with HTTPS and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is good, linking to comprehensive parent company policies, but lacks an explicit cookie consent mechanism. WHOIS data confirms the domain's legitimacy and consistency with the broadcaster's identity. Overall, the site is trustworthy, professional, and well-positioned in the media sector.

S

Stadt Neuburg an der Donau

neuburg-donau.de

47

The website www.neuburg-donau.de serves as the official municipal portal for the city of Neuburg an der Donau, Germany. It provides comprehensive information about city administration, public services, local government activities, events, and economic development. The site targets residents, local businesses, visitors, and government officials, positioning itself as a key information hub for the municipality. The business model is that of a public sector entity delivering essential government services and citizen engagement platforms. Technically, the website employs modern web technologies including JavaScript, CSS, and integrates a consent management platform to comply with cookie regulations. Accessibility features are present, and the site is mobile optimized with good SEO practices. The CMS appears to be custom or proprietary, typical for government websites. Performance is moderate with no major issues detected. From a security perspective, the site enforces HTTPS and uses a consent manager for cookie compliance. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident in the provided HTML snippet. There is no visible privacy policy or incident response information, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. The domain WHOIS data is limited but does not raise immediate concerns. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic recommendations include publishing a detailed privacy policy, enhancing security headers, and providing clear contact information for data protection and incident response. These steps will improve compliance, security posture, and user trust.

S

Bavarian shipping at Lake Starnberger See, Ammersee, Tegernsee and Königssee

seenschifffahrt.de

53

The website www.seenschifffahrt.de serves as the official online presence for Bavarian shipping services across four major lakes: Königssee, Tegernsee, Starnberger See, and Ammersee. It targets general audiences interested in regional transportation and tourism services. The site is built on TYPO3 CMS, indicating a moderate level of technical maturity and content management capabilities. The design and navigation are professional and user-friendly, supporting a positive user experience. However, the site lacks critical privacy and cookie policies, which are essential for GDPR compliance, especially given its European location. Security posture is basic, with no evident security headers or incident response information, suggesting room for improvement in protecting user data and enhancing trust. Overall, the site is functional and relevant but requires enhancements in privacy, security, and contact transparency to elevate its compliance and credibility.

A

Augsburg Marketing

augsburg-city.de

38

Augsburg City is a well-established city marketing platform operated by Augsburg Marketing, focusing on promoting shopping, cultural events, leisure activities, and tourism in Augsburg, Germany. The website serves as a comprehensive guide for residents and visitors, offering event calendars, shopping tips, and city vouchers. It maintains a strong market position as a key local resource for city-related information and promotion. Technically, the website uses modern web technologies including JavaScript, SVG graphics, and Matomo analytics for privacy-conscious user tracking. Hosting is provided by Schlund Technologies, and the site demonstrates good mobile optimization, accessibility, and SEO practices. The site is fully accessible without any WAF or security challenges. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks publicly visible security policies or incident response contacts, which could be improved. No vulnerabilities or exposed sensitive data were detected. The domain registration data aligns well with the website's purpose and location, indicating legitimacy. Overall, Augsburg City presents a professional, trustworthy, and user-friendly online presence with strong compliance to privacy regulations. Strategic improvements in security transparency and incident response readiness would further enhance its security posture.

H

Haus Sankt Ulrich

haus-sankt-ulrich.de

36

Haus Sankt Ulrich is a specialized hospitality business operating as a conference and city hotel in Augsburg, Germany, affiliated with the Diözese Augsburg. The website presents a professional image with clear descriptions of accommodation, conference facilities, and gastronomy services targeting business travelers, groups, and individual guests. The business occupies a niche market position combining religious affiliation and architectural heritage with hospitality services. Technically, the website uses legacy JavaScript libraries and custom CMS or framework, hosted on Amazon AWS infrastructure. While the site is functional and well-structured, it lacks modern security headers and uses an outdated jQuery version, which poses security risks. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professionally maintained but could improve technical and security aspects.

H

Hotel National Bamberg

hotel-national-bamberg.de

53

Hotel National Bamberg is a historic, family-run 3-star hotel located near the Bamberg train station in Germany. Established in 1886, it offers a blend of comfort, tradition, and elegance with a focus on business travelers, tourists, families, and groups. The hotel provides accommodation, conference facilities, breakfast services, and promotes local cultural experiences. Technically, the website is built on a modern stack with CMS features, uses Google Tag Manager for analytics, and implements GDPR-compliant consent management. Security posture is good with HTTPS and CAPTCHA on forms, though it lacks explicit security policy pages and some security headers. Overall, the site is professional, trustworthy, and well-optimized for users.

M

Markt Ebensfeld

ebensfeld.de

65

Markt Ebensfeld operates as a municipal government entity serving the local community in the Landkreis Lichtenfels region of Germany. The website provides comprehensive information about local government services, tourism, and community resources, targeting residents and visitors. The business model focuses on public service delivery and digital citizen engagement through online portals and information dissemination. The site is positioned as an official government resource with trust indicators such as the Kommunales IT-Siegel and links to official Bavarian government portals. Technically, the website is built on the Weblication CMS platform, employing standard web technologies with moderate performance and good mobile optimization. However, it lacks advanced technical frameworks or modern JavaScript libraries. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, but it lacks security headers and incident response information. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is trustworthy and professional but could improve in privacy and security transparency.

F

FactFinder

loop54.com

62

FactFinder is a well-established eCommerce technology company specializing in AI-powered product discovery, personalization, and merchandising solutions. The website highlights the strategic acquisition of Loop54 and the evolution of its product into Infinity, enhancing their AI capabilities and market offering. The company targets B2B and B2C online retailers seeking advanced search and recommendation technologies to improve customer experience and sales conversion. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and consent management tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and anti-clickjacking measures, though some security headers could be improved. Privacy compliance is well addressed with GDPR-consent mechanisms and a comprehensive privacy policy. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional presentation and business signals. Overall, the site demonstrates a high level of professionalism, technical competence, and business credibility.

L

Landschaftsverband Rheinland (LVR)

lvr.de

52

The Landschaftsverband Rheinland (LVR) is a large regional public authority in Germany serving approximately 9.8 million people with a workforce of around 22,000 employees. The organization provides a broad range of social, youth, psychiatric, educational, and cultural services. The website reflects a mature digital presence with comprehensive content targeting citizens, social institutions, and government partners. Technically, the site uses standard web technologies including JavaScript, CSS, and Matomo analytics, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit incident response information are absent. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, the domain and website are legitimate and trustworthy, consistent with a government entity.

I

ifo Institute

econpol.eu

68

The ifo Institute's EconPol Europe platform is a reputable economic policy research and advisory network focused on European economic and fiscal policy. It leverages a global network of economists, including Nobel laureates, to provide evidence-based policy advice. The website is professionally designed, well-structured, and targets policymakers, researchers, and the public interested in economic policy. Technically, it uses Drupal 10 CMS hosted on Microsoft Azure DNS infrastructure, with modern web technologies and good mobile optimization. Security posture is strong with HTTPS and cookie consent mechanisms, although explicit security policies and vulnerability disclosures are absent. Overall, the site is trustworthy and compliant with GDPR, with clear contact information and active social media presence.

I

ifo Institute

cesifo.org

66

The ifo Institute operates the CESifo Network, a globally recognized independent economic research network funded by the State of Bavaria. The network connects over 2000 prominent economists worldwide, fostering international scientific exchange and economic policy debate. The website serves as a hub for research dissemination, events, publications, and policy discussions, targeting economists, researchers, and policymakers. The business model is primarily non-profit and government-funded, emphasizing academic collaboration and policy impact. Technically, the website is built on Drupal 10, hosted on Microsoft Azure DNS infrastructure, and employs modern web technologies including JavaScript frameworks and Matomo analytics. The site is well-optimized for mobile devices, accessible, and SEO-friendly, reflecting a mature digital presence. The content is rich, professionally presented, and multilingual, enhancing its global reach. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks publicly visible security policies or incident response contacts. No vulnerabilities or suspicious elements were detected in the content or WHOIS data. The domain registration is consistent with the organization's profile, hosted on reputable infrastructure without privacy protection, appropriate for a public research entity. Overall, the website demonstrates a strong security posture, excellent content quality, and good privacy compliance, supporting the credibility and trustworthiness of the CESifo Network as a leading economic research platform.

D

Drohnen-Shows.de

drohnen-shows.de

38

Drohnen-Shows.de is a specialized service provider offering customizable drone light shows and laser shows primarily targeting the German market. Their services cater to event organizers, companies, families, and the general public seeking unique and memorable aerial light experiences. The website is professionally designed using WordPress with modern plugins and themes, providing good SEO optimization and mobile responsiveness. The technical infrastructure is solid, hosted on German servers with HTTPS enabled, but lacks some advanced security headers and cookie consent mechanisms. Security posture is adequate but could be improved with explicit policies and incident response contacts. Overall, the business presents itself as a niche player with consistent branding and a clear service offering.

P

Peter Kasberger Baustoff GmbH

kasberger.de

47

Peter Kasberger Baustoff GmbH is a well-established German building materials wholesaler and retailer with a history spanning over 128 years. The company operates multiple locations in Eastern Bavaria and a branch in Upper Austria, serving a diverse clientele including craftsmen, planners, architects, builders, and renovators. Their product portfolio includes building materials for structural and civil engineering, windows, doors, gates, tiles, bathrooms, and garden building materials. The website reflects a mature digital presence built on TYPO3 CMS with modern web technologies and good SEO practices. Social media integration and multiple contact channels enhance customer engagement. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. WHOIS data confirms domain legitimacy and consistency with business claims, supporting high trustworthiness.

Mediothek Krefeld is a public media library and cultural institution based in Krefeld, Germany, providing a broad range of media lending services, digital resources, and community events. The website reflects a well-established local government-supported entity with a focus on education, culture, and digital inclusion. Technically, the site is built on the Contao CMS platform, using standard web technologies and hosted on reputable infrastructure. The site is accessible, professionally designed, and offers clear contact information and social media integration. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and visible privacy compliance mechanisms. Overall, the website is trustworthy and serves its community effectively, though improvements in privacy and security policies are recommended.

L

Land in Sicht e.V.

landinsicht.koeln

43

Land in Sicht e.V. is a small non-profit cultural association based in Germany, specializing in literature mediation and organizing literary events such as street art readings and short story nights. The organization targets literature enthusiasts and the local community in Cologne, supporting young authors and fostering cultural engagement. The website serves as an informational platform for event announcements, calls for submissions, and community outreach. Technically, the site is built on WordPress using the Twenty Twenty-One theme, hosted likely in Germany with a stable domain registration dating back to 2014. The site is mobile-optimized and accessible, though SEO and privacy compliance could be improved. Security posture is moderate with HTTPS enabled but lacking advanced security headers and DNSSEC. No privacy or cookie policies were found, indicating compliance gaps with GDPR requirements. Contact information is limited to an email address, with no phone or physical address provided. Social media presence is established on Facebook and Instagram. Overall, the website is professional and trustworthy for its niche but would benefit from enhanced privacy and security measures.

S

Stadt Willich

stadt-willich.de

64

Stadt Willich operates as the official municipal government website for the city of Willich, Germany. It provides a broad range of public services, digital portals, news, events, and citizen engagement tools. The site targets residents, visitors, and local businesses, positioning itself as a comprehensive local government resource. The business model is focused on public administration and community services, with a medium-sized organizational footprint typical of a city government entity. Technically, the website is built on Drupal CMS with modern JavaScript libraries such as Swiper.js for UI components and CookiesJSR for cookie consent management. Hosting appears to be managed via German infrastructure providers, with strong HTTPS enforcement and security headers including CSP with nonce support. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear GDPR-aligned privacy and cookie policies and a consent mechanism. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the website is professional, trustworthy, and well-maintained, serving its government function effectively. Recommendations include publishing security and incident response policies, adding vulnerability disclosure mechanisms, and enhancing transparency around data protection officer contacts.

S

Stichting Heuvellandbibliotheken

heuvellandbibliotheken.nl

57

Stichting Heuvellandbibliotheken operates as a regional public library network serving multiple municipalities in the Limburg region of the Netherlands. The organization provides a broad range of library services including lending physical and digital media, hosting community events, and offering digital literacy support. The website reflects a well-maintained digital presence with clear navigation, mobile optimization, and relevant content targeting residents and visitors of the Heuvelland area. Technically, the site is built on Adobe Experience Manager CMS, employs HTTPS, and uses Matomo for analytics, indicating a modern and privacy-conscious infrastructure. Security posture is solid with no visible vulnerabilities or exposed sensitive data, though formal security policies and incident response contacts are not published. Overall, the site demonstrates a high level of professionalism and trustworthiness appropriate for a public service entity.

R

Rhein-Kreis Neuss

rhein-kreis-neuss.de

56

Rhein-Kreis Neuss operates as a regional government authority in Germany, providing a comprehensive range of public services and information to residents, businesses, and visitors. The website serves as a digital portal for administrative, cultural, educational, and economic services, reflecting a well-structured and professionally maintained online presence. The use of TYPO3 CMS and Matomo analytics indicates a mature digital infrastructure with a focus on privacy and user experience. Technically, the website demonstrates good implementation practices, including responsive design, accessibility features, and SEO optimization. Security measures such as HTTPS and privacy-conscious analytics configurations are in place, although explicit security headers and incident response policies are not publicly documented. The domain registration data aligns well with the website's governmental nature, supporting its legitimacy and trustworthiness. Overall, the security posture is solid but could be enhanced by publishing formal security policies and implementing additional HTTP security headers. Privacy compliance is strong, with clear cookie and privacy policies and mechanisms for user consent. The website content is safe for general audiences, with no adult or questionable material detected. Strategically, Rhein-Kreis Neuss should focus on enhancing transparency around security and incident response to further build trust and resilience. The digital platform is well-positioned to support the district's public service mission effectively.

S

Stadt Dormagen

dormagen.de

64

Stadt Dormagen operates as the official municipal government website for the city of Dormagen, Germany. It provides comprehensive information and services related to city administration, tourism, culture, business, and citizen engagement. The site targets residents, tourists, and local businesses, positioning itself as a central digital hub for municipal services and community information. The website is built on TYPO3 CMS and incorporates accessibility and multilingual features, reflecting a mature digital infrastructure suitable for a government entity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates a professional and trustworthy presence with good content quality and user experience.

W

Westdeutscher Rundfunk

wdr5.de

56

The website www1.wdr.de/radio/wdr5/index.html represents Westdeutscher Rundfunk (WDR), a large and established public broadcasting media entity in Germany. It offers a comprehensive range of radio programming, podcasts, news, and cultural content targeted primarily at German-speaking audiences interested in politics, culture, and regional news in North Rhine-Westphalia (NRW). The site is professionally designed with consistent branding and excellent content quality, reflecting WDR's strong market position in the media industry. Technically, the site uses modern web technologies including JavaScript, CSS, and ARD's proprietary player scripts, with responsive design optimized for mobile devices. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. Privacy compliance is weak due to missing privacy and cookie policies and lack of consent mechanisms. Contact information is limited to a phone hotline and a contact form, with no direct emails or incident response contacts visible. Overall, the site is trustworthy and safe for general audiences, with no adult or explicit content detected.

The website nextgeneration.bg is an official Bulgarian government portal dedicated to informing the public and stakeholders about the Next Generation EU initiatives, including the National Recovery and Resilience Plan, Cohesion Policy, Fair Transition Mechanism, REACT-EU, and other EU priorities. It serves as a comprehensive informational resource with access to official documents, presentations, and public consultation links. The site targets Bulgarian citizens, government officials, and entities involved in EU funding programs. Technically, the site uses Bootstrap for responsive design, Matomo for analytics, and integrates Vimeo for video content. The website is mobile optimized, accessible, and has clear navigation, though it lacks some advanced SEO and security headers. The performance is moderate, and the technical stack is modern but basic. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks visible security headers, privacy and cookie policies, and incident response information. There is no vulnerability disclosure or security.txt file. User tracking is moderate via Matomo but without explicit consent mechanisms, indicating privacy compliance gaps. Overall, the website is trustworthy and professional as a government information portal but would benefit from enhanced privacy compliance, security best practices, and clearer contact information to improve user trust and regulatory adherence.

A

AVM GmbH

avm.de

50

AVM GmbH operates the website en.fritz.com, providing a comprehensive portfolio of home networking products including routers (FRITZ!Box), mesh Wi-Fi systems, telephony devices, smart home products, and related applications. The company is positioned as a leading technology provider in the home networking and telecommunications sector, targeting consumers and small businesses seeking reliable and user-friendly Internet connectivity solutions. The website content is professionally curated, with clear navigation and detailed product information, supporting AVM's market presence and brand recognition. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries such as jQuery and Slick Slider for enhanced user experience. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive digital maturity profile. Analytics are implemented via Piwik (Matomo), reflecting a moderate level of user tracking balanced with privacy considerations. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, explicit security headers and published security policies or incident response procedures are not evident, representing areas for improvement. The absence of vulnerability disclosure mechanisms or security.txt files limits transparency in security communications. Overall, the website is trustworthy, safe, and professionally maintained, with no indications of adult or questionable content. The WHOIS data for the subdomain en.fritz.com is unavailable, which is expected as it is a subdomain; the main domain fritz.com is a well-established brand owned by AVM GmbH. Strategic recommendations include enhancing security headers, publishing security policies, and establishing vulnerability disclosure channels to strengthen security posture and stakeholder trust.

D

Dealum

dealum.com

69

Dealum is a technology company founded in 2016 that provides a SaaS platform focused on managing applications, increasing investor engagement, and facilitating co-investment. The website presents a professional and modern design, leveraging Angular framework and integrating analytics tools such as Microsoft Clarity and Google Tag Manager. The technical infrastructure is supported by Cloudflare DNS services, ensuring reliable hosting and domain management. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced security headers and explicit security policies on the website. Privacy compliance is weak due to absence of privacy and cookie policies, which should be addressed to meet regulatory standards. Overall, the website is accessible, well-structured, and targets investors and startups seeking streamlined investment management solutions.

3

3DHochdrei

3dhochdrei.de

55

3DHochdrei is a German-based small business specializing in photorealistic 3D visualizations and virtual tours primarily for real estate, museums, and commercial clients. Their website presents a professional and modern digital presence built on WordPress, leveraging contemporary front-end libraries such as Swiper.js and AOS for animations. The company offers a range of services including 3D rendering, virtual 360-degree tours, drone photography, and virtual trade show stands, targeting businesses seeking to enhance customer engagement through immersive digital experiences. Social media integration and client references support their market positioning as a niche provider in the German market. Technically, the site is well-structured with good SEO practices and mobile optimization, though performance is moderate and accessibility is basic. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and professional but could improve in security and privacy transparency.

D

Datenschutz ist Pflicht

datenschutz-ist-pflicht.de

59

Datenschutz ist Pflicht is a German-based company specializing in outsourced data protection management services, offering a flat-rate subscription model. Their services include certified data protection officers, IT security consulting, and compliance management, targeting businesses seeking comprehensive GDPR and data privacy solutions. The company emphasizes professional expertise with over 35 years of strategic IT consulting experience and multilingual support across more than 20 industries. Technically, the website is built on WordPress with the Divi theme, hosted by webgo.de, and employs modern web technologies including lazy loading and responsive design. Security posture is solid with HTTPS and certified personnel, though improvements are recommended in security headers and cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-positioned in the data protection services market.

V

VR-Bank eG

vrbank-eg.de

61

VR-Bank eG operates as a regional cooperative bank in Germany, providing local banking and financial services to its community. The website serves as an informational portal highlighting the bank's offerings and commitment to local customer service. The technical infrastructure is based on modern web technologies including Angular Material and uses Dynatrace for performance monitoring, indicating a moderate level of digital maturity. However, the site lacks visible privacy and cookie policies, which impacts compliance and trust. Security posture is moderate with no explicit security headers or incident response information found, suggesting room for improvement in security transparency and best practices. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security disclosures to improve user trust and regulatory adherence.

S

Sparkasse Aachen

sparkasse-aachen.de

70

Sparkasse Aachen is a regional financial institution providing a broad range of banking and financial services including online banking, loans, investments, insurance, and personal advisory services. The website targets both private and corporate customers with a comprehensive digital presence and strong local market positioning, supported by awards and certifications. Technically, the site is built on a modern CMS platform (likely Adobe Experience Manager), uses HTTPS with good security practices, and integrates monitoring and analytics tools such as Dynatrace and Google Analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is strong with session management and cookie consent mechanisms, though explicit security policy and incident response contacts are not published. Overall, the website is professional, trustworthy, and compliant with GDPR and cookie regulations, making it a reliable digital channel for the bank's customers.

F

FactFinder

fact-finder.de

58

FactFinder is a well-established German company specializing in AI-driven search and product discovery solutions for eCommerce businesses. With over 20 years of experience and a client base exceeding 2,000 online shops, FactFinder offers a comprehensive SaaS platform that enhances conversion rates through personalized shopping experiences. The company holds multiple industry awards, underscoring its market leadership and innovation. Technically, the website employs modern JavaScript libraries, consent management, and analytics tools, ensuring a robust digital presence with good performance and mobile optimization. Security practices include HTTPS enforcement and input validation, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, making it a credible resource for eCommerce technology solutions.

F

Fachagentur Wind und Solar

fachagentur-wind-solar.de

52

Fachagentur Wind und Solar is a German organization dedicated to promoting environmentally compatible use of wind and solar energy. Acting as an interface between science, practice, and politics, it supports the energy transition with in-depth analyses, expert information, and practical guidance. The website is professionally designed, content-rich, and regularly updated with news, publications, and events focused on renewable energy topics. The target audience includes policymakers, practitioners, researchers, and local communities interested in wind and solar energy development. Technically, the site runs on TYPO3 CMS, hosted on AWS infrastructure, and uses Matomo for privacy-respecting analytics. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, GDPR compliant, and provides valuable resources in the renewable energy sector.

A

AVM GmbH

myfritz.net

71

The website sso.myfritz.net serves as the secure login portal for MyFRITZ!Net, a service provided by AVM GmbH, a recognized German technology company specializing in home networking products. The platform allows users to authenticate and manage their FRITZ! devices through a centralized account. The site is professionally designed with consistent branding and provides links to comprehensive privacy and terms of service documents hosted on official AVM domains. The target audience is primarily users of FRITZ! products seeking device management and account access.

B

BAMBERG Tourismus & Kongress Service

tagen-in-bamberg.de

61

The website 'Tagen in Bamberg' serves as a regional platform promoting Bamberg as an ideal location for meetings, conferences, and events. Operated by BAMBERG Tourismus & Kongress Service, it offers comprehensive services including venue listings, event programs, and support services tailored to corporate and event planners. The site is professionally designed with clear navigation and is optimized for mobile devices, providing a positive user experience. Technically, it employs modern JavaScript libraries, Google Tag Manager, and a GDPR-compliant cookie consent mechanism, reflecting a moderate level of digital maturity. Security-wise, the site uses HTTPS and cookie consent but lacks visible advanced security headers or explicit security policies, indicating room for improvement. Overall, the website is trustworthy, compliant with privacy regulations, and well-positioned within its niche, though it could enhance its security posture and transparency further.

W

Welcome Hotels GHG Beteiligungsgesellschaft mbH

welcome-hotels.com

55

Welcome Hotels GHG Beteiligungsgesellschaft mbH operates a network of 14 hotels across Germany, offering accommodation, wellness, and event hosting services. The company emphasizes sustainability, demonstrated by its GreenSign certification, and targets a broad audience including tourists, business travelers, and event organizers. The website is professionally designed, mobile-optimized, and provides comprehensive information about hotel locations, amenities, and special offers. Technically, the site uses modern JavaScript libraries and integrates cookie consent mechanisms, ensuring compliance with privacy regulations. Security posture is good with HTTPS enforced, though some security headers are missing and no explicit security policy or incident response information is published. The WHOIS data is unavailable, which slightly reduces transparency but the overall business credibility remains high based on website content and trust indicators.

M

Mohrenhaus - Das Haus für schöne Sachen

mohren-haus.de

53

Mohren-Haus is a German-based e-commerce retailer specializing in lifestyle, gifts, kitchenware, home decor, fashion, and accessories. The website presents a well-structured online shop with a clear focus on branded and quality products, targeting a general audience interested in unique and beautiful items. The business appears to be a small local/regional player with an online presence to expand its reach. Technically, the website uses modern web technologies including Google Tag Manager and Facebook Pixel for marketing and analytics, hosted on Alfahosting with consistent WHOIS data. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks some security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policy pages, although a cookie consent mechanism is present. Overall, the website is legitimate and trustworthy but could improve transparency and security practices.

G

Geburtshaus Levi Strauss Museum

levi-strauss-museum.de

42

The Geburtshaus Levi Strauss Museum is a specialized cultural institution located in Buttenheim, Germany, dedicated to the life and legacy of Levi Strauss, the inventor of blue jeans. The museum offers exhibitions, educational programs, and a museum shop, targeting general visitors, fashion enthusiasts, and cultural tourists. It holds a niche market position with international recognition through awards. Technically, the website is built on WordPress using a child theme of Twenty Twenty-One, hosted on servers associated with flessio.com and flessio.de. The site demonstrates good mobile optimization and SEO practices but lacks advanced security headers and cookie consent mechanisms. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in security policy transparency and headers. Overall, the website is professional, trustworthy, and provides clear contact information and social media presence, supporting its credibility as a legitimate museum entity.

C

Colourbox

colourbox.de

58

Colourbox is a large German-based stock media agency offering over 26 million royalty-free images, videos, and vectors for purchase. The company targets businesses and individuals requiring licensed digital media for web, print, and social media use. The website demonstrates a mature technical infrastructure leveraging modern JavaScript frameworks, CDN hosting via AWS Cloudfront, and integration with Google Tag Manager for analytics and marketing. While the site is well-designed and content-rich, it lacks explicit privacy, cookie, and terms of service policies, which are critical for GDPR compliance and user trust. Security posture is adequate with HTTPS enabled but could be improved by implementing security headers and publishing incident response policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security transparency.

E

elementare teilchen GmbH

elementare-teilchen.de

42

elementare teilchen GmbH is a specialized agency focused on TYPO3 CMS development, web design, and programming services primarily serving clients in Germany. Their portfolio includes reputable institutions such as universities and government-related organizations, positioning them as a trusted niche provider in the technology sector. The company emphasizes a content-first approach and offers tailored web solutions with a strong design and technical foundation. Technically, the website employs modern frameworks like Bootstrap and uses optimized assets such as WebP images and self-hosted fonts, indicating a moderate to good level of digital maturity. Hosting is provided by SchlundTech, a professional hosting provider, and the site is mobile optimized with clear navigation and good content relevance. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks explicit security headers and published security policies, which are areas for improvement. Privacy compliance is partial, with a privacy policy linked but no cookie consent mechanism or GDPR explicit statements visible. Overall, the website is professional and trustworthy but could enhance its security posture and privacy compliance to meet higher standards.

V

vbw Stiftung Lebensgrundlagen Bayern

vbw-slb.de

58

The vbw Stiftung Lebensgrundlagen Bayern is a non-profit foundation focused on promoting sustainable social and ecological projects within Bavaria, Germany. It offers financial support through various funding awards ranging from 10,000 to 250,000 Euros annually, with a total funding volume of up to 600,000 Euros. The foundation targets individuals, organizations without profit motives, and educational institutions engaged in community and environmental sustainability initiatives. The website provides an online platform for registration and application, facilitating a structured and transparent funding process.

B

bayme vbm

baymevbm.de

65

bayme vbm is a prominent employer association representing the metal and electrical industries in Bavaria, Germany. With approximately 3,600 member companies, it provides advocacy, legal support, training, and networking services to its members. The organization operates under the umbrella of the Vereinigung der Bayerischen Wirtschaft e. V. (vbw), reinforcing its strong regional and industry presence. The website is professionally designed, multilingual (German and English), and offers comprehensive resources and tools tailored to its target audience of businesses in manufacturing and related sectors. Technically, the website employs modern JavaScript libraries such as Swiper.js and Vimeo Player API, integrates cookie consent mechanisms compliant with GDPR, and uses accessibility tools like eyeAble. The site is responsive and optimized for mobile devices, with good SEO and accessibility practices. Security-wise, the site enforces HTTPS, implements standard security headers, and uses secure forms for login. However, it lacks a dedicated security policy or incident response page and does not provide a vulnerability disclosure or security.txt file. Overall, the security posture is solid with no visible vulnerabilities or exposed sensitive data. The WHOIS data aligns with the business claims, showing consistency and legitimacy. The site uses etracker for analytics and tracking with user consent, maintaining good privacy compliance. Social media presence across major platforms enhances trust and outreach. The risk level is low, but improvements could be made by publishing explicit security policies and incident response contacts to enhance transparency and preparedness. The website serves its business purpose effectively with high professionalism and user experience.

R

run.events GmbH

run.events

68

run.events GmbH operates a sophisticated AI-powered event management platform designed to streamline the entire event lifecycle from planning to post-event analytics. The company targets event organizers, agencies, venues, and associations, offering a comprehensive SaaS solution that integrates planning, marketing automation, ticketing, delivery, and analytics. Their market position emphasizes cost savings, enhanced security, and automation, positioning them as a modern alternative to traditional event management tools. Technically, the website leverages modern frameworks such as Astro and React, hosted on Azure with integrations to major analytics and marketing platforms including Google Analytics, HubSpot, LinkedIn, and Microsoft Clarity. The site is well-optimized for performance, mobile responsiveness, and SEO. Security posture is strong with HTTPS enforced, clientTransferProhibited domain status, and cookie consent mechanisms, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is robust with clear policies and consent banners. Overall, the domain registration details align well with the business claims, supporting legitimacy and trustworthiness.

B

BKK Budapesti Közlekedési Központ

bkkinfo.hu

65

BKK Budapesti Közlekedési Központ is the primary public transportation authority in Budapest, Hungary, providing comprehensive travel planning, ticketing, and real-time traffic updates. The website serves residents and visitors with detailed information on public transport services, accessibility, and operational changes. It holds a strong market position as the official transport provider with a large user base. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and MapLibre GL JS for interactive maps. It is hosted likely behind Cloudflare, ensuring good performance and security. The site is mobile-optimized and accessible, with clear navigation and professional design. Security posture is solid with HTTPS enforced and secure login forms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident in the HTML and could be improved. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy, professional, and well-maintained, with no detected vulnerabilities or suspicious content. Strategic recommendations include enhancing security headers and continuous monitoring of third-party scripts to maintain security integrity.

V

Vereinigung der Bayerischen Wirtschaft e. V.

vbw-bayern.de

66

The website www.vbw-bayern.de represents the Vereinigung der Bayerischen Wirtschaft e. V., a voluntary, cross-sector economic interest association for the Bavarian economy. It serves as a key platform for economic policy advocacy, information dissemination, and member services targeting Bavarian businesses and stakeholders. The site features rich content including events, publications, podcasts, and press releases, reflecting an active engagement with its audience. The business model is non-profit and focused on regional economic representation, positioning vbw as a leading economic association in Bavaria. Technically, the site employs a modern web stack with JavaScript, CSS, and HTML5, utilizing libraries such as Swiper.js for interactive sliders and etracker for analytics. The site is mobile-optimized, accessible, and SEO-friendly, though it appears to use a custom or proprietary CMS. Performance is moderate, with good mobile and accessibility features. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. Security headers are minimal but present, and no critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced security posture. Overall, the site is trustworthy, professional, and compliant with privacy regulations, serving its business purpose effectively. Strategic improvements in security transparency and header implementation would further strengthen its security posture.

B

Bamberg Tourismus

bamberg.info

62

Bamberg.info is the official tourism website for the city and region of Bamberg, Germany, a UNESCO World Heritage site. The site provides comprehensive information on cultural attractions, events, accommodations, guided tours, and local activities, targeting tourists, families, and groups. It serves as a central hub for planning visits, booking tickets, and exploring the region's rich heritage and leisure offerings. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates services like OpenStreetMap, YouTube, and Plausible Analytics. It features a GDPR-compliant cookie consent mechanism and privacy policy, reflecting good privacy practices. Security posture is moderate with HTTPS usage and cookie consent, though additional security headers could enhance protection. The WHOIS data is not publicly available, indicating privacy protection, which is justified for this type of public-facing tourism portal. Overall, the website is professional, trustworthy, and well-positioned in the hospitality sector.

Netbite is a German-based small business specializing in hosting and IT solutions tailored for small and medium-sized enterprises. Established in 2004, the company offers a range of services including webhosting, root servers, server housing, cloud infrastructure, and IT support such as Mac support and WLAN installations. Their market position is that of a niche provider focusing on reliable and secure hosting solutions with a local presence in Germany. The website is professionally designed with clear navigation and good mobile optimization, reflecting a mature digital presence. Technically, the website uses standard modern web technologies such as HTML5, CSS3, and JavaScript, hosted by Vautron Rechenzentrum AG. The site is served over HTTPS with Let’s Encrypt certificates, ensuring secure communications. However, some security best practices like DNSSEC and security headers are not implemented, representing areas for improvement. The site does not use any visible analytics or tracking technologies, indicating a privacy-conscious approach. From a security perspective, the site demonstrates a solid baseline with HTTPS and no exposed sensitive data. The absence of a dedicated security policy or vulnerability disclosure page suggests room for maturity in security governance. Contact information is clearly provided, but incident response and security contact channels are not explicitly stated. Overall, the security posture is good but could be enhanced with additional policies and technical controls. The overall risk assessment is low, with no signs of malicious content or vulnerabilities. Strategic recommendations include enabling DNSSEC, implementing security headers, adding a vulnerability disclosure policy, and introducing a cookie consent mechanism to improve privacy compliance. These steps will enhance trust and security culture while aligning with GDPR requirements.

I

ifo Institut

ifo.de

61

The ifo Institut is a prominent German economic research institute focused on shaping economic debate through high-quality research and policy advice. The website reflects a mature digital presence with a professional design, comprehensive content, and strong integration with academic and policy networks such as CESifo and EconPol Europe. Technically, the site is built on Drupal 10, hosted on Microsoft Azure DNS infrastructure, and uses modern web technologies ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response policies could be improved. Privacy compliance is well addressed with GDPR-compliant privacy and cookie policies. Overall, the site demonstrates high business credibility and trustworthiness, serving a target audience of researchers, policymakers, and the public interested in economic research.

R

Rausgegangen GmbH

rausgegangen.de

64

Rausgegangen GmbH operates a professional event discovery platform primarily targeting German cities, offering users curated event tips, ticketing, and lotteries. The website is well-branded and provides a mobile-optimized experience with a modern tech stack including React, Alpine.js, and Matomo analytics. Privacy compliance is supported by an Iubenda cookie consent mechanism, although an explicit privacy policy URL was not found in the provided content. Security posture is solid with HTTPS and error monitoring via Sentry, but lacks published security policies or incident response contacts. Overall, the platform is credible and trustworthy with a focus on media and entertainment.

C

Verdiene dauerhaft mehr Geld mit deinem Design!

calculate.design

47

The website calculate.design offers specialized online tools aimed at designers to help them calculate appropriate hourly rates and project pricing. It features two main products: KAJY, a free hourly rate calculator, and VTV Design, a paid project pricing calculator with extensive examples. The site is professionally designed, with consistent branding and endorsements from recognized design professionals and organizations such as AGD and PAGE Magazin. Technically, the site uses standard web technologies (HTML5, CSS, JavaScript) and is moderately optimized for performance and mobile use. Security posture is moderate with no visible advanced security headers or policies, and no HTTPS status was explicitly found in the provided data. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. No contact emails or phone numbers are provided on the main page, which limits direct communication channels. Overall, the site is trustworthy and serves a niche market effectively.

М

Министерство на електронното управление

egov.bg

75

The website egov.bg is the official Bulgarian government portal for electronic services and information, managed by the Ministry of Electronic Governance. It serves as a centralized platform for citizens and businesses to access a wide range of administrative services, including registrations, permits, tax payments, and document validation. The portal is well-positioned as the primary digital gateway for e-government services in Bulgaria, offering comprehensive content and a user-friendly interface. The target audience includes Bulgarian citizens and business entities seeking government services online. Technically, the site is built on IBM WebSphere Portal technology, utilizing JavaScript frameworks such as Dojo Toolkit and Matomo for analytics. The infrastructure supports moderate performance with good mobile optimization and accessibility features. The site employs HTTPS with strong SSL configuration and includes cookie consent mechanisms aligned with GDPR requirements. However, there is room for improvement in security headers and incident response transparency. From a security perspective, the portal demonstrates a mature posture with encrypted communications, user consent for tracking, and CAPTCHA protections on feedback forms. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies are comprehensive and GDPR compliant, enhancing user trust. The domain registration details align with the official government entity, reinforcing legitimacy. Overall, egov.bg is a trustworthy, professional government portal with strong content quality and compliance. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving transparency on data retention policies to further strengthen security and user confidence.

The website identity.eop.bg serves as the login portal for the Bulgarian government's centralized electronic public procurement system (ЦАИС ЕОП). It provides secure user authentication for stakeholders involved in public procurement processes. The platform is funded by the European Union and the Bulgarian government, reflecting its official and authoritative nature. The site supports OAuth2 authorization with PKCE and integrates digital signature login options, indicating a mature approach to secure identity management. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and ASP.NET frameworks. It employs Matomo analytics for user tracking, though no explicit cookie consent mechanism is present. The site is moderately optimized for mobile and accessibility, with a professional and consistent design aligned with government branding. However, security headers are not detected in the provided data, and no explicit security or incident response policies are published. From a security perspective, the site demonstrates good practices such as anti-forgery tokens and secure password inputs. The use of PKCE in OAuth2 flows enhances security against interception attacks. The absence of visible vulnerabilities and the consistent WHOIS data support a strong trust profile. Nonetheless, improvements are recommended in cookie consent, security headers, and transparency of security policies to enhance compliance and user trust. Overall, the platform is a reliable and professional government service with moderate technical maturity and a solid security foundation. Strategic enhancements in privacy compliance and security transparency will further strengthen its posture and user confidence.

M

Mať Filipa

matfilipa.sk

52

The website matfilipa.sk is an educational project dedicated to raising awareness and knowledge about intellectual property rights among students and young creators in Slovakia. It offers detailed educational content on industrial and authorial intellectual property, including downloadable materials and an option to order printed educational books. The site is positioned as a niche educational resource with a focus on Slovak and European intellectual property institutions. Technically, the website uses a standard modern stack including Bootstrap, jQuery, and Google Analytics, hosted likely by Websupport. It is secured with HTTPS and DNSSEC, but lacks some security headers and uses some HTTP resources, which could be improved. Privacy compliance is weak due to the absence of privacy and cookie policies. Contact is provided only via a detailed form without direct emails or phone numbers. Overall, the site is functional, informative, and trustworthy but could benefit from enhanced security and privacy practices.