Security Directory

H

Hochschule für Technik Stuttgart

eu-beratungsstelle.de

53

The EU-Beratungsstelle website represents a newly established advisory service launched in April 2024, hosted by the Hochschule für Technik Stuttgart and funded by the Ministry of Science, Research and Arts Baden-Württemberg. It provides free support to state universities of applied sciences and the dual university in Baden-Württemberg for EU research funding applications under Horizon Europe and its successor programs. The site is professionally designed using TYPO3 CMS with good mobile optimization and SEO practices. It features clear contact information and a cookie consent mechanism, reflecting a commitment to privacy compliance. Security posture is solid with HTTPS and no visible vulnerabilities, though formal security policies and incident response information are absent. Overall, the site is trustworthy, well-branded, and aligned with its institutional affiliations.

H

HAW Hessen

haw-hessen.de

60

HAW Hessen is a consortium of six Hessian Universities of Applied Sciences focused on providing applied higher education, research, and cooperative doctoral programs. The website serves as an informational portal for the consortium, targeting students, academic partners, and stakeholders in the Hessen region of Germany. Technically, the site is built on TYPO3 CMS with Bootstrap and jQuery, offering a modern, responsive, and accessible user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and cookie consent mechanisms suggests room for improvement. The WHOIS data aligns well with the academic nature of the site, showing consistent domain registration and hosting. Overall, the site is professional, trustworthy, and well-positioned within the education sector.

T

TSV Burgdorf

tsv-burgdorf.de

63

TSV Burgdorf is a well-established non-profit sports club based in Germany, offering a wide range of sports departments including traditional sports like football, handball, and tennis, as well as modern activities such as E-Sport. The club serves the local community of Burgdorf and maintains a strong presence through its website and social media channels. The website is built on TYPO3 CMS and demonstrates good technical maturity with modern frontend technologies and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms in place, although formal security policies and incident response contacts are not published. Overall, the site reflects a professional and trustworthy organization with clear contact information and community engagement.

M

My Blog

world-of-leading-golf.com

47

The website 'Exploring Golf: Legends and Iconic Tournaments' is a small-scale WordPress blog dedicated to providing educational content about golf history, legendary players, major tournaments, and related cultural aspects. It targets golf enthusiasts and general sports fans seeking knowledge about the sport's heritage. The site offers well-structured, relevant content with good design and navigation, optimized for mobile devices. Technically, it uses a modern WordPress stack with popular libraries and frameworks such as Bootstrap and jQuery, ensuring a moderate performance and good SEO practices. Security-wise, the site enforces HTTPS and avoids exposing sensitive data but lacks important security headers and formal privacy or cookie policies, which impacts compliance and trust. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency. Overall, the site is functional and informative but would benefit from enhanced privacy compliance, security hardening, and clearer business contact information to improve trust and credibility.

M

MoneyGuide, Inc.

moneyguidepro.com

71

MoneyGuide, Inc., a subsidiary of Envestnet, is a leading provider of financial planning software designed to empower financial advisors and their clients through personalized, goal-based planning solutions. The website showcases a comprehensive platform with multiple configurable products such as MoneyGuide, MyBlocks, and Wealth Studios, targeting financial professionals seeking scalable and interactive planning tools. The company positions itself strongly in the finance sector with a medium-sized business profile and consistent branding across its digital presence. Technically, the website employs a mature digital infrastructure with modern marketing and analytics technologies including Google Tag Manager, Marketo, Salesforce LiveAgent, and multiple tracking pixels, indicating a high level of digital marketing sophistication. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS and implements cookie consent mechanisms, though HTTP security headers are not explicitly detected in the source. No critical vulnerabilities or exposed sensitive data were found. WHOIS data is unavailable or protected, which is common for commercial entities but reduces transparency. Overall, the website demonstrates a strong security posture and privacy compliance with room for improvement in explicit security header implementation and incident response disclosures. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving accessibility compliance to further strengthen trust and security culture.

R

Recordati S.p.A.

imidazyl.it

45

Imidazyl.it is the official website for the Imidazyl brand of eye drops, owned by Recordati S.p.A., a well-established pharmaceutical company in Italy. The site provides detailed product information, usage instructions, and advice related to eye irritation and allergic conditions. It targets Italian consumers seeking relief for eye allergies and redness. The website is built on WordPress with a modern tech stack including Bootstrap and jQuery, and integrates analytics tools such as Google Analytics, Matomo, and Facebook Pixel for user tracking and marketing purposes. The site is mobile optimized and presents a professional design with clear navigation. Security posture is adequate with HTTPS enforced and cookie consent implemented, though it lacks DNSSEC and explicit security headers. No direct contact information or security policies are published, which could be improved to enhance trust and compliance. Overall, the domain registration is consistent with the business, indicating legitimacy and a mature online presence.

Longleaf Services, Inc. is a well-established non-profit organization founded in 2006, dedicated to serving the university press community by providing comprehensive order processing, warehousing, fulfillment, and additional operational services. The company operates with a clear focus on university presses, bookstores, and wholesalers, positioning itself as a specialized service provider with a strong reputation supported by a long domain history and a client base of reputable university presses. Technically, the website is built on a modern WordPress platform with common plugins and frameworks, delivering a good user experience with moderate performance and mobile optimization. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is basic, with a privacy policy present but lacking cookie consent mechanisms and GDPR explicit indicators. Overall, the website is professional, trustworthy, and safe for general audiences.

S

ServeU

serveu.ae

47

ServeU is a prominent facilities management company based in the UAE, offering a comprehensive range of integrated FM services including hard and soft services, security, energy management, and specialized maintenance solutions. With a large workforce and extensive client base, ServeU positions itself as a leading FM provider in the region. The website is built on WordPress with modern plugins and technologies, providing a professional and responsive user experience. Security posture is adequate with HTTPS and some security best practices, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is credible and trustworthy but would benefit from enhanced compliance and security transparency.

C

celocore Webservices GmbH

celocore.de

49

Celocore Webservices GmbH is a small, specialized internet agency based in Braunschweig, Germany, with over 17 years of experience. The company focuses on providing comprehensive digital services including TYPO3 and Magento web development, SEO optimization, hosting, cloud storage, and GDPR-compliant video conferencing solutions. Their market position is that of a trusted regional expert offering personalized and professional services to businesses seeking to enhance their digital presence. The website reflects a consistent brand image and clear communication of their service offerings. Technically, the website is built on the TYPO3 CMS platform, leveraging Bootstrap for responsive design and jQuery for interactivity. It integrates Google Analytics and Google Ads for marketing and tracking purposes, with a GDPR-compliant cookie consent mechanism implemented via Klaro. The site demonstrates good mobile optimization and moderate performance, with a clean and professional design. From a security perspective, the site enforces HTTPS and anonymizes IP addresses in analytics, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies. Overall, the site maintains a good security posture but could improve transparency and technical security controls. The overall risk assessment is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include publishing formal security policies, enhancing HTTP security headers, and maintaining regular security audits to sustain trust and compliance.

F

FRAKO Kondensatoren- und Anlagenbau GmbH

frako.com

57

FRAKO Kondensatoren- und Anlagenbau GmbH is a specialized company focused on reactive power compensation, energy management, and power quality solutions. The company offers a comprehensive portfolio of products, services, and training aimed at improving energy efficiency and network reliability, primarily targeting industrial and commercial energy professionals. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS with Bootstrap and uses Matomo analytics for privacy-conscious user tracking. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. The WHOIS data is notably absent or unregistered, which raises legitimacy concerns; however, the association with the parent company AdCapital Gruppe and consistent branding mitigate some risk. Overall, the site scores well on content quality and technical implementation but should address WHOIS transparency and security policy publication to improve trust and compliance.

L

Löwen Medien Service

loewenmedienservice.de

69

Löwen Medien Service is a specialized educational media distributor operating under the Westermann Gruppe umbrella, focusing on supplying schools and educators in Germany with a comprehensive range of teaching materials from all publishers. Their business model emphasizes convenience through no minimum order values, statutory discounts, free shipping, and tailored packaging and delivery services. The website reflects a professional and consistent brand presence with good content quality and user experience. Technically, the site is built on TYPO3 CMS with modern libraries and frameworks, hosted by a reputable provider, and includes privacy-conscious analytics via Matomo with cookie consent managed by Klaro. Security posture is solid with HTTPS and form protections, though lacking explicit security headers and published security policies. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.

The Smart Built Environment Awards website serves as a professional platform to recognize excellence in the built environment sector, focusing on property management, community management, facilities management, and PropTech. The site is positioned as a regional leader in its niche, offering nomination, sponsorship, and event booking services. The business targets industry professionals and stakeholders primarily in the UAE and surrounding regions. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various UI libraries, with integration of Google Analytics and Facebook Pixel for marketing and tracking. The site is mobile optimized and presents a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers, and does not provide visible privacy or cookie policies, which impacts compliance and trust. Overall, the domain registration is consistent with the business claims and shows no suspicious patterns.

A

Al Masaood LLC

masaood.com

53

Al Masaood LLC is a well-established diversified conglomerate based in Abu Dhabi, UAE, with a strong presence across multiple sectors including automotive, industrial equipment, business services, retail, marine, and real estate. The company holds significant market leadership in the UAE, distributing major automotive brands such as Nissan, Infiniti, and Renault, and maintains a broad portfolio of services and partnerships. The website reflects a mature business with a professional digital presence, including comprehensive corporate information, sustainability reporting, and active social media engagement. Technically, the website is built on ASP.NET Web Forms with Umbraco CMS, leveraging modern front-end libraries such as jQuery and Bootstrap. It is mobile optimized and includes standard SEO and accessibility features. Google Analytics and Tag Manager are used for analytics and user tracking, with a moderate level of user tracking observed. Security practices include HTTPS enforcement and a Content-Security-Policy header, though additional security headers and DNSSEC are recommended to enhance security posture. The security posture is solid but could be improved by publishing explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is strong with clear privacy and cookie policies and GDPR consent mechanisms. WHOIS data confirms the domain's legitimacy and long-standing registration consistent with the company's history. Overall, Al Masaood LLC presents a trustworthy and professional online presence with room for incremental security enhancements to further strengthen its digital resilience.

P

Plachutta

plachutta-neuermarkt.at

54

Plachutta's Neuer Markt is a well-established restaurant located in Vienna, specializing in traditional Viennese cuisine with a modern presentation. The website reflects a strong market position with clear branding, comprehensive menu offerings, and services including dine-in, takeaway, and reservations. The target audience includes locals and tourists seeking authentic Viennese dining experiences. Technically, the site uses modern web technologies such as Bootstrap, Google Tag Manager, and Photoswipe for image galleries, ensuring a responsive and user-friendly experience. Security measures include HTTPS enforcement, cookie consent management, and use of Google reCAPTCHA, indicating a mature security posture. No critical vulnerabilities or compliance gaps were detected, though explicit security policies and incident response contacts could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR, supporting the business's credibility and customer engagement.

AVA Verlagsauslieferung AG is a Swiss-based logistics and distribution company specializing in media products, including books and music. Established in 1980, it serves over 300 publishers and approximately 3000 dealers, positioning itself as the largest barsortiment in Switzerland and a leading music retailer under the Musica Viva brand. The website reflects a business-focused approach with clear contact information and service descriptions targeting publishers, retailers, and private customers. Technically, the site uses a custom CGI backend with Bootstrap and jQuery on the frontend, offering moderate performance and basic mobile optimization. Security measures are minimal, with no visible security headers or cookie consent mechanisms, and no published security or incident response policies. Overall, the site is functional and professional but could benefit from enhanced security and privacy compliance.

G

Gerstner

gerstner.at

54

Gerstner is a well-established Austrian hospitality and confectionery company with a rich tradition dating back to 1847. The company offers premium confectionery products, café services, an online shop, and gift vouchers, targeting a broad audience interested in traditional and high-quality culinary experiences. The website reflects the brand's heritage and commitment to quality through professional design and consistent branding. Technically, the site is built on WordPress with Elementor and Bootstrap frameworks, integrating modern SEO and analytics tools such as Yoast SEO and Google Analytics. The presence of Cookiebot ensures GDPR compliance with a robust cookie consent mechanism. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities. However, the site lacks a dedicated security policy and incident response contact, which could enhance trust and preparedness. Overall, the domain registration details align well with the business claims, reinforcing legitimacy and trustworthiness.

Legalcom Group is an online legal information provider established since 2016, offering vetted legal advice and services globally through lawyers and paralegals. The website presents a professional image with clear descriptions of its services and career opportunities, targeting customers seeking legal information worldwide. The technical infrastructure is based on common frontend technologies such as Bootstrap and jQuery, with moderate performance and good mobile optimization. However, no CMS or hosting provider details are evident, and SEO and accessibility features are basic. Security posture is limited due to lack of HTTPS verification, missing security headers, and absence of privacy or cookie policies. The WHOIS data is unavailable due to query failure or privacy protection, which slightly reduces trustworthiness. Overall, the site is functional and professional but requires improvements in security and compliance documentation.

D

dmpagency.cz s.r.o.

dmpublishing.cz

53

dmpagency.cz s.r.o. is a Czech-based digital agency specializing in the development and expansion of B2B and B2C e-commerce platforms across Europe. With over 15 years of experience, the company combines its proprietary dmpshop platform with comprehensive marketing services and an AI-first approach to deliver modern, sustainable technology solutions that drive client growth. Their market position is reinforced by official partnerships with major technology providers such as Google and Microsoft, and a portfolio of significant clients and case studies demonstrating measurable business results. Technically, the website is built on a modern CMS platform (Dmp.Cms.Core) and leverages a robust tech stack including jQuery, Bootstrap, and multiple analytics and tracking tools, hosted partially on Microsoft Azure. The site is well optimized for performance, mobile responsiveness, and SEO.

B

Bureau of Middle East Recycling

bmr.ae

31

The Bureau of Middle East Recycling (BMR) is a small, non-profit organization serving as the regional forum and voice for the recycling industry in the Middle East, particularly focusing on metal recycling. The organization promotes recycling awareness, supports free trade of secondary raw materials, and provides networking and policy updates to its members. The website reflects this mission with professional design, multimedia content, and clear contact information, targeting industry stakeholders in the region. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries, with integration of Google Analytics and Tag Manager for tracking. The site is moderately optimized for performance and mobile devices, though some accessibility and SEO features could be improved. The hosting and domain registration align with the UAE location, supporting the business's regional focus. From a security perspective, the site uses HTTPS (implied by canonical URL), but lacks visible security headers and formal security policies. No privacy or cookie policies are present, indicating compliance gaps especially regarding GDPR. The contact form collects user data but lacks visible consent mechanisms. No WAF or blocking mechanisms are detected, and no suspicious or vulnerable elements are found in the HTML content. Overall, the website is professional and trustworthy but would benefit from enhanced security practices, privacy compliance, and clearer policy disclosures to improve user trust and regulatory adherence.

The Middle East Waste & Recycling Awards (MEWAR Awards) website serves as a professional platform to recognize and celebrate excellence in waste management and recycling within the Middle East region. Established in 2018, the awards event is organized by Waste & Recycling magazine and hosts industry leaders, sponsors, and partners to promote sustainable environmental practices. The website provides information about the awards, categories, key dates, sponsors, and media content such as videos and galleries. The target audience includes professionals and organizations involved in waste management and recycling sectors. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, and popular UI libraries like Slick Carousel and Flickity for interactive elements. It integrates Google Analytics and Google Tag Manager for user tracking and analytics. The site is mobile responsive and has a moderate performance profile. However, it lacks a known CMS and some advanced SEO and accessibility features. From a security perspective, the website uses HTTPS but lacks DNSSEC and important security headers, which are recommended for enhanced protection. No privacy, cookie, or terms of service policies are published, which impacts compliance and user trust. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. The domain registration is consistent with the business timeline and shows no suspicious patterns, indicating legitimacy. Overall, the website is functional and professional but would benefit from improved privacy compliance, security hardening, and clearer contact information to enhance trust and regulatory adherence.

H

HANSAINVEST Hanseatische Investment-GmbH

hansainvest.com

59

HANSAINVEST Hanseatische Investment-GmbH is a leading German service capital management company specializing in fund administration across all relevant asset classes. The company emphasizes personalized service and comprehensive fund partner support, positioning itself as a key player in the German financial services market. Their website offers extensive fund listings, financial calculators, and compliance information, targeting institutional investors and financial professionals. Technically, the website is built on a custom CMS with Bootstrap and jQuery, providing a responsive and well-structured user experience. Security posture is strong with HTTPS enforcement, security headers, and ISO 27001 certification, though DNSSEC is not enabled, representing an area for improvement. Privacy compliance is robust with clear privacy and cookie policies and GDPR adherence. Overall, the website reflects a mature, professional, and trustworthy financial services provider with a solid digital presence.

W

Westermann Gruppe

grundschuldiagnose.de

55

The website grundschuldiagnose.westermann.de is a professionally developed educational platform operated by the Westermann Gruppe, targeting German primary school educators with online diagnostic tests and differentiated learning materials for German and Mathematics. The platform offers subscription-based licenses for classes, schools, and school districts, supported by a centralized student management system and integration with partner educational services. The site is built on TYPO3 CMS with modern frontend technologies, providing a responsive and accessible user experience. Security posture is solid with HTTPS enforced, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a clear privacy policy but no cookie consent mechanism detected. Contact information is clearly provided, and the site holds a child-safe certification (fragFINN). Overall, the site is trustworthy, well-branded, and serves a clear educational niche.

S

stafftastic GmbH

praktikumswoche.de

60

Praktikumswoche.de is a German educational platform operated by stafftastic GmbH that facilitates internship weeks for students across over 200 regions in Germany. The platform enables students to explore different companies and professions by participating in daily internships during the holidays. It serves both students and companies, offering free registration and participation. The website is well-positioned in the education sector with strong media recognition and a broad regional presence. Technically, the website employs a modern tech stack including Bootstrap, jQuery, FontAwesome, and Cookiebot for cookie consent management. Hosting is managed via Google Domains, and privacy-respecting analytics are implemented using Plausible Analytics. The site is mobile-optimized with good SEO and accessibility basics. From a security perspective, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. Cookie consent is properly implemented, and privacy is respected with no-cookie YouTube embeds. However, security headers are not explicitly detected, and no public security policy or incident response contacts are provided, which could be improved. Overall, the website is trustworthy, professional, and compliant with GDPR. It lacks explicit contact information on the main page but provides social media links and a privacy policy. The domain registration is consistent and legitimate, supporting the platform's credibility.

The International Fairs Directory, operated by Mulpor Company S.R.L., is a well-established online platform providing a comprehensive global overview of fairs and exhibitions. It serves as a key resource for fair exhibitors, visitors, and industry professionals seeking business connections worldwide. The platform offers detailed listings of fairs, exhibitors, and related business contacts, positioning itself as a leading directory in the international trade show and events sector. The business is headquartered in Costa Rica and has been operational since at least 2016, with the domain registered in 2021. Technically, the website employs a custom-built solution leveraging Bootstrap and jQuery frameworks, with integrations for Google Analytics and Tag Manager for user tracking and analytics. The site is hosted by HOSTINGER operations, UAB, a reputable hosting provider. The website demonstrates good mobile optimization and moderate performance, with a professional design and clear navigation structure. Cookie consent mechanisms are implemented, enhancing privacy compliance, though the privacy policy is basic and lacks explicit GDPR compliance details. From a security perspective, the site uses HTTPS with a valid SSL certificate and displays a Norton Secured seal, indicating a trustworthy encryption standard. However, DNSSEC is not enabled, and several security headers are missing, which could be improved to enhance protection against common web threats. There is no publicly available security policy or incident response information, which limits transparency in security governance. The WHOIS data is consistent with the website's business claims, showing no privacy protection and a domain age appropriate for the business history. Overall, the website presents a moderate risk profile with good business credibility and technical implementation but could benefit from enhanced security practices and more comprehensive privacy and security disclosures. Strategic improvements in these areas would strengthen trust and compliance, supporting the platform's role as a global business connector.

Federparquet is an Italian non-profit association representing parquet retailers, installers, and related professionals. Founded officially in 2022, it aims to promote sector development through services such as insurance, expert consultancy, legal assistance, and member conventions. The website serves as an informational and contact portal for members and interested parties, with clear contact details and social media presence. Technically, the site is built on WordPress using the OnePress theme, incorporating modern web technologies like Bootstrap and jQuery. It includes a comprehensive cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS and DNSSEC enabled, though no explicit security policy or incident response information is published. Overall, the site is professional, user-friendly, and trustworthy, serving its niche audience effectively.

The Collegio degli Ingegneri e Architetti di Milano is a historic and reputable cultural association founded in 1563, dedicated to promoting the professional culture of engineers and architects in Milan. The organization offers professional training courses, events, publications, and membership services targeting professionals in engineering and architecture. The website reflects a well-structured and professional digital presence with clear navigation and relevant content for its audience. Technically, the site uses modern JavaScript libraries and frameworks such as Bootstrap and jQuery, with Google Tag Manager for analytics. Security posture is adequate with HTTPS enforced, but lacks some advanced security headers and anti-CSRF protections. Privacy and cookie policies are present, with a named Data Protection Officer contact, indicating GDPR awareness. Overall, the site is trustworthy and serves its niche well.

A

ANIT

anit.it

51

ANIT is a well-established Italian national association dedicated to promoting scientific information and best practices in thermal and acoustic insulation for the construction and industrial sectors. The website serves as a comprehensive platform offering news, legislative updates, training courses, publications, and membership services targeting professionals, companies, and public entities involved in insulation technologies. The organization maintains a strong market position within Italy's energy and construction sectors, supported by active social media engagement and a professional web presence. Technically, the website is built on WordPress with WooCommerce integration, leveraging modern frameworks like Bootstrap and libraries such as jQuery and FontAwesome. It employs Google Analytics and Google Tag Manager for analytics and tracking, alongside Iubenda for cookie consent management, indicating a moderate level of digital maturity. The site is mobile-optimized and SEO-friendly, with structured data enhancing search visibility. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's identity and history. Overall, ANIT's website demonstrates a solid business and technical foundation with room for improvement in security policy transparency and enhanced security header implementation. The site is safe for general audiences and aligns well with its stated mission and sector focus.

M

media touch

mediatouch.de

45

media touch is a German technology company operating a website powered by TYPO3 CMS, targeting German-speaking users. The company appears to provide digital technology services, though specific services are not detailed in the provided content. The website uses modern frontend technologies including Bootstrap and jQuery, and integrates Usercentrics for GDPR-compliant cookie consent management. Hosting is provided by Schlundtech, a German hosting provider, consistent with the website's regional focus. Security posture is moderate with HTTPS enabled and consent management in place, but lacks explicit privacy policies, terms of service, and security headers. Contact information and incident response details are not present, limiting transparency and trust. Overall, the website is professionally designed and mobile-optimized but could improve in privacy and security disclosures.

T

Tintri

tintri.com

69

Tintri is a technology company specializing in data management solutions tailored for virtualized workloads. Their offerings focus on providing enterprises with enhanced control, automation capabilities, and improved security for managing virtual data environments. The company has an established market presence since 2008, positioning itself as a specialized provider in the virtual data management sector. The website reflects a professional and consistent brand image, targeting IT professionals and enterprises requiring advanced data management solutions. From a technical perspective, the website is built on WordPress using modern tools such as Elementor and Yoast SEO, indicating a mature digital infrastructure. The site demonstrates good mobile optimization and SEO practices, although performance is moderate. Security-wise, HTTPS is used, and a cookie consent mechanism is implemented, but there is room for improvement in security headers, DNSSEC, and published security policies. The security posture is adequate but lacks transparency in privacy and incident response policies, which are critical for compliance and trust. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures. Strategic recommendations include publishing comprehensive privacy and terms of service policies, enabling DNSSEC, adding security headers, and providing clear incident response contacts to strengthen trust and compliance.

H

HANSAINVEST Hanseatische Investment-GmbH

hansainvest.de

59

HANSAINVEST Hanseatische Investment-GmbH is a leading German capital management company specializing in fund administration and comprehensive fund solutions across all relevant asset classes. The company positions itself as a trusted partner for fund partners and asset managers, offering services including insourcing and Luxembourg-based fund solutions through its subsidiary HANSAINVEST LUX S.A. The website is professionally designed, content-rich, and targets institutional investors and potential employees. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and frameworks, hosted by Schlund Technologies, and optimized for mobile devices. Security posture is strong with HTTPS and GDPR compliance via Usercentrics, though some security headers could be improved. No blocking or WAF challenges were detected, and the domain registration is consistent with the business claims, indicating a legitimate and trustworthy online presence.

L

Lange Nacht der Wissenschaften (LNDW)

langenachtderwissenschaften.de

49

Lange Nacht der Wissenschaften (LNDW) is a well-established science event organizer based in Berlin, Germany, with a 25-year history. The website serves as an information hub for the event, targeting science enthusiasts, visitors, media, and partners. It provides event details, news, partner information, and newsletter subscription services. The organization appears to be a medium-sized entity operating in the education and non-profit sectors, with a strong local presence and community engagement. Technically, the website is built on TYPO3 CMS with modern front-end technologies such as Bootstrap and Swiper.js, ensuring good mobile responsiveness and accessibility. The site uses Matomo analytics configured for privacy by disabling cookies, and it implements a cookie consent banner compliant with GDPR requirements. Performance is moderate, with no major technical issues detected. From a security perspective, the site enforces HTTPS and employs privacy-conscious analytics. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were found. The WHOIS data aligns well with the website content, confirming legitimacy and consistent domain age. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with room for improvement in security policy transparency and security header implementation.

C

Connectyca s.r.l.s.

connectyca.it

60

Connectyca s.r.l.s. operates the ThingsIoT website, providing IoT and M2M SIM card solutions with extensive global coverage. The company positions itself as an authorized reseller of Tele2, targeting businesses requiring reliable IoT connectivity and fleet management services. Their offerings include multi-operator SIM cards, data pooling, and a management portal with security features such as SIM blocking. The website is professionally designed, mobile-optimized, and provides comprehensive contact and legal information, supporting a trustworthy business presence. Technically, the site employs modern web technologies including Bootstrap, jQuery, and Slider Revolution, with Google Analytics and reCAPTCHA integrated for analytics and spam prevention. The site is served over HTTPS with no visible security vulnerabilities, though security headers and explicit security policies are absent. Privacy and cookie policies are present and GDPR compliance is indicated, though could be enhanced with more detailed disclosures. Security posture is moderate with good SSL usage and form protections but lacks advanced security headers and incident response information. No vulnerabilities or suspicious content were detected. WHOIS data aligns well with the business claims, showing consistent registrant information and domain age appropriate for the company's market presence. Overall, the website demonstrates a solid business and technical foundation with room for improvement in security policies and compliance transparency. It is suitable for its target audience of IoT connectivity customers and partners.

E

Exanet srl

exanet.it

59

Exanet srl is a well-established Italian company specializing in advanced web development, e-commerce solutions, SEO, and digital marketing services. Operating since 1996, the company targets businesses seeking to enhance their online presence through tailored web projects, domain management, and email services. Their market position is that of a trusted local provider in Bologna with a consistent brand and professional digital footprint. Technically, the website employs modern frameworks such as Bootstrap and integrates analytics tools like Google Analytics and Microsoft Clarity, reflecting a mature digital infrastructure. The site is mobile-optimized and features a comprehensive cookie consent mechanism aligned with GDPR requirements. Security-wise, the site uses HTTPS and cookie consent best practices but lacks explicit security headers and detailed security policies. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with room for improvement in security transparency and incident response readiness.

E

Ethos Media Group srl

secsolutionforum.it

64

Secsolutionforum is a professionally managed digital event platform organized by Ethos Media Group srl, targeting security industry professionals in Italy. The website promotes a digital event scheduled for April 2025, focusing on the convergence of physical and logical security, offering tailored training, workshops, and networking opportunities. The platform serves as a key aggregator for industry knowledge, professional growth, and market insights within the security sector. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Google Analytics, ensuring a responsive and user-friendly experience. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism, reflecting adherence to GDPR standards. Security posture is good with HTTPS enabled and no visible vulnerabilities, though improvements in security headers and incident response disclosures are recommended. Overall, the website is trustworthy, professionally designed, and well-positioned in its niche, with strong branding consistency and clear business information.

B

BDEW Bundesverband der Energie- und Wasserwirtschaft e.V.

bdew.de

39

BDEW Bundesverband der Energie- und Wasserwirtschaft e.V. is a leading German industry association representing over 2,000 companies in the energy and water sectors, including electricity, natural gas, heating, and water/wastewater. The organization serves as a key partner for policymakers, industry stakeholders, and the public by providing industry positions, data, publications, and events. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding consistent with its market position. Technically, the site employs modern web technologies including Bootstrap, jQuery, Google Tag Manager, and Usercentrics for consent management, indicating a commitment to privacy compliance and user experience. Hosting is managed via DomainControl DNS services, and the site shows good mobile optimization and SEO practices. Performance is moderate, with lazy loading and carousel features enhancing usability. From a security perspective, the site uses HTTPS and integrates consent management but lacks visible security headers and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism. However, the absence of terms of service and vulnerability disclosure pages suggests areas for improvement. Overall, the website is trustworthy, professionally maintained, and aligned with the organization's business goals. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and adding vulnerability disclosure mechanisms to strengthen security posture and trust.

Ö

Österreichischer Gewerbeverein | ÖGV

gewerbeverein.at

50

The Österreichischer Gewerbeverein (ÖGV) is Austria's oldest entrepreneur association, founded in 1839, dedicated to connecting business owners and advocating for entrepreneurship. The organization offers a range of services including events, mentorship programs, business services such as location rental and coworking, and lobbying efforts. It maintains a strong market position as a reputable and historic business association within Austria, targeting entrepreneurs, executives, and business leaders. The website reflects a professional and consistent brand image with comprehensive content tailored to its audience. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and various plugins for events, forms, and digital downloads. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Security is well addressed with HTTPS, security headers, and some security plugins, although there is room for improvement in privacy compliance and incident response transparency. The security posture is solid, with no visible vulnerabilities or exposed sensitive data. However, the absence of a cookie consent mechanism and explicit security policies are notable gaps. Overall, the site is trustworthy and professionally maintained, with a high legitimacy score based on WHOIS data and content consistency. Strategic recommendations include implementing a cookie consent banner, publishing security and incident response policies, adding a vulnerability disclosure channel, and enhancing privacy compliance disclosures to align fully with GDPR and related regulations.

A

Aruba Business Srl

goodwoodproject.eu

47

The Good Wood Project website represents an EU-funded initiative aimed at fostering green social dialogue within the wood sector, promoting sustainable labor market practices. The project targets stakeholders across the European Union, including businesses and employees in the wood industry, focusing on balancing business flexibility with employee security. The website is built on Joomla CMS and leverages common web technologies such as jQuery, Bootstrap, and Revolution Slider, hosted by Aruba Business Srl. It offers multilingual support and integrates social media channels on Facebook and LinkedIn. Security-wise, the site enforces HTTPS and includes CSRF tokens in forms but lacks explicit security headers and an active cookie consent mechanism. No contact emails or phone numbers are directly provided, which limits direct communication channels. Overall, the site is professional and content-rich but could improve in security and privacy compliance aspects.

C

Confapi Confederazione italiana della piccola e media industria privata

confapi.org

48

Confapi is a well-established Italian confederation representing small and medium private industries, primarily in manufacturing, transport, and services sectors. Founded in 1999, it provides collective labor contracts, advocacy, and various business support services to SMEs across Italy. The website reflects a professional and consistent brand presence targeting Italian SMEs with a comprehensive menu of services and European project partnerships. Technically, the site is built on Joomla CMS with Gantry 5 framework and uses modern JavaScript libraries and Google Analytics for tracking. The site is mobile optimized and offers a good user experience with clear navigation. Security posture is adequate with HTTPS enabled and IP anonymization in analytics, but lacks DNSSEC and security headers, and does not publish explicit privacy or security policies. Overall, the domain registration data supports the legitimacy and long-term operation of the business. Strategic improvements in privacy disclosures and security hardening would enhance trust and compliance.

D

Documenti-Privacy

documenti-privacy.it

52

Documenti-Privacy is a small Italian business service platform founded in 2019 that provides privacy documentation based on company VAT numbers. The website is designed to serve businesses in Italy seeking privacy information documents. The platform uses modern web technologies including JavaScript and Bootstrap, with payment integration via Stripe. The technical infrastructure is moderate in performance and basic in mobile optimization and accessibility. Security posture is good with HTTPS and DNSSEC enabled, but lacks advanced security headers and policies. Privacy compliance is minimal as no privacy or cookie policies are present. Contact information and incident response details are absent, limiting user trust and compliance. Overall, the site is functional but basic in content and security features.

P

ProgrammZeitung Verlags AG

proz.online

70

PROZ.online is a regional cultural media platform operated by ProgrammZeitung Verlags AG, founded in 2022, focusing on providing comprehensive event listings, exhibitions, and magazine content for the Basel area. The website serves a culturally engaged audience interested in arts, theater, music, and literature. It offers subscription services, event submissions, and advertising opportunities, positioning itself as a key local media resource with support from Swiss cultural institutions. Technically, the site uses the open-celements CMS with a modern JavaScript stack including jQuery, Prototype.js, and Matomo analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks DNSSEC and explicit security headers. No incident response or security policy is published, which could be improved. Overall, the domain registration is consistent and transparent, supporting the legitimacy of the business.

K

Kunstbulletin

kunstbulletin.ch

52

Kunstbulletin is a leading Swiss art magazine providing comprehensive coverage of contemporary art through print and digital channels. The website supports multiple languages and offers subscription services, event agendas, public art mapping, and video archives. Technically, it is built on Drupal 10 with modern frontend libraries and integrates marketing and analytics tools such as Google Analytics and Mailchimp. The security posture is solid with HTTPS and secure forms, but lacks visible security policies and cookie consent mechanisms, which impacts privacy compliance. Overall, the site is professional, trustworthy, and well-positioned in the Swiss art media market.

G

GGG Basel

ggg-basel.ch

58

GGG Basel is a well-established non-profit organization based in Basel, Switzerland, with a history dating back to 1777. It operates as a key social, cultural, and educational institution supporting numerous organizations and projects in the region. The website reflects a mature digital presence built on TYPO3 CMS with modern frontend technologies and a focus on accessibility and user experience. While the site is professionally designed and content-rich, it lacks some privacy compliance features such as a cookie consent mechanism and explicit GDPR compliance statements. Security posture is moderate with HTTPS usage and no visible vulnerabilities, but missing security headers and incident response policies suggest room for improvement. Overall, the domain registration and website content align well, indicating a trustworthy and credible organization.

Nuove Ri-Generazioni is an Italian non-profit association focused on social regeneration, sustainable development, and community advocacy. The website serves as an information hub for their projects, events, publications, and news, targeting socially engaged individuals and organizations in Italy. The organization operates primarily through community projects, policy advocacy, and educational initiatives. Technically, the website is built on Joomla CMS with modern frameworks like Gantry5 and Bootstrap, and includes Google Analytics for visitor tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and implements a GDPR-compliant cookie consent mechanism with opt-in and revocation features. However, it lacks explicit security headers such as CSP and HSTS, which are recommended to enhance security posture. WHOIS data is privacy protected as per .eu domain policies, which is typical and justified for this type of organization. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though there is room for security improvements.

A

Aufleb GmbH

aufleb.at

45

Aufleb GmbH is an Austrian company operating a vocational training platform that connects individuals seeking training with providers offering educational opportunities. The website is professionally designed using WordPress and modern web technologies, featuring video content and clear calls to action for searching and offering training. The target audience is primarily German-speaking individuals and organizations in Austria interested in vocational education. Technically, the site uses a mature CMS with plugins for enhanced functionality and Matomo analytics configured to disable cookies, reflecting a moderate level of digital maturity and privacy awareness. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though improvements such as security headers and incident response contacts are recommended. Overall, the website is trustworthy, well-branded, and serves its niche effectively.

N

Netzwerk JUBITH / Arbeit und Leben Thüringen

jubith.de

50

JUBITH is a youth environmental and development education network based in Thuringia, Germany, operating under the parent organization Arbeit und Leben Thüringen. The organization focuses on promoting sustainable development and global learning among young people through educational project days, workshops, and digital offerings. It is supported by multiple governmental and non-governmental funding bodies, positioning it as a reputable regional educational network. The website is built on Joomla CMS with a modern framework and common libraries, hosted on Hetzner servers, and demonstrates good digital maturity with mobile optimization and clear navigation. Security posture is adequate with HTTPS and CSRF protections but lacks some security headers and incident response disclosures. Privacy compliance is generally good, though a cookie consent mechanism is missing. Overall, the site is trustworthy, professional, and well-aligned with its educational mission.

D

DocLX Holding GmbH

lighthousefestival.tv

64

Lighthouse Festival is a well-established boutique electronic music festival organizer with over 12 years of experience, operating events primarily in Croatia, Austria, and Tanzania. The company focuses on creating intimate, exclusive festival experiences branded as 'electronic music on vacation'. The website reflects a professional digital presence with clear event information, social media integration, and a consistent brand image. Technically, the site uses modern web technologies including Bootstrap, jQuery, and various JavaScript libraries to deliver a responsive and engaging user experience. However, some areas such as cookie consent and security headers could be improved to enhance privacy compliance and security posture. The domain registration data is consistent with the business claims, supporting the legitimacy of the site.

A

A*dS – Autorinnen und Autoren der Schweiz

a-d-s.ch

40

A*dS – Autorinnen und Autoren der Schweiz is a Swiss non-profit association dedicated to supporting authors and translators across Switzerland's linguistic regions. The organization promotes cultural, trade union, and political goals related to literature dissemination and exchange. The website serves as an information hub offering resources, funding opportunities, events, and member services, positioning itself as a key player in the Swiss literary community. Supported by the Swiss Federal Office of Culture, it maintains a credible and professional presence with clear contact information and multilingual content.

S

Sophie und Karl Binding Stiftung

binding-stiftung.ch

51

The Sophie und Karl Binding Stiftung is a Swiss foundation dedicated to promoting social cohesion and preserving natural, cultural, and intellectual values in Switzerland. It operates primarily in the environmental, social, and cultural sectors, providing funding and engaging in projects and partnerships such as the Binding Biodiversity Prize. The website reflects a professional and consistent brand presence with clear navigation and relevant content targeting Swiss society and nonprofit organizations. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates Google Analytics and reCAPTCHA for security and analytics. Security posture is solid with HTTPS and no exposed sensitive data, though it lacks some advanced security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and well-maintained, suitable for its nonprofit mission.

M

MediaMath

mediamath.com

62

MediaMath is a well-established digital advertising technology company specializing in providing an omnichannel demand-side platform (DSP) for brands and agencies. Recently acquired by Infillion, MediaMath leverages cutting-edge programmatic buying technology to deliver responsive and accountable advertising solutions across multiple channels including CTV and identity management. The company positions itself as a future-proofed DSP with a strong focus on transparency, data-driven targeting, and partnership ecosystems. The website reflects a professional and consistent brand image with comprehensive content aimed at marketing professionals and advertisers. Technically, the website is built on WordPress with modern plugins such as WPBakery Page Builder and Smart Slider 3, integrating marketing and analytics tools like Marketo Munchkin and Google Tag Manager. The site is mobile optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. Performance is moderate, with a clean and structured layout supporting user engagement. From a security perspective, the site uses HTTPS and implements privacy and cookie policies compliant with GDPR. However, explicit security policies, incident response details, and vulnerability disclosure mechanisms are not publicly available, which could be improved to enhance trust and transparency. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data is noted but likely due to privacy or registry restrictions rather than malicious intent. Overall, MediaMath presents a low-risk profile with strong business credibility and a mature digital presence. Strategic recommendations include publishing detailed security policies, adding vulnerability disclosure information, and improving accessibility and contact transparency to further strengthen security posture and user trust.