Security Directory

DoNoHarm is a small US-based software company founded in 2019, specializing in niche software products such as Monocle, Kleio, and WaterCooler, targeting developers and businesses needing specialized tools. The website is built on a modern React/Next.js stack, hosted via bunny.net, and demonstrates good mobile optimization and user experience. However, the site lacks explicit contact information and comprehensive privacy or security policies. Security posture is moderate with no detected WAF or blocking mechanisms but missing security headers and DNSSEC. Overall, the site is professional and trustworthy but could improve in compliance and security transparency.

Version.Compare is an early-stage technology company offering a SaaS product focused on continuous A/B testing and conversion optimization for websites. The service is currently in private alpha and targets website owners and marketers who want to improve visitor-to-customer conversion rates through automated experimentation. The website provides clear instructions for integration via a small embed script or React component, emphasizing ease of use and performance. Technically, the website uses modern JavaScript and React frameworks, with assets served from a globally distributed CDN (bunny.net), ensuring fast load times and good mobile optimization. The site is simple, with no complex CMS or analytics integrations detected, reflecting a lean early-stage product approach. From a security perspective, the domain is registered with privacy protection and strong domain status locks, indicating legitimate ownership and protection against unauthorized transfers or deletions. However, the website lacks published privacy, cookie, or security policies, and no security headers were detected, which limits its compliance posture and security maturity. No incident response or vulnerability disclosure information is provided. Overall, the website is professional and functional but would benefit from enhanced privacy compliance, security best practices, and transparency to improve trust and regulatory adherence.

X

X-BIONIC®

x-bionic.sk

50

X-BIONIC® operates an e-commerce platform specializing in functional sportswear, targeting athletes and sports enthusiasts primarily in Slovakia. The website is built on WordPress with WooCommerce, leveraging Yoast SEO for search optimization and Google Tag Manager for analytics and marketing. The platform demonstrates a good level of technical maturity with responsive design and moderate performance. However, the absence of explicit privacy and cookie policies, as well as lack of visible security headers and incident response information, indicates areas for improvement in compliance and security posture. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic enhancements in privacy compliance and security best practices would strengthen trust and regulatory adherence.

R

renault

renault.sk

70

Renault Slovakia operates a comprehensive automotive website offering new, used, and commercial vehicles, including electric and hybrid models. The site targets Slovak consumers interested in Renault's vehicle range and related services such as financing and after-sales support. The website demonstrates a solid market position as part of the global Renault brand, with consistent branding and a professional presentation. Technically, the site uses modern web technologies including React, optimized images, and integrates Google Analytics and Tag Manager for tracking. Cookie consent is managed via OneTrust, indicating attention to privacy compliance, though explicit privacy and terms of service pages were not found in the provided content. Security posture is good with HTTPS enforced, but could be improved by adding security headers and publishing security policies. Overall, the site is trustworthy and well-maintained, suitable for its business purpose.

C

CHAPS spol. s r.o.

cp.sk

41

The website cp.sk is operated by CHAPS spol. s r.o. and serves as a comprehensive platform for searching and purchasing tickets for various transportation modes including trains, buses, MHD (local public transport), and airplanes within Slovakia. It aggregates schedules from multiple carriers and provides real-time location tracking for trains and buses. The platform targets general travelers in Slovakia and holds a strong market position as a leading travel timetable and ticketing service. The business model revolves around providing aggregated transport data and direct ticket sales through the application.

SportPortal.sk is a Slovak sports fan portal aggregating and linking to specialized sports portals focused on football, hockey, basketball, and tennis. The site targets Slovak sports enthusiasts and serves as a hub for fan-driven content and community engagement. The website is basic in design and functionality, lacking modern CMS or frameworks, and does not provide privacy or contact information. Technically, the site uses simple HTML, CSS, and JavaScript without advanced optimization or security features. Security posture is weak due to lack of HTTPS and security headers, and no privacy or cookie policies are present, indicating non-compliance with GDPR. Overall, the site is functional but lacks professionalism and security maturity.

W

Wisdom Blog

wisdomtech.sk

47

Wisdom Blog is a Slovak technology-focused blog providing in-depth articles on topics such as Python web server configuration, database full-text search, and e-commerce development. The site targets technology enthusiasts and IT professionals seeking detailed technical tutorials and reviews. The business model centers on content publishing without evident monetization or commercial services. Technically, the website uses modern web standards including HTML5, CSS, JavaScript, WebP images, and font preloading to optimize performance and user experience. The site is mobile-optimized with good navigation and consistent branding. Security posture is basic; no security headers or explicit policies are present, and no forms or user data collection mechanisms are detected. Privacy and cookie policies are absent, indicating potential compliance gaps with GDPR. No contact information or incident response channels are provided, limiting trust and transparency. Overall, the website is safe, professional, and content-rich but lacks formal privacy, security, and business credibility elements.

W

WEBY GROUP s.r.o.

stavebnik.sk

65

Stavebnik.sk is a well-established Slovak online portal specializing in the construction industry, operating since 2000. It offers a comprehensive directory of construction companies, informative articles, job listings, and advertising opportunities tailored to construction professionals and consumers in Slovakia. The portal is operated by WEBY GROUP s.r.o., a Slovak company with clear contact details and a consistent domain registration history. Technically, the website employs modern web technologies including jQuery, OpenLayers for mapping, and Facebook Pixel for marketing analytics. The site is mobile-optimized with good navigation and content relevance, supporting a positive user experience. Security-wise, the site uses HTTPS and implements cookie consent mechanisms but lacks explicit security policies or vulnerability disclosure information. Overall, the website demonstrates a solid security posture with room for improvement in security headers and incident response transparency.

U

Unabhängige Bundesbeauftragte gegen sexuellen Missbrauch von Kindern und Jugendlichen

hilfeportal-missbrauch.de

67

The Hilfe-Portal Missbrauch is an official German federal government portal operated by the Unabhängige Bundesbeauftragte gegen sexuellen Missbrauch von Kindern und Jugendlichen. It provides comprehensive support, information, and counseling services for victims of sexual abuse, including telephone and online counseling, a searchable database of help offers, and educational content. The portal is well-positioned as a trusted, authoritative resource in the government and non-profit sector, targeting affected individuals, families, and professionals. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies such as Mapbox for geolocation services and Matomo for privacy-focused analytics. The site demonstrates good digital maturity with responsive design, accessibility features, and GDPR-compliant data collection practices. Hosting appears to be managed by a reputable German technical service provider, ensuring data sovereignty and compliance. From a security perspective, the site enforces HTTPS, anonymizes IP addresses in analytics, and uses a consent-based cookie mechanism. However, it lacks publicly visible security policies, incident response contacts, and advanced security headers, which could be improved to enhance trust and compliance. No vulnerabilities or suspicious activities were detected. Overall, the portal scores highly on content quality, privacy compliance, and business credibility, making it a reliable and professional resource. Strategic improvements in security transparency and incident response readiness are recommended to further strengthen its posture.

R

Regenbogenschule Steinfurt

rbs-steinfurt.de

36

Regenbogenschule Steinfurt operates a secure login portal based on the IServ platform, providing digital access for students and staff. The website is professionally designed with consistent branding and optimized for mobile devices. The technical infrastructure leverages modern web standards and the IServ platform, ensuring a stable and secure user experience. Security measures include HTTPS enforcement and secure login forms, though some security headers are missing. Privacy and cookie policies are not present, which is a compliance gap. Overall, the site is trustworthy and appropriate for its educational purpose.

Z

Zweckverband Lausitzer Seenland Brandenburg

zweckverband-lsb.de

46

Zweckverband Lausitzer Seenland Brandenburg (LSB) is a regional public entity focused on the development and promotion of the Lausitzer Seenland area in Brandenburg, Germany. The organization supports municipalities in infrastructure projects, operates tourism facilities such as family parks and camping sites, and engages in sustainable project development to foster economic and touristic growth. The website reflects a professional and consistent brand presence targeting local governments, investors, tourists, and job seekers. Technically, the site uses modern web technologies including jQuery and Modernizr, is mobile optimized, and implements privacy-conscious practices by not activating Google Analytics and providing comprehensive cookie consent mechanisms. Security posture is good with HTTPS enforced, though explicit security headers and incident response information are absent. Overall, the site is trustworthy, well-structured, and compliant with GDPR requirements.

W

WetterOnline

wetteronline.de

63

WetterOnline is a well-established German weather information provider offering comprehensive weather forecasts, radar maps, news, and multimedia content. The website targets a general audience interested in weather updates primarily in Germany and Europe but also worldwide. The business model relies heavily on advertising and providing detailed weather data and services. Technically, the site uses modern web technologies including JavaScript frameworks, Google Tag Manager, Prebid.js for advertising, and Amazon AWS for hosting, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and GDPR-compliant consent management, though explicit security policies and incident response information are not publicly visible. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

M

multi-INTER-media GmbH

kommune-aktiv.de

63

KOMMUNE-AKTIV.de is a specialized software provider offering a comprehensive Sitzungsmanagement (meeting management) and Ratsinformationssystem (council information system) tailored for municipalities and public administrations in Germany. The company, multi-INTER-media GmbH, has over 25 years of experience and positions itself as a leading vendor in the municipal software market, providing direct sales, support, and training without intermediaries. Their software suite covers the entire meeting lifecycle including agenda preparation, digital document management, citizen information systems, and billing functionalities, targeting small to large cities and communities. The website reflects a professional and consistent brand image with transparent pricing and customer references.

G

Grafschaft Hauenstein

grafschaft-hauenstein.info

42

Grafschaft Hauenstein is a regional community website focused on providing information about the Grafschaft Hauenstein area in Germany. The site appears to serve local residents and visitors with regional content but lacks detailed business or commercial services. Technically, the site uses the Laravel framework and integrates Google Maps API, hosted under a domain registered in 2022 with Mesh Digital Limited. Security posture is moderate with HTTPS enabled and domain status protections, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies and no visible consent mechanisms. Contact information and business certifications are not provided, limiting business credibility. Overall, the site is accessible, safe, and functional but would benefit from enhanced privacy, security, and contact transparency.

S

Serviceportal Baden-Württemberg

service-bw.de

60

The website www.service-bw.de/zufi serves as an official government service portal for the Baden-Württemberg region in Germany. It provides detailed information and access to administrative services, forms, and online tools for citizens, businesses, and public administration employees. The portal is well-branded and professionally designed, targeting a broad audience within the regional government ecosystem. Technically, the site uses standard web technologies with good mobile optimization and accessibility features, although no specific CMS or advanced frameworks were detected. Security posture is limited based on the provided data, with no visible security headers or published security policies. Privacy compliance is minimal, lacking privacy and cookie policies or consent mechanisms. The domain WHOIS data shows consistency with regional network infrastructure but lacks detailed registrant information. Overall, the site is credible and trustworthy as a government portal but would benefit from enhanced security and privacy transparency.

N

Naturpark Südschwarzwald e.V.

naturpark-suedschwarzwald.de

47

Naturpark Südschwarzwald e.V. operates as a regional nature park organization focused on preserving and promoting the natural and cultural heritage of the southern Black Forest region in Germany. The website serves as an information hub for tourists, locals, and nature enthusiasts, offering details on events, projects, guided tours, and regional products. Supported by government and regional sponsors, the organization positions itself as a trusted non-profit entity dedicated to environmental conservation and cultural education. Technically, the website employs classic JavaScript libraries such as Prototype.js and Scriptaculous, with custom CMS elements. The site is moderately optimized for performance and mobile devices, featuring a clear navigation structure and good SEO practices. However, there is room for improvement in accessibility and modern security header implementation. From a security perspective, the site uses HTTPS and provides a comprehensive cookie consent mechanism aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. The absence of explicit security headers and vulnerability disclosure policies suggests potential areas for enhancement. The WHOIS data indicates a standard domain setup without privacy protection, consistent with the organization's transparency. Overall, the website presents a low-risk profile with a solid foundation in privacy compliance and user trust. Strategic improvements in security headers, incident response documentation, and technical modernization would further strengthen its posture.

FerienWelt Südschwarzwald is a regional tourism website promoting vacations in the South Black Forest region of Germany. The site targets nature lovers, families, and tourists interested in exploring the Black Forest area, offering information on accommodations, activities, and local attractions. The business model focuses on tourism promotion and vacation planning support, positioning itself as a regional information portal with a small-scale operation. The website content is primarily in German and emphasizes family-friendly and nature-oriented travel experiences. Technically, the website is built on the Neos CMS platform, which is based on the Flow PHP framework, indicating a modern and flexible content management system. The site uses standard web technologies including PHP, JavaScript, CSS, and HTML. Hosting appears to be managed via DomainControl.com, commonly associated with GoDaddy services. Performance and mobile optimization are rated as good, with accessibility and SEO features well implemented. Tracking technologies include Google Analytics and Facebook Pixel, reflecting moderate user tracking practices. From a security perspective, the website employs HTTPS, ensuring encrypted communications. However, no advanced security headers were detected in the provided content, and there is a lack of explicit privacy, cookie, or terms of service policies, which are critical for GDPR compliance and user trust. No contact information or incident response channels were found, limiting the ability to report security issues or privacy concerns. The absence of a security.txt or vulnerability disclosure policy further reduces the security maturity level. Overall, the website is functional and professionally designed for its tourism purpose but lacks critical privacy and security compliance documentation. Strategic improvements in privacy policy publication, cookie consent mechanisms, and security best practices are recommended to enhance trustworthiness and regulatory compliance.

H

Hotzenwald Tourismus GmbH

hotzenwald-schwarzwald.de

51

Hotzenwald Tourismus GmbH operates a regional tourism website promoting the Hotzenwald area in the Black Forest, Germany. The site provides comprehensive information on accommodations, activities, local culture, and environmental initiatives such as Fairtrade certification and the KONUS guest card for public transport. The business targets tourists seeking nature, family vacations, and cultural experiences in a quiet, scenic environment. The business model centers on tourism promotion and accommodation booking facilitation, positioning itself as a trusted regional authority. Technically, the website uses standard web technologies including JavaScript and CSS with a custom or unknown CMS. The site is mobile-optimized with clear navigation and good SEO practices but lacks modern frameworks or advanced accessibility features. Performance is moderate with no major errors detected. Security posture is basic; HTTPS is used but no explicit security headers or vulnerability disclosures are present. Privacy compliance is partial with a privacy policy available but no cookie consent mechanism. Overall, the security posture is adequate for a small tourism site but could be improved by implementing security headers, cookie consent, and publishing a security policy. The domain registration uses privacy-protected nameservers, which is common and justified for this business type. No suspicious patterns or vulnerabilities were detected. The website content is safe, family-friendly, and professionally presented, supporting a high trustworthiness rating. Strategic recommendations include enhancing security headers, adding cookie consent for GDPR compliance, publishing incident response information, and considering vulnerability disclosure policies to improve trust and security maturity.

H

Hans-Georg Hostrup

eiderstedt1.de

62

The website eiderstedt1.de represents a small regional cultural heritage and tourism business centered around the historic Haubarg Blumenhof farmstead in Tating, Germany. It provides detailed information about the heritage site, the Hochdorfer Garten, and the IGB heritage association, targeting tourists and visitors interested in cultural and garden tourism. The business model focuses on holiday apartment rentals and promoting local cultural landmarks. Technically, the website is built using the Zeta Producer CMS and standard web technologies including HTML5, CSS3, JavaScript, and jQuery. It features a responsive design with good mobile optimization and moderate performance. SEO and accessibility are basic but adequate for the site's purpose. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site enforces HTTPS and implements a GDPR-compliant cookie consent mechanism. However, it lacks advanced security headers and does not provide explicit security policies or incident response contacts. No vulnerabilities or suspicious content were found, and the domain registration data aligns well with the website's content and business claims. Overall, the site is trustworthy, professionally presented, and suitable for its niche audience. Strategic improvements could include adding security headers, incident response information, and terms of service to enhance compliance and trustworthiness.

R

Richardsen-Bruchwitz-Stiftung

hochdorfer-garten.de

52

Hochdorfer Garten in Tating is a culturally significant Baroque garden managed by the Richardsen-Bruchwitz-Stiftung, a non-profit foundation dedicated to preserving this historic site as a public park. The website provides detailed information about the garden, its history, events, and visitor information, targeting tourists and local visitors interested in cultural heritage and nature. The site is well-structured, with clear navigation and relevant content, supporting the foundation's mission and community engagement. Technically, the website is built using the Zeta Producer CMS and employs standard web technologies including HTML5, CSS3, JavaScript, and jQuery. It uses FlexSlider for image slideshows and loads custom web fonts via Google Fonts. Hosting is provided by RZone, as indicated by the nameservers. The site is mobile-optimized and performs moderately well, with good SEO practices and accessibility at a basic level. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. No security headers were detected in the HTML content, and no explicit security or incident response policies are published. There are no visible vulnerabilities or exposed sensitive data. The WHOIS data is consistent with the website's regional and organizational context, supporting legitimacy. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements include adding security headers, publishing a security policy, and enhancing accessibility features to further strengthen the site's security posture and user trust.

T

Tourismusverein Tating

tating-nordsee.de

52

Tourismusverein Tating operates as a regional tourism association promoting vacation opportunities in the village of Tating and surrounding Eiderstedt peninsula near the North Sea coast of Germany. The website serves as an informational and accommodation directory platform targeting tourists interested in rural and coastal holidays. The business model focuses on local tourism promotion without direct e-commerce or booking functionalities. Technically, the site is built using the Zeta Producer CMS, employs standard web technologies including JavaScript and CSS, and is hosted on a known German hosting provider's infrastructure. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. Privacy compliance is good with a clear privacy policy and cookie management. Overall, the website is trustworthy, professional, and safe for general audiences.

Nordfriesen Glasfaser is a regional telecommunications provider specializing in delivering high-speed fiber optic internet, telephone, and TV services to private customers in southern Nordfriesland, Germany. The company emphasizes reliable, fast, and future-proof connectivity solutions tailored to residential users. Their website is built on TYPO3 CMS and integrates Cookiebot for comprehensive cookie consent management, reflecting a commitment to privacy compliance. The site offers clear navigation, detailed service descriptions, and social media engagement, supporting a positive user experience and trustworthiness. Technically, the website demonstrates a modern infrastructure with HTTPS enabled and a moderate performance profile. However, security headers and explicit security policies are absent, indicating room for improvement in security posture. No blocking or WAF challenges were detected, allowing full content access and analysis.

M

MyDr Sp. z o.o.

mydr.pl

50

MyDr Sp. z o.o. operates a Polish-language healthcare platform providing patients with online access to medical data, appointment booking, and telemedicine services. The company is a recognized leader in cloud-based Electronic Medical Documentation software in Poland, with a strong market presence and a portfolio including specialized software for dental clinics. The website is professionally designed, mobile-optimized, and integrates with official app stores for iOS and Android applications. Technically, the site uses modern JavaScript frameworks such as Vue.js and mapping libraries like Leaflet.js, delivering a moderate performance experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in security headers and cookie consent mechanisms. WHOIS data aligns well with the business claims, showing a consistent and legitimate domain registration. Overall, the platform demonstrates a mature digital infrastructure suitable for its healthcare audience.

Clinic Cloud is a Spanish-based healthcare software provider offering a comprehensive cloud-based clinic management platform with integrated artificial intelligence features. The company targets medical clinics, dental offices, physiotherapy centers, psychology practices, aesthetics, and franchises, providing tools for electronic medical records, appointment scheduling, financial management, user role management, consent management, and process automation. The platform is integrated with Doctoralia, a major health portal, enhancing its market position and client reach. Technically, the website is built on HubSpot CMS with modern marketing and analytics tools such as Google Tag Manager and Visual Website Optimizer, delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS, domain locking, and no exposed sensitive data, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy or terms of service pages. Overall, the website reflects a professional and trustworthy business with room for improvement in privacy transparency and security disclosures.

D

DoktorTakvimi

doktortakvimi.com

68

DoktorTakvimi is a prominent Turkish online healthcare platform specializing in doctor search, appointment booking, and patient reviews. It operates as part of the Docplanner group, a recognized leader in healthcare technology. The website offers a comprehensive database of over 181,000 doctors and specialists, facilitating easy access to healthcare services for patients in Turkey. The platform supports online consultations and integrates modern digital tools to enhance user experience. Technically, the site employs a robust tech stack including JavaScript frameworks, Algolia search, Google Analytics, and HubSpot marketing tools, ensuring efficient performance and user engagement. Security measures such as HTTPS enforcement, security headers, and cookie consent mechanisms are well implemented, although explicit security policies and incident response details are not publicly available. The absence of WHOIS registration data is a notable anomaly but does not detract significantly from the platform's legitimacy given its professional presentation and market presence. Overall, DoktorTakvimi demonstrates a mature digital infrastructure with good privacy compliance and a strong market position in Turkey's healthcare sector.

Z

ZnanyLekarz

znanylekarz.pl

68

ZnanyLekarz.pl is a leading Polish online healthcare platform that enables patients to find doctors, read verified reviews, and book medical appointments online. It is part of the Docplanner group, a recognized international healthcare technology company. The website offers a comprehensive database of over 146,000 doctors and supports online consultations, reflecting a mature digital healthcare service. Technically, the site employs modern web technologies including Google Analytics, Google Tag Manager, Visual Website Optimizer, and OneTrust for cookie consent, ensuring good performance, SEO, and privacy compliance. Security posture is strong with HTTPS enforcement, security headers, and GDPR-aligned consent mechanisms, although explicit security policies and incident response contacts are not publicly disclosed. Overall, ZnanyLekarz.pl demonstrates a professional, trustworthy, and user-friendly platform with a strong market position in Poland's healthcare sector.

D

Doctoralia

doctoralia.com.mx

68

Doctoralia is a leading online healthcare platform in Mexico, offering a comprehensive directory of medical specialists, patient reviews, and online appointment booking services. The platform is part of the Docplanner group, which operates internationally. The website is well-structured, targeting patients seeking medical care with a user-friendly interface and extensive service listings. Technically, the site employs modern JavaScript frameworks, integrates with Google Analytics, Tag Manager, and Visual Website Optimizer for analytics and optimization, and uses Algolia for search functionality. Security is robust with HTTPS enforced and token-based WebSocket connections, though explicit security policies and headers could be enhanced. Privacy compliance is partially addressed with a comprehensive privacy policy and GDPR-related gates, but lacks a visible cookie consent mechanism. Overall, the site demonstrates a mature digital presence with good business credibility and technical implementation.

M

MioDottore

miodottore.it

74

MioDottore.it is a leading Italian online healthcare platform that enables patients to find doctors and clinics, read reviews, and book appointments online. It operates as part of the Docplanner group, leveraging a robust technical infrastructure with modern analytics and marketing tools. The website demonstrates good digital maturity with mobile optimization, SEO best practices, and user-friendly design. Security posture is strong with HTTPS enforcement, security headers, and GDPR-compliant consent management. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the platform is trustworthy, professional, and well-positioned in the Italian healthcare market.

D

Doctoralia

doctoralia.co

69

Doctoralia Colombia is a well-established online platform that connects patients with medical specialists, enabling appointment booking and access to expert health advice. It serves a large user base in Colombia with over 60,000 healthcare professionals listed. The platform is part of the Docplanner group, a recognized player in healthcare technology. The website demonstrates a mature technical infrastructure using modern JavaScript frameworks, integrated analytics, and secure HTTPS connections. Privacy policies and terms of service are clearly linked, supporting compliance with data protection regulations such as GDPR. However, the absence of a visible cookie consent mechanism and dedicated security policy pages indicates room for improvement in privacy compliance and transparency. Security posture is strong with proper HTTPS and security headers, but incident response readiness and vulnerability disclosure are not publicly documented. Overall, the website is professional, trustworthy, and safe for general audiences seeking healthcare services online.

D

Doctoralia

doctoralia.com.br

67

Doctoralia is a leading online healthcare platform in Brazil that enables users to find healthcare professionals, read patient reviews, and schedule appointments both locally and via teleconsultation. The platform hosts over 500,000 specialists and offers a comprehensive directory with filtering by specialty, location, and insurance plans. The website is well-designed, mobile-optimized, and uses modern technologies such as Vue.js, Algolia search, and various analytics and marketing tools. Security is robust with HTTPS and security headers, though cookie consent mechanisms could be improved to enhance privacy compliance. The WHOIS data aligns with the business claims, showing a legitimate and consistent registration. Overall, Doctoralia presents a professional and trustworthy service for healthcare consumers and providers in Brazil.

D

Doctoralia

doctoraliar.com

68

Doctoralia is a prominent online healthcare platform in Argentina that facilitates finding medical specialists, reading patient reviews, and booking appointments both in-person and online. The website is well-structured, professionally designed, and targets patients and healthcare professionals in Argentina. It offers a comprehensive directory of specialists and integrates modern search and booking functionalities. The platform leverages advanced technologies including Vue.js, Algolia search, and multiple analytics and marketing tools to provide a seamless user experience. Security measures such as HTTPS and security headers are properly implemented, though some privacy compliance aspects like cookie consent banners could be improved. The absence of WHOIS registration data raises concerns about domain legitimacy, but the website content and branding are consistent with a reputable healthcare service. Overall, Doctoralia presents a strong digital presence with room for enhancements in privacy transparency and contact information availability.

F

Förderverein für regionale Entwicklung e.V.

kmu-intranet.de

62

The website www.kmu-intranet.de represents a German small to medium enterprise focused on providing digital intranet and organizational support solutions tailored for small and medium-sized businesses. Their offerings include a mobile employee communication app, time tracking, chat, document management, appointment booking, meeting management, and organizational helpers. The company positions itself as a niche provider with a strong emphasis on efficient workflows and employee support. The site is professionally designed, well-structured, and targets German-speaking SMEs seeking digital transformation tools. Technically, the website leverages modern web technologies including jQuery, Material Design Lite, and various JavaScript libraries for UI and interactivity. It is hosted in Germany on an ISO 27001 certified infrastructure, ensuring compliance with stringent data protection standards. The site is mobile-optimized and accessible, with good SEO practices and performance. Analytics are handled via Matomo, respecting user privacy with cookie consent mechanisms. From a security perspective, the site employs SSL encryption, cookie consent with categorized cookies, and CAPTCHA protections on forms. The hosting environment is ISO 27001 certified, indicating a mature security posture. However, explicit security headers like CSP and X-Frame-Options are not visible in the HTML and should be verified server-side. No vulnerabilities or exposed sensitive data were detected. Privacy policies and cookie policies are comprehensive and GDPR compliant. Overall, the website presents a trustworthy and professional digital presence with a solid security foundation. It effectively communicates its business offerings and maintains compliance with privacy regulations. Strategic improvements could include publishing an incident response policy and enhancing security headers. The domain registration is minimal but consistent with a small German business, with no suspicious indicators.

F

Förderverein für regionale Entwicklung e.V.

handwerk-intranet.de

64

The website www.handwerk-intranet.de represents a specialized digital platform aimed at supporting craft businesses in Germany with intranet and mobile app solutions. The company, Förderverein für regionale Entwicklung e.V., offers a suite of services including digital time tracking, device and vehicle management, contact management, and event scheduling. The platform is GDPR compliant, ISO 27001 certified, and provides a user-friendly experience accessible via web and mobile apps for iOS and Android. The site demonstrates a solid market position within its niche, targeting small to medium-sized craft enterprises seeking digital transformation tools. Technically, the website employs modern web technologies such as jQuery, Material Design Lite, and Slick Carousel, hosted on a German ISO 27001 certified environment with SSL encryption ensuring secure communications. Security posture is strong with granular access controls and captcha-protected forms, although the absence of explicit security headers is noted. Privacy compliance is robust with detailed cookie consent and a comprehensive privacy policy. Overall, the site is professional, trustworthy, and well-structured, with clear contact information and transparent data handling practices.

F

Förderverein für regionale Entwicklung e.V.

sozial-intranet.de

64

The website www.sozial-intranet.de represents a specialized digital platform offering intranet and communication solutions tailored for the social sector in Germany. Operated by the Förderverein für regionale Entwicklung e.V., it provides a suite of modules including digital time tracking, employee apps, appointment booking, document management, and organizational tools. The platform targets social organizations seeking to improve internal communication and resource management, positioning itself as a niche SaaS provider with a focus on efficiency and compliance. Technically, the website employs a modern tech stack with jQuery, Material Design Lite, and various JavaScript libraries to deliver a responsive and accessible user experience. Hosting is ISO 27001 certified and located in Germany, ensuring compliance with data protection regulations. The site features SSL encryption, cookie consent mechanisms, and uses Matomo analytics with moderate tracking, reflecting a mature digital infrastructure. From a security perspective, the site demonstrates good practices including encrypted data transmission, session management, CAPTCHA protection on forms, and adherence to GDPR. However, it lacks explicit incident response policies and vulnerability disclosure information, which could be improved to enhance trust and readiness. The domain registration data aligns with the business claims, showing no suspicious patterns. Overall, the website scores well on content quality, technical implementation, security posture, privacy compliance, and business credibility, making it a trustworthy and professional platform for its target audience.

K

Wenn zu Hause geschlagen wird, kannst du dir Hilfe holen!! | Kidsinfo häusliche Gewalt

kidsinfo-gewalt.de

39

The website www.kidsinfo-gewalt.de serves as an informational and support platform aimed primarily at children and families affected by domestic violence in Germany. It provides educational content about domestic violence, legal information, and guidance on where to find help. The site is non-commercial and appears to be a small-scale non-profit resource. The multilingual support indicates an effort to reach diverse audiences within Germany. Technically, the site is built on Drupal 7, an older CMS platform, and uses standard web technologies such as jQuery and CSS. The site’s performance and mobile optimization are basic but functional. Security posture is limited, with no visible security headers or HTTPS confirmation in the provided data, and no cookie consent mechanism, which is a compliance gap under GDPR. The WHOIS data is minimal but consistent with a legitimate domain registered for this purpose. Overall, the site is safe, trustworthy, and focused on child protection and domestic violence awareness, but it would benefit from technical and security improvements.

L

Landesverband autonomer Frauen-Notrufe NRW e.V.

frauennotrufe-nrw.de

62

The Landesverband autonomer Frauen-Notrufe NRW e.V. is a non-profit umbrella organization in North Rhine-Westphalia, Germany, uniting specialized women's emergency call centers focused on supporting women and girls affected by sexualized violence. Their services include free counseling, crisis intervention, legal process accompaniment, and prevention and public relations work. The organization targets victims of sexual violence within the NRW region and operates as a registered association since 2015, with roots dating back to 1986. The website reflects a professional and consistent brand image, providing clear information and partner links to regional counseling centers. Technically, the site is built on Weblication CMS and uses OpenLayers for interactive maps, hosted on GoDaddy infrastructure. The site is mobile-optimized with good navigation and content quality but lacks advanced SEO and accessibility features. Security posture is moderate, with HTTPS enabled but missing security headers and no visible incident response or vulnerability disclosure information. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and serves its non-profit mission effectively.

B

Bentjen Software GmbH

bentjen.de

42

Bentjen Software GmbH is a German software development company with over 20 years of experience specializing in custom software solutions, IT consulting, and an online booking system. The company serves a diverse clientele including notable enterprises such as Daimler AG and DEKRA, positioning itself as a trusted niche provider in the technology sector. Their website reflects a professional and consistent brand image with clear service offerings and client testimonials. Technically, the site is built on Joomla CMS with modern frameworks and demonstrates good mobile optimization and usability. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements in security headers and incident response transparency are recommended. Overall, the domain registration and website content align well, supporting the legitimacy of the business.

S

Sparkasse Westmünsterland

stadtsparkasse-haltern.de

68

Sparkasse Westmünsterland is a regional German savings bank offering a comprehensive range of financial services including retail banking, loans, insurance, investment products, and private banking. The website targets both private and corporate customers, providing secure online banking and extensive product information. The bank maintains a strong local presence supported by digital services and a professional online platform. The site is well-branded, consistent, and includes multiple trust indicators such as certifications and awards. Technically, the website is built on modern web standards, likely using Adobe Experience Manager as its CMS. It employs HTTPS, cookie consent mechanisms, and integrates analytics tools like Google Analytics and Dynatrace. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience with clear navigation and professional design. From a security perspective, the site enforces HTTPS and uses secure forms for login and consent. While explicit security headers are not fully confirmed, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, with clear privacy and cookie policies aligned with GDPR requirements. However, the site lacks a published security policy or incident response contact details. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy regulations. It presents minimal risk and serves as a reliable digital channel for the bank's customers.

D

D2 design studio

d2design.sk

53

D2 design studio is a small Slovak design agency established in 2004, offering creative solutions in graphic, interior, product design, and marketing services. The website presents a basic digital presence with minimal textual content and primarily image-based navigation. The technical infrastructure is simple, relying on legacy HTML and JavaScript without modern frameworks or CMS. Hosting is provided by a reputable Slovak provider with DNSSEC enabled, indicating a stable domain setup. Security posture is weak due to lack of HTTPS information, absence of security headers, and no visible privacy or cookie policies. No contact information or social media presence is evident, limiting user engagement and trust signals. Overall, the site is functional but lacks modern security and privacy compliance features.

B

Business Metropole Ruhr

business.ruhr

57

Business Metropole Ruhr is a regional economic development organization focused on promoting the Ruhrgebiet area in Germany. The website serves as a platform to showcase innovative projects, regional business interests, and economic transformation initiatives. It targets businesses, investors, municipalities, startups, and scientific communities within the region. The organization positions itself as a key driver of economic growth and sustainability in one of Germany's largest metropolitan areas. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including JavaScript and Cookiebot for cookie consent management. Google Tag Manager and Google Analytics are used for analytics and marketing purposes, with consent mechanisms in place to comply with privacy regulations. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site uses HTTPS and implements cookie consent with blocking mechanisms for tracking scripts. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not evident in the provided content. There is no visible security policy or incident response contact information, and no vulnerability disclosure or security.txt file is found. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain. Overall, the website is professional, trustworthy, and compliant with basic privacy requirements, though it could improve by publishing explicit privacy and security policies and enhancing security header configurations. The risk level is moderate with no critical vulnerabilities detected.

B

BVB-Verlagsgesellschaft mbH

findcity.de

54

FindCity.de is a German-language online municipal search engine providing information about cities, municipalities, and districts across Germany. Operated by BVB-Verlagsgesellschaft mbH, it offers users access to municipal portraits, direct links to official websites, city maps, and business directories. The website targets citizens, local governments, and businesses seeking regional information. Technically, the site uses Bootstrap and jQuery for frontend presentation, with a moderate performance profile and good mobile responsiveness. Security-wise, the site lacks visible security headers and explicit HTTPS confirmation in the provided data, but it does implement a cookie consent mechanism and maintains a basic privacy policy, indicating some compliance with GDPR requirements. No critical vulnerabilities or blocking mechanisms were detected, and WHOIS data shows a consistent domain registration without privacy protection, supporting legitimacy. Overall, the site is functional, professional, and trustworthy for its niche audience.

W

Waltroper Parkfest

servicepark-waltrop.de

47

Servicepark Waltrop is a small local business specializing in event equipment rental and sales, primarily serving the Waltrop region in Germany. Their offerings include tents, furniture, party sets, water supply, fencing, and stands, supporting the Waltroper Parkfest event and similar occasions. The website is built on TYPO3 CMS and demonstrates a moderate level of digital maturity with good design, navigation, and mobile optimization. However, it lacks advanced analytics and tracking tools, indicating a focus on straightforward service presentation rather than extensive digital marketing. Security posture is adequate with HTTPS usage but lacks explicit security headers and published security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy for its business scope but could improve in security and privacy transparency.

S

Stadtmarketing Waltrop e.V.

stadtmarketingwaltrop.de

61

Stadtmarketing Waltrop e.V. is a small non-profit organization dedicated to promoting the city of Waltrop through cultural events, community engagement, and local business support. The website is professionally designed using Squarespace, featuring clear navigation and mobile optimization. It provides detailed information about upcoming events, membership opportunities, and contact methods, targeting residents and visitors of Waltrop. The organization has been active since 2006, indicating a stable presence in the community. Technically, the website leverages Squarespace's platform and CDN, uses modern web fonts, and implements HTTPS with a cookie consent banner, reflecting a moderate level of digital maturity. However, it lacks advanced security headers and explicit security or incident response policies, which could be improved to enhance trust and compliance. From a security perspective, the site is accessible without WAF or blocking mechanisms, uses SSL properly, and does not expose sensitive data or vulnerable libraries. Privacy compliance is basic but present, with a privacy policy and cookie consent. Contact information is comprehensive, supporting business credibility. Overall, the website presents a trustworthy and professional image suitable for its community-focused mission. Strategic improvements in security policies and transparency could further strengthen its posture and user trust.

L

Lausitzer Seenland

lausitzerseenland.de

48

Lausitzer Seenland is a regional tourism website promoting a young holiday region located between Dresden and Berlin in Germany. The site offers comprehensive information on outdoor activities such as cycling, skating, water sports, and cultural experiences, alongside accommodation and activity booking services. The business operates as a regional tourism authority, targeting families, tourists, and outdoor enthusiasts. The website is well-structured with clear navigation and good content quality, supporting a positive user experience. Technically, it employs modern JavaScript libraries like Swiper and jQuery UI, with responsive design and moderate performance. Security posture is adequate with HTTPS enforced and secure form handling, though it lacks some security headers and a cookie consent mechanism. Privacy compliance is supported by a comprehensive privacy policy and terms of service, but cookie consent is missing. The domain registration data is consistent and trustworthy, aligning with the website's regional focus. Overall, the site is professional, trustworthy, and suitable for general audiences seeking tourism information.

E

Europäischer Parkverbund Lausitz

parkverbund.eu

46

The Europäischer Parkverbund Lausitz is a cultural and tourism network connecting nine significant parks and castles in the Lausitz region of Germany. The website serves as an informational and promotional platform targeting tourists and culture enthusiasts interested in historical gardens and heritage sites. It offers event calendars, guided tours, audiotours, and digital maps to enhance visitor experience. Technically, the site employs a custom CMS with a modern JavaScript stack including jQuery, Swiper, and Matomo analytics, hosted by Vautron Rechenzentrum AG. The website is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and cookie consent mechanisms, but lacks some advanced security headers and explicit incident response information. Overall, the site is trustworthy, compliant with GDPR, and free of suspicious content.

L

Landesarbeitsgemeinschaft Autonomer Frauenhäuser NRW e.V.

frauen-info-netz.de

45

The Frauen-Info-Netz gegen Gewalt website is a regional non-profit platform operated by the Landesarbeitsgemeinschaft Autonomer Frauenhäuser NRW e.V., providing critical information and support services for women affected by violence in North Rhine-Westphalia, Germany. The site offers real-time data on available women’s shelter places, links to related organizations, and practical safety tips. It targets women in need and professionals seeking resources, positioning itself as a trusted regional support network. Technically, the website is built on TYPO3 CMS and integrates Google Maps API for interactive shelter location services. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. No major analytics or tracking tools are present, reflecting a privacy-conscious approach. Security is adequate with HTTPS enforced and secure form handling, but lacks advanced security headers and explicit security policies. From a security perspective, the site shows a solid baseline with no detected vulnerabilities or exposed sensitive data. However, improvements could be made by implementing security headers and publishing a vulnerability disclosure policy. Privacy compliance is supported by a clear privacy policy, though cookie consent mechanisms are absent. WHOIS data is minimal but domain status is active and consistent with the business purpose. Overall, the website is a well-maintained, trustworthy resource for its target audience, with room for technical and security enhancements to strengthen compliance and resilience.

M

Mesto Levice

levice.sk

58

Mesto Levice operates an official municipal website serving the city of Levice, Slovakia. The site provides comprehensive information about local government, public services, cultural events, and community news. It targets residents, visitors, and local businesses, positioning itself as the authoritative source for city-related information. The business model is a government entity providing public digital services and information dissemination. Technically, the site uses a custom CMS platform (WEBY PORTÁL) with common web technologies such as jQuery and Fancybox. Hosting and technical operations are managed by WEBY GROUP s.r.o. The website is moderately optimized for performance and mobile devices, with basic accessibility features. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks advanced security headers and incident response information. Overall, the site is trustworthy and professionally maintained, with room for security and technical improvements.

U

UPC BROADBAND SLOVAKIA, s.r.o.

upc.sk

57

UPC BROADBAND SLOVAKIA, s.r.o. operates a professional telecommunications website offering high-speed internet, television, streaming, and voice services primarily targeting Slovak households and businesses. The company positions itself as a leading provider with highly rated TV and fast internet packages, including bundled services and streaming partnerships with Disney+ and HBO Max. The website is well-structured, mobile-optimized, and provides clear navigation and service information, reflecting a mature digital presence. Technically, the site employs modern JavaScript frameworks, Google Tag Manager, and Visual Website Optimizer for analytics and marketing, with secure HTTPS and CSRF protections in place. Security posture is solid but could be enhanced with additional HTTP security headers and published security policies. Privacy compliance is evident with a comprehensive privacy and cookie policy, though explicit GDPR compliance indicators could be more prominent. Overall, the site demonstrates high business credibility with consistent branding and trust signals such as social media presence and customer support options.

R

Regionálne osvetové stredisko v Leviciach

roslevice.sk

56

Regionálne osvetové stredisko v Leviciach is a regional cultural and educational institution based in Levice, Slovakia, established in 2007. The organization focuses on promoting regional culture and education through events, programs, and archival services. The website serves as an informational portal with links to social media and archival resources, targeting the general public interested in regional cultural activities. The business model is non-profit and government-oriented, with a small organizational size and local market position. Technically, the website is built on the Webnode CMS platform and hosted on Amazon Cloudfront CDN, utilizing standard web technologies such as HTML5, CSS, and JavaScript. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. The cookie consent mechanism is implemented, but privacy and terms of service policies are absent. From a security perspective, the website enforces HTTPS with excellent SSL configuration but lacks security headers and published security policies. No forms or data collection mechanisms are present on the main page, reducing exposure to input-based vulnerabilities. The absence of privacy policy and incident response contacts indicates gaps in compliance and security readiness. Overall, the security posture is moderate but could be improved with better policy transparency and technical safeguards. The overall risk assessment suggests a low to moderate risk profile due to the nature of the organization and limited online data collection. Strategic recommendations include adding privacy and terms of service pages, implementing security headers, publishing incident response contacts, and enhancing transparency to build trust and compliance with GDPR and other regulations.

A

Alena Gajdošová - ALDOX LEVICE

aldoxlevice.sk

55

ALDOX LEVICE is a Slovakian full-service advertising agency established in 2002, offering comprehensive marketing, graphic design, printing, promotional events, and advertising products. The company targets business clients seeking creative advertising solutions and brand promotion. Their market position is that of a small, local agency with a focus on quality and client satisfaction. The website reflects their business model and services clearly, with consistent branding and good content quality. Technically, the website is built on the Webnode CMS platform and hosted on AWS Cloudfront CDN, utilizing modern JavaScript and Google Tag Manager for analytics. The site is moderately optimized for performance and mobile devices, though accessibility and SEO could be improved. The technical infrastructure is adequate for a small business but lacks advanced frameworks or custom development. From a security perspective, the site uses HTTPS, which is a positive baseline. However, it lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is available, indicating a low maturity in security governance. The absence of these policies and mechanisms represents a compliance and trust gap. Overall, the website is functional and professional but requires improvements in privacy compliance and security best practices to enhance trustworthiness and regulatory adherence. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and establishing incident response contacts to improve the security posture and user confidence.