Security Directory

The website www.isoplus.dk represents a Danish business specializing in insulation and facade treatment services. The site is built on WordPress using the Divi theme, incorporating standard plugins such as WooCommerce and Contact Form 7, indicating a moderate level of digital maturity. Cookie consent is managed via Cookiebot, reflecting some attention to privacy compliance. However, the absence of a visible privacy policy, terms of service, and contact information on the homepage limits transparency and user trust. The WHOIS data is unavailable, which restricts domain legitimacy verification. Technically, the site lacks security headers and detailed security policies, which are areas for improvement. Overall, the site appears functional and business-focused but would benefit from enhanced security and compliance measures.

L

Legal Cockpit

cockpit.legal

55

Legal Cockpit is a German-based service provider specializing in legal compliance solutions for websites and digital agencies. The company offers tools and consulting services to ensure websites meet legal requirements, particularly in the areas of privacy and data protection. The website is professionally designed, targeting website owners and agencies seeking legal security. The business operates in a niche market focused on legal compliance for digital businesses.

T

Thüringer Energie- und GreenTech-Agentur GmbH (ThEGA)

thega.de

11

Thüringer Energie- und GreenTech-Agentur GmbH (ThEGA) is a government-supported regional energy agency based in Thüringen, Germany. The organization focuses on providing free consulting and information services related to energy transition, climate protection, renewable energies, and sustainable mobility. Their target audience includes municipalities, businesses, and private citizens within Thüringen. The agency is co-financed by the Free State of Thüringen and the European Union (EFRE), positioning it as a key player in regional energy and climate initiatives. The website reflects a professional and comprehensive digital presence with strong branding and clear navigation.

S

Salling Plast Energy

sallingplast.com

49

Salling Plast Energy is a well-established Danish manufacturer specializing in flexible transport, filtration, and storage solutions for various substances including liquids, gases, and air. Founded in 1999, the company positions itself as one of the leading producers in Denmark within the energy and industrial sectors. Their website reflects a professional business model focused on serving industrial clients with quality products, supported by ISO certifications (9001, 14001, 45001) that underscore their commitment to quality and environmental standards. The presence of a dedicated webshop indicates a hybrid business model combining direct sales and service offerings. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. Integration with Google Tag Manager, Google Analytics, and Cookiebot demonstrates a mature digital marketing and compliance approach. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Hosting is provided by One.com, consistent with the domain registration data. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms with detailed cookie categorization. The use of reCAPTCHA adds protection against automated abuse. However, some security headers are not explicitly detected, and DNSSEC is not enabled, representing areas for improvement. No vulnerability disclosure or incident response information is provided, which could be enhanced to improve transparency and security readiness. Overall, the website is trustworthy, professional, and compliant with GDPR cookie consent requirements. The domain registration is consistent and long-standing, supporting the legitimacy of the business. Strategic recommendations include enabling DNSSEC, adding security headers, publishing a security policy, and establishing a vulnerability disclosure process to further strengthen security posture and trust.

BRUGG Pipes is a specialized manufacturer and service provider of flexible and rigid pipe systems primarily serving the energy and industrial sectors. The company is positioned as a global market leader in safe transport solutions for flammable and water-hazardous substances, offering a comprehensive product portfolio including pipe systems for district heating, cooling, industrial applications, and tank stations. Their website is professionally designed, multilingual, and rich in content, targeting industry professionals and infrastructure planners. Technically, the site is built on TYPO3 CMS with modern tracking and consent management tools, ensuring GDPR compliance and good user experience across devices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data slightly reduces trust but does not detract from the overall legitimacy. The company maintains active social media presence and partners with professional platforms, enhancing its market reach and credibility.

S

Seal For Life

sealforlife.com

58

Seal For Life is a global leader in protective coatings and infrastructure solutions, serving industrial and commercial clients primarily in the energy and infrastructure sectors. The company offers a broad portfolio of brands and products focused on pipeline protection, maintenance coatings, and safety solutions. Their market position is strong, supported by multiple ISO certifications and a comprehensive digital presence. The website reflects a mature business with professional branding and clear communication of services and subsidiaries. Technically, the website is built on WordPress with modern SEO and privacy compliance tools such as Yoast SEO and OneTrust for cookie consent. The site is mobile-optimized and performs moderately well, with good accessibility and SEO practices. Analytics are implemented responsibly with user consent mechanisms. From a security perspective, the site enforces HTTPS and includes standard security headers, but lacks a dedicated security policy or incident response page. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces domain transparency and trust slightly, but the overall security posture is solid. Overall, the website presents a low risk with strong business credibility and compliance, though improvements in transparency and security communication are recommended.

V

Vexve

vexve.com

62

Vexve is a Finnish company specializing in manufacturing valves and providing solutions for district heating and cooling networks, industrial applications, and energy production. The company targets industrial clients and energy sector professionals, positioning itself as a reliable B2B provider of high-quality valve products and energy system solutions. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built using modern frameworks such as Next.js and React, and it employs Cookiebot for cookie consent management, ensuring compliance with privacy regulations like GDPR. The site is well-optimized for mobile devices and demonstrates good SEO and accessibility practices. Performance is moderate, with room for improvement in hosting and speed optimizations. From a security perspective, the website enforces HTTPS and includes important security headers, contributing to a strong security posture. However, the absence of a security.txt file, incident response contacts, and vulnerability disclosure mechanisms indicates areas for enhancement in security transparency and readiness. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professional, but the lack of publicly available WHOIS data for the domain www.vexve.com raises questions about domain registration transparency. This should be investigated further to ensure full legitimacy. Strategic recommendations include publishing security policies and contact information for incident response, improving domain registration visibility, and enhancing performance metrics.

B

BRANDES GmbH

brandes.de

54

BRANDES GmbH is a specialized company with over 55 years of experience providing leak detection and monitoring systems primarily for the energy sector, including district heating and cooling, industrial applications, and environmental protection. The company positions itself as a leading system manufacturer and service provider with a comprehensive product portfolio and extensive service offerings such as planning, installation, and maintenance. Their market presence is supported by certifications and a strong brand identity. Technically, the website is built on TYPO3 CMS, integrates Google Analytics and Tag Manager with consent mechanisms, and is hosted by Parrot Media. The site is well-structured, mobile-optimized, and professionally designed, reflecting a mature digital presence. Security posture is good with HTTPS enforced and privacy compliance evident, though explicit security policies and incident response contacts are not published. Overall, the website and domain registration data indicate a trustworthy and legitimate business with a strong focus on compliance and user privacy.

K

KÄHLER Industrie-Armaturen GmbH

kaehler-armaturen.de

49

KÄHLER Industrie-Armaturen GmbH is a specialized supplier and service provider of high-quality industrial valves and fittings, primarily serving the energy, petrochemical, and industrial sectors in Germany. The company partners with reputable manufacturers such as Vexve to offer a broad portfolio of products including fully welded ball valves and hot tapping systems. Their business model focuses on B2B sales and comprehensive service offerings including installation training and maintenance support. The website reflects a professional and consistent brand image targeting industrial clients with clear contact channels and product information. Technically, the website is built on a modern stack likely using Shopware CMS, with integration of Google Tag Manager and cookie consent management via Cloud CCM19. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Performance is moderate with standard web technologies and lazy loading of images. From a security perspective, the site enforces HTTPS and uses consent management for analytics, but lacks explicit security headers and detailed security or incident response policies. No vulnerability disclosure or security.txt file is present, which could be improved to enhance trust and compliance. Privacy and cookie policies are not explicitly found, indicating a gap in GDPR compliance documentation. Overall, the website is trustworthy and professional with a solid business presence, but could benefit from enhanced privacy and security disclosures to improve compliance and user trust. Strategic improvements in security headers and policy transparency are recommended to strengthen the security posture.

H

Hartmann Valves

hartmann-valves.com

9

Hartmann Valves is an established company specializing in the manufacturing and supply of industrial valves, primarily serving the energy sector. The website highlights over 75 years of experience and focuses on technical innovations for reliable energy supply. The digital infrastructure is based on WordPress CMS with modern tools such as Elementor and Yoast SEO, hosted on Kinsta, indicating a moderate level of digital maturity. The website is professionally designed, mobile-optimized, and includes marketing and analytics tools such as Google Analytics, LinkedIn Insight, and Leadinfo. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks some security headers and explicit privacy and terms of service documentation. The absence of WHOIS data for the domain is a notable concern, suggesting either a WHOIS privacy service or an unregistered domain, which conflicts with the active website presence. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices.

B

BUHLMANN GROUP

buhlmann-group.com

51

BUHLMANN GROUP is a well-established premium trading company specializing in steel pipes, fittings, and accessories with a global reach and a strong presence in the energy, chemical, shipbuilding, and machine construction sectors. The company emphasizes quality and innovation, supported by multiple ISO certifications and advanced logistics solutions. Technically, the website is built on a modern WordPress platform with good SEO and mobile optimization, leveraging tools like Google Tag Manager and Borlabs Cookie for privacy compliance. Security posture is solid with HTTPS enforcement and domain transfer protections, though there is room for improvement in security headers and incident response transparency. Overall, the site reflects a professional and trustworthy business with comprehensive content and good user experience.

B

Baker Hughes

bakerhughes.com

77

Baker Hughes is a leading energy technology company focused on advancing safer, cleaner, and more efficient energy solutions globally. The company offers a broad portfolio of services and technologies including energy transition, hydrogen technologies, geothermal solutions, carbon capture, emissions abatement, remote operations, AI-driven energy operations, liquefied natural gas, industrial technology, and mature asset solutions. Their market position is that of a large, established enterprise headquartered in the United States, serving energy industry professionals and partners worldwide. Technically, the website is built on Drupal CMS with modern JavaScript integrations, including analytics and consent management tools, demonstrating a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security policies and incident response information are not publicly detailed. Overall, the website presents a professional, trustworthy, and well-structured digital presence aligned with enterprise standards.

I

ISOPLUS Group

isoplus.de

61

ISOPLUS Group is a large European manufacturer specializing in pre-insulated pipe systems for district heating, cooling, industry, solar thermal, bioenergy, agriculture, and CCS sectors. The company operates in over 30 countries with a workforce of approximately 1,600 professionals and is part of the Viessmann Generations Group. Their website is professionally designed, multilingual, and provides comprehensive information about their products, services, and corporate profile. Technically, the site is built on TYPO3 CMS, uses modern web technologies, and integrates Google Analytics and Tag Manager for user tracking. Security-wise, the site enforces HTTPS and implements a cookie consent mechanism, but lacks explicit security policies and incident response contacts. WHOIS data is privacy protected, which is justified for a business of this scale. Overall, the website demonstrates a mature digital presence with good privacy compliance and a strong business credibility profile.

B

badenovaWÄRMEPLUS GmbH & Co. KG

badenovawaermeplus.de

68

badenovaWÄRMEPLUS GmbH & Co. KG is a regional energy provider specializing in sustainable heat supply and renewable energy solutions in Germany. The company focuses on delivering Fernwärme (district heating), biogas, geothermal energy, solar, and wind energy services, targeting private customers, businesses, and industrial clients. Their market position is that of a key regional player driving the energy transition with innovative and efficient solutions. The website reflects a professional and consistent brand image with clear navigation and relevant content for their audience. Technically, the site uses modern JavaScript libraries and Google Tag Manager for analytics, with good mobile optimization and accessibility features. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although a dedicated security policy and incident response information are missing. Privacy compliance is well addressed with cookie consent and a comprehensive privacy policy. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

K

Kraftanlagen Energies & Services SE

kraftanlagen.com

46

Kraftanlagen Energies & Services SE is a German-based integrated solutions provider specializing in decarbonization and energy transition services across energy, industrial, and building technology sectors. The company operates as part of the Equans Group and offers comprehensive services including consulting, engineering, construction, and maintenance. Their market position is strong within the DACH region, supported by a network of subsidiaries and a professional digital presence. The website demonstrates a mature technical infrastructure leveraging WordPress CMS, modern plugins, and consent management tools, reflecting a good level of digital maturity. Security posture is solid with HTTPS, reCAPTCHA, and consent mechanisms, though some security headers and incident response details could be improved. Overall, the site is professional, well-branded, and compliant with GDPR, but the absence of WHOIS registration data introduces some uncertainty about domain legitimacy that should be verified.

J

Josef Weiß Elektrotechnik GmbH & Co KG

et-weiss.de

42

Josef Weiß Elektrotechnik GmbH & Co KG is a medium-sized German company specializing in electrical engineering services, including industrial installations, medium and low voltage systems, automation technology, and geothermal energy solutions. The company positions itself as a reliable partner for environmentally friendly and future-oriented energy supply primarily in Bavaria and the German-speaking region. The website reflects a professional business with clear service offerings and references to significant projects and partners in the energy sector. Technically, the website is built on WordPress using the Divi theme, incorporating modern web technologies such as jQuery and Google Analytics for tracking. The site is mobile-optimized and has good SEO practices, though accessibility features are basic. Hosting is managed via domaincontrol.com nameservers, indicating a standard hosting environment. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers and a formal vulnerability disclosure mechanism. No privacy or cookie policies were found, indicating compliance gaps with GDPR and related regulations. Contact information is clearly presented, enhancing business credibility. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced privacy compliance and security hardening to reduce risk and improve user trust.

I

Interreg Deutschland-Danmark

interreg-de-dk.eu

48

The website www.interreg-de-dk.eu represents the Interreg Deutschland-Danmark program, a government-backed EU-funded initiative supporting cross-border cooperation projects between Germany and Denmark. It provides funding and resources to foster regional development and collaboration. The site is professionally designed, multilingual, and targets organizations and stakeholders involved in regional cooperation. Technically, it is built on TYPO3 CMS, uses modern frontend frameworks like Bootstrap, and integrates Google Tag Manager and CookieFirst for analytics and consent management. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the domain appears legitimate despite WHOIS privacy protection, consistent with EU domain privacy norms. The site is trustworthy, well-maintained, and serves a clear public sector mission.

E

European Society of Cardiology

escardio.org

60

The European Society of Cardiology (ESC) is a leading independent, nonprofit organization dedicated to reducing the burden of cardiovascular disease through education, research, and advocacy. The website serves as a comprehensive platform for cardiology professionals, offering access to guidelines, congresses, eLearning, and community engagement. The ESC maintains a strong market position as a trusted authority in cardiovascular health across Europe and globally. Technically, the website is built on a robust infrastructure using modern web technologies including Bootstrap for responsive design, and integrates multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Adobe DTM. The site is hosted with performance and security in mind, leveraging Akamai CDN and enforcing HTTPS with strong security headers. From a security perspective, the ESC website demonstrates good practices including HTTPS enforcement, cookie consent management via OneTrust, and no visible vulnerabilities or exposed sensitive data. However, there is an opportunity to enhance transparency by publishing a dedicated security policy and vulnerability disclosure information. Overall, the ESC website is a professional, secure, and user-friendly platform that effectively supports its mission. Strategic recommendations include improving security transparency, maintaining up-to-date third-party scripts, and enhancing accessibility features to further strengthen trust and compliance.

Z

Zool Itamar

itamar-medical.com

65

Zool Itamar is a medical technology company specializing in home sleep apnea testing devices, notably the WatchPAT system that utilizes peripheral arterial tonometry signals. The company targets healthcare providers and patients requiring sleep apnea diagnostics, positioning itself as a niche player within the healthcare technology sector. The website reflects a professional and consistent brand image aligned with its parent company, ZOLL. Technically, the site is built on WordPress using Elementor and Yoast SEO, with modern web technologies and a cookie consent mechanism ensuring privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. The absence of WHOIS registration data slightly reduces trust but does not detract significantly from the overall legitimacy. Strategic recommendations include enhancing security headers, publishing incident response policies, and improving contact transparency.

Z

ZOLL Medical Corporation

zolldata.com

65

ZOLL Data Systems is a well-established provider of software and data solutions tailored for EMS, fire, and healthcare financial organizations. The company leverages decades of innovation, dating back to its founder's pioneering work in 1956, to deliver cloud-based solutions that enhance clinical, operational, and financial performance. Their market position is strong, supported by a comprehensive product suite and a clear focus on interoperability and revenue cycle management. The website reflects a mature digital presence with professional design, clear navigation, and extensive content targeting EMS and healthcare sectors. Technically, the website is built on the HubSpot CMS platform, integrating modern technologies such as Wistia for video, Google Analytics, and various marketing and tracking tools. The site is mobile-optimized, accessible, and SEO-friendly, indicating a high level of digital maturity. Security posture is solid with HTTPS enforced and secure cookie consent mechanisms, though explicit security headers and dedicated security policies could be improved. The absence of WHOIS registration data for the domain is a notable concern, creating uncertainty about domain legitimacy and ownership. Despite this, the professional presentation, detailed business information, and presence of verified social media channels mitigate some risk. Overall, the site scores well on content quality, technical implementation, and business credibility but should address WHOIS transparency and enhance security disclosures. Strategic recommendations include verifying domain registration details, publishing clear security and incident response policies, and implementing a vulnerability disclosure program to strengthen trust and compliance.

I

IKOME Dr. Barth GmbH & Co. KG

ikome.de

10

IKOME Dr. Barth GmbH & Co. KG is a German education and consulting institute specializing in mediation, communication, and personal development training. The company operates primarily in German cities including Leipzig, Berlin, Essen, Stuttgart, and Munich, offering a broad range of professional training and consulting services. The website reflects a well-established regional presence with a strong focus on education and professional development. Technically, the site is built on the Contao CMS platform, hosted on kasserver.com, and employs modern tools such as Cookiebot for GDPR-compliant cookie management and Google Tag Manager for analytics. The site is accessible, mobile-optimized, and provides clear navigation and professional content. Security-wise, HTTPS is enabled and cookie consent mechanisms are robust, though some security headers are not detected in the provided data. No critical vulnerabilities or suspicious patterns were found. Overall, the website demonstrates a good security posture and compliance with privacy regulations, supporting the company's credibility and trustworthiness.

A

Akademie für Mediation, Soziales und Recht der Steinbeis Hochschule Berlin

akasor.de

53

The Akademie für Mediation, Soziales und Recht der Steinbeis Hochschule Berlin operates a professional educational website offering mediation and related training programs across multiple German cities. The website positions itself as a niche provider of certified mediation and supervision education, leveraging its affiliation with the Steinbeis Hochschule Berlin to establish credibility. The business model focuses on professional development and continuing education for individuals seeking certification in mediation, supervision, and coaching fields. Technically, the website employs a modern tech stack including jQuery, Swiper.js, Google Tag Manager, and Cookiebot for consent management. It is built on the Contao Open Source CMS platform and demonstrates good SEO practices with structured data and meta tags. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, there is room for improvement in security headers and publishing formal security policies or incident response contacts. No critical vulnerabilities or suspicious patterns were detected in the WHOIS data or site content. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It effectively serves its educational audience with relevant content and transparent advertising and tracking practices.

N

Nutricia

nutriciavoorprofessionals.nl

11

Nutricia is a well-established healthcare company specializing in medical nutrition products and services, targeting consumers, patients, and healthcare professionals primarily in the Netherlands. The website reflects a mature digital presence with professional design, comprehensive content, and clear navigation. Nutricia operates under Danone, a global parent company, and holds a B Corp certification, emphasizing social and environmental responsibility. The site offers extensive resources including product information, professional education, and customer support services. Technically, the website is built on Adobe Experience Manager with modern frameworks and integrates analytics and consent management tools effectively. Security posture is strong with HTTPS, security headers, and secure forms, though explicit security policies and incident response details are not published. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the website demonstrates high professionalism, trustworthiness, and a strong commitment to user privacy and security.

V

VU - Vereinigung der Unternehmensverbände Mecklenburg-Vorpommern e.V.

vumv.de

10

VU - Vereinigung der Unternehmensverbände Mecklenburg-Vorpommern e.V. is the largest business association in Mecklenburg-Vorpommern, Germany, serving as a central organization representing economic and social policy interests of employers and businesses in the region. The website presents a professional and consistent brand image, targeting regional businesses and stakeholders. The business model focuses on advocacy, networking, and representation within political and administrative spheres. Technically, the website is built on the Contao Open Source CMS with Bootstrap 3.3.7 for responsive design, hosted by iwelt AG. It employs modern web technologies including Google Tag Manager and Cookiebot for analytics and GDPR-compliant cookie consent management. Security posture is adequate with HTTPS enforced and cookie consent mechanisms denying ad personalization and analytics by default, but lacks explicit security headers and published security policies. Privacy compliance is partial due to the absence of a visible privacy policy and terms of service. Overall, the website is accessible, well-structured, and trustworthy, but could improve transparency and security practices.

A

Automando GmbH

bewirtungsbeleg.net

47

Bewirtungsbeleg.net is a German technology startup operated by Automando GmbH, offering an AI-powered SaaS solution for automated creation of tax-compliant hospitality receipts (Bewirtungsbelege). The platform targets businesses and professionals who require efficient and compliant receipt management, providing a web and mobile Progressive Web App with integration capabilities to popular bookkeeping tools. The website is professionally designed, content-rich, and provides clear pricing tiers including free and premium plans. Technically, it is built on WordPress with Elementor, uses modern JavaScript libraries, and integrates Google Analytics and Microsoft Clarity for user behavior insights. Cookie consent is managed via CookieYes with granular user controls, reflecting good privacy compliance. Security posture is solid with HTTPS enforced and domain transfer protection, though some security headers could be improved. Overall, the domain registration is transparent and consistent with the startup's recent founding in 2024. The website is trustworthy, safe, and well-positioned in its niche market.

A

ABR-IT

abr-it.de

61

ABR-IT is a small German IT service provider specializing in comprehensive IT solutions including web design, consulting, cloud services, telephony, and security technology. The company targets small to medium businesses and private clients, positioning itself as a trusted regional IT partner with certifications from Microsoft, Ionos, Hetzner, and Easybell. The website is built on WordPress with Elementor and integrates modern technologies such as Google Tag Manager and Complianz for GDPR compliance. Security posture is good with HTTPS and cookie consent mechanisms, though improvements in security headers and incident response transparency are recommended. Overall, the website is professional, user-friendly, and compliant with privacy regulations, reflecting a mature digital presence.

A

AGFW

fw703.de

46

AGFW is a German association dedicated to promoting energy efficiency in heating, cooling, and combined heat and power systems, with a strong focus on district heating and climate protection goals. The website provides technical guidelines, calculation tools, and supports climate-relevant projects, targeting municipalities and energy sector stakeholders. The organization is positioned as a reputable industry association with established standards and collaborations with academic and funding institutions. Technically, the website is built on TYPO3 CMS, leveraging Bootstrap and jQuery for frontend responsiveness and Google Tag Manager for analytics. The site is moderately performant, mobile-optimized, and implements a cookie consent mechanism aligned with GDPR requirements. However, some security headers and explicit security policies are not evident. From a security perspective, the site uses HTTPS and has implemented cookie consent with opt-in/out capabilities, but lacks visible incident response contacts and vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious content were detected. The WHOIS data is minimal but does not raise immediate concerns, though more registrant transparency would improve trust. Overall, the website is professional, trustworthy, and compliant with basic privacy and security standards. Strategic improvements in security headers, incident response transparency, and contact information would enhance its security posture and user trust.

A

AGFW - Der Energieeffizienzverband für Wärme, Kälte und KWK e.V.

fw704.de

48

AGFW is a German energy efficiency association specializing in heating, cooling, and combined heat and power systems. The website provides regulatory guidance, technical standards, and calculation tools to support subsidy applications under the KWKG legislation. The organization collaborates with regulatory bodies such as BAFA and expert committees to maintain up-to-date and practical resources for industry stakeholders. The website targets energy professionals and project developers seeking compliance and funding support. Technically, the site is built on TYPO3 CMS with Bootstrap and jQuery, integrating Google Tag Manager and Google Maps with user consent. The site is mobile-optimized and structured for good user experience, though some accessibility features are basic. Performance is moderate, and SEO is basic but functional. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks visible HTTP security headers and explicit incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR. Overall, the website is professional, trustworthy, and well-suited to its niche audience. Strategic improvements in security headers and incident response transparency would enhance its security maturity and trustworthiness.

A

AGFW - Der Energieeffizienzverband für Wärme, Kälte und KWK e.V.

agfw-regelwerk.de

61

AGFW is a German industry association specializing in standardizing minimum requirements across the heat and cold supply sector. The website serves as a professional portal providing access to technical rulebooks and regulatory documents primarily for members and subscribers. The organization positions itself as a key standard-setter in the energy sector, supporting operational companies with up-to-date technical guidelines. Technically, the site employs modern web technologies including Bootstrap, jQuery, and FontAwesome, with Google Analytics and Tag Manager integrated for analytics and marketing purposes. The site is hosted on servers associated with giordano-online.net and uses HTTPS with privacy-conscious configurations such as IP anonymization. Security posture is moderate with good practices like CSRF tokens and cookie consent, though lacking explicit security policies or incident response contacts. Overall, the website is professional, well-structured, and compliant with GDPR, targeting industry professionals and members. No blocking or WAF mechanisms were detected, and no adult or questionable content is present.

A

Agentur2020

2020.de

59

Agentur2020 is a small German agency specializing in sustainability and sustainability communication services. The website presents a professional and well-structured digital presence built on WordPress with the Divi theme and enhanced by Yoast SEO for search optimization. The technical infrastructure includes Cloudflare for DNS and CDN services, and integration with HubSpot and Google Tag Manager for marketing and analytics purposes. Security posture is adequate with HTTPS enabled and Cloudflare usage, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the website is functional and professional but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

S

sweet & salty

sweet-and-salty.de

55

sweet & salty is a specialized German agency focused on content marketing and corporate journalism, delivering high-quality, data-driven storytelling services to businesses with a strong value orientation. The company positions itself as a premium provider emphasizing handcrafted content and deep research, targeting clients who seek meaningful and sustainable content strategies. Technically, the website is built on Drupal 10, employs Google Tag Manager for analytics, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and anti-bot measures, though lacks explicit security headers and incident response information. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the site presents a professional and trustworthy digital presence with moderate technical and security maturity.

I

Immunefi

immunefi.com

70

Immunefi is a leading Web3 security platform established in 2020, specializing in onchain security operations including bug bounty programs, audits, and AI-powered threat detection. The company serves blockchain projects and security researchers, positioning itself as a trusted intermediary to prevent hacks and secure digital asset treasuries. Their platform integrates multiple security tools and partners, providing a unified command center for security operations. Technically, the website is built on modern frameworks like Next.js and React, hosted with Cloudflare DNS, and employs Google Tag Manager and Sentry for analytics and error tracking. The site is well-optimized for performance, mobile responsiveness, and SEO. Security posture is strong with HTTPS, domain protection statuses, and SOC 2 Type II certification, though DNSSEC is not enabled and no security.txt file is published. Overall, Immunefi demonstrates a mature security and compliance stance with room for minor improvements in incident response transparency and DNS security.

T

thermondo

thermondo.de

63

thermondo.de is a German website offering heating installation and replacement services, positioning itself as a convenient local heating contractor with fixed pricing and comprehensive consulting including subsidy support. The website targets homeowners and property owners in Germany seeking heating system upgrades. Technically, the site employs modern marketing and analytics tools such as Visual Website Optimizer, Google Tag Manager, Usercentrics CMP for consent management, and Facebook and Microsoft advertising pixels, indicating a mature digital marketing infrastructure. The website is accessible, uses HTTPS, and implements cookie consent mechanisms, but lacks publicly visible privacy policies, terms of service, and explicit security or incident response policies. No contact information is found in the provided HTML content, which may impact user trust and compliance. Overall, the security posture is moderate with room for improvement in transparency and policy publication.

T

TheDive GmbH

thedive.com

56

TheDive GmbH is a German-based consultancy specializing in organizational development and sustainable business models. Their website targets organizations interested in adapting to modern work environments with services including change management, leadership development, and agile methodologies. The company positions itself as a niche player focused on sustainability and adaptability in business. Technically, the website employs modern JavaScript, CSS, and third-party services such as Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is mobile-optimized with good SEO practices but lacks visible security headers and explicit contact information, which could be improved. Security posture is moderate with no detected vulnerabilities but missing some best practices like security headers and incident response contacts. The WHOIS data is missing, raising some concerns about domain legitimacy, though the professional site content and compliance with privacy regulations mitigate this risk. Overall, the site is functional and professional but would benefit from enhanced transparency and security hardening.

R

Rinn Beton- und Naturstein GmbH

rinn.net

63

Rinn Beton- und Naturstein GmbH is a German company specializing in concrete and natural stone products for garden and property landscaping, with a history spanning over 100 years. The website presents a professional and well-structured digital presence using TYPO3 CMS, featuring comprehensive product information and a clear focus on quality and sustainability. The company targets garden owners, landscapers, and construction professionals, positioning itself as a trusted provider in the landscaping materials sector. Technically, the website employs modern web technologies including Cookiebot for consent management and Google Tag Manager for analytics, ensuring compliance with GDPR and related privacy regulations. However, the absence of WHOIS registration data raises concerns about domain legitimacy, despite the professional appearance and content quality of the site. Security measures such as HTTPS are implied but security headers and incident response policies are not explicitly found, indicating room for improvement in security posture. Overall, the website is functional, compliant, and trustworthy from a user perspective but requires verification of domain registration and enhancement of security policies to strengthen its risk profile.

E

easyfeedback

easy-feedback.com

57

easy-feedback.com is a professional online survey platform offering tools for creating questionnaires, forms, and quizzes with an emphasis on GDPR compliance and AI-powered analysis. The website targets businesses and individuals seeking flexible and privacy-conscious survey solutions. The platform is built on WordPress using Elementor and Yoast SEO, hosted by Hetzner Online GmbH, and integrates modern consent management via Cookiebot and analytics through Google Tag Manager. Security posture is solid with HTTPS and cookie consent, though explicit privacy and terms of service pages are missing, representing compliance gaps. The domain is mature and legitimate, supporting the business's credibility.

E

easyfeedback

indivsurvey.de

48

The website indivsurvey.de is a login portal for the easyfeedback survey tool, a SaaS platform focused on survey creation and feedback collection. The business operates primarily in the technology sector, targeting businesses and individuals requiring survey solutions. The site is professionally designed with consistent branding and good user experience, supporting mobile optimization and basic accessibility. The technical infrastructure leverages modern JavaScript libraries, Google Tag Manager for analytics, and Cookiebot for cookie consent management, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and secure form handling, though the absence of explicit security policies and incident response information suggests room for improvement. Overall, the site is trustworthy and functional, with no signs of blocking or WAF interference.

Glassdoor is a leading online job search and career community platform that provides millions of job listings, company reviews, salary comparisons, and employer branding services. The website targets job seekers, professionals, and employers, offering a comprehensive platform for workplace conversations and career advancement. The brand is well-established with a consistent and professional online presence. Technically, the site leverages modern web technologies including React, RudderStack, and Amplitude for analytics, ensuring a responsive and engaging user experience. Security is robust with HTTPS enforced and appropriate security headers, although explicit privacy and cookie policies were not detected in the provided content. Overall, Glassdoor demonstrates a mature digital infrastructure and a strong market position in the technology sector.

M

MediaValet

mediavalet.com

63

MediaValet is an enterprise-focused digital asset management software provider, positioning itself as a market leader in the DAM space. The company offers a comprehensive suite of services including advanced search, AI-powered tagging, experience portals, integrations, and video management, targeting large organizations seeking to centralize and streamline their digital assets. The website reflects a mature digital presence built on WordPress with modern SEO and marketing tools integrated, indicating a high level of digital maturity. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information could be improved. The absence of WHOIS data is a notable anomaly but does not currently detract significantly from the overall trustworthiness given the professional website and business presence. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and improving transparency around contact information for security matters.

E

Erblotse

erblotse.de

60

Erblotse.de is a German online platform specializing in inheritance and estate planning services. The website offers users tools to create legally compliant testaments, manage inheritance cases, and access expert advice from legal and tax professionals. It holds a strong market position supported by over 100 cooperation partners and excellent customer reviews, including a 5-star rating on Google and recommendations from Finanztip. The platform targets individuals involved in inheritance matters within Germany, providing accessible and user-friendly online solutions. Technically, the site is built on Webflow CMS, hosted on AWS infrastructure, and integrates modern analytics and marketing tools such as Google Analytics, Hotjar, and Facebook Pixel, all managed with user consent via a cookie banner. The website demonstrates excellent design quality, mobile optimization, and SEO practices, contributing to a positive user experience. Security-wise, the site enforces HTTPS and employs reputable third-party services but could improve by explicitly implementing security headers and publishing incident response contacts. Overall, Erblotse.de presents a trustworthy and professional digital presence with a solid security posture and compliance with GDPR requirements.

M

medpublico

med-publico.com

55

medpublico is a specialized full-service agency focused on medical and scientific communication, serving pharmaceutical companies, medical device manufacturers, academic institutions, and professional associations primarily in Germany. The company offers a broad range of services including strategic consulting, medical writing, PR and marketing, creative design, digital solutions, and training through its academy. With over 15 years of experience and a small but expert team, medpublico positions itself as a trusted partner in healthcare communication. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and integrating Google Analytics and Tag Manager for data insights, complemented by a cookie consent mechanism via Borlabs Cookie. Security posture is solid with HTTPS enforced and domain registration protections in place, though improvements could be made by enabling DNSSEC and adding security headers. Privacy compliance is basic, with cookie consent but no visible privacy policy or terms of service in the provided content. Overall, the website is professional, well-branded, and trustworthy, supporting the company's credibility in the healthcare communication sector.

K

Startseite - Konsens Booking

konsens-booking.com

60

Konsens Booking operates as an online hotel booking platform specializing in providing hotel room reservations for attendees of selected events and congresses primarily in the German-speaking DACH region. The website offers curated hotel options linked to various medical and scientific congresses, targeting event participants seeking convenient accommodation solutions. The business model focuses on acting as an intermediary between event attendees and hotel partners, facilitating bookings for niche event markets. The site content is primarily in German with an option to switch to English, indicating a regional focus with some international accessibility. From a technical perspective, the website employs common web technologies including jQuery, Google Analytics, and Google Tag Manager for tracking and analytics. The site is mobile optimized with a responsive design and includes a GDPR-compliant cookie consent mechanism. However, no CMS or hosting provider information is explicitly detectable, and no advanced frameworks are identified. Performance is moderate with good SEO practices evident through meta tags and sitemap inclusion. Security posture shows some strengths such as IP anonymization in analytics and cookie consent compliance, but lacks visible HTTP security headers and publicly available security policies or incident response contacts. The absence of WHOIS registration data raises concerns about domain legitimacy and transparency, although the professional presentation and GDPR compliance suggest a legitimate business operation. No direct contact emails or phone numbers are found on the homepage, with contact presumably via a form on a dedicated contact page. Overall, the website is functional and professional but would benefit from improved transparency regarding domain registration, enhanced security headers, and clearer direct contact information. These improvements would strengthen trustworthiness and security posture, supporting better compliance and user confidence.

W

WeldingPro Group s.r.o.

metalwell.eu

64

Metal Well, operated by WeldingPro Group s.r.o., is a Czech Republic-based metalworking company specializing in precision welding and locksmithing services. The company offers both custom and serial production of welded metal structures, leveraging expertise in 10 welding techniques and providing technical documentation services. Their market position is supported by ISO certifications and a portfolio of industrial references, targeting B2B clients in manufacturing and construction sectors. The website is professionally designed, multilingual, and provides comprehensive contact and certification information. Technically, the site is built on WordPress with modern tools like Google Tag Manager and reCAPTCHA, ensuring moderate performance and good SEO. Security posture is solid with HTTPS and form protections, though explicit security headers and policies are absent. Privacy compliance is strong with clear cookie consent and GDPR-aligned privacy policies. Overall, the site reflects a credible, established business with a good digital presence.

W

Welding Pro Group s.r.o.

metalwell.de

60

Metal Well, operated by Welding Pro Group s.r.o., is a medium-sized manufacturing company specializing in precise metal processing, welding, and small series production. The company holds multiple certifications including ISO 9001 and welding process certifications, positioning itself as a reliable and professional service provider in the manufacturing sector. The website is well-structured, multilingual, and targets industrial and commercial clients seeking high-quality metal fabrication services. Technically, the site is built on WordPress with modern plugins and technologies, including Google Tag Manager and reCAPTCHA, ensuring good digital maturity and user experience. Security posture is solid with HTTPS, secure forms, and cookie consent, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained.

W

Wölfel-Gruppe

dbel.cloud

60

dBEL GmbH + Co. KG is a German-based company specializing in cloud-based acoustic planning software solutions. As a young subsidiary of the Wölfel Group, which has over 50 years of expertise in acoustics and building physics, dBEL leverages scientific data and expert knowledge to provide accessible, professional tools for a broad range of industries including HVAC, event planning, and architecture. The company positions itself as a knowledge platform enabling users to independently plan and optimize acoustic projects efficiently. Technically, the website is built on TYPO3 CMS with modern frameworks like Bootstrap and integrates analytics and consent management tools such as Google Tag Manager, Hotjar, and CCM19. Security posture is solid with HTTPS enforced and domain protections in place, though DNSSEC is not enabled. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website is professional, well-structured, and trustworthy, reflecting a mature digital presence aligned with its business goals.

W

whistly. The secure whistleblower software.

whistly.org

67

Whistly.org is a small, specialized SaaS provider offering a digital whistleblower system designed to help companies comply with the EU Whistleblower Directive and supply chain regulations. The website positions itself as a secure and compliant whistleblower software solution targeting businesses needing to meet EU regulatory requirements. The business appears to be recently founded in 2023, consistent with the domain registration date. The platform is built on Bubble.io, leveraging modern JavaScript frameworks and integrates multiple marketing and analytics tools such as HubSpot, Google Analytics, LinkedIn Insight Tag, and Apollo.io. Cookie consent is implemented via Cookiebot, indicating some level of privacy compliance. However, no privacy policy or terms of service pages were detected in the provided content, which is a compliance gap.

I

i+m NATURKOSMETIK BERLIN

iplusm.berlin

54

i+m NATURKOSMETIK BERLIN is a small German company specializing in natural, fair, organic, and vegan cosmetics. The website serves as an e-commerce platform targeting consumers interested in ethical and natural skincare products. The business appears to be well-established with a domain age since 2014, consistent with its market presence. Technically, the website is built on WordPress, utilizing Yoast SEO for optimization and Google Tag Manager for analytics, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, though accessibility features could be improved. Security posture is basic with HTTPS enabled but lacking DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the site is professional and trustworthy but would benefit from improved security and privacy practices.

B

Bauck Mühle

bauck.de

48

Bauck Mühle is a German-based company specializing in organic and health food products, including gluten-free and vegan options. Their website is built on TYPO3 CMS and features a professional design with good mobile optimization and clear navigation. The business targets consumers interested in wholesome, organic food products and operates primarily in the retail and e-commerce sectors. The company maintains a moderate market position within the niche organic food market. Technically, the website employs modern technologies such as Google Analytics 4, Google Tag Manager, and Cookiebot for consent management, indicating a mature digital infrastructure. Security-wise, the site uses HTTPS and implements cookie consent mechanisms but lacks explicit security headers and published security policies, which could be improved. Overall, the website is trustworthy, with no signs of blocking or WAF interference, and maintains good privacy compliance through detailed cookie consent dialogs. However, the absence of visible privacy policy and terms of service pages is a notable gap.

B

Bau-Fritz GmbH & Co. KG

baufritz.com

51

Baufritz is a well-established German company specializing in ecological prefabricated wooden houses, combining sustainable architecture with innovative environmental technology. The company targets private and business customers seeking healthy and environmentally friendly housing solutions. Their market position is strong, with a history dating back to 1896 and certifications supporting their ecological claims. Technically, the website employs modern frameworks like Bootstrap and integrates Google Tag Manager and Usercentrics for analytics and consent management, reflecting a mature digital infrastructure. Security posture is good with HTTPS and consent mechanisms, though some security headers and explicit policies could be improved. The WHOIS data is missing or unavailable, which slightly impacts domain trustworthiness but does not detract from the professional presentation and comprehensive content. Overall, the website is high quality, accessible, and trustworthy for its audience.

R

reown inc.

reown.com

71

Reown Inc. is a technology company specializing in providing infrastructure and developer tools for onchain finance applications, including DeFi, payments, and enterprise solutions. Positioned as a connectivity layer for the financial internet, Reown offers SDKs and analytics to enable secure, user-friendly, and scalable digital ownership experiences. The company targets developers and teams building blockchain-based financial products, emphasizing growth and security. Technically, the website is built on modern frameworks such as Next.js and React, hosted via Cloudflare, and integrates HubSpot for forms and PostHog for analytics, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and domain registration protections, though DNSSEC is not enabled and no security.txt file is published. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the website demonstrates high professionalism, technical maturity, and business credibility, with minor recommendations for enhanced DNS security and incident response transparency.