Security Directory

Wohnraum gesucht is a German regional initiative focused on addressing the critical shortage of affordable student housing in the Rhein-Main area. Supported by multiple universities and city administrations, the platform facilitates the connection between citizens offering private housing and students seeking accommodation. The website is built on TYPO3 CMS and employs modern web technologies including Matomo analytics with a GDPR-compliant cookie consent mechanism. The content is well-structured, professionally presented, and targeted primarily at students and local citizens. Security practices include HTTPS enforcement and cookie consent management, though explicit security policies and incident response contacts are not published. Overall, the website demonstrates a solid technical infrastructure and a trustworthy business model with a focus on education and non-profit service.

S

Studierendenwerk Frankfurt am Main

swffm.de

47

Studierendenwerk Frankfurt am Main is a regional non-profit organization dedicated to supporting students in the Rhein-Main area through housing, dining, financial aid, and counseling services. The website reflects a mature digital presence with a well-structured content offering and clear navigation tailored to its student audience. Technically, the site is built on TYPO3 CMS with Bootstrap, ensuring responsive design and moderate performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong, with a comprehensive privacy policy and GDPR-aligned cookie consent. Overall, the domain and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.

C

CAMPUSERVICE GmbH

campuservice.de

63

CAMPUSERVICE GmbH is a professional service subsidiary of Goethe-Universität Frankfurt am Main, providing a broad range of services including event management, advertising, career services, academy training, campus shop operations, and administrative support. The website reflects a well-structured and professionally designed portal targeting students, university staff, companies, and regional partners. The business model focuses on supporting university-related activities and fostering collaboration with external stakeholders. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Colibri Page Builder, ensuring good SEO and mobile responsiveness. Security posture is solid with HTTPS enabled and cookie consent implemented, though explicit security policies and incident response contacts are not published. Overall, the domain registration and WHOIS data align well with the university affiliation, indicating legitimacy and trustworthiness.

X

xmental – Digitale Lösungen

xmental.de

46

xmental – Digitale Lösungen is a specialized TYPO3 agency based in Berlin, Germany, with a strong focus on creating barrier-free, accessible websites primarily for clients in the cultural, educational, and societal sectors. Established since 2001, the company positions itself as a reliable and experienced partner for TYPO3 web projects, emphasizing compliance with upcoming accessibility laws and standards. Their key services include consulting, design, TYPO3 development, digital accessibility, and ongoing support. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website is built on TYPO3 CMS and leverages modern web technologies such as HTML5, CSS3, Bootstrap, and jQuery. It is hosted on servers indicated by the agenturserver nameservers and uses Matomo for privacy-conscious analytics. The site is mobile-optimized and demonstrates good SEO and accessibility practices, including a cookie consent mechanism and detailed privacy policy. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent for compliance. However, it lacks explicit security headers and a published security or incident response policy. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, showing a domain age that matches the company's stated history, enhancing trustworthiness. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen security and trust.

M

Muzeum Karla Zemana

karelzemanmuseum.org

54

Muzeum Karla Zemana is a specialized cultural and educational institution dedicated to showcasing the life and work of the renowned filmmaker Karel Zeman. The museum offers interactive exhibitions, workshops, and events targeting a broad audience including families, tourists, and film enthusiasts. It operates a ticketing system and an e-shop for merchandise, positioning itself as a niche but well-established player in the hospitality and cultural sector in the Czech Republic. The website reflects a mature digital presence with consistent branding and comprehensive content.

O

Open-Access-Tage: Open Access Days

open-access-days.de

56

The Open-Access-Tage website serves as the central hub for the annual Open Access and Open Science conference in the German-speaking region. It provides comprehensive information about the event, including past conference documentation and resources for interested hosting institutions. The site targets academic and research institutions and individuals engaged in Open Access initiatives. Technically, the website is built on TYPO3 CMS, uses modern JavaScript libraries like jQuery, and is hosted on a reputable academic hosting provider (GWDG). The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Security posture is solid with HTTPS enforced and no exposed sensitive data, but could be improved by adding security headers and a vulnerability disclosure policy. Privacy compliance is adequate with a clear privacy policy, but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with its non-profit educational mission.

R

RMEIM

rmei.info

54

RMEIM is a Mediterranean non-profit organization focused on engineering and management education collaboration among member institutions. The website presents a professional and consistent brand with clear navigation and relevant content about membership, events, working groups, and accreditation programs. Technically, the site is built on Joomla! CMS with the T3 framework and uses AcyMailing for newsletter management. The site is accessible, mobile-optimized, and uses HTTPS, but lacks some security headers and explicit privacy and cookie policies. No contact emails or phone numbers are explicitly provided on the main page, which slightly reduces trust and privacy compliance scores. WHOIS data is privacy protected, which is typical for non-profits, and no suspicious patterns are detected. Overall, the website is a good representation of a regional educational non-profit with moderate technical and security posture.

C

Centrale Méditerranée Alumni

centraliens-marseille.fr

51

Centrale Méditerranée Alumni operates as a professional alumni network for graduates and students of Centrale Méditerranée, a French engineering school. The platform offers a comprehensive suite of services including member directories, event calendars, job boards, and news updates, fostering community engagement and career development. The website is well-branded and targets alumni, students, and recruiters within the educational sector in France. Technically, the site leverages modern web technologies such as Vue.js, Google Analytics, and Google Maps API, ensuring a responsive and interactive user experience. The presence of OAuth-based single sign-on options enhances user convenience and security. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be improved. From a security perspective, the website enforces HTTPS and uses secure login forms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and no vulnerability disclosure or security.txt files are published. Privacy compliance is strong with visible privacy and cookie policies aligned with GDPR requirements. Overall, the website presents a trustworthy and professional online presence for the alumni community, with moderate technical sophistication and a solid security posture. Recommendations include enhancing security headers, publishing vulnerability disclosure information, and continuing to monitor third-party scripts for vulnerabilities.

E

emlyon business school

em-lyon.com

64

emlyon business school is a prestigious and long-established European business school founded in 1872, offering a wide range of business education programs including Grande Ecole, Bachelors, Masters, MSc, MBA, and executive education. The school holds triple accreditation (EQUIS, AACSB, AMBA), underscoring its high academic standards and global recognition. It serves a diverse international student body across multiple campuses in Lyon, Shanghai, Paris, and Mumbai. The website reflects a mature digital presence with a modern Drupal CMS, responsive design, and comprehensive content tailored to prospective students and professionals. Technically, the website employs modern web technologies including Bootstrap for responsive design, Google Tag Manager for analytics and marketing, and Didomi for GDPR-compliant cookie consent management. The site is well-optimized for SEO and accessibility, with clear navigation and structured data enhancing search engine understanding. Security posture is strong with HTTPS enforced and domain locking status flags, though DNSSEC is not enabled, representing an area for improvement. From a security and compliance perspective, the site demonstrates good privacy practices with explicit privacy and cookie policies, consent mechanisms, and no detected vulnerabilities or suspicious domains. However, explicit security policies and incident response contacts are not published, which could be enhanced to improve transparency and trust. Overall, the site is safe, professional, and trustworthy, serving its educational mission effectively.

S

South Moravian Agency for Public Innovation

jinag.eu

45

JINAG is a regional innovation agency dedicated to enhancing the South Moravia region by introducing innovative solutions across energy, mobility, environment, social and health services, and civic participation. The agency acts as a connector between municipalities, institutions, and companies to foster collaboration and improve public administration and quality of life. The website reflects a professional and modern digital presence with engaging animations and clear navigation, targeting government representatives and local stakeholders. Technically, the site uses modern JavaScript libraries such as jQuery, Lottie Player for animations, and Parallax.js for visual effects, built likely on the Yii framework. Security posture is solid with HTTPS enforced and CSRF protections in place, though it lacks some advanced security headers and formal security policies. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a dedicated privacy policy page. Overall, the site is trustworthy and well-positioned as a public innovation agency with room for improvement in privacy and security transparency.

F

Freiwillige Feuerwehr Höchstadt

feuerwehr-hoechstadt.de

45

The website represents the Freiwillige Feuerwehr Höchstadt, a volunteer fire department in Höchstadt, Germany, providing community emergency services and information about their operations, equipment, and events. The site targets local residents and volunteers, serving as an informational portal for the fire department and its associated club. Technically, the site is built on WordPress using the Astra theme and Elementor page builder, with several plugins supporting organizational charts, event calendars, and social media feeds. The hosting appears to be provided by a German hosting provider (1&1 IONOS), consistent with the local focus. Security posture is moderate with HTTPS enabled and no visible sensitive data exposure, but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism present but no dedicated privacy policy or terms of service pages found. Overall, the site is safe, professional, and well-structured but could improve in privacy and security documentation to enhance trust and compliance.

L

Landratsamt Erlangen-Höchstadt

erlangen-hoechstadt.de

62

Landratsamt Erlangen-Höchstadt operates as the official government portal for the Erlangen-Höchstadt district in Germany, providing a wide range of public services including citizen services, vehicle registration, driver's license processing, and immigration services. The website targets local residents and offers comprehensive information and digital services such as online appointment booking and digital applications. The site is well-positioned as a regional government authority with a medium organizational size and a focus on public administration.

Fortuna Kulturfabrik is a local government cultural institution based in Höchstadt, Germany, providing a broad range of cultural, educational, and youth services including event hosting, a youth center, city library, music school, and adult education via VHS. The website serves as a community portal targeting local residents, families, and youth, emphasizing cultural engagement and education. The institution holds a stable market position as a key cultural hub in the region. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacks advanced security headers and published incident response policies. Overall, the site is professional, trustworthy, and compliant with GDPR, but could improve in security transparency and vulnerability disclosure. The domain WHOIS data aligns with the website's public identity, supporting legitimacy.

W

Wirtschaftsförderungs-GmbH für Stadt und Landkreis Lüneburg

wirtschaft-lueneburg.de

51

Wirtschaftsförderungs-GmbH für Stadt und Landkreis Lüneburg is a regional economic development agency focused on supporting business establishment, innovation, growth, and sustainable transformation in the Lüneburg region of Germany. The organization offers comprehensive services including startup support, innovation funding, location consulting, and talent development, positioning itself as a key facilitator for regional economic success. The website reflects a professional and well-structured digital presence, leveraging modern web technologies and a CMS platform (Neos) to deliver content effectively. It integrates cookie consent mechanisms and GDPR-compliant privacy policies, demonstrating attention to privacy and regulatory compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although formal security policies and incident response contacts are not published. Overall, the site is trustworthy, well-branded, and aligned with its governmental and regional development mission.

H

Hansestadt Lüneburg

hansestadt-lueneburg.de

59

Hansestadt Lüneburg operates an official municipal website providing comprehensive information and services to its citizens and visitors. The site covers a broad range of topics including local government, administration, climate protection, culture, and public services. It serves as a primary communication channel for the city, offering news, event information, and access to online administrative services via a dedicated service portal. The website targets residents, local businesses, and tourists, positioning itself as a trusted and authoritative source for city-related information. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, enhanced with modern JavaScript libraries such as jQuery, Alpine.js, and Mapbox GL for interactive maps. Accessibility is a priority, demonstrated by the integration of Eye-Able tools. The site is mobile-optimized and employs standard SEO practices including structured data (JSON-LD) and Open Graph metadata. Hosting appears stable with dedicated name servers, and HTTPS is enforced ensuring secure communications. From a security perspective, the website demonstrates good practices including HTTPS, cookie consent mechanisms, and no visible sensitive data exposure. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure information, which are recommended for enhanced transparency and trust. No WAF or blocking mechanisms were detected, and no vulnerabilities were apparent in the provided content. Overall, the website is professional, secure, and compliant with GDPR requirements, providing a positive user experience and reliable business credibility. Strategic recommendations include publishing a security policy, incident response details, and a vulnerability disclosure framework to further strengthen security posture and user trust.

L

Landkreis Lüneburg

landkreis-lueneburg.de

57

Landkreis Lüneburg operates as a regional government authority in Germany, providing a wide range of public services and information to its citizens. The website serves as a central hub for accessing administrative services, cultural information, environmental initiatives, and mobility options. It also offers online appointment booking, job application portals, and a GeoPortal for geographic information. The target audience primarily consists of residents and citizens of the Landkreis Lüneburg region. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript libraries like Swiper.js and Odometer.js, and integrates Matomo analytics and SendinBlue marketing tools. The site is hosted via INWX, a reputable German registrar, and demonstrates good mobile optimization and accessibility features. The CMS is likely TYPO3, common for German public sector websites. From a security perspective, the site uses HTTPS with excellent SSL configuration and employs best practices such as asynchronous script loading and accessibility tools. However, it lacks explicit security headers, a published security policy, and vulnerability disclosure mechanisms. Privacy and cookie policies are not clearly found, which may impact GDPR compliance. Overall, the website is professional, trustworthy, and well-structured, but could improve in privacy compliance and security transparency to enhance user trust and regulatory adherence.

A

Across

across-alliance.eu

59

Across is a European alliance of 10 universities spanning 10 countries, focused on fostering cross-border cooperation in higher education. The alliance promotes academic excellence and regional engagement through joint education programs, research, innovation, and digital initiatives such as the eCampus platform. The website reflects a professional and well-structured digital presence consistent with its educational mission. Technically, the site is built on WordPress using modern plugins and frameworks, with good SEO and mobile optimization. Security posture is strong with HTTPS and security headers, though some privacy compliance aspects like cookie consent could be improved. Overall, the domain appears legitimate with privacy-protected WHOIS data typical for European domains. The site is accessible without WAF or blocking mechanisms, indicating a stable and trustworthy online presence.

S

Studentenwerk Chemnitz-Zwickau

swcz.de

60

Studentenwerk Chemnitz-Zwickau is a public institution providing comprehensive social, financial, housing, and cultural services to over 15,000 students primarily at the Technische Universität Chemnitz and Westsächsische Hochschule Zwickau. The organization supports students in managing their daily lives through BAföG financing, affordable housing, dining facilities, and counseling services. The website reflects a well-established regional service provider with a clear mission to enhance student welfare. Technically, the website is built on the TYPO3 CMS platform, featuring a modern, responsive design optimized for accessibility and SEO. The infrastructure appears stable with appropriate hosting and no detected performance or technical issues. Security posture is good with HTTPS enforced and obfuscated email addresses, though some security headers could be improved. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the security posture is solid for a public institution website, with no visible vulnerabilities or suspicious activity. The domain registration aligns with the organization's identity, supporting legitimacy and trustworthiness. Strategic recommendations include enhancing security headers, publishing a formal security policy, and adding vulnerability disclosure mechanisms to further strengthen trust and compliance.

A

Atlantis Dorsten

atlantis-dorsten.de

44

Atlantis Dorsten operates as a local leisure and wellness center in Germany, offering services such as a fun pool, wellness treatments, and fitness activities. The website is built on WordPress using the Divi theme, indicating a moderate level of digital maturity. The technical infrastructure is basic but functional, with standard JavaScript and jQuery usage. Security posture is weak due to the absence of security headers, privacy policies, and incident response contacts. No advanced analytics or tracking mechanisms are detected, which may reflect a minimal data collection approach but also a lack of marketing sophistication. Overall, the website is accessible and safe but lacks critical compliance and security features.

C

Care Access

careaccess.com.br

58

Care Access is a Brazilian healthcare organization specializing in connecting individuals to free health assessments and clinical research studies. With over 20 years of experience and integration of major research centers such as IBPClin and CEMEC, it holds a strong position in the Latin American healthcare research market. The website is professionally designed, mobile-optimized, and provides clear pathways for patient engagement in clinical studies. Technically, the site uses modern frameworks like Astro, is hosted with Cloudflare DNS, and integrates HubSpot and Google Analytics for marketing and analytics purposes. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Privacy compliance is basic with privacy and cookie policies present but lacking detailed GDPR-specific disclosures. Overall, the site is trustworthy, safe, and well-positioned for its healthcare audience.

C

Care Access

careaccess.ca

67

Care Access is a healthcare-focused organization operating a global network of clinical research sites. Their mission is to improve health outcomes by facilitating patient participation in clinical trials and providing access to health resources. The company emphasizes community-based research, targeting diverse and underserved populations to enhance the representativeness of clinical studies. Their market position is that of a medium-sized, growing entity founded in 2022, with regional partner sites in Poland, Brazil, and the United States. The website reflects a professional and trustworthy brand with clear messaging and active study listings. Technically, the website is built using modern frameworks such as Astro, hosted and protected via Cloudflare, and incorporates industry-standard tools like Cookiebot for privacy compliance and Facebook Pixel and Google Tag Manager for analytics and marketing. The site is mobile-optimized, fast-loading, and SEO-friendly, though accessibility features are basic. Security posture is strong with HTTPS enforced and domain transfer lock enabled, but could be improved by enabling DNSSEC and additional security headers. From a security and compliance perspective, the site demonstrates good privacy practices with a comprehensive privacy policy and cookie consent mechanism. However, it lacks explicit terms of service, security policy, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or suspicious patterns were detected. Overall, the site presents a low-risk profile with a solid foundation for trust and compliance. Strategically, Care Access should focus on enhancing transparency by publishing terms of service and security policies, enabling DNSSEC, and adopting additional security headers. These steps will strengthen their security posture and compliance standing, further building trust with users and partners.

F

Freie Universität Berlin

freie-universitaet-berlin.de

52

Freie Universität Berlin is a leading public university in Germany, recognized as an excellence university since 2007. It offers a broad range of academic programs across twelve faculties and three central institutes, serving students, researchers, and academic staff with a strong emphasis on international cooperation and research excellence. The website reflects a mature digital presence with comprehensive content, clear navigation, and multilingual support. Technically, the site is built on a Ruby on Rails framework with Infopark CMS, leveraging modern web technologies and ensuring good accessibility and SEO practices. Security posture is solid with HTTPS and CSRF protections, though some security headers and explicit policies could be improved. Privacy compliance is evident with a comprehensive privacy policy, but cookie consent mechanisms are lacking. Overall, the site is professional, trustworthy, and well-aligned with the institution's academic mission.

C

Care Access

careaccess.pl

64

Care Access is a healthcare organization newly launched in Poland in 2024, focusing on providing access to innovative clinical trials, modern treatment methods, and professional medical care. It operates as part of a global network with presence in the US, Canada, Brazil, and plans for expansion in Europe. The website is well-structured, professionally designed, and optimized for mobile devices, offering clear navigation and relevant content targeted at patients interested in clinical research. Technically, the site uses modern frameworks like Astro and integrates marketing and analytics tools such as HubSpot, Google Tag Manager, and Facebook Pixel. Security posture is adequate with HTTPS enabled and privacy compliance well addressed, though security headers are missing and should be implemented to enhance protection. The domain registration is consistent with the business launch timeline, supporting legitimacy. Overall, the site presents a trustworthy and professional digital presence for a healthcare service provider.

C

Cardiometabolic Care Access

myfreehearttest.com

66

Cardiometabolic Care Access operates a comprehensive healthcare screening platform focused on cardiometabolic risk factors such as Lp(a), A1c, and kidney function markers. The organization provides no-cost blood testing across multiple US locations, targeting adults concerned about heart attack risk and related conditions. Their business model integrates clinical testing with research participation, offering stipends and contributing to medical research advancement. The website is professionally designed, mobile-optimized, and uses modern web technologies including React and Astro frameworks, supported by extensive analytics and marketing tools. Security posture is strong with HTTPS and privacy policies in place, though improvements can be made in cookie consent and security disclosures. Overall, the platform presents a trustworthy and credible healthcare service with a clear focus on accessibility and research.

S

Striven

striven.com

55

Striven is a small business-focused technology company offering an all-in-one business management software suite that integrates accounting, CRM, project management, and other essential business functions. The company positions itself as an affordable and comprehensive SaaS solution for small to midsize businesses, emphasizing ease of use and total transparency. The website is professionally designed with strong branding consistency and includes customer testimonials and success stories that reinforce trust and market credibility. The parent company is identified as Miles IT Company, which also provides website design services. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, Google Tag Manager, Facebook Pixel, and various analytics and marketing tools. The site is mobile optimized and SEO friendly, with structured data and Open Graph metadata implemented for enhanced search and social media presence. Performance is moderate with good user experience and navigation clarity. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and a cookie consent mechanism, which are recommended for enhanced security and privacy compliance. The absence of WHOIS data for the domain is a notable concern, as it raises questions about domain registration legitimacy. However, the professional nature of the website and business information partially mitigate this risk. No explicit contact emails or phone numbers were found, which could be improved to enhance transparency. Overall, Striven presents a credible and professional business software offering with a solid technical foundation but should address privacy compliance and domain registration transparency to strengthen trust and security posture.

The website for sitzungsdienst-bad-segeberg.de is extremely minimal, containing only the text 'stadt bad segeberg' with no metadata, forms, or contact information. It appears to represent a local government or municipal entity for Bad Segeberg, Germany, but lacks substantive content or digital maturity. The technical infrastructure is basic, hosted on stackit.cloud with no detectable CMS or frameworks. Security posture is weak due to lack of HTTPS information, security headers, and privacy policies. No vulnerabilities or WAF protections were detected, but the site is likely underdeveloped or a placeholder. Overall, the site presents a low risk but also low trust and credibility due to minimal content and lack of compliance indicators.

E

EP NEO

kitaportal-sh.de

54

The KitaPortal Schleswig-Holstein is an official government online platform designed to facilitate the search and registration for childcare places within the Schleswig-Holstein region of Germany. It serves parents, childcare facilities, and daycare providers by offering a centralized, user-friendly interface for place search, selection, pre-registration, and status tracking. The portal is mandatory for all childcare facilities since August 2020, ensuring comprehensive coverage and streamlined processes for childcare placement. Technically, the website is built using modern web technologies, primarily Angular 19.2.14, with Bootstrap for styling and custom SVG icons. The platform is hosted via INWX nameservers, indicating professional hosting arrangements. The site is mobile-optimized and accessible, with good navigation and content relevance. However, some SEO and privacy compliance aspects such as cookie consent mechanisms and security headers could be improved. From a security perspective, the site enforces HTTPS and uses secure form inputs, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The privacy policy is comprehensive and GDPR compliant, but cookie consent is missing. Overall, the security posture is solid but could benefit from enhancements in headers and transparency. The overall risk assessment is low, with the site presenting a trustworthy and professional government service. Strategic recommendations include implementing cookie consent, adding security headers, publishing security policies, and conducting regular security audits to maintain compliance and trust.

T

Tourist-Info Bad Segeberg

badsegeberg-tourismus.de

60

The website www.badsegeberg-tourismus.de serves as the official tourism portal for the city of Bad Segeberg, Germany. It provides comprehensive information on local attractions, events such as the Karl-May-Spiele, accommodation booking assistance, and regional products. The site targets tourists and visitors seeking detailed and reliable information about the region. The business model appears to be a government or municipal tourism service focused on promoting local tourism and supporting visitors. Technically, the website is built on the ikiss CMS platform, utilizing jQuery and jQuery UI libraries, with responsive design elements such as slicknav for mobile navigation. The site includes accessibility features and SEO best practices, with a moderate performance profile. Integration with Google Translate enhances usability for international visitors. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism aligned with GDPR requirements. However, explicit security headers and incident response policies are not evident. No vulnerabilities or exposed sensitive data were detected. The WHOIS data shows consistency with the design and hosting provider, Advantic GmbH, supporting legitimacy. Overall, the website is professional, trustworthy, and well-suited for its purpose. Strategic improvements could include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to strengthen security posture and trust.

W

Wege-Zweckverband der Gemeinden des Kreises Segeberg

wzv.de

50

The Wege-Zweckverband der Gemeinden des Kreises Segeberg (WZV) operates as a regional public utility focused on sustainable waste management and municipal services within the Kreis Segeberg area in Germany. Their website provides comprehensive information on waste disposal schedules, recycling services, environmental education, and career opportunities, targeting local residents and municipalities. The organization positions itself as a responsible and engaged environmental service provider with a clear regional focus. Technically, the website is built on the Joomla CMS platform, leveraging modern web technologies such as Bootstrap for responsive design, FontAwesome for icons, and Leaflet for interactive maps. Accessibility is enhanced through the Eye-Able assistive technology integration. The site demonstrates good mobile optimization and structured navigation, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and employs CSRF tokens in forms, indicating a baseline security posture. However, the absence of explicit security headers and lack of visible incident response or vulnerability disclosure policies suggest areas for improvement. Privacy compliance is strong with a comprehensive GDPR-aligned privacy policy, though cookie consent mechanisms are not evident. Overall, the website is professional, trustworthy, and well-suited for its public service mission. Strategic enhancements in security headers, contact transparency, and cookie consent would further strengthen its security and compliance posture.

L

leanact GmbH

meldooplus.de

48

MeldooPLUS is a specialized software solution aimed at helping German municipalities and administrative staff manage citizen requests digitally, improving efficiency and saving time. The website presents a professional and focused business offering with clear target audience alignment and a niche market position in government digital services. The company behind the website is leanact GmbH, based in Braunschweig, Germany, which adds credibility and local relevance. Technically, the website is built on WordPress using Elementor for page building, with Matomo analytics for user behavior tracking and Real Cookie Banner Pro for GDPR-compliant cookie consent management. The site is well-structured with comprehensive metadata, Open Graph tags, and JSON-LD structured data, supporting SEO and social media integration. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the website enforces HTTPS, uses appropriate security headers, and does not expose sensitive data. Cookie consent mechanisms are robust and documented, supporting GDPR compliance. However, there is no publicly available security policy or incident response information, which could be improved to enhance trust and preparedness. Overall, the website scores well on content quality, technical implementation, security posture, privacy compliance, and business credibility, making it a trustworthy and professional digital presence for its intended audience.

K

Karl-May-Spiele Bad Segeberg

karl-may-spiele.de

52

Karl-May-Spiele Bad Segeberg is a well-established cultural event organizer specializing in live outdoor theater performances based on Karl May's works. The website serves as a comprehensive platform for ticket sales, fan merchandise, and visitor information, targeting families and fans of western-themed entertainment. The business has a strong market position in Germany with a history dating back to 1952. Technically, the website is built on WordPress with WooCommerce for e-commerce functionality, enhanced by Yoast SEO and Borlabs Cookie for privacy compliance. The site demonstrates good digital maturity with modern technologies, responsive design, and SEO optimization, although some improvements in accessibility and security headers could be made. From a security perspective, the site uses HTTPS and cookie consent mechanisms effectively, with no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not present, which could be improved to enhance trust and compliance. Overall, the website is professional, trustworthy, and compliant with GDPR, providing a safe and user-friendly experience. Strategic recommendations include adding security headers, publishing a security policy, and enhancing accessibility features to further strengthen the security posture and user trust.

I

inixmedia

communice.de

49

inixmedia operates as a specialized provider of communice®web, a content management system tailored for municipal websites and intranet projects in Germany. The company targets local government entities and public institutions, offering a scalable, legally compliant, and user-friendly platform. Their market position is supported by over 20 years of experience and approximately 500 installations across Germany. The website reflects a professional and consistent brand image, emphasizing ease of use, legal compliance, and comprehensive support services. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including JavaScript and CSS, with integrations such as OpenStreetMap and CookieFirst for consent management. The site demonstrates good mobile optimization and accessibility features, with a moderate performance profile. Security practices include HTTPS enforcement, SSL certificates, and regular updates, although explicit security headers are not evident in the provided content. From a security perspective, the site maintains a good posture with encrypted data transmission and daily backups. However, there is room for improvement in publishing explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is partially demonstrated through cookie consent but lacks a clearly accessible privacy policy and terms of service. Overall, the website presents a trustworthy and professional digital presence suitable for its government and public sector audience. Strategic recommendations include enhancing transparency around privacy and security policies, implementing security headers, and providing clear incident response contacts to further strengthen trust and compliance.

L

Logix On Cloud (v. / 3.37.0.48 beta)

logixoncloud.com

65

Logix On Cloud is a software platform currently in beta version 3.37.0.48, hosted on a domain registered in 2020 via GoDaddy.com, LLC. The website appears to be a cloud-based service with a modern React and Material UI frontend. However, the site lacks critical business and compliance information such as privacy policies, cookie consent mechanisms, terms of service, and contact details. The technical infrastructure shows use of modern web technologies but lacks visible security headers and SSL configuration details, which raises concerns about security posture. No analytics or advertising scripts were detected, indicating minimal tracking. Overall, the site is functional but basic, with limited content and low trust indicators.

The website www.campus-noster.com is currently inaccessible due to a Cloudflare Turnstile human verification challenge page, which blocks direct access to any business or content information. The domain WHOIS data is unavailable, indicating the domain may be unregistered, newly registered, or protected by privacy mechanisms. Due to the lack of accessible content, no business description, contact information, or policies are present. The technical infrastructure relies on Cloudflare's security services, but no further technology or CMS details are discernible. Security posture is limited to the presence of Cloudflare's WAF, but no additional security headers or configurations are visible. Overall, the site lacks transparency and trust indicators, resulting in a low legitimacy and credibility score.

K

Kölner Studierendenwerk

kstw.de

49

The Kölner Studierendenwerk website serves as a comprehensive portal for student welfare services in Cologne, Germany. It offers a broad range of services including housing, financial aid, counseling, gastronomy, and childcare, targeting students and university affiliates. The site is built on TYPO3 CMS and employs Matomo analytics, reflecting a modern and privacy-conscious technical infrastructure. The website is well-structured, mobile-optimized, and provides clear navigation, enhancing user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit incident response documentation. Overall, the site demonstrates a high level of professionalism and trustworthiness appropriate for a public service organization.

B

BURG Services GmbH & Co. KG

burg-services.de

51

BURG Services GmbH & Co. KG is a German-based medium-sized company specializing in promotional products and advertising gifts. The company positions itself as a reliable and innovative partner for businesses seeking customized promotional solutions. Their website reflects a professional B2B business model with a strong network of 65 partner brands and certifications such as the EU Organic Bio certification. The site is built on Drupal 9, leveraging modern web technologies and includes integrations with Google Analytics and Tag Manager for marketing insights. The website is well-structured, mobile-optimized, and provides comprehensive information including privacy and cookie policies, terms of service, and contact details. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response details are absent. WHOIS data is minimal but consistent with the business claims, using GoDaddy DNS services. Overall, the site demonstrates a mature digital presence suitable for its market segment.

F

Friesland Camping

friesland-camping.de

59

Friesland Camping is a small hospitality business focused on providing nature-centric camping and glamping experiences in the Friesland region of Germany. The website showcases their offerings including seecamping, green tiny houses, and family-friendly nature adventures. The business targets families and nature lovers seeking tranquility and outdoor recreation. Technically, the website is built on the Squarespace platform, leveraging its CMS and hosting services, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS and HSTS enabled, though the site lacks explicit privacy and terms of service pages, which are recommended for compliance and trust. Contact information is limited to a contact form without direct emails or phone numbers, which could be improved for better user engagement and credibility. Overall, the site is professional and trustworthy but could enhance privacy compliance and contact transparency.

J

JadeBay GmbH

jade-bay.de

43

JadeBay GmbH is an inter-municipal development company serving the JadeBay region in Germany, focusing on economic promotion, workforce development, and innovation support. The website clearly communicates its mission and services to regional businesses, job seekers, and investors, positioning itself as a key regional development agency. Technically, the site employs a modern tech stack including Google Analytics with consent management, jQuery, and a CMS likely Redaxo. The site is mobile-optimized and well-structured with good SEO practices. Security posture is solid with HTTPS and Content-Security-Policy headers, though additional security headers and explicit security policies could enhance protection. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is professional, trustworthy, and aligned with its business objectives.

The website 'tcn-nordwest.de – Top-Deals' is a German-language deals aggregator platform presenting a variety of discounted retail products including electronics, home and kitchen items, beauty products, clothing, toys, and games. The business model appears to be affiliate marketing, leveraging Amazon product links to generate revenue. The site also indicates the domain is for sale, suggesting it may be a parked or domain sales platform. The target audience is general consumers interested in online shopping deals. Technically, the website uses standard modern web technologies such as HTML5, CSS3, JavaScript, and Google Fonts. The design is responsive and mobile-optimized with a clean layout and user-friendly navigation. However, the site lacks advanced frameworks or CMS indications and does not implement common security headers or privacy policies. The performance is moderate with basic SEO and accessibility features. From a security perspective, the site uses HTTPS (implied by URL) and employs a simple bot mitigation technique by disabling outbound links for one second. However, it lacks security headers like Content-Security-Policy and X-Frame-Options, and no privacy or cookie policies are present, indicating poor compliance with GDPR and other privacy regulations. No contact or incident response information is provided, reducing trustworthiness. Overall, the domain WHOIS data is missing, indicating the domain is unregistered or a placeholder under a domain sales network, which significantly impacts legitimacy and trust. The site is safe in terms of content but lacks transparency and security best practices. Strategic recommendations include implementing privacy and cookie policies, adding security headers, providing contact and incident response information, and clarifying domain registration status to improve trust and compliance.

J

Jade-Weser-Park

jadeweserpark.de

42

The website jadeweserpark.de represents a small-scale business or organization based in Germany, as indicated by the domain and language usage. The site is built on WordPress using the Astra theme and Elementor page builder, reflecting a moderate level of digital maturity. The technical infrastructure is standard for small business websites, with modern technologies and a cookie consent mechanism implemented to comply with GDPR requirements. However, the site lacks explicit privacy policies, terms of service, and detailed business or contact information, which limits its transparency and user trust. Security posture is adequate with HTTPS enabled and cookie consent in place, but the absence of security headers and incident response information suggests room for improvement. Overall, the website is functional but basic, with moderate risks related to compliance and security best practices.

A

AWV Jade e.V.

awv-jade.de

48

AWV Jade e.V. is a well-established regional business association founded in 1919, representing over 420 member companies in the Jade economic region of Germany. The organization focuses on advocating for economic interests, providing legal advice, networking opportunities, and continuing education. Their website reflects a mature digital presence with modern WordPress infrastructure, active event management, and comprehensive content tailored to their target audience of regional businesses. Technically, the site uses standard and reputable plugins and libraries, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong, with clear policies and GDPR-aligned cookie management. Overall, the site projects professionalism and trustworthiness, supporting the organization's market position as a key regional economic voice.

Industrie-Club Roffhausen is a small, local business association founded in 1992, focused on fostering economic collaboration and development at the Roffhausen industrial site in Germany. The website serves as an information portal for members and interested parties, offering details about membership benefits, events, and organizational structure. Technically, the site is built on WordPress with common plugins and frameworks like Bootstrap and jQuery, though some components such as jQuery are outdated, posing moderate security risks. The site uses HTTPS and implements cookie consent mechanisms, reflecting a reasonable level of privacy compliance. However, security headers are missing, and no explicit incident response or vulnerability disclosure policies are visible, indicating room for improvement in security posture. Overall, the website is professional, content-rich, and trustworthy, but could benefit from technical and security enhancements.

M

Metropolregion Nordwest

metropolregion-nordwest.de

60

Metropolregion Nordwest is a regional development organization focused on supporting and promoting activities that enhance regional visibility, competitiveness, and quality of life across the Nordwest metropolitan area in Germany. Their core activities include fostering cross-border cooperation, networking, lobbying, acquiring funding, and representing the region at various levels. The website reflects a professional and well-structured digital presence with clear navigation and relevant content aimed at regional stakeholders, businesses, and government entities. Technically, the site uses a custom CMS (NOL-IS), modern JavaScript, and includes a cookie consent mechanism compliant with GDPR. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit policies could be improved. Overall, the site is trustworthy and serves its purpose effectively.

K

Klimaschutz- und Energieagentur Niedersachsen GmbH

klimaschutz-niedersachsen.de

55

Klimaschutz- und Energieagentur Niedersachsen GmbH operates as a regional competence center focused on climate protection, energy efficiency, and renewable energy initiatives within Lower Saxony, Germany. The agency provides informational resources, consulting services, and supports various stakeholders including municipalities, businesses, and societal groups. Their market position is that of an authoritative regional agency supported by the Lower Saxony Ministry for Environment, Energy and Climate Protection. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the website employs modern JavaScript libraries such as jQuery, Foundation-sites, and AOS for animations, alongside RequireJS for module loading. It integrates Google Tag Manager for analytics and CookieFirst for consent management, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured navigation. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism. However, it lacks explicit security headers and a published security policy or incident response contact, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is minimal but consistent with a legitimate public agency domain. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and security posture.

Bürgerhaus Schortens is a local cultural center in Germany that provides a diverse range of cultural events including cabaret, exhibitions, markets, and concerts. It serves as a community hub for cultural engagement and group meetings, targeting local residents and culture enthusiasts. The website reflects a small non-profit organization with a clear focus on community and cultural enrichment. Technically, the website uses a variety of common web technologies such as jQuery, Bootstrap, and FontAwesome, likely running on the Redaxo CMS platform. The site is mobile-optimized and provides a good user experience with clear navigation and event information. Security-wise, the site implements cookie consent mechanisms and uses Google Analytics for tracking, but lacks explicit security policies or incident response information. The domain registration data is consistent with the website's public cultural mission, indicating legitimacy and trustworthiness. Overall, the website is professional, secure, and compliant with GDPR requirements, though it could improve by adding terms of service and explicit security policies.

A

AlumniCampus TU Ilmenau

alumnicampus.de

45

AlumniCampus TU Ilmenau operates as a dedicated alumni network platform for graduates of Technische Universität Ilmenau, providing a community space for networking, mentoring, events, and career services. The platform is well-positioned within the niche educational sector, targeting university alumni primarily in Germany but also internationally. The website content is professionally curated, reflecting a strong affiliation with the university and offering relevant services to its members. Technically, the website employs standard web technologies including JavaScript, CSS, and HTML5, with embedded multimedia content such as YouTube videos. It is built on the NDAlumni CMS platform, which is specialized for alumni networks. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and does not provide explicit security or incident response policies. No cookie consent mechanism is present, which may pose compliance risks under GDPR. The absence of vulnerability disclosure policies and security.txt files suggests room for improvement in transparency and security culture. Overall, the website is trustworthy, safe, and professionally maintained, with minor gaps in privacy compliance and security best practices. Strategic enhancements in cookie consent, security headers, and incident response transparency would strengthen its security posture and regulatory compliance.

S

SWING e.V.

inova-ilmenau.de

43

inovailmenau is a well-established, student-organized career forum hosted at TU Ilmenau, Germany, serving as a key platform for students and companies to connect. The website effectively communicates event details, organizational background, and partnership information, targeting students and alumni seeking career opportunities. Technically, the site is built on WordPress with a modern tech stack including jQuery, Ecwid for e-commerce, and AWS Cloudfront CDN for content delivery. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and some security headers present, but lacks advanced security policies such as CSP and incident response disclosures. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the domain registration data aligns well with the website content, indicating legitimacy and consistency.

T

Thüringer Koordinierungsstelle Naturwissenschaft und Technik

thueko.de

40

Thüringer Koordinierungsstelle Naturwissenschaft und Technik (Thüko) is a regional non-profit organization dedicated to supporting young women in STEM education and careers in Thüringen, Germany. The website serves as an informational and networking platform, offering workshops, events, and career guidance tailored to female students and graduates in natural sciences, technology, engineering, and mathematics. The organization collaborates with universities and Fachhochschulen across Thüringen to promote successful studies and professional development in STEM fields. Technically, the website is built on WordPress 6.1.9, utilizing the UIkit frontend framework and jQuery libraries. It integrates Google Maps API and employs deferred script loading for performance optimization. The hosting is managed via kasserver.com, as indicated by the nameservers. The site demonstrates good mobile optimization, SEO practices, and a consistent branding approach, though accessibility features are basic. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers, a formal security policy, and incident response contacts. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. No analytics or advertising trackers were found, indicating minimal user tracking. Overall, the security posture is adequate but could be improved with additional headers and compliance features. The website content is safe, targeted at a general audience interested in STEM education for women, with no adult or questionable content. The domain WHOIS data is limited but consistent with a legitimate educational entity. The overall risk is low, with recommendations focusing on enhancing privacy compliance, security headers, and incident response readiness to strengthen trust and regulatory adherence.

S

Stadt Ilmenau

ilmenau.de

54

The website www.ilmenau.de serves as the official digital portal for the city of Ilmenau, Germany, providing comprehensive information and services related to municipal governance, citizen services, tourism, economic development, and cultural events. It targets a broad audience including residents, visitors, and businesses, positioning itself as a central hub for local government communication and engagement. The site demonstrates a consistent and professional brand presence aligned with its governmental role. Technically, the website employs a modern technology stack including Bootstrap 4.5, jQuery, and various accessibility and UI enhancement libraries. The CMS appears to be REDAXO, a popular German CMS. The site is mobile-optimized and includes accessibility features such as font resizing and contrast adjustments, enhancing usability for diverse users. From a security perspective, HTTPS is enforced as indicated by the base URL, but explicit security headers are not evident in the HTML source. No security or incident response policies are published, and no vulnerability disclosure mechanisms are present. Privacy compliance is partially addressed with a comprehensive privacy policy, but lacks a cookie consent mechanism. Social media presence is official and consistent with the city’s identity. Overall, the website is trustworthy and professionally maintained, with room for improvement in security headers, cookie consent, and incident response transparency. The risk level is low given the nature of the site and its content, but enhancements in security posture would strengthen user trust and compliance.

S

SUNRISE Alliance

sunrise-alliance.eu

63

SUNRISE Alliance is a network representing smaller-sized universities located in non-metropolitan areas across Europe, aiming to provide a collective voice aligned with European values. The website serves as an informational and collaborative platform for these institutions, highlighting their strategic importance and fostering regional innovation and sustainability. The alliance targets academic institutions and stakeholders interested in regional educational development. Technically, the website is built on a modern WordPress platform with a well-integrated tech stack including Yoast SEO for search optimization, Google Tag Manager for analytics, CookieYes for cookie consent management, and OneSignal for push notifications. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate and could benefit from further optimization. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security policies, incident response information, and advanced security headers. No vulnerabilities or suspicious activities were detected in the analysis. Privacy compliance is partial due to the absence of a dedicated privacy policy and terms of service pages. Overall, the website is professional and trustworthy with a clear educational focus. To enhance trust and compliance, it is recommended to publish comprehensive privacy and security policies, improve security headers, and provide incident response contacts. These steps will strengthen the alliance's digital maturity and user confidence.