Security Directory

O

OX Tulln GmbH & Co KG

ox-tulln.at

56

OX Tulln GmbH & Co KG operates a hospitality business focused on steak and grill dining complemented by a music bar offering cocktails and snacks. The company positions itself as a premium dining location in Tulln, Austria, targeting a broad audience including partygoers and food enthusiasts. Key services include high-quality food offerings, an online reservation system, a loyalty app, and gift vouchers. The website is built on TYPO3 CMS with modern frontend technologies and integrates marketing and analytics tools such as Google Tag Manager and Facebook Pixel. Privacy and cookie policies are comprehensive and GDPR compliant, with clear consent mechanisms. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. Overall, the website is professional, trustworthy, and well-structured, supporting the business's market position effectively.

O

OX Wels Steaks&Grill GmbH & Co KG

ox-wels.at

56

OX Wels Steaks&Grill GmbH & Co KG operates a hospitality business specializing in high-quality steaks, fish dishes, Mediterranean appetizers, and a broad selection of wines in Wels, Austria. The website serves as a digital front for the restaurant, offering online reservations, gift voucher sales, and promoting a loyalty app. The business targets local and regional customers seeking premium dining experiences. The company maintains a network of partner hospitality sites, indicating a strong local market presence. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries such as jQuery, Fancybox, and carousel plugins. It integrates Google Analytics and Google Tag Manager with privacy-conscious configurations like IP anonymization. The site is mobile-optimized and provides a good user experience with clear navigation and downloadable menus. Cookie consent mechanisms and a comprehensive privacy policy demonstrate GDPR compliance. From a security perspective, the site uses HTTPS with no visible critical vulnerabilities or exposed sensitive data. However, it lacks explicit security policies and incident response contacts. The use of third-party scripts is standard but should be regularly audited. Overall, the security posture is solid but could be enhanced with additional headers and formal policies. The overall risk is low with no signs of malicious activity or suspicious registrations. Strategic recommendations include formalizing security policies, enhancing incident response readiness, and continuous monitoring of third-party components to maintain compliance and security standards.

Weymayer is a small Austrian internet agency specializing in web design, TYPO3, Magento, and freelance web development services. With nearly 20 years of experience, the company positions itself as a reliable and affordable full-service provider targeting businesses and individuals seeking professional web solutions in Austria. The website reflects a consistent and professional brand image with clear contact information and a focus on quality service delivery. Technically, the website employs modern JavaScript libraries such as Three.js for visual effects but lacks advanced CMS detection or extensive platform integrations. The site is moderately optimized for performance and mobile devices but could improve accessibility and SEO features. The absence of cookie consent mechanisms and limited analytics usage indicates a low level of user tracking and data collection. From a security perspective, the website uses HTTPS (assumed from domain), but no security headers were detected in the provided data. There is no published security policy or incident response information, which limits transparency. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the security posture is moderate but could benefit from enhancements in headers, policies, and compliance mechanisms. The overall risk assessment is low to moderate, with no critical issues detected. Strategic recommendations include implementing cookie consent, adding security headers, publishing security and incident response policies, and improving mobile and accessibility features to enhance trust and compliance.

The website tablexpro.at currently presents an extremely minimalistic presence with only the domain name text visible and no additional content or metadata. There is no indication of the company's business activities, services, or market positioning. The lack of contact information, privacy policies, or terms of service suggests the site is either inactive, under development, or a placeholder. Technically, the site lacks modern web technologies, security headers, and performance optimizations. No HTTPS or SSL data was provided, indicating a potential security risk or incomplete data. The security posture is weak due to the absence of security best practices and policies. Overall, the site has a low trustworthiness and business credibility score, with significant improvements needed to meet basic web standards and compliance requirements.

R

Roland Schmid Group

rsgroup.at

57

The Roland Schmid Group website presents a professional corporate presence focused on digitalization and innovation, led by owner Roland Schmid. The business appears to operate as an investment and holding entity with services including investments, sponsoring, and press relations. The website targets a German-speaking Austrian audience and maintains consistent branding and good content quality. Technically, the site is built on WordPress using the Avada theme and Fusion Builder, incorporating modern web technologies and SEO best practices. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit security policies or incident response contacts are published. Overall, the site is trustworthy and compliant with GDPR cookie requirements but could improve transparency on security and contact details.

L

lexunited GmbH

lexunited.com

61

lexunited GmbH operates as an official billing office of the Republic of Austria, providing authorized access to key public legal databases such as land registry, company register, and central population register. Founded in 2004 and based in Vienna, the company targets legal professionals and government officials, offering access to over 15 million documents across Austria, Germany, Switzerland, and the EU. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the site is built on WordPress with modern plugins and integrates Google services for analytics and security, including reCAPTCHA. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers and policies are absent. WHOIS data is missing, which impacts transparency and trust, but the business claims and website content appear legitimate and authoritative.

The website www.eeagrants.sk serves as the official Slovak government portal for the EEA and Norway Grants, providing comprehensive information on grant programs, calls for proposals, bilateral cooperation, and project results. It targets government agencies, NGOs, and the general public interested in funding opportunities and grant management. The site is operated by the Ministry of Investment, Regional Development and Informatization of the Slovak Republic, ensuring authoritative and trustworthy content. Technically, the site employs a modern JavaScript stack including jQuery, Bootstrap, and various UI libraries, with good mobile optimization and accessibility features. Security-wise, the site enforces HTTPS, uses cookie consent management, and avoids exposing sensitive data, though it lacks some advanced security headers and a formal security policy. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable resource for its audience.

The website www.unesco.sk represents the Slovak national commission for UNESCO, a specialized agency of the United Nations focused on education, science, culture, and communication. The site provides informative content about UNESCO's mission, history, and activities in Slovakia, targeting a general audience interested in cultural heritage and educational initiatives. The organization is well-established with a clear global mandate and recognized legitimacy. Technically, the website employs standard and modern web technologies including jQuery, Bootstrap, Font Awesome, and Google Maps API, hosted likely behind Cloudflare. The site is mobile responsive with moderate performance and basic SEO and accessibility features. However, it lacks advanced security headers and formal privacy or cookie policies, which are important for compliance and user trust. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. Analytics are limited to Cloudflare Insights, indicating minimal user tracking. No forms or contact details are provided, limiting data collection and interaction. The WHOIS data aligns well with the website's claims, confirming legitimacy and consistent registration. Overall, the site is professionally presented and trustworthy but would benefit from enhanced privacy compliance, security headers, and clearer contact information to improve user confidence and regulatory adherence.

G

403 - Forbidden

gcap.global

37

The website at gcap.global is currently inaccessible, presenting a 403 Forbidden error page that blocks access to any business or service-related content. The lack of accessible content prevents any meaningful analysis of the company's offerings, target audience, or market position. The domain WHOIS data is unavailable due to unsupported TLD WHOIS queries, further limiting trust and legitimacy verification. Technically, the site loads minimal resources such as Google Fonts but lacks any modern frameworks, analytics, or security headers. The absence of privacy, cookie, or terms of service policies indicates poor compliance posture. Overall, the site appears to be either restricted intentionally or misconfigured, resulting in a very low digital maturity and security posture.

C

Center for International Private Enterprise

cipe.org

71

The Center for International Private Enterprise (CIPE) is a well-established non-profit organization founded in 1983, focused on promoting democracy and economic development through private sector engagement. The organization partners with local entities worldwide to craft business-driven solutions addressing socio-economic challenges. The website reflects a mature digital presence with a clear mission, professional design, and comprehensive content targeting business leaders, policymakers, and international development stakeholders. Technically, the website is built on WordPress, leveraging modern technologies such as Google Analytics, Microsoft Clarity, and Google Tag Manager for analytics and user tracking. The site is mobile-optimized, accessible, and SEO-friendly, with appropriate meta tags and structured data enhancing search visibility. Security best practices are observed with HTTPS enforcement and security headers, although explicit security policies and incident response information are not publicly available. From a security perspective, the site demonstrates a good posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, featuring a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. However, the absence of a vulnerability disclosure program or security.txt file suggests room for improvement in transparency and incident handling readiness. Overall, the website presents a trustworthy and professional image consistent with the organization's mission and history. The lack of WHOIS data limits domain registration insights, but privacy protection is justified for this non-profit entity. Strategic recommendations include publishing detailed security policies, incident response contacts, and vulnerability disclosure information to enhance trust and security maturity.

S

SlovakAid

slovakaid.sk

57

SlovakAid is the official Slovak government agency responsible for international development cooperation and humanitarian aid. Established in 2003, it operates as a medium-sized government entity focused on delivering development projects, humanitarian assistance, microgrants, and fostering international partnerships. The agency targets governmental bodies, NGOs, and the general public interested in Slovakia's global development efforts. The website reflects a mature digital presence with comprehensive content, multilingual support, and clear navigation. Technically, it is built on WordPress with Elementor, leveraging modern web technologies and Cloudflare DNS for hosting and performance. Security posture is strong with HTTPS, security headers, and privacy compliance including GDPR. No critical vulnerabilities or WAF blocking were detected. The site integrates Google Analytics and Facebook Pixel for analytics and marketing, with appropriate consent mechanisms. Overall, SlovakAid presents a trustworthy, professional, and well-maintained online presence aligned with its governmental mission.

N

Nadácia Pontis

nadaciapontis.sk

59

Nadácia Pontis is a Slovak non-profit foundation dedicated to fostering positive changes through social innovation, philanthropy, and responsible business practices. The organization connects companies, organizations, and individuals to promote social impact initiatives. The website reflects a medium-sized, established non-profit entity with a clear mission and a professional online presence. The target audience includes firms, organizations, and individuals interested in social responsibility and innovation. The foundation offers services such as events, seminars, volunteer programs, and internships to engage its community. Technically, the website is built on WordPress 6.7.1 and leverages modern tools including Google Tag Manager, Google Analytics, Facebook Pixel, and various WordPress plugins for multilingual support, forms, and social media integration. The site is hosted with CDN support (Cloudfront) and uses HTTPS with strong SSL configuration. Performance and mobile optimization are good, though accessibility features are basic. SEO is well implemented with proper meta tags and structured data. From a security perspective, the site enforces HTTPS and uses reCAPTCHA for forms, indicating good baseline security practices. However, explicit security headers are missing, and there is no published security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the website is trustworthy and professional, with extensive user tracking and marketing tools. The absence of explicit privacy and security policies is a gap that should be addressed to enhance compliance and user trust. The domain registration data aligns well with the organization's identity, supporting legitimacy. Strategic recommendations include adding privacy and security policies, implementing security headers, and publishing vulnerability disclosure information.

C

Club business intelligence, o.z.

prohuman.sk

56

Prohuman.sk is an established Slovak academic and professional interdisciplinary journal focused on social, societal, and humanities sciences. Founded in 2009 and operated by Club business intelligence, o.z., it offers peer-reviewed articles, podcasts created with AI, educational programs, and research survey services. The website is built on Drupal CMS with integration of common web technologies and social media. It is indexed in reputable academic databases such as EBSCO and DRJI, enhancing its credibility and visibility in the scientific community. The content is rich, professionally presented, and targeted at researchers, students, and professionals in social sciences and healthcare. However, the site lacks explicit privacy and cookie policies, which is a compliance gap. Security headers are not detected, indicating room for improvement in security posture. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the site is trustworthy, content-rich, and professionally maintained but would benefit from enhanced privacy compliance and security hardening.

G

Global Education Network Europe (GENE)

gene.eu

64

Global Education Network Europe (GENE) is a well-established European network of Ministries, Agencies, and national bodies focused on policymaking, funding, and support in Global Education. Founded in 2001, it has grown to include over 50 members from more than 25 countries. The website serves as an informational and networking platform, providing news, peer reviews, research, and awards related to Global Education. Technically, the site is built on Squarespace, leveraging modern web technologies and Google Analytics for tracking. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and HSTS. Privacy compliance is partial, with a cookie banner present but no explicit privacy policy or terms of service found. Business credibility is strong given the organization's partnerships and transparent content. Overall, the site is professional and trustworthy but could improve security and privacy disclosures.

Fondation Praz-Soleil is a Swiss non-profit foundation established in 1984, providing medical psychosocial services including an EPSM, supervised apartments, and home care in the Vaud region. The organization collaborates with regional health authorities and is engaged in modernization projects to enhance its service offerings. The website is professionally designed with clear navigation and provides comprehensive contact information and compliance with GDPR through a cookie consent mechanism and a privacy policy document. Technically, the site uses basic but functional technologies including HTML5, CSS, and jQuery, with room for modernization and improved security headers. Security posture is moderate with no critical vulnerabilities detected, but lacks published security policies or incident response contacts. Overall, the website is trustworthy, safe, and well-aligned with the foundation's mission and audience.

C

Financial Discipleship | Compass Europe

compass1.eu

54

The website www.compass1.eu is hosted on the Wix platform and uses standard Wix scripts and polyfills. The site content is minimal and lacks substantive business information, contact details, or policies. The WHOIS data for the domain is unavailable or protected, which limits the ability to verify domain ownership and legitimacy. No privacy, cookie, or terms of service policies are present, and no contact information such as emails or phone numbers are found. The site does not exhibit any WAF or security challenge blocking, indicating it is accessible but lacks security best practices such as security headers or SSL configuration details. Overall, the website appears to be in an early or incomplete state, with low trust and credibility indicators.

E

Eglise MLK

eglisemlk.fr

54

Eglise MLK is a French non-profit religious organization focused on providing spiritual services, community engagement, and religious events. The website serves as a portal for church activities, donations, and community involvement, targeting French-speaking Christian audiences. The organization has an established domain since 2014, consistent with its operational history. Technically, the website is built on WordPress with common plugins and uses AWS for hosting static content. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional and trustworthy but could improve in security and privacy transparency.

T

TopChrétien

topchretien.com

58

TopChrétien is a prominent French-speaking Christian community platform dedicated to sharing messages of love, forgiveness, and faith growth. It offers a wide range of content including daily devotionals, Bible reading plans, music, videos, audio messages, and educational courses. The platform serves over 500,000 members and maintains a strong online presence with multiple specialized subdomains and partner sites. Technically, the website is built on a custom Django-based CMS, leveraging modern web technologies and accessibility features such as sign language mode and dyslexic-friendly reading options. Security-wise, the site enforces HTTPS, uses CSRF tokens, and includes secure cookie attributes, though it lacks explicit cookie consent and a published security policy. WHOIS data confirms the legitimacy and transparency of the organization behind the domain. Overall, TopChrétien presents a professional, trustworthy, and well-maintained digital presence tailored to its faith-based audience.

A

AMS Technologies AG

amstechnologies.com

45

AMS Technologies AG is a well-established European technology company specializing in optical technologies, thermal management, and electronics solutions. With over 40 years of industry expertise and a broad customer base across high-tech sectors, the company positions itself as a trusted advisor and one-stop-shop for advanced technology solutions. Their website reflects a professional and modern digital presence, leveraging WordPress CMS and contemporary web technologies such as Swiper.js and Google Analytics for user engagement and performance tracking. Security posture is adequate with HTTPS enabled and domain transfer protection, though improvements such as enabling DNSSEC and implementing security headers are recommended. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but lacks a visible cookie consent mechanism. Overall, the website is accessible, content-rich, and trustworthy, supporting AMS Technologies' market position and business credibility.

B

Body Attack Sports Nutrition

body-attack.at

59

Body Attack Sports Nutrition operates a professional e-commerce platform specializing in fitness nutrition products such as protein powders, creatine, amino acids, and workout boosters. The company targets fitness enthusiasts and athletes primarily in German-speaking countries, emphasizing quality with a 'Made in Germany' label and 30 years of experience. The website is well-branded, consistent, and provides a good user experience with clear navigation and mobile optimization. Technically, the site leverages Shopware CMS, Google Tag Manager, and other modern web technologies with lazy loading to enhance performance. Security posture is solid with HTTPS and consent management, though some security headers and explicit policies are missing. WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the site is trustworthy and professionally maintained but would benefit from publishing comprehensive privacy, terms, and security policies to improve compliance and user trust.

C

CARDET – Center for the Advancement of Research and Development in Educational Technology

cardet.org

55

CARDET is a well-established non-profit organization based in Cyprus, specializing in educational technology research and development. With a history dating back to 2004, it operates internationally, engaging millions through innovative education programs, training, and collaborative projects. The website reflects a mature digital presence with comprehensive content, clear navigation, and active social media engagement. Technically, the site is built on WordPress with modern frameworks and includes essential security features such as HTTPS and reCAPTCHA. Privacy and cookie policies are well implemented, supporting GDPR compliance. However, the absence of explicit security policies and incident response contacts suggests room for improvement in security transparency. Overall, CARDET demonstrates a strong market position in the education and non-profit sectors with a trustworthy and professional online presence.

Б

Българска платформа за международно развитие

bpid.eu

10

The Bulgarian Platform for International Development (Българска платформа за международно развитие) is a well-established non-profit network founded in 2009, uniting 22 NGOs focused on international development, global education, and sustainable development goals. The platform serves as a national hub for advocacy, education, and cooperation in Bulgaria, with active participation in international networks such as FORUS. Their website reflects a professional and consistent brand image, targeting NGOs, educational institutions, and stakeholders interested in global development issues. Technically, the site is built on WordPress with modern plugins like Elementor and Yoast SEO, hosted by SuperHosting.BG Ltd., and demonstrates good mobile optimization and SEO practices.

B

Bond

bond.org.uk

64

Bond is a UK-based non-profit organization that connects and champions a network of civil society organizations focused on eradicating global poverty, inequality, and injustice. The website demonstrates a strong market position within the international development sector, offering advocacy, events, job boards, training, and resources to its members. The organization is registered as a charity and company in England and Wales, reinforcing its legitimacy and trustworthiness. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and Google Tag Manager. It is well-optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience. The site uses HTTPS with good SSL configuration and employs best practices such as secure forms and controlled script loading. From a security perspective, the site shows a solid posture with HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. However, explicit security headers and a published security policy or incident response contacts are absent, representing areas for improvement. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, with minor gaps in security policy transparency. The WHOIS data for the 'www.bond.org.uk' subdomain is unavailable due to domain naming rules, but the main domain 'bond.org.uk' is presumably authoritative and legitimate. Strategic recommendations include enhancing security headers, publishing security policies, and implementing vulnerability disclosure mechanisms.

P

Platforma rozvojových organizácií – Ambrela

ambrela.org

11

Platforma rozvojových organizácií – Ambrela is a Slovak non-profit umbrella organization representing nearly thirty development, humanitarian, and educational organizations. It serves as a coordinating platform for advocacy, capacity building, campaigns, and project implementation, with strong ties to EU and international donors. The website is professionally designed, content-rich, and well-maintained, reflecting its active role in the Slovak development sector. Technically, the site is built on WordPress with modern libraries and plugins, hosted on Websupport.sk, and optimized for mobile devices. Security posture is good with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and some advanced security headers are missing. Privacy and cookie policies are present and GDPR compliant with user consent mechanisms. Overall, the website is trustworthy and credible, with no signs of malicious activity or content safety concerns.

A

Alda Europe

alda-europe.eu

40

Alda Europe is a well-established non-profit organization focused on fostering local democracy and civil society development across Europe and beyond. With 25 years of experience, it operates as a global alliance of local and regional authorities and civil society actors, delivering projects, advocacy, and capacity building services. The website reflects a professional and consistent brand image, targeting stakeholders in governance, civil society, and regional development. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site is trustworthy and compliant with privacy regulations, though WHOIS data is unavailable due to privacy protection, which is typical for such organizations.

M

MTÜ Arengukoostöö Ümarlaud (AKÜ)

terveilm.ee

42

MTÜ Arengukoostöö Ümarlaud (AKÜ) is a small Estonian non-profit coalition representing NGOs engaged in development cooperation, global citizenship education, and sustainable development. The organization acts as a strategic partner and consultant to the Estonian Ministry of Foreign Affairs and provides workshops and consultancy services to private sector companies and the public. The website reflects a professional and consistent brand presence with good content quality and clear navigation, targeting Estonian NGOs and interested stakeholders. Technically, the site is built on WordPress with modern plugins and integrations, including multilingual support and social media connectivity. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks security headers and formal security or privacy policies. Overall, the site is trustworthy and well-positioned within its sector but would benefit from enhanced privacy compliance and security best practices.

A

ADRA Europe

adra.eu

50

ADRA Europe is a well-established Christian humanitarian aid organization operating globally with a focus on disaster relief, health, education, and livelihoods. The website presents a professional and consistent brand image, targeting donors, volunteers, and partners interested in humanitarian causes. Technically, the site is built on WordPress using Elementor and WooCommerce, integrating Google Analytics and Tag Manager for marketing and analytics purposes. The site is mobile-optimized and SEO-friendly but could improve accessibility features. Security posture is good with HTTPS enforced and cookie consent implemented, though the absence of security headers and privacy policy pages indicates room for improvement. Overall, the domain registration is consistent with a legitimate non-profit entity, enhancing trustworthiness. Strategic recommendations include publishing privacy and terms of service policies, adding security headers, and establishing incident response contacts to strengthen compliance and security.

A

ActionAid International

actionaid.org

65

ActionAid International is a well-established global non-profit federation dedicated to eradicating poverty and injustice through humanitarian aid, advocacy, and development programs. The organization operates in multiple countries worldwide, focusing on key themes such as women's rights, climate justice, emergencies, and economic and political issues. Their website reflects a professional and consistent brand image, providing comprehensive information about their mission, activities, and resources. The presence of multiple country-specific domains underscores their global footprint and operational scale. Technically, the website is built on Drupal 10, leveraging modern analytics tools like Google Analytics, Google Tag Manager, and Hotjar for user behavior insights. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Hosting and DNS services utilize Cloudflare, enhancing availability and resilience. Privacy and cookie compliance are well implemented, including user consent mechanisms aligned with GDPR requirements. From a security perspective, the site enforces HTTPS and employs domain transfer protection. However, DNSSEC is not enabled, and no explicit security headers were detected in the HTML content, representing areas for improvement. No vulnerability disclosure or incident response contacts are publicly available, which could be enhanced to improve transparency and trust. Overall, the security posture is solid but could benefit from additional hardening and disclosure practices. The overall risk assessment is low, with no indications of malicious content or suspicious activity. The site is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic recommendations include enabling DNSSEC, publishing a vulnerability disclosure policy, adding security headers, and providing clear incident response contacts to further strengthen security and compliance posture.

A

ACT Alliance EU

actalliance.eu

57

ACT Alliance EU is a coalition of European faith-based development and humanitarian NGOs focused on advocating for fairer, locally-led humanitarian and development policies. The organization operates as a non-profit network, emphasizing social, economic, and environmental justice, and the empowerment of local communities. Their market position is that of a recognized European NGO coalition with a clear advocacy and networking mission. Technically, the website is built on WordPress using Elementor, with modern web technologies such as Google Tag Manager and FontAwesome. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enforced and cookie consent implemented, but lacks some advanced security headers and explicit public security policies. Overall, the site is professional, trustworthy, and compliant with GDPR, though it could improve transparency around security and incident response. The domain registration is consistent with the business purpose, with no suspicious patterns detected.

C

CONCORD

concordeurope.org

60

CONCORD is a well-established European confederation of NGOs focused on sustainable development and international cooperation. The organization acts as a key interlocutor with EU institutions, advocating for social justice, gender equality, and sustainable policies. Their website reflects a mature digital presence with rich content, resources, and active engagement with their audience and partners. Technically, the site is built on WordPress with a modern theme and plugins, hosted by OVH sas, and uses HTTPS with Google Tag Manager for analytics. Security posture is generally good but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is limited as no explicit privacy or cookie policies were detected in the provided content. Overall, the site is professional, trustworthy, and serves its non-profit advocacy mission effectively.

The Internationale Gutenberg-Gesellschaft in Mainz e.V. is a well-established non-profit organization dedicated to the research and promotion of printing history and media development. Founded in 1901, it holds a significant position in the cultural and scientific community, particularly in Mainz, Germany. The society offers memberships with benefits such as access to the Gutenberg Museum, exclusive events, and the annual Gutenberg-Jahrbuch publication, targeting researchers, members, and enthusiasts of printing history. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and privacy-conscious Matomo analytics. The site is well-structured, mobile-optimized, and provides clear navigation and content relevant to its audience. Hosting appears stable with agency-managed nameservers. However, there is room for improvement in cookie consent mechanisms and security headers. From a security perspective, the site uses HTTPS and does not expose sensitive data. The absence of explicit cookie consent and security policies are notable gaps. No vulnerabilities or suspicious activities were detected. WHOIS data aligns well with the organization's identity and history, supporting legitimacy. Overall, the website presents a trustworthy, professional, and content-rich platform with moderate technical sophistication. Strategic improvements in privacy compliance and security posture would enhance user trust and regulatory adherence.

G

Gutenberg-Shop

gutenberg-shop.de

49

The Gutenberg-Shop is an e-commerce platform associated with the Gutenberg Museum in Mainz, Germany, specializing in exclusive gifts related to the art of printing and book painting. The website targets a general audience interested in cultural and artistic merchandise, offering products crafted using traditional techniques. The business operates in the retail sector with a niche focus on cultural and museum-related products. Technically, the site is built on a modern e-commerce platform (likely Shopware), uses HTTPS, and integrates Matomo analytics for privacy-conscious tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security practices include CSRF protection and cookie consent mechanisms, though explicit privacy and terms of service pages are missing. Overall, the site demonstrates a moderate to good security posture with room for improvement in policy transparency and security headers. The domain registration data is minimal but consistent with the business profile, and no suspicious patterns were detected. The site is safe for general audiences with no adult or questionable content.

The website is an official microsite for the Gutenberg-Museum hosted under the city of Mainz's domain, representing a government cultural institution dedicated to the history of printing and Johannes Gutenberg. It offers museum exhibitions, a shop, and educational experiences, targeting a broad audience including tourists and culture enthusiasts. The site is professionally designed with good content quality and consistent branding, supporting both German and English languages. Technically, it uses a Sitepark CMS platform with a mix of legacy and modern JavaScript libraries, and is mobile optimized with accessibility features. Security posture is adequate with HTTPS and consent-based Matomo analytics, but lacks explicit privacy, cookie, and security policies on this page. WHOIS data confirms legitimacy and consistency with the official city domain. Overall, the site is trustworthy and well-positioned as a government cultural resource, though it could improve privacy disclosures and security headers.

B

Body Attack Sports Nutrition

body-attack.de

66

Body Attack Sports Nutrition operates a professional e-commerce platform specializing in fitness and sports nutrition products, targeting German-speaking fitness enthusiasts and athletes. The company leverages a mature digital infrastructure based on the Shopware platform, enhanced with modern performance optimizations such as lazy loading and integration with Google Tag Manager and Mollie payment services. The website demonstrates consistent branding and a clear market position as a trusted German fitness nutrition provider with over 30 years of experience. Security posture is solid with HTTPS and Cloudflare DNS/CDN usage, though explicit security headers and policies are not fully visible. Privacy compliance is limited due to missing visible privacy and cookie policies. Overall, the site is well-designed, user-friendly, and trustworthy for its target audience.

D

Das Bauhaus-Archiv / Museum für Gestaltung

bauhaus.de

49

Das Bauhaus-Archiv / Museum für Gestaltung is a prominent cultural institution in Germany dedicated to preserving and showcasing the Bauhaus legacy, the most influential school of architecture, design, and art of the 20th century. The website serves as a comprehensive portal for visitors, researchers, and enthusiasts, offering information on exhibitions, research projects, educational outreach, and a dedicated shop for Bauhaus-related products. The institution holds a leading market position in the cultural and educational sector related to Bauhaus history. Technically, the website is built on WordPress CMS with modern frontend technologies such as Vue.js, providing a smooth and responsive user experience. The site employs performance optimization tools like WP Rocket and integrates a consent management platform to comply with privacy regulations. Hosting is managed professionally via dns-hotel.net, ensuring reliable uptime and security. From a security perspective, the website enforces HTTPS and uses privacy-conscious cookie consent mechanisms. While no explicit security policy or incident response contacts are published, the site shows no signs of vulnerabilities or exposed sensitive data. The absence of common security headers is noted as an area for improvement. Overall, the security posture is solid for a cultural institution website. The risk assessment is low, with no detected malicious or suspicious activity. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a security.txt file to improve transparency and vulnerability management. The website demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.

The domain bg.de currently hosts a minimal content website that appears to be a parked domain landing page primarily serving advertisements. There is no meaningful business content, no contact information, and no privacy or cookie policies present. The site uses third-party ad scripts and cloudfront CDN for content delivery but lacks any structured data or branding elements. The WHOIS data indicates the domain is in a 'connect' status with parkingcrew.net name servers, consistent with domain parking rather than an active business presence. Technically, the site lacks HTTPS enforcement and security headers, which further reduces trustworthiness and security posture. Overall, the site does not represent an operational business or service and is likely used for ad monetization or domain holding purposes.

N

Nubassa Gewürzwerk GmbH

nubassa.de

51

Nubassa Gewürzwerk GmbH is a well-established German B2B company specializing in the supply of spices, marinades, and food technology solutions with a history spanning over 90 years. The company targets food manufacturers and retailers, offering high-quality products and customer service to facilitate consistent production standards. Their website reflects a professional and consistent brand image, supporting their market position as a reliable partner in the food manufacturing sector. Technically, the website is built on TYPO3 CMS, leveraging modern frontend technologies such as Bootstrap and Font Awesome, and is hosted on German infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks some explicit security headers and published security policies. No critical vulnerabilities or suspicious content were detected, and the domain WHOIS data aligns with the company's German business identity, supporting legitimacy. Overall, the website demonstrates a solid digital presence with room for improvement in privacy and security transparency.

H

HAUS DES LEBENS e.V.

haus-des-lebens.de

55

Haus des Lebens e.V. is a small German non-profit organization dedicated to supporting social-missionary projects primarily in Indonesia, Romania, and Israel. The organization focuses on community building, education, and social services in these regions, engaging donors and volunteers through its website and social media presence. The website is professionally designed with clear navigation and content relevant to its mission, targeting donors and supporters interested in social causes. Technically, the website is built on WordPress with modern plugins enhancing user experience and compliance with GDPR through privacy and cookie policies. The site is mobile-optimized and accessible, with moderate performance. Security posture is good with HTTPS enabled and cookie consent implemented, though security headers are not detected, and no explicit incident response or vulnerability disclosure policies are present. The WHOIS data is unavailable due to a malformed query response, limiting domain trust analysis. However, the website's transparency in contact information and privacy compliance supports its legitimacy. Overall, the site presents a trustworthy and professional front for a small non-profit organization with room for improvement in security best practices and domain registration transparency.

A

AMS Technologies AG

ams.de

45

AMS Technologies AG is a well-established European technology company specializing in optical technologies, thermal management, and electronics solutions. With over 40 years of industry expertise and a broad customer base across high-tech sectors, the company positions itself as a trusted advisor and one-stop-shop for custom solutions and expert consulting. Their website reflects a professional and consistent brand image targeting high-tech companies and research institutions. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics for user tracking. The site is mobile-optimized and offers a multi-step contact form for detailed customer inquiries. Security-wise, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and visible security headers. Privacy compliance is partially addressed with a privacy policy and terms of service available on the shop subdomain, though no cookie consent mechanism is evident. Overall, the website demonstrates a solid business credibility and technical foundation with room for security and privacy improvements.

W

webQ GmbH

webq.de

52

webQ GmbH is a well-established full-service advertising agency based in Weinheim, Germany, with 25 years of experience. The company offers a broad range of creative and digital marketing services including web design, graphic design, video production, 3D animation, print, domain registration, hosting, SEO, and consulting. Their target audience includes both public and private sector clients across various industries. The website reflects a professional and consistent brand image with clear contact information and a portfolio of clients, indicating a strong local market presence. Technically, the website is built with modern web standards using HTML5, CSS3, and JavaScript, featuring a strict Content-Security-Policy header and HTTPS usage, which demonstrates a good security posture. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. However, there is a lack of explicit privacy and cookie policies, which is a compliance gap that should be addressed. Security-wise, the site benefits from HTTPS and CSP headers but lacks other common security headers and incident response contact information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is limited due to DENIC privacy restrictions but shows no suspicious patterns, and the domain age aligns with the company's claimed history. Overall, webQ GmbH presents a trustworthy and professional online presence with room for improvement in privacy compliance and security transparency. Strategic recommendations include adding comprehensive privacy and cookie policies, implementing security.txt for vulnerability disclosure, and enhancing security headers to further strengthen the security posture.

INSURNINJA GmbH is a small German marketing and PR agency that previously focused on insurance products for gamers. The website is currently in maintenance mode with a notice that the domain and content are for sale, indicating a possible business wind-down or transition. The company is registered in Hannover, Germany, with clear contact information provided. Technically, the website runs on WordPress with a maintenance mode plugin and uses jQuery. The site is accessible without WAF or security challenges but lacks advanced security headers and DNSSEC. No privacy or cookie policies are present, which impacts compliance posture. Overall, the security posture is basic with room for improvement in DNS security and HTTP headers. The website content is minimal and business-focused, with no adult or explicit content detected, making it safe for general audiences.

K

KW automotive GmbH

kwautomotive.de

55

KW automotive GmbH is a well-established German company specializing in chassis optimization for racing and street vehicles, with over 30 years of industry experience. The company operates an informative and professionally designed website built on WordPress with Elementor, targeting automotive professionals and enthusiasts. The site supports multilingual content and integrates modern web technologies and analytics tools. Security posture is solid with HTTPS and reCAPTCHA, though explicit security policies and headers could be improved. Privacy compliance is basic, with cookie consent implemented but no visible privacy or terms of service pages. Overall, the website reflects a credible and mature business with room for enhanced transparency and security documentation.

C

CCC Druck und Medien GmbH

muensterdruckt.de

47

CCC Druck und Medien GmbH operates an online and local print and media service shop based in Münster, Germany. The website offers a broad range of printing products and services targeting both business and private customers, including flyers, posters, thesis printing, and various print media. The company positions itself as a local trusted provider with personal consultation available on-site. Technically, the website uses a Bootstrap-based responsive design with jQuery and other JavaScript libraries, hosted on servers indicated by creolineserver.com nameservers. The site is moderately optimized for performance and mobile devices but lacks some advanced accessibility features. Security posture is moderate with HTTPS implied but no visible security headers and no published security or incident response policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Business credibility is supported by clear contact information and consistent WHOIS data. Overall, the website is functional and professional but could improve in security and privacy compliance.

W

Westfälischer Turnerbund e.V.

nrw-landesturnfest.de

45

The website www.nrw-landesturnfest.de serves as the official online presence for the 5th NRW Landesturnfest 2026, a major gymnastics and sports event organized by the Westfälischer Turnerbund e.V. The site provides comprehensive event information, registration details, volunteer opportunities, and program highlights targeting sports enthusiasts and participants in the NRW region of Germany. The business model focuses on event organization and community engagement within the sports sector, positioning itself as a key regional event organizer. Technically, the website is built on the TYPO3 CMS platform, leveraging modern frontend technologies such as Alpine.js and Swiper.js for interactive elements. The site is mobile-optimized, well-structured, and employs a reputable cookie consent manager (CCM19) to ensure compliance with privacy regulations. Hosting appears to be managed via German-based nameservers, supporting regional data sovereignty. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is strong with a clear privacy policy and cookie consent, though terms of service and vulnerability disclosure mechanisms are absent. Overall, the website demonstrates a good level of professionalism, technical maturity, and compliance suitable for its purpose. Recommendations include enhancing security headers, publishing security and incident response policies, and adding terms of service to improve trust and compliance further.

V

Volksbank Alzey-Worms eG

vb-alzey-worms.de

62

Volksbank Alzey-Worms eG is a regional cooperative bank in Germany serving local customers primarily in the Alzey-Worms area. The website presents banking services and financial products with a focus on local presence and customer support. The business model is cooperative banking with a medium-sized regional footprint. The website uses modern web technologies including Angular Material and Dynatrace monitoring, indicating a moderate level of digital maturity. The site is mobile optimized and provides a professional user experience with clear navigation and relevant content. Security posture is good with HTTPS enabled and no visible vulnerabilities, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness. Strategic improvements in privacy compliance and security transparency are recommended to enhance user trust and regulatory adherence.

A

AirTrack Factory

airtrackfactory.com

71

AirTrack Factory is a medium-sized e-commerce business specializing in the manufacture and sale of AirTrack sports equipment such as AirFloor, AirTrick, and AirBag products. Established in 2011, it positions itself as the world's leading AirTrack manufacturer, targeting sports enthusiasts, gymnasts, athletes, and families. The website is professionally designed with consistent branding and good content relevance, supporting multiple languages via WPML. The business model is direct online sales with integrated payment processing via Stripe.

N

Netxp GmbH

netxp-verein.de

62

Netxp GmbH operates the website www.netxp-verein.de, providing specialized online software solutions for clubs and associations to manage memberships, finances, and communications efficiently. The company positions itself as a trusted provider with a focus on ease of use, multi-user access, and comprehensive club management features. The website is professionally designed, well-structured, and targets German-speaking clubs and associations. Technically, the site uses modern web technologies including jQuery, Bootstrap, and tracking tools such as Google Analytics and Facebook Pixel, hosted on Schlund Technologies infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit security policies are absent. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information and social media presence.

A

Autohaus Heydasch GmbH

nissan-heydasch-worms.de

49

Autohaus Heydasch GmbH is an established automobile dealership located in Worms, Germany, serving as an official Nissan partner. The company offers a wide range of services including new and used car sales, vehicle trade-ins, service bookings, and maintenance. Their market position is that of a trusted local Nissan dealership catering to private and commercial customers. The website reflects a professional business model focused on automotive sales and services with clear contact channels and customer engagement features. Technically, the site is built on modern frameworks such as React and Next.js, ensuring a responsive and user-friendly experience. Privacy compliance is well addressed with GDPR-aligned policies and a visible data protection officer contact. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response information are absent. Overall, the website is trustworthy, well-structured, and suitable for its target audience.