Security Directory

J

JCT Childrens Foundation

jctchildrensfoundation.org

45

The John C Thomas Children's Foundation is a well-established non-profit organization dedicated to supporting orphaned and vulnerable children in Malawi. Their services include providing shelter, nutrition, sanitation, clean water, education, and awareness programs on HIV/AIDS and Cholera. The foundation has a strong market position with over 20 years of operational history and a medium-sized reach, supported by a consistent brand and active social media presence. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and WPBakery, offering good mobile optimization and SEO practices. Security posture is moderate with HTTPS enabled but lacking DNSSEC and security headers, and no explicit privacy or cookie policies, indicating compliance gaps. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

K

K & M Racing

kandmracing.co.uk

52

K & M Racing is a small, UK-based racehorse training partnership established in 2023 by David Killahena and Graeme McPherson. The company offers racehorse training, syndicate services, and horses for sale, positioning itself as a forward-thinking and innovative operation within the equine sports sector. Their website reflects a professional and consistent brand image, targeting racehorse owners and racing enthusiasts. Technically, the site is built on WordPress with popular plugins for SEO, GDPR compliance, and social media integration, demonstrating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and cookie consent implemented, though the absence of security headers and incident response information suggests room for improvement. Overall, the website is trustworthy and well-maintained, supporting the company's business goals effectively.

B

Black Water Tek

blackwatertek.com

51

Black Water Tek is a specialized diving training company founded by world-record diver Will Goodman, offering CCR and technical diver training primarily in Indonesia and Egypt. The company operates with a strong niche focus, leveraging expert instruction and partnerships with reputable dive centers and liveaboards to provide tailored, high-quality training and expedition experiences. The website reflects a professional and well-branded presence targeting technical divers seeking advanced training and exploration opportunities. Technically, the site is built on WordPress with modern SEO and user engagement tools, delivering good performance and mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, though improvements in security headers and explicit policies are recommended. Privacy compliance is basic with a privacy policy and cookie consent but lacks detailed GDPR indicators or incident response information. Overall, the site is trustworthy, well-maintained, and aligned with the business's market positioning.

C

Cheltenham Playhouse

cheltplayhouse.org.uk

9

Cheltenham Playhouse is a small non-profit community theatre organization based in the United Kingdom, focused on providing theatrical productions and cultural events to the local community. The website reflects a consistent brand identity and offers relevant information about the theatre's activities, targeting local residents and theatre enthusiasts. The business model relies on community engagement and event hosting. Technically, the website uses modern front-end technologies such as the Bulma CSS framework and FontAwesome icons, hosted by a reputable registrar, 123-Reg Limited. The site appears to be mobile-optimized with a moderate performance profile. Security posture is basic, with no detected security headers or published security policies, and no HTTPS enforcement details available from the provided data. Privacy compliance is lacking, as no privacy or cookie policies were found, which is a notable compliance gap. Overall, the website is safe for general audiences and does not contain adult or explicit content. The domain registration is consistent with the organization's history and shows no suspicious patterns.

B

Brook Street Foods

brookstreetfoods.co.uk

58

Brook Street Foods is a family-run wholesale food supplier based in Suffolk, UK, with over 30 years of experience. The company offers a broad range of food products including ambient, chilled, frozen, fresh meat, and non-food items, targeting wholesale customers and businesses. Their website provides an online ordering platform with a focus on competitive pricing, including price locks and a Booker price promise, positioning them as a trusted regional wholesaler. Technically, the website is built on modern frameworks such as Next.js and React, hosted on Vercel, and employs Tailwind CSS for styling. The site is performant, mobile-optimized, and uses security best practices including HTTPS and security headers. However, the absence of explicit privacy, cookie, and security policies, as well as missing contact information, limits their privacy compliance and business credibility. The WHOIS data is unavailable and indicates domain registration issues, which raises concerns about domain legitimacy despite the active website presence. Overall, the site is professional and secure but would benefit from improved transparency and compliance documentation.

3

3C Legal Limited

3clegal.co.uk

10

3C Legal Limited is a UK-based legal support services company founded in 2018, specializing in providing expert advice and representation in legal and business matters. The company serves a diverse clientele including legal professionals, government departments, businesses, and personal clients. Their services encompass inheritance tax planning, wills and estate planning, probate, and business legal support, with an emphasis on emergency services. The website reflects a professional and consistent brand image with clear contact information and trust indicators such as a data protection license and company registration details. Technically, the website is built on WordPress using modern plugins like Yoast SEO and Complianz for GDPR compliance, with moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Overall, the site is trustworthy, compliant, and well-positioned within its niche market.

T

The Bridge Cafe

bridgecafecheltenham.co.uk

44

The Bridge Café is a small hospitality business located in Cheltenham, UK, offering lunch and light dining options with a focus on locally sourced ingredients and fresh preparation. The website presents a professional and consistent brand image, targeting local residents and visitors seeking quality café services. The business leverages social media and online delivery platforms such as Deliveroo to extend its reach. Technically, the website is built on WordPress with popular plugins like Yoast SEO and Slider Revolution, indicating a moderate level of digital maturity. The site is mobile optimized and includes SEO best practices, although accessibility features are basic. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and incident response transparency. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is trustworthy and functional but would benefit from enhanced compliance and security measures.

A

Apple Orchard Campsite & Tea Room

appleorchardcampsite.co.uk

47

Apple Orchard Campsite & Tea Room is a small, independent family-run hospitality business offering caravan and camping pitches, luxury wooden pods, and an on-site tea room located in the Forest of Dean, UK. The website is professionally designed using WordPress with modern plugins such as Yoast SEO and Slider Revolution, providing a good user experience and mobile optimization. The business maintains a strong local presence with active social media channels and customer testimonials, enhancing credibility. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though additional security headers and policies could improve resilience. Privacy compliance is well addressed with a comprehensive cookie and privacy policy. Overall, the website reflects a trustworthy and mature digital presence suitable for its business size and sector.

D

D&G Contracting Limited

dandgcontracting.co.uk

52

D&G Contracting Limited is a small UK-based construction services company specializing in a range of installation services including acoustic panel solutions, firestopping, commercial fit-outs, structural framing systems, partitions, and suspended ceilings. With over 35 years of industry experience, the company serves clients primarily in Gloucestershire and surrounding regions, maintaining a strong reputation evidenced by repeat contracts and certifications such as FIRAS and approvals from Metsec and Ecophon. The website reflects a professional and consistent brand image targeting construction industry clients across the UK. Technically, the website is built on WordPress using common plugins like Yoast SEO and WPBakery Page Builder, with modern JavaScript libraries for UI elements. The site is mobile optimized and implements SEO best practices, though accessibility features are basic. Performance is moderate, with no critical technical issues detected. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, but could be improved by adding security headers and explicit incident response information. The WHOIS data for the domain is unavailable due to a naming rules violation error from the UK registry, which limits the ability to fully verify domain registration legitimacy. Despite this, the website content and business information appear consistent and trustworthy. No signs of malicious content or security vulnerabilities were found. Privacy and cookie policies are present and GDPR compliant. Overall, the website and business present a credible and professional front with room for technical and security enhancements to further strengthen trust and compliance.

Forschungsverbund Ecornet Berlin is a consortium of five ecological research institutes based in Berlin, focused on advancing social and ecological transformation towards a sustainable, climate-neutral urban society. The consortium leverages combined research expertise in social climate change, sustainable economy, and digitalization to support Berlin's leadership in innovative urban development. The website is professionally designed using TYPO3 CMS, with integrated cookie consent and Matomo analytics, reflecting a mature digital infrastructure. Security posture is strong with HTTPS and privacy compliance, though some security headers and policies could be enhanced. Overall, the site presents a trustworthy and credible research entity with clear contact information and active social media presence.

Ecornet is a German non-profit network of eight independent environmental and sustainability research institutes focused on shaping societal transformation towards sustainability. The website presents a professional and comprehensive digital presence, including detailed information about their mission, member institutes, events, and publications. The site is built on TYPO3 CMS and uses Matomo for privacy-conscious analytics. It features a robust cookie consent mechanism compliant with GDPR requirements. Security posture is good with HTTPS enforced and no visible vulnerabilities, although security headers could be improved. WHOIS data is unavailable due to EURid privacy policies, but the website's professionalism and transparency support its legitimacy. Overall, Ecornet demonstrates a mature digital infrastructure suitable for its research and advocacy mission.

B

Blog Postwachstum

postwachstum.de

10

Blog Postwachstum is a German-language non-profit blog dedicated to exploring pathways to a post-growth society, focusing on sustainability, ecological economics, and social movements. It serves an audience of researchers, activists, and policymakers interested in degrowth and sustainable development. The site is affiliated with ecological research organizations such as IÖW and VÖW, enhancing its credibility and trustworthiness. The business model centers on educational content dissemination, event announcements, and community engagement without commercial advertising or sales. Technically, the website is built on WordPress with a modern theme and plugins supporting GDPR compliance and email marketing. The infrastructure appears stable and moderately performant, hosted likely by Your-Server.de, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and safe for general audiences.

I

Institut für ökologische Wirtschaftsforschung (IÖW)

oekologisches-wirtschaften.de

10

Ökologisches Wirtschaften is a well-established German scientific journal focusing on social-ecological economic topics, bridging research and practical experience in politics and business. It serves a specialized audience interested in sustainable economic development and publishes issues with articles authored by experts. The website is powered by Open Journal Systems, a recognized platform for academic publishing, and is affiliated with reputable institutions such as the Institut für ökologische Wirtschaftsforschung (IÖW) and the oekom verlag publishing house. The content is professionally presented, with clear navigation and good mobile optimization. Technically, the site uses modern JavaScript libraries including jQuery, Bootstrap, and Popper.js, ensuring a responsive and interactive user experience. The hosting is managed via known providers with stable DNS configurations. Security posture is solid with HTTPS enforced and restricted access to subscriber-only PDFs, though the absence of explicit security headers and cookie consent mechanisms suggests room for improvement. No signs of blocking or WAF interference were detected, allowing full content accessibility. Overall, the security posture is good but could be enhanced by implementing security headers, cookie consent, and publishing incident response contacts. The business credibility is high due to institutional affiliations and professional presentation. No vulnerabilities or suspicious patterns were found. Strategic recommendations include improving privacy compliance and security best practices to further strengthen trust and compliance.

S

Stiftung ZQP

zqp.de

59

Stiftung ZQP is an independent, non-profit foundation established in 2009 by the PKV-Verband, dedicated to improving quality and prevention in care within Germany. The organization provides research, educational materials, online portals, and consultation databases targeting professional caregivers, family caregivers, researchers, and healthcare policymakers. Their market position is well-established in the German healthcare sector with a focus on long-term care quality and prevention. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, WooCommerce, Borlabs Cookie for consent management, and security plugins like Shield Security. The site is well-optimized for SEO, accessibility, and mobile responsiveness, hosted on professional infrastructure with domain control via GoDaddy name servers. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and use of Google reCAPTCHA on forms. While some security headers could be improved, no critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is robust with clear GDPR-aligned policies and cookie management. Overall, the website presents a professional, trustworthy, and secure digital presence for a healthcare non-profit. It effectively serves its target audience with comprehensive content and services, supported by a solid technical and security foundation.

A

ADM Global

adm.uz

47

ADM Global is a medium-sized automotive group based in Uzbekistan, specializing in distribution, local manufacturing, sales, warranty and post-warranty services, logistics, leasing, and the sale of original spare parts and accessories. The company maintains a professional online presence with a well-structured website targeting regional customers and partners. The technical infrastructure includes modern tools such as Yandex Maps and Yandex Metrika for analytics and mapping, with Cloudflare DNS services enhancing reliability. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and visible privacy or cookie policies, indicating room for improvement in compliance and security transparency. Overall, the website is functional, professional, and trustworthy, but would benefit from enhanced privacy compliance and security best practices.

О

ООО «Billur Com»

kia.uz

10

The website kia.uz represents the official Kia dealership in Uzbekistan, operated by ООО «Billur Com». It offers new Kia vehicles with services including credit, leasing, and trade-in options. The site targets general consumers in Uzbekistan interested in purchasing Kia automobiles. The business is well-established, with a domain registered since 2006, indicating a mature market presence. Technically, the website employs modern frontend technologies such as Vue.js, PrimeVue, Tailwind CSS, and Swiper.js, providing a good user experience with mobile optimization and decent SEO practices. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal security policies. Privacy and cookie policies are absent, which is a compliance gap. Overall, the site is professional and trustworthy but could improve in privacy compliance and security transparency.

B

Brittany Ferries

brittany-ferries.es

65

Brittany Ferries operates as a major ferry transportation service provider connecting Spain, France, and the UK. The company offers passenger and freight ferry routes with an online booking platform, targeting general public travelers and freight customers. The website reflects a professional and consistent brand presence with a focus on user-friendly booking and travel information. Technically, the site is built on modern frameworks such as Angular and uses Contentful as a CMS, hosted on Google Cloud infrastructure. It integrates tracking and analytics tools like Google Tag Manager and Sentry for performance and error monitoring. Security posture is strong with HTTPS enforced and security headers implemented, although no explicit security policy or incident response information is published. Privacy and cookie policies are present and appear GDPR compliant. Overall, the site is well-designed, mobile-optimized, and trustworthy, though WHOIS data is unavailable due to registry query restrictions, limiting domain trust analysis. Strategic recommendations include publishing a security policy, incident response contacts, and vulnerability disclosure information to enhance transparency and security maturity.

B

Brittany Ferries

brittany-ferries.ie

68

Brittany Ferries is a well-established ferry operator providing passenger and freight services primarily between Ireland, the UK, France, and Spain. The company targets travelers and freight customers in these regions, offering booking and travel services through a professionally designed and user-friendly website. The business operates in the transportation sector with a large market presence in Western Europe maritime transport. Technically, the website leverages modern web technologies including Angular framework, Google Tag Manager for analytics, and Contentful as a CMS. Hosting is provided via Google Cloud Storage, ensuring reliable content delivery. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be improved. From a security perspective, the website enforces HTTPS with strong SSL configuration and implements security headers such as Content Security Policy and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present and indicate GDPR compliance, though no explicit security policy or incident response information is published. Overall, the website is professional, trustworthy, and safe for general audiences. The lack of WHOIS data limits domain registration trust analysis, but the website content and branding strongly suggest legitimacy. Strategic recommendations include publishing a security policy, adding vulnerability disclosure mechanisms, and enhancing accessibility compliance to further strengthen security posture and user trust.

B

Brittany Ferries

brittany-ferries.fr

10

Brittany Ferries is a well-established ferry operator primarily serving maritime routes between France, the UK, Spain, and Ireland. The company offers ferry crossings, holiday packages, and travel guides targeting general travelers and holidaymakers. The website reflects a professional and consistent brand image with a focus on user-friendly navigation and relevant content for its audience. Technically, the site is built on modern frameworks such as Angular and leverages trusted third-party services like Google Tag Manager and Trustpilot for analytics and reviews. Hosting appears to be on Google Cloud infrastructure with content delivery via Contentful CDN, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and use of nonce attributes in scripts; however, there is a lack of visible security headers and explicit security or incident response policies. Privacy compliance is limited due to missing explicit privacy and cookie policies in the analyzed content. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

B

Brittany Ferries

brittany-ferries.co.uk

10

Brittany Ferries is a well-established ferry operator providing passenger and freight services primarily between the UK, France, Spain, and Ireland. The company offers ferry crossings, holiday packages, and related travel services, targeting general travelers and freight customers. The website reflects a professional and consistent brand image with a focus on user experience and accessibility. Technically, the site uses modern frameworks such as Angular, is hosted on Google Cloud infrastructure, and integrates third-party services like Contentful CMS and Google Tag Manager for content delivery and analytics. Security posture is strong with HTTPS enforced and security headers implemented, although there is room for improvement in publishing explicit security policies and incident response contacts. The WHOIS data is unavailable due to a domain naming rules error, which is unusual but does not detract significantly from the overall legitimacy given the professional web presence. Overall, the site is secure, compliant with privacy regulations, and provides a trustworthy platform for its users.

DF1 is a German media website offering documentaries, reportages, magazines, quiz shows, weather updates, and live sports including MotoGP, PENNY DEL, Formel-E, tennis, sailing, and football. The site targets a general audience interested in diverse media content and live sports coverage. The business model appears to be content streaming and broadcasting, with a focus on entertainment and sports media. The website uses modern web technologies such as Nuxt.js and Vue.js, built on a WordPress CMS backend, indicating a moderate level of digital maturity. Performance and mobile optimization are basic but functional. From a security perspective, the site implements a cookie consent mechanism with GDPR considerations, but lacks visible privacy policies, terms of service, or security headers. SSL configuration details are not provided, and no contact or incident response information is available. Google Analytics is used for user tracking at a moderate level. The absence of critical security issues is positive, but improvements are needed in security best practices and transparency. Overall, the website is accessible and safe for general audiences, with no adult or explicit content detected. The domain WHOIS data is consistent with a legitimate German media site, though limited registrant details are available. The site scores moderately on content quality, technical implementation, security posture, privacy compliance, and business credibility, resulting in an overall AI score of 66 out of 100.

W

Wein Wolf Gruppe

weinwolf.de

10

Wein Wolf Gruppe operates as a premium distributor and wholesaler specializing in wines, champagnes, and spirits, targeting business customers primarily in Germany. The website serves as a B2B webshop facilitating product distribution with a professional and consistent brand presence. The technical infrastructure leverages modern web technologies including Shopware CMS, Matomo analytics, and Usercentrics for cookie consent management, hosted on AWS infrastructure. The site is mobile optimized and provides essential features such as user login and account management with security measures like CSRF tokens. From a security perspective, the website enforces HTTPS and uses consent management platforms, but lacks visible security headers and published security policies or incident response contacts. No critical vulnerabilities or WAF blocking were detected. Privacy compliance is partial, with cookie consent but no visible privacy or terms of service pages in the provided content. The business credibility is strong given the professional presentation and alignment between domain registration and website content. Overall, the website presents a mature digital presence suitable for its B2B wholesale market, with room for improvement in privacy policy publication, security header implementation, and incident response transparency to enhance trust and compliance.

C

Culligan Deutschland GmbH

culligan.de

11

Culligan Deutschland GmbH operates a professional website offering advanced water dispenser solutions primarily targeting business customers in Germany. The company provides a range of products including piped water dispensers, gallon water dispensers, water fittings, and accessories, supported by comprehensive service and maintenance offerings. The website demonstrates a strong market position with over 20,000 companies using their solutions daily. Technically, the site is built on WordPress with Bootstrap and integrates modern analytics and marketing tools such as Piwik PRO, Google Tag Manager, and Visual Website Optimizer, all managed with GDPR-compliant cookie consent. Security posture is solid with HTTPS enforced and reCAPTCHA implemented on forms, though some security headers could be improved. Overall, the domain registration and WHOIS data align well with the business claims, indicating a trustworthy and legitimate online presence.

P

PFLANZMICH

pflanzmich.de

10

PFLANZMICH operates a well-established e-commerce platform specializing in garden plants, including hedges, perennials, roses, and rare plants. The website targets a broad German-speaking audience interested in gardening products, offering over 15,000 plant varieties with guarantees and fast delivery. The company positions itself as a trusted online garden nursery with a medium-sized market presence in Germany. Technically, the website employs modern JavaScript libraries, asynchronous loading, and integrates Google Tag Manager and Consentmanager.net for analytics and GDPR-compliant cookie consent. Hosting is provided by Anexia, with multiple nameservers indicating stable infrastructure. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No direct contact emails or phone numbers are published; contact is primarily via a web form. No vulnerability disclosure or security policy is published, representing an area for improvement. Overall, the website is professional, trustworthy, and compliant with privacy regulations, suitable for its retail business model.

S

Speisenwerft

speisenwerft-jobs.de

10

Speisenwerft is a small hospitality company specializing in catering services for sports, events, and festivals in Germany. Their website focuses on recruiting staff for catering jobs and promoting their event hospitality services. The company positions itself as a niche provider offering behind-the-scenes catering experiences at stadiums, arenas, and festivals. The website is built on WordPress using the Avada theme and includes modern design elements such as Slider Revolution sliders and Google Fonts. Cookie consent is implemented via CookieYes, indicating attention to privacy compliance. However, the site lacks detailed security policies, incident response information, and vulnerability disclosures. Contact information is clearly provided with company domain emails and a phone number, enhancing business credibility. The technical infrastructure is standard for a small business, hosted likely on kasserver.com. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and formal policies. Overall, the website is professional and functional, suitable for its business purpose but with room for security and compliance enhancements.

P

Party.Rent

partyrent.com

10

Party.Rent is a leading European rental company specializing in event equipment including furniture, tableware, and catering supplies. The company operates under the parent group Rent.Group and targets event planners, corporate clients, and private individuals across multiple European countries. Their website is professionally designed with a strong focus on user experience, multilingual support, and detailed product offerings. Technically, the site uses modern frameworks such as Bootstrap and integrates Google Tag Manager and reCAPTCHA for analytics and security. Security posture is good with HTTPS and CSRF protections, though explicit security policies and headers could be improved. Privacy compliance is partial due to missing explicit privacy and terms of service pages. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

A

APA Brands Events Solutions

apa.de

10

APA Brands Events Solutions is a well-established German company specializing in brand communication, event marketing, and live communication with over 39 years of experience. The company targets corporate clients and event organizers, providing comprehensive services from conception and design to production and branding. Their website reflects a professional and consistent brand image with multilingual support and a portfolio showcasing high-profile events. Technically, the site is built on WordPress with modern plugins and tracking tools, optimized for mobile and SEO. Security posture is good with HTTPS and cookie consent mechanisms, though explicit privacy and security policies are missing. WHOIS data confirms domain legitimacy and consistency with the business claims.

F

FUNCTIONAL MED

functional-med.de

10

FUNCTIONAL MED is a specialized healthcare provider based in Hamburg, Germany, offering holistic and modern treatment and therapy concepts focused on functional medicine, physiotherapy, osteopathy, chiropractic, and related services. The company targets patients seeking advanced musculoskeletal care and rehabilitation. The website is professionally designed, content-rich, and provides clear navigation and contact information, supporting a strong local market position. Technically, the site is built on WordPress with modern plugins and frameworks, hosted on a reputable provider, and employs HTTPS and Google reCAPTCHA for security. However, some security headers are missing, and explicit security policies are not present. Overall, the security posture is good but could be improved with additional measures. The domain registration is consistent with the hosting provider and business claims, supporting legitimacy. Privacy and cookie policies are present and GDPR compliant, enhancing trust. No adult or questionable content is detected, making the site safe for general audiences.

Y

YONEX

yonex.de

10

YONEX is a well-established sports equipment company specializing in badminton, tennis, golf, running, and snowboarding products. The website serves as a regional German portal providing product catalogs, promotional offers, and social media integration, targeting sports enthusiasts and clubs. The site demonstrates a mature digital presence with modern web technologies such as Next.js and React, ensuring good performance and mobile responsiveness. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. Security posture is solid with HTTPS and some security best practices, though explicit security policies and incident response contacts are absent. Overall, the website is professional, trustworthy, and aligned with the brand's market position.

L

Lexus Deutschland

lexus.de

70

Lexus Deutschland operates as a premium automotive brand specializing in luxury and hybrid vehicles within the German market. The website serves as a digital platform for vehicle configuration, dealer location, and customer engagement, reflecting a strong market position in the premium transportation sector. The brand leverages modern digital infrastructure, including Adobe Experience Manager CMS, React frameworks, and advanced analytics tools such as Datadog RUM and Google Tag Manager, indicating a mature digital presence. Security practices include HTTPS enforcement and cookie consent management, though explicit security policies and vulnerability disclosures are absent. Overall, the site demonstrates a professional and trustworthy online presence aligned with Lexus's premium brand image.

B

Betway Limited

betway.de

11

Betway Limited operates a comprehensive online gambling platform focused on sports betting, casino games, and live betting experiences. The company holds official partnerships with prominent football clubs such as Arsenal FC, Manchester City, Chelsea, and Brighton & Hove Albion, reinforcing its strong market position in the European gambling sector. Licensed and regulated under German authorities, Betway targets adult users interested in regulated and responsible gambling services. The website is professionally designed, mobile-optimized, and provides clear navigation and content relevant to its audience. Technically, the website leverages modern web technologies including React and Next.js frameworks, hosted behind Cloudflare for performance and security. Analytics and tracking are implemented via Google Tag Manager and Snowplow, enabling extensive user behavior insights while maintaining GDPR compliance through cookie consent mechanisms. The site demonstrates good accessibility and SEO practices, contributing to a positive user experience. From a security perspective, Betway enforces HTTPS, employs multiple security headers, and avoids exposing sensitive data in its HTML content. However, explicit security policies and incident response details are not publicly available, and no vulnerability disclosure program is evident. The domain registration data aligns well with the business claims, showing transparency and legitimacy. Overall, the security posture is strong but could benefit from enhanced transparency and formalized disclosure processes. The overall risk assessment indicates a mature and trustworthy online gambling platform with robust technical and security foundations. Strategic recommendations include publishing detailed security policies, establishing a vulnerability disclosure channel, and providing data protection officer contact information to further enhance trust and compliance.

T

Tennium

tennium.com

10

Tennium is a Spain-based company specializing in tennis-related activities including the management of official ATP/WTA tournaments, player representation, and corporate consulting services. Established in 2015, it has positioned itself as a significant player in the tennis sports management sector, offering a multi-activity platform that supports business growth and player development. The website reflects a professional and consistent brand image with comprehensive content targeting tennis professionals, corporate clients, and fans. Technically, the website is built on WordPress using popular plugins such as LayerSlider and WPBakery Page Builder. It employs modern web technologies and integrates Google Analytics and Tag Manager for tracking. Hosting is provided by Acens Technologies, S.L.U. The site is mobile-optimized with good SEO and accessibility basics, though some improvements in accessibility could be made. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is strong, with clear privacy and cookie policies and an active consent mechanism. No incident response or security policy pages were found, indicating room for improvement in transparency and readiness. Overall, Tennium's website is trustworthy, professional, and well-aligned with its business goals. Strategic recommendations include enabling DNSSEC, implementing security headers, and publishing security policies to further strengthen its security posture and trustworthiness.

W

WE media

wemedia.group

9

WE media is a Russian-language media platform focused on advertising and brand promotion services. The platform leverages a strong community and live content to connect brands with audiences, aiming to convert attention into trust and sustainable growth. The website is built on the Tilda CMS platform, utilizing modern web technologies and integrated with Yandex Metrika for analytics. While the site demonstrates good design quality, mobile optimization, and user experience, it lacks critical privacy and cookie policies, and no explicit contact information is provided. Security posture is basic with no visible security headers or advanced configurations. The domain WHOIS data is privacy-protected, which is common for small media businesses but limits transparency. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security measures.

V

Vista Musical Instruments

vistamusic.com

10

Vista Musical Instruments is a global collective of music-related brands specializing in the manufacturing, retail, and distribution of musical instruments and accessories. The company manages several historic and well-known brands such as MONO, Teisco, Harmony, Heritage Guitars, Dawsons, Manny's, and Swee Lee. The website reflects a professional and consistent brand image, targeting musicians, retailers, and the broader music community worldwide. The parent company is Caldecott Music Group, which is referenced and linked on the site. Technically, the website is built using modern web technologies including React and Next.js, with optimized images and good mobile responsiveness. Hosting and domain registration are stable and consistent with the business profile. Google Tag Manager is used for analytics and tracking, indicating moderate user tracking levels. However, there is a lack of explicit privacy and cookie policies, which presents compliance gaps. From a security perspective, the site uses HTTPS with a good SSL configuration and domain status protections to prevent unauthorized changes. However, DNSSEC is not enabled and no security headers are detected, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were found. The absence of privacy and cookie policies and consent mechanisms lowers the privacy compliance score. Overall, the website is professional, trustworthy, and technically sound but would benefit from enhanced privacy compliance and security hardening. Strategic recommendations include publishing privacy and cookie policies, enabling DNSSEC, adding security headers, and providing incident response contact information to improve trust and compliance.

N

NME Networks

nmenetworks.com

10

NME Networks is a next generation global media network focusing on pop culture through the lens of music. Founded in 2021 and operating under the parent company Caldecott Music Group, it offers media content, brand management, and newsroom services. The website reflects a professional and consistent brand image targeting a general audience interested in music and pop culture. Technically, the site is built on modern frameworks such as Next.js and React, hosted on AWS infrastructure, and employs Google Analytics for user tracking. The site is mobile optimized and performs well with good SEO practices. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though it lacks some security headers and explicit incident response policies. Privacy and cookie policies are present but lack a consent mechanism. Overall, the site is trustworthy with a legitimacy score of 85 and no signs of suspicious activity.

B

BandLab Technologies

bandlabtechnologies.com

9

BandLab Technologies is a global collective of music technology companies focused on enabling music creation and sharing without boundaries. The company operates a modern, well-designed website built with Gatsby and React, indicating a mature digital infrastructure. The site is mobile optimized and uses Google Tag Manager for analytics, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and domain status locks in place; however, DNSSEC is not enabled and security headers are not evident, indicating room for improvement. Privacy compliance is weak due to the absence of visible privacy and cookie policies, and no contact information or incident response channels are provided. Overall, the website presents a professional image but would benefit from enhanced transparency and security practices.

F

FIRMA DZIEWIARSKA BETTER

better.pl

12

Better.pl is a Polish manufacturing company specializing in producing sweaters and apparel for uniformed services such as the military, police, prison services, security personnel, and fire brigades. Their product range includes cotton scarves, promotional scarves, reflective vests, and T-shirts, targeting a niche market of uniform apparel. The company has been operational since 2010, supported by consistent domain registration data. The website presents a professional and clear business focus with good content quality and user experience, though it lacks comprehensive privacy and security policies.

House of Energy is a medium-sized German company specializing in integrated building services engineering, including sanitary, heating, ventilation, and electrical systems. With approximately 200 employees and multiple locations, it holds a solid market position in the construction sector, focusing on quality and customer satisfaction. The website is built on WordPress with modern plugins and demonstrates good technical maturity, including GDPR compliance and cookie consent mechanisms. Security posture is good with HTTPS and reCAPTCHA usage, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable and trustworthy online presence.

S

StopPauvreté

stoppauvrete.ch

10

StopPauvreté is a Swiss non-profit organization focused on raising awareness about poverty and injustice within Christian communities. The website serves as a platform to engage churches and individuals through educational content, events, and a boutique. The organization positions itself as a niche player in the non-profit sector with a clear mission and target audience. Technically, the website is built on WordPress using popular plugins such as WooCommerce and Elementor, indicating a modern and maintainable infrastructure. The site is mobile-optimized and uses HTTPS, but lacks some advanced security headers and explicit privacy and cookie policies, which are important for GDPR compliance. Social media presence on Facebook and Instagram supports community engagement. Overall, the website is professional and trustworthy but could improve privacy compliance and security transparency.

C

Chemie Altersvorsorge

chemie-altersvorsorge.de

49

Chemie Altersvorsorge is a specialized organization providing tariff-based occupational pension schemes for employees in the German chemical industry. Their website offers detailed information about the benefits of additional retirement provisions beyond the statutory pension, emphasizing tax advantages and employer contributions. The site is well-positioned within its niche, supported by reputable partners such as BAVC and IGBCE, enhancing its credibility and market presence. Technically, the website is built on a modern WordPress platform with Elementor and Yoast SEO, ensuring good performance, mobile optimization, and SEO readiness. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, serving its target audience effectively.

M

MINT Zukunft schaffen!

mintzukunftschaffen.de

63

MINT Zukunft schaffen! is an educational initiative focused on promoting STEM (MINT in German) education in Germany. The website serves as a platform to honor STEM ambassadors and provide resources related to STEM education. It targets students, educators, and STEM enthusiasts, positioning itself as a niche educational platform with a small organizational size. Technically, the website is built on WordPress, hosted on WordPress.com infrastructure, and uses modern tools such as Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is mobile-optimized and performs moderately well. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. Overall, the website is safe, professional, and trustworthy, but could improve privacy and security transparency by publishing privacy policies and incident response information.

I

Initiative Neue Qualität der Arbeit (INQA)

inqa.de

46

The Initiative Neue Qualität der Arbeit (INQA) is a German government-backed initiative focused on supporting small and medium-sized enterprises (KMU) in developing sustainable and future-oriented workplace cultures. The website serves as a comprehensive resource hub offering coaching, checks, networking, and publications to promote quality work environments. It is positioned as a trusted government entity under the Bundesministerium für Arbeit und Soziales (BMAS), leveraging official branding and partnerships. Technically, the website employs a government site builder CMS, integrates a consent management platform for GDPR compliance, and uses Etracker for analytics. The site is mobile-optimized, accessible, and SEO-friendly, though some security headers are missing. The SSL configuration is excellent, ensuring secure HTTPS connections. From a security perspective, the site demonstrates good practices with HTTPS and consent mechanisms but lacks explicit security policies, incident response contacts, and some security headers. WHOIS data is minimal but does not raise immediate concerns. Overall, the site is safe, professional, and trustworthy, with room for improvement in transparency and security hardening. The overall risk is low, but strategic recommendations include publishing privacy and security policies, adding security headers, and providing clear contact information for security incidents to enhance trust and compliance.

E

Elementare Vielfalt

elementare-vielfalt.de

54

Elementare Vielfalt is an educational platform focused on providing comprehensive information about vocational training, salaries, career tools, application tips, and job vacancies in the chemistry and pharmaceutical sectors in Germany. The website targets students, companies, teachers, and parents interested in these fields. Technically, the site is built on TYPO3 CMS and leverages modern JavaScript libraries and Usercentrics for consent management, ensuring compliance with cookie regulations. Google Analytics 4 is integrated with IP anonymization to respect user privacy. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security headers and privacy policies are not clearly visible in the provided content. Overall, the site is professional, well-branded, and trustworthy, but could improve transparency by publishing detailed privacy and security policies and contact information.

C

Chemiehoch3

chemiehoch3.de

47

Chemiehoch3 is a German sustainability initiative focused on the chemical industry, providing information, news, publications, and event organization to promote sustainable practices. The website is built on TYPO3 CMS and hosted via plusline.de, featuring a professional and consistent design optimized for mobile devices. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are critical for compliance and trust. No WAF or blocking mechanisms were detected, allowing full content access. The security posture is basic, with room for improvement in SSL configuration and security best practices. Overall, the site serves its informational purpose well but should enhance compliance and security measures to improve trust and user confidence.

D

Deutscher Bauernverband e.V.

bauernverband.de

49

The Deutscher Bauernverband e.V. (DBV) is a prominent German agricultural association representing farmers' interests. The website serves as an information hub offering agripolitical positions, publications, event calendars, and thematic dossiers targeting farmers, policymakers, and stakeholders in the agricultural sector. The site is built on a modern TYPO3 CMS platform with Bootstrap and common JavaScript libraries, ensuring good mobile responsiveness and user experience. Security posture is solid with HTTPS enforced and a GDPR-compliant cookie consent mechanism, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-aligned with its non-profit government-related mission.