Security Directory

B

Bundesverband Großhandel, Außenhandel, Dienstleistungen e.V.

bga.de

53

The Bundesverband Großhandel, Außenhandel, Dienstleistungen e.V. (BGA) is a prominent German industry association representing the interests of wholesale, foreign trade, and B2B service companies. The organization supports its members in professional, economic, and social policy matters, positioning itself as a leading voice in the German market. The website reflects this professional stature with clear content focused on industry topics, events, and press releases, targeting B2B audiences in Germany and beyond. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies including jQuery and Klaro for cookie consent management. Analytics are handled via Piwik/Matomo, indicating a preference for privacy-conscious tracking. The site is hosted on domaincontrol.com nameservers, suggesting a reliable hosting environment. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is strong with a comprehensive privacy policy and GDPR-aligned cookie consent. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements could include publishing explicit security policies, enhancing security headers, and providing direct contact information for incident response to further strengthen trust and compliance.

A

Arbeitgeberverband Gesamtmetall

gesamtmetall.de

51

Gesamtmetall is the leading employer association representing the metal and electrical industry in Germany, encompassing over 26,000 companies and nearly 3.9 million employees. The website serves as a comprehensive platform for industry news, policy updates, educational initiatives, and event information, targeting employers, policymakers, and industry stakeholders. Technically, the site is built on WordPress with modern plugins such as Gravity Forms and uses Matomo for privacy-conscious analytics. The site is well-structured, mobile-optimized, and accessible, reflecting a mature digital presence. Security-wise, the site enforces HTTPS and implements cookie consent but lacks visible security headers and explicit security or privacy policy documents, which are recommended for compliance and trust. Overall, the website is professional, trustworthy, and content-rich, with room for improvement in privacy documentation and security hardening.

D

Die Arbeitgeber

arbeitgeber.de

54

Die Arbeitgeber is the leading national employers' association in Germany, representing the interests of German businesses and employers. The website serves as an information and advocacy platform focusing on labor market policies, employment issues, and employer-related topics. It targets employers, policymakers, and stakeholders in the German economy. The organization positions itself as a key player in shaping economic and labor policies in Germany. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO Premium for search optimization, LayerSlider for rich content presentation, and Borlabs Cookie for GDPR-compliant cookie management. Hosting is provided by Versatel, a reputable German hosting provider. The site uses Matomo analytics for user tracking with consent mechanisms, reflecting a moderate level of digital maturity. From a security perspective, the site employs HTTPS and cookie consent mechanisms, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is partially addressed through cookie consent, but explicit privacy and terms of service pages were not found in the provided data. Overall, the website is professional, trustworthy, and well-branded, with good content quality and user experience. However, improvements in security policy transparency, incident response information, and explicit privacy documentation would enhance its security posture and compliance standing.

Kuratorium der Deutschen Wirtschaft für Berufsbildung e.V. (KWB) is a German non-profit organization focused on coordinating and representing the interests of the economy in vocational education. The website serves as an informational and organizational platform presenting their key services such as vocational education policy, coordination of training regulations, and public relations activities. The target audience includes economic stakeholders, vocational education experts, and member organizations. The site is professionally designed with consistent branding and clear navigation, supporting a medium-sized organizational profile within the education sector in Germany. Technically, the website is built on TYPO3 CMS with jQuery, employing compressed CSS and JavaScript assets for performance. It is mobile-optimized and accessible at a basic level. No advanced analytics or tracking technologies are detected, and the site uses HTTPS with basic SSL configuration. However, security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site demonstrates a moderate posture with HTTPS and cookie consent mechanisms in place but lacks advanced security headers and vulnerability disclosure information. No critical vulnerabilities or suspicious patterns were detected. WHOIS data aligns with the website's professional nature, showing consistent domain registration and hosting. Overall, the website is trustworthy, professional, and compliant with GDPR requirements, though improvements in security headers and transparency around security policies could enhance its posture. No adult or questionable content is present, making it safe for general audiences.

V

Virtual Minds GmbH

yieldlab.com

41

Virtual Minds GmbH is a reputable European adtech company specializing in programmatic advertising solutions for publishers, broadcasters, agencies, and advertisers. As a 100% subsidiary of ProSiebenSat.1 Media SE, it holds a strong market position with a modular full-stack offering including enterprise marketing platforms, DSPs, DMPs, SSPs, and media management tools. The company targets B2B clients in the digital advertising ecosystem, emphasizing premium technology made in Europe. The website reflects a professional and consistent brand image with good content quality and clear messaging.

B

Babiel GmbH

babiel.com

10

Babiel GmbH, a subsidiary of the CONET group, is a well-established German company specializing in digital communication and digital business experiences. With over 30 years of expertise, Babiel offers strategic consulting and implementation services focused on digital transformation, customer and citizen experience management, and digital touchpoints. Their integration within the CONET group expands their capabilities to include data intelligence, AI, cloud services, and software development, positioning them as a comprehensive digital solutions provider for enterprises and public institutions. Technically, the website is built on Drupal 11, leveraging modern web technologies and consent management tools such as Usercentrics. The site is well-optimized for mobile devices, features clear navigation, and integrates Google Analytics and Google Tag Manager for analytics and marketing purposes. The presence of a cookie consent banner and a detailed privacy policy indicates good GDPR compliance. From a security perspective, the site enforces HTTPS and uses consent management but lacks publicly visible security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which slightly impacts overall trust. Overall, Babiel GmbH presents a professional and trustworthy digital presence with strong business credibility and technical maturity. Addressing the WHOIS data gap and enhancing security transparency would further strengthen their security posture and trustworthiness.

H

Henkel

henkelna.com

10

Henkel North America operates as a major division of Henkel AG & Co. KGaA, a global leader in manufacturing consumer and industrial chemical products. The website reflects a mature enterprise with a strong brand legacy of nearly 150 years, offering products in hair care, laundry detergents, adhesives, and coatings. The company targets both consumer and industrial markets in North America, emphasizing sustainability and innovation. Technically, the website employs a modern tech stack with various JavaScript libraries and a CoreMedia CMS, delivering a responsive and accessible user experience. Security posture is strong with HTTPS and Content-Security-Policy headers, alongside cookie consent mechanisms ensuring GDPR compliance. However, the absence of WHOIS registration data introduces some uncertainty regarding domain legitimacy, though the website content and branding strongly support authenticity. Overall, the site is professional, secure, and compliant, suitable for enterprise-level operations.

R

Reddit, Inc.

redditmedia.com

56

Reddit, Inc. operates one of the world's largest social media and community platforms, providing a space for users to share content, engage in discussions, and participate in diverse communities. The platform's business model primarily revolves around advertising, premium memberships, and virtual awards, targeting a broad audience of internet users and content creators. Reddit holds a strong market position as a leading technology and media company founded in 2005, with a large and active user base. Technically, Reddit employs a modern technology stack including React, Node.js, and GraphQL, supported by Cloudflare for content delivery and security. The website demonstrates excellent performance, mobile optimization, and accessibility, reflecting a mature digital infrastructure. SEO practices and metadata are well implemented, enhancing discoverability and user engagement. From a security perspective, Reddit enforces HTTPS, implements robust security headers, and follows best practices to protect user data and platform integrity. No significant vulnerabilities were detected in the analyzed content. Privacy compliance is strong, with comprehensive privacy and cookie policies and mechanisms for user consent, aligning with GDPR requirements. However, direct security incident response contacts and vulnerability disclosure mechanisms are not publicly evident. Overall, Reddit presents a high level of trustworthiness and professionalism, with a secure and user-friendly platform. The absence of WHOIS data is likely due to privacy protection and does not detract from the site's legitimacy. Strategic recommendations include enhancing public security communication channels and publishing a security.txt file to facilitate vulnerability reporting.

P

PURE

pure.com

53

PURE is a small-scale business focused on offering personalized green juice products optimized for health-conscious consumers. The website serves primarily as a marketing landing page with a waitlist form for interested customers. The business model appears to be direct-to-consumer, leveraging personalization in the health and wellness beverage sector. The market position is niche, targeting individuals seeking customized health drinks. Technically, the website is built on the Webflow platform, utilizing modern web technologies including Google Tag Manager and Google reCAPTCHA for analytics and spam protection. The site is mobile optimized with moderate performance and basic accessibility features. However, there is a lack of comprehensive SEO and security headers which could be improved. From a security perspective, the site benefits from HTTPS and reCAPTCHA but lacks visible security headers and formal privacy or cookie policies. No contact information or incident response details are provided, which limits transparency and trust. The absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Overall, the website presents a professional front but has gaps in privacy compliance, contact transparency, and domain legitimacy. Strategic improvements in these areas would enhance trust and security posture.

D

digris Ltd

digris.uk

39

Digris Ltd is a specialized Anglo-Swiss network operator providing DAB+ broadcasting services primarily in the United Kingdom, Switzerland, and France. The company offers a comprehensive suite of services including service planning, encoding, multiplexing, transmission, and monitoring, targeting radio stations and broadcasters. Their market position is that of a niche player with a strong technical focus and membership in industry bodies such as WorldDAB. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the website employs modern web technologies including Vue.js, Google Analytics, and DigitalOcean hosting for media assets. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, but lacks some security headers and formal security policies. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but no cookie consent mechanism is present. The security posture is good but could be enhanced by implementing additional HTTP security headers, publishing incident response and vulnerability disclosure policies, and improving GDPR cookie consent mechanisms. No critical vulnerabilities or suspicious content were detected. The WHOIS data is unavailable due to domain registration issues with the 'www.digris.uk' domain, which appears to be a subdomain or alias rather than a registered domain, slightly reducing trust but not undermining the legitimacy of the business. Overall, the website and business present a trustworthy and professional front with moderate technical maturity and good security hygiene. Strategic improvements in privacy compliance and security transparency would further strengthen their position.

D

digris AG

digris.fr

41

Digris AG is a specialized company providing comprehensive services in the digital radio broadcasting sector, particularly focusing on DAB+ technology. They offer a full range of services including site studies, installations, supervision, and development of digital radio platforms. The company operates multiple local and national multiplexes primarily in France and Switzerland, positioning itself as a key regional player in digital radio infrastructure. Their website reflects a professional and consistent brand image with clear contact information and active social media presence. From a technical perspective, the website employs modern web technologies such as Vue.js and integrates analytics tools like Google Analytics and Google Tag Manager. Hosting appears to be on DigitalOcean, and the site is mobile-optimized with good user experience. However, there is room for improvement in SEO and accessibility features. Security-wise, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, indicating potential compliance and security posture gaps. The absence of WHOIS data limits the ability to fully verify domain legitimacy and registration details, which slightly reduces trustworthiness. Nonetheless, the professional presentation and detailed contact information support the legitimacy of the business. Overall, the site is safe, with no adult or questionable content detected, and serves a general audience interested in digital radio broadcasting solutions.

The website www.digris.net currently presents only a minimal placeholder page with the message 'Work in progress ... See you soon.' There is no meaningful business information, contact details, or content to assess. The domain appears unregistered or inactive based on WHOIS data, which returned 'No match' and no registrar or registrant information. This indicates the website is not operational or legitimate at this time. Technically, no modern technologies, scripts, or security features are detected. The site lacks HTTPS, security headers, privacy policies, or any compliance indicators. Overall, the digital maturity is extremely low, and the security posture is non-existent.

N

Nemzeti Média- és Hírközlési Hatóság (NMHH)

buvosvolgy.hu

11

Bűvösvölgy is an educational media literacy center operated by the Hungarian National Media and Infocommunications Authority (NMHH). It provides free, experience-based media literacy programs targeted at children aged 9-16, with three physical centers in Budapest, Debrecen, and Sopron. The website is professionally designed, accessible, and provides comprehensive information about their programs, registration, and contact details. Technically, the site uses modern JavaScript libraries and Google Analytics with IP anonymization, ensuring privacy compliance. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the site is trustworthy, well-maintained, and serves a clear educational mission.

N

Nemzeti Média- és Hírközlési Hatóság

onlineplatformok.hu

43

The website onlineplatformok.hu is the official digital services coordinator portal of the Hungarian National Media and Infocommunications Authority (NMHH). It serves as a comprehensive resource for regulatory information, research, and educational content related to online platforms and the Digital Services Act (DSA). The site targets a broad audience including the general public, researchers, policymakers, and digital platform users in Hungary. It provides authoritative content on digital rights, platform governance, and safe online practices. Technically, the website employs modern web standards with HTML5, CSS3, and JavaScript, including integration of Google Analytics with IP anonymization and Spotify embeds. The site is hosted by NMHH and demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS with a strong SSL configuration and implements GDPR-compliant cookie consent mechanisms. However, explicit security policies and incident response information are not published, and security headers are not explicitly detected. No vulnerabilities or suspicious elements were found, indicating a solid security posture appropriate for a government informational site. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It effectively fulfills its role as a government portal providing transparency and education about online platforms. Strategic recommendations include publishing detailed security policies, enhancing security headers, and considering a vulnerability disclosure policy to further strengthen trust and security posture.

P

Plasztikgyár

plasztikgyar.hu

44

Plasztikgyár.hu is a Hungarian-based manufacturing company specializing in the production of plastic cards, recycled plastic cards, card holders, and custom lanyards. Established since 2009, the company serves a broad B2B audience with over 10,000 business clients, offering personalized and premium-quality products. Their website reflects a professional and consistent brand image with a focus on quality and customer satisfaction. Technically, the site uses modern frameworks such as Yii and Bootstrap, integrates multiple analytics and marketing tools, and implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and CSRF protections, though some security headers could be improved. No critical vulnerabilities or suspicious indicators were found. Overall, the site is well-structured, user-friendly, and trustworthy.

A

Adathordozok.hu

adathordozok.hu

45

Adathordozok.hu is a Hungarian company specializing in professional printing and promotional product services, including CD/DVD duplication, custom USB drives, powerbanks, and branded audio products. Established in 2004, the company has a strong market presence with over 15 years of experience, serving multinational corporations, musicians, and SMEs. Their business model focuses on B2B and B2C online sales supported by a proprietary production facility and extensive inventory, enabling fast delivery and competitive pricing. The website reflects a mature digital presence with clear branding and customer trust signals such as testimonials and social media engagement. Technically, the site uses modern web technologies including jQuery, Bootstrap, and Google Analytics, with a custom or Yii-based CMS platform. The site is mobile-optimized and SEO-friendly, providing a good user experience.

C

Családbarát Magyarország Központ Nonprofit Közhasznú Kft.

csalad.hu

62

csalad.hu is an official Hungarian government-affiliated family support portal operated by Családbarát Magyarország Központ Nonprofit Közhasznú Kft., founded in 2019. The website provides comprehensive information on family support programs, benefits, and calculators tailored for Hungarian families. It serves as a centralized resource to help families understand and access various governmental support schemes. The portal is well-positioned as a trusted source within the government and non-profit sector in Hungary.

Szentiras.hu is a Hungarian non-profit website operated by Iron Illustration Kft., dedicated to providing online access to multiple Bible translations and daily scripture verses for the Hungarian-speaking Christian community. The site serves as a religious educational resource with a clear focus on scripture study and community engagement through features like a message board. The business model is informational and non-commercial, targeting a niche religious audience in Hungary. Technically, the website employs a modern tech stack including Bootstrap 5.2.3 and custom JavaScript, with a responsive design optimized for mobile devices. The site uses HTTPS with a valid SSL configuration and includes a cookie consent mechanism, reflecting a moderate level of digital maturity. However, no CMS or advanced analytics tools are detected, and some security headers are missing, indicating room for improvement in security hardening. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent with the website's claims, showing a recently registered domain without privacy protection, which supports legitimacy. Overall, Szentiras.hu presents a trustworthy, well-structured, and content-rich platform for its target audience. Strategic recommendations include enhancing security headers, publishing security policies, and considering vulnerability disclosure to improve trust and compliance further.

W

Wolters Kluwer Hungary Kft.

jogtar.hu

60

Wolters Kluwer Hungary Kft. operates the Jogtár platform, Hungary's leading legal database service providing comprehensive access to Hungarian and EU legal materials, commentaries, case law, and legal documents. The website serves primarily legal professionals and organizations requiring up-to-date legal information through a subscription-based model. The platform is well-branded and consistent with the parent company's identity, Wolters Kluwer.

kozadat.hu is a Hungarian government-operated public data search portal managed by Nemzeti Infokommunikációs Szolgáltató Zrt. The site provides access to various public data sets, legal drafts, government documents, and archives, serving citizens, researchers, and public sector stakeholders. The platform is part of the official Közadat program and links to multiple authoritative government resources, reinforcing its position as a trusted government information source. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and Modernizr for feature detection. It integrates Google Analytics for user tracking but lacks visible cookie consent mechanisms. The site appears moderately optimized for performance and mobile use, with basic accessibility features. The CMS or platform is not explicitly identified, suggesting a custom or government-developed solution. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in its HTML. However, no explicit security headers such as CSP or HSTS were detected in the provided content, indicating room for improvement. The absence of privacy and cookie policies and consent mechanisms also represents a compliance gap. No vulnerabilities or suspicious content were found, and the domain's WHOIS data confirms a long-standing, consistent registration aligned with the government entity. Overall, kozadat.hu is a credible and professional government portal with good content quality and business credibility. To enhance security posture and privacy compliance, it should implement security headers, publish clear privacy and cookie policies, and introduce user consent mechanisms for tracking technologies.

B

Bitmovin

bitmovin.com

70

Bitmovin is a technology company specializing in video streaming solutions, including video players, encoding services, analytics, and AI-powered video enhancements. Founded in 2013 and headquartered in Austria, Bitmovin serves a global B2B audience, enabling businesses to deliver high-quality live and on-demand video content across a wide range of devices. The company positions itself as a leader in scalable, reliable, and innovative video workflows, leveraging partnerships with major industry players such as Akamai and NVIDIA. The website reflects a mature digital presence with comprehensive content and clear business focus. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Tag Manager for analytics. Security posture is strong with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are not explicitly detected. Privacy compliance is robust, featuring a detailed privacy policy and cookie consent mechanism aligned with GDPR requirements. No critical security or privacy issues were identified, and the site maintains high professionalism and trustworthiness.

S

SPACEFOOT SAS

golf-and-co.nl

62

Golf and Co is a specialized e-commerce retailer focused on golf equipment and accessories, serving primarily the Dutch market with a broader European presence. The company operates under SPACEFOOT SAS, a French legal entity, with customer service and logistics based in France. Their website offers a wide range of golf products including clubs, balls, trolleys, shoes, and apparel from well-known brands. The business model is direct online retail with a focus on quality, competitive pricing, and customer service. The market position is that of a specialist retailer with a strong brand presence in the golf niche.

A

Arts Council England

artscouncil.org.uk

70

Arts Council England is the national development agency for creativity and culture in England, funded by the government and the National Lottery. The organization supports the arts, museums, and libraries by providing funding, research, and strategic guidance to foster cultural growth and accessibility. The website reflects a mature digital presence built on Drupal 10, incorporating modern JavaScript frameworks and consent management tools to ensure compliance and user experience. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response information are not publicly detailed. Overall, the site is professional, trustworthy, and well-optimized for accessibility and SEO, serving a broad audience including artists, cultural organizations, and the public.

The website panthermedia.com is currently inaccessible due to a security block imposed by the Wordfence plugin, which restricts access from certain areas for security reasons. The domain is well-established, registered since 1999 with GoDaddy.com, LLC, indicating a mature online presence. However, the current page content is limited to a security block message with no visible business or contact information, policies, or marketing content. The technical infrastructure includes WordPress CMS with Wordfence security plugin, hosted under GoDaddy's registrar services. Due to the block, a full assessment of the website's content quality, user experience, and compliance posture is not possible. The security posture is partially observable, showing active use of Wordfence but lacking DNSSEC and visible security headers. Overall, the site appears legitimate but currently inaccessible for detailed analysis.

V

Home

vhu.de

44

The website www.vhu.de is a German-language site built on the Contao Open Source CMS platform. It integrates modern consent management tools such as Usercentrics and analytics platforms including Matomo and Google Tag Manager, indicating a moderate level of digital maturity. However, the site lacks visible privacy policies, terms of service, and explicit contact information, which limits its transparency and compliance posture. The technical infrastructure appears standard with no detected WAF or blocking mechanisms, and the site is accessible without security challenges. Security practices are basic, with no security headers detected and no vulnerability disclosure mechanisms in place. Overall, the site presents a moderate risk profile primarily due to missing compliance documentation and limited business information.

B

Bundesarbeitgeberverband Chemie

bavc.de

52

The Bundesarbeitgeberverband Chemie (BAVC) is a leading German employer association representing the chemical, pharmaceutical, rubber, and plastics processing industries. It advocates for tariff and social policy interests of its 10 regional member associations comprising 1,700 companies and 585,000 employees. The website serves as an information hub for members, policymakers, and the public, providing news, publications, and service information. The site is professionally designed, well-structured, and optimized for mobile devices, reflecting a mature digital presence. Technically, the website is built on Joomla CMS with modern JavaScript libraries such as Awesomplete for autocomplete, Tiny Slider for carousels, and Kick Consent Manager for cookie compliance. It integrates Google Analytics and Google Tag Manager for analytics and marketing. The site uses HTTPS with good SSL configuration and implements cookie consent mechanisms aligned with GDPR requirements. From a security perspective, the site demonstrates good practices including HTTPS enforcement, cookie consent management, and CSRF token usage in forms. However, explicit security headers are not detected, and no public security policy or incident response contacts are provided. No vulnerabilities or suspicious external links were found. Privacy compliance is strong with a comprehensive privacy policy and cookie management. Overall, the website is trustworthy, professional, and compliant with privacy regulations. It effectively supports the organization's business goals and stakeholder engagement. Strategic improvements could include adding security headers, publishing a vulnerability disclosure policy, and enhancing accessibility features.

The website petits-trains.com appears to be related to a business or service involving small trains, likely in a French context given the language and domain. However, the site content is minimal and lacks detailed business descriptions, contact information, or trust indicators. The technical infrastructure is based on WordPress with the Divi theme, indicating a standard CMS setup but with basic optimization and limited advanced features. Security posture is weak due to the absence of visible HTTPS/SSL details, security headers, and privacy policies. The WHOIS data is unavailable or indicates the domain may not be registered, which raises significant legitimacy concerns. Overall, the site presents a low trust profile and requires substantial improvements in security, compliance, and business transparency to be considered reliable.

F

FEDESFI

fedesfi.com

52

FEDESFI is a professional federation representing companies involved in the secure transport of cash and valuables in France. Established in 2003, it serves as the main organization advocating for the interests of this sector, promoting security, dialogue with authorities, and professional standards. The website reflects a mature organization with a clear focus on its industry and members. Technically, the site is built on WordPress using the Divi theme and several plugins, providing a modern and responsive user experience. Security posture is adequate with HTTPS and domain protections, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

The Chambre Nationale des Services d’Ambulances (CNSA) operates as a professional association representing ambulance services in France, providing legal, HR, training, and advocacy support to its members. The website is well-structured, content-rich, and targets ambulance professionals and related stakeholders. Technically, the site is built on WordPress with common plugins and uses HTTPS, but lacks some advanced security headers and explicit privacy policies. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or data unavailability, which slightly impacts trustworthiness. Overall, the site demonstrates a moderate to good digital maturity with room for security and compliance improvements.

S

Senic

senic.com

67

Senic is a small technology-focused e-commerce company specializing in smart switches compatible with Philips Hue, Sonos, and HomeKit ecosystems. The company targets consumers and businesses interested in smart home automation, offering niche products that enhance smart home control. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations such as Weglot for multilingual support and various marketing and analytics tools. The technical infrastructure is robust, with fast performance, mobile optimization, and good accessibility. Security posture is solid with HTTPS enforced and standard security headers likely in place, though explicit security policies and incident response information are absent. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. However, the absence of WHOIS registration data reduces domain trustworthiness and warrants further verification. Overall, the website presents a professional and trustworthy front for its business, with room for improvement in transparency around security and domain registration.

C

Captury

thecaptury.com

56

Captury is a technology company specializing in advanced markerless motion capture solutions that enable precise tracking of full-body, finger, and facial movements for multiple actors simultaneously. Their product suite includes real-time processing software, post-processing tools, and specialized hardware solutions targeting industries such as 3D game development, VFX, virtual reality, live entertainment, in-game player tracking, and life sciences research. The company has a solid market position with notable clients including Airbus, Audi, Daimler, Rockstar Games, and Scanline VFX. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as jQuery, CSS3 Animate It, and Slick Carousel for UI enhancements. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Hosting appears stable with SSL properly configured, ensuring secure HTTPS connections. From a security perspective, the site employs HTTPS but lacks visible security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but no cookie consent mechanism was found. Contact information is clearly presented, enhancing business credibility. Overall, Captury's website reflects a mature, professional technology company with strong business credibility and a good security posture. Strategic improvements in security headers, cookie consent, and incident response transparency would further enhance trust and compliance.

C

Centigrade GmbH

centigrade.de

48

Centigrade GmbH is a medium-sized German technology company specializing in human-centered IT solutions, focusing on digital product development, UX design, software engineering, and AI integration. The company serves business clients seeking to enhance user experience and digital transformation success. Their website reflects a mature digital presence with comprehensive service descriptions, client references, and industry awards, positioning them as a reputable player in the UX and software engineering consultancy market. Technically, the website employs a modern tech stack including jQuery, lazy loading, Google Analytics with privacy features, and a consent management platform (Usercentrics). The site is mobile-optimized, accessible, and SEO-friendly, though it appears to use a custom or proprietary CMS. Performance is moderate, with good user experience and navigation clarity. From a security perspective, the site enforces HTTPS, uses consent management for GDPR compliance, and implements form validation with required privacy consent. However, it lacks explicit security policies, incident response information, and security.txt files. No critical vulnerabilities or exposed sensitive data were detected, indicating a solid security posture but with room for improvement in transparency and security headers. Overall, the website is professional, trustworthy, and compliant with privacy regulations. The risk level is low, but strategic enhancements in security documentation and incident response readiness are recommended to further strengthen trust and compliance.

K

Korso-op.Kollektiv

korso-op.com

58

Korso-op.Kollektiv is a small cultural collective based in Germany focused on artistic and theatrical projects. Their website showcases various performances and events, emphasizing cooperative and multimedia artistic expressions. The technical infrastructure is built on a modern WordPress CMS with popular plugins such as Elementor and Modern Events Calendar, indicating a moderate level of digital maturity. The website is well-designed, mobile-optimized, and includes privacy and cookie compliance mechanisms, reflecting good adherence to GDPR requirements. Security posture is adequate with HTTPS enabled, but lacks some advanced security headers and a vulnerability disclosure policy. The absence of WHOIS registration data raises concerns about domain legitimacy, which should be further investigated. Overall, the site is professional and trustworthy from a content and user experience perspective but would benefit from enhanced security practices and clearer business contact information.

F

FACT

fact.co.uk

66

FACT Liverpool is a prominent UK-based non-profit organization dedicated to the support and exhibition of art, film, and new media. It operates a multi-functional venue featuring galleries, a cinema, a café, and event spaces, positioning itself as a leading cultural institution in Liverpool and the UK. The organization offers a diverse range of services including exhibitions, film screenings, artist residencies, educational programs, and venue hire, targeting a broad audience interested in contemporary art and digital culture. Technically, the website demonstrates a mature digital infrastructure utilizing modern analytics tools such as Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Inspectlet, alongside asynchronous script loading for performance optimization. The site is built on a CMS platform likely powered by SEOmatic and Craft CMS, with good mobile optimization, accessibility, and SEO practices. The presence of cookie consent management and comprehensive privacy policies indicates a strong commitment to privacy compliance. From a security perspective, the site enforces HTTPS and employs standard best practices, though it lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the analysis. The WHOIS data is unavailable due to domain naming rules errors, but other trust indicators such as charity registration numbers and consistent branding support the legitimacy of the domain. Overall, FACT Liverpool presents a professional, secure, and privacy-conscious online presence aligned with its cultural mission. Strategic improvements in security headers and incident response transparency would further enhance its security posture and trustworthiness.

The CISPA Helmholtz Center for Information Security is a prominent German national research institution specializing in cybersecurity, privacy, and trustworthy artificial intelligence. It operates as a Big Science institution within the Helmholtz Association and is recognized as a world-leading center in its field. The website showcases extensive research achievements, faculty expertise, and collaborations, particularly with the Technical University of Munich. The institution focuses on foundational and applied research, technology transfer, and knowledge dissemination to benefit society and industry.

S

SPACEFOOT SAS

golf-and-co.de

60

Golf and co is a specialized e-commerce retailer focused on golf equipment and accessories, serving primarily the German and broader European market. The company operates under the legal entity SPACEFOOT SAS based in France, offering a wide range of products including golf clubs, bags, balls, shoes, and clothing from well-known brands. The website demonstrates a solid market position as a specialist retailer with a comprehensive product catalog and customer service infrastructure. Technically, the site is built on a Magento-based platform (OpenMage), integrating modern marketing and analytics tools such as Google Analytics, Actito, and GDPR-compliant consent management. Security measures include HTTPS enforcement and invisible reCAPTCHA on forms, although some security headers could be improved. Overall, the site is professional, user-friendly, and trustworthy, with clear contact information and secure payment options. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility features.

S

SPACEFOOT SAS

golf-and-co.se

57

Golf and co is a specialized e-commerce retailer focused on golf equipment and accessories, targeting golf enthusiasts primarily in Sweden and Europe. The company operates under the legal entity SPACEFOOT SAS, with customer service based in France. The website offers a broad range of products including clubs, balls, bags, shoes, and training equipment from well-known brands such as Taylormade, Callaway, and Srixon. The business model centers on online retail with secure payment options and a customer-friendly return policy. The market position is that of a specialist retailer with a consistent brand presence and a good reputation for service and product variety. Technically, the website is built on the Magento Open Source platform (OpenMage fork), utilizing modern web technologies including Google Analytics for tracking, Google reCAPTCHA for form security, and Actito for marketing automation. The site is mobile-optimized with good navigation and SEO practices. Performance is moderate with room for improvement in accessibility features. Hosting details are not explicit but the domain registrar is Gandi SAS. From a security perspective, the site enforces HTTPS and uses invisible reCAPTCHA on forms, indicating a good baseline security posture. However, DNSSEC is not enabled and advanced security headers are missing, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanisms, and GDPR adherence. Overall, the website presents a professional and trustworthy online retail experience with solid business credibility and technical implementation. The main risk lies in minor security enhancements and verifying the unusual WHOIS creation date anomaly. Strategic recommendations include enabling DNSSEC, adding security headers, and publishing a vulnerability disclosure policy to further strengthen trust and security posture.

T

Tiroler Bildungsforum

tiroler-bildungsforum.at

48

Tiroler Bildungsforum is a well-established non-profit organization focused on providing affordable educational and cultural services to communities in Tirol, Austria. It supports over 500 volunteers organizing approximately 1,800 events annually, serving around 35,000 participants across 220 municipalities. The organization offers a broad range of initiatives including adult education, archival services, environmental programs, and community workshops. Their market position is strong regionally as a leader in adult education and cultural engagement. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience of local communities and educational volunteers. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and jQuery, incorporating plugins for event management, contact forms, and PDF flipbooks. The site is mobile-optimized and demonstrates good SEO practices with structured data and meta tags. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site uses HTTPS with valid SSL certificates and integrates reCAPTCHA for form protection. However, it lacks visible security headers and does not publish a security policy or incident response contacts. GDPR compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the security posture is adequate but could be enhanced with additional policies and technical controls. The overall risk is low given the organization's non-profit nature and transparent operations. Strategic recommendations include implementing cookie consent, publishing security and incident response policies, and enhancing security headers and accessibility. These improvements will strengthen compliance, user trust, and resilience against potential threats.

ASVÖ Tirol operates a dedicated online submission portal for associations registered in Tirol, Austria, facilitating official data reporting primarily via ZVR number verification. The website is a focused service platform with minimal content but clear purpose, targeting regional non-profit associations. The technical infrastructure relies on a classic web stack with Bootstrap and jQuery, though some libraries are outdated, indicating moderate digital maturity. Security posture is adequate with HTTPS enforced and form validation implemented, but lacks modern security headers and cookie consent mechanisms, which are important for GDPR compliance. Overall, the site is trustworthy and legitimate but could benefit from enhanced security and privacy features to improve compliance and user trust.

H

Haufe Group

rudolf.ai

60

The website rudolf.ai represents an AI initiative by the Haufe Group, a well-established German company specializing in legal and business software solutions. The platform focuses on integrating generative AI technologies to enhance user experience and automate routine tasks for professionals in HR, tax, and sustainability sectors. The site demonstrates a mature digital presence with modern technologies such as Webflow CMS, jQuery, and Google Tag Manager, combined with strong privacy and ethical guidelines around AI use. Security posture is solid with HTTPS, bot protection via FriendlyCaptcha, and exclusion of external crawlers, although some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, reflecting a reputable business entity.

H

Haufe-Lexware GmbH & Co. KG

advolux.de

68

Haufe-Lexware GmbH & Co. KG operates the Advolux website, offering specialized legal practice management software tailored for law firms in Germany. The company is a subsidiary of Haufe Group SE, a well-established entity headquartered in Freiburg im Breisgau. Advolux provides a comprehensive suite of digital tools including document management, deadline tracking, and integration with the German electronic lawyer mailbox (beA), supporting both cloud and on-premises deployments. The website demonstrates a strong market position with professional branding, extensive feature descriptions, and customer testimonials, targeting legal professionals seeking efficient digital solutions.

S

Snigel

snigel.com

61

Snigel is an established advertising technology company founded in 2003, specializing in native video, header bidding, and ad optimization to help publishers increase ad revenue. In 2025, Snigel merged with Publisher Collective, and its technology now powers the combined entity, enhancing market reach and service offerings. The website reflects this transition with updated branding and links to Publisher Collective resources. Technically, the site is built on WordPress with modern SEO and performance optimizations, including Google Tag Manager and Algolia search integration. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and no explicit security policies are published. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, indicating GDPR awareness. Overall, the site is professional, trustworthy, and well-positioned in the advertising technology sector.

S

SPACEFOOT SAS

golf-and-co.es

60

Golf and Co is a specialized e-commerce retailer focused on golf equipment and accessories, serving primarily the Spanish and broader European market. The company operates a professional website with a clear product catalog, multiple well-known golf brands, and customer service support based in France. Their business model centers on online sales with secure payment options and a customer-friendly return policy. The website demonstrates consistent branding and good content quality, targeting golf enthusiasts and players. Technically, the site is built on the Magento (OpenMage) platform, utilizing modern web technologies including Google Analytics, Google reCAPTCHA, and GDPR compliance tools such as AppConsent. The site is mobile-optimized and provides a good user experience with clear navigation and product categorization. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the website enforces HTTPS and uses reCAPTCHA to protect forms. While some security headers are not explicitly detected, no critical vulnerabilities or exposed sensitive data were found. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. However, WHOIS data is unavailable due to registry restrictions, limiting domain ownership transparency. Overall, Golf and Co presents a trustworthy and professional online retail presence with a solid technical foundation and good security posture. The main risk lies in the lack of WHOIS transparency, which is common for .es domains but should be monitored. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility compliance.

S

SPACEFOOT SAS

golf-and-co.it

63

Golf and co is a specialized e-commerce retailer focused on golf equipment and accessories, targeting primarily the Italian market with a multi-country European presence. The company operates under SPACEFOOT SAS, a French legal entity, providing customer service from France. The website offers a comprehensive catalog of golf products including clubs, balls, bags, carts, shoes, clothing, gloves, and accessories from well-known brands. The business model is retail e-commerce with secure payment options and customer-friendly return policies. Technically, the website is built on a Magento (OpenMage) platform, leveraging modern web technologies and marketing tools such as Google Analytics, Google Ads, and Actito, with a GDPR-compliant consent management platform in place. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, though security headers could be improved. WHOIS data shows anomalies with a future creation date, which is suspicious but likely a data error. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

T

Training-Fit : Fitness- und Muskelaufbaugeräte

training-fit.ch

66

Training-Fit.ch is an e-commerce retailer specializing in fitness, muscle building, crossfit, yoga, and martial arts equipment and apparel. The website offers a broad catalog of products from well-known brands, targeting fitness enthusiasts primarily in Switzerland and neighboring regions. The business model focuses on online sales with fast shipping options and secure payment methods. The site demonstrates consistent branding and a professional design, supporting a medium-sized retail operation. Technically, the website is built on the Magento OpenMage platform, utilizing modern web technologies including Google Analytics, Google Ads, and reCAPTCHA for security and marketing. The site is mobile-optimized and features good SEO practices, although accessibility could be improved. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses bot protection mechanisms. However, explicit security headers are not clearly present, and there is no published security policy or incident response contact. Privacy compliance is partially addressed with a cookie consent mechanism, but no clear privacy policy or terms of service pages were found. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a moderate risk profile with good business credibility but some gaps in privacy and security transparency. Strategic improvements in policy publication, security headers, and contact information would enhance trust and compliance.

S

Smash-Expert

smash-expert.ch

67

Smash-Expert is a specialized e-commerce retailer focused on racket sports equipment including tennis, padel, badminton, table tennis, and squash. The website offers a broad catalog of products from multiple well-known brands, targeting sports enthusiasts and athletes primarily in Switzerland. The business model is retail-oriented with emphasis on fast delivery and secure payment options. Technically, the website is built on the Magento (OpenMage) platform, leveraging modern marketing and analytics tools such as Google Analytics, Google Ads, and Actito marketing automation, with consent management implemented via the IAB TCF framework. Security posture is strong with HTTPS enforced and use of Google reCAPTCHA, though some security headers could be improved. Privacy compliance is basic, lacking explicit privacy and cookie policies in the visible content. Overall, the site is professional, well-structured, and trustworthy, but could enhance transparency and compliance documentation.

P

Pet & Garden – Ihre Online-Zoohandlung und Ihr Gartencenter

pet-and-garden.ch

67

Pet & Garden is an established Swiss online retailer specializing in pet supplies, garden products, and agricultural equipment. The website offers a broad catalog of products with a focus on fast shipping and customer service, targeting pet owners, gardeners, and farmers primarily in Switzerland and German-speaking regions. The business model centers on e-commerce retail with a medium-sized market presence and a consistent brand image. Technically, the website is built on a Magento-based platform (OpenMage variant) and integrates modern marketing and analytics tools such as Google Analytics, Google Tag Manager, Google Ads, and Actito for marketing automation. The site is mobile-optimized and provides a good user experience with clear navigation and product categorization. Security-wise, the site enforces HTTPS, uses Google reCAPTCHA for bot protection, and implements a consent management platform for GDPR compliance. However, explicit privacy and cookie policies are missing, and no direct contact information or security incident response details are provided, which are areas for improvement. Overall, the website is secure, professional, and trustworthy, but enhancing transparency and compliance documentation would strengthen its security posture and user trust.

P

Pecheur-Store

pecheur-store.ch

66

Pecheur-Store is a German-language e-commerce retailer specializing in fishing equipment, including rods, reels, baits, and accessories for various fishing types such as carp, predator, spinning, and sea fishing. The website targets fishing enthusiasts primarily in Switzerland and German-speaking regions, offering a broad product catalog with fast shipping and secure payment options. The business operates as a small retail entity with a focused niche market position. Technically, the website is built on the Magento (OpenMage) platform, utilizing modern web technologies including Google Tag Manager, Google Analytics, Google Ads conversion tracking, and reCAPTCHA v3 for bot protection. The site demonstrates good mobile optimization and SEO practices, although some accessibility features are basic. Performance is moderate with a professional design and clear navigation. From a security perspective, the site enforces HTTPS and employs reCAPTCHA and a consent management platform for GDPR compliance. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not detected, and no privacy policy or terms of service are present on the homepage, which are areas for improvement. WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, the website presents a moderate risk profile with good business credibility but requires enhancements in privacy disclosures and security header implementation to improve compliance and security posture.

S

SPACEFOOT SAS

on-fight.ch

67

On-Fight.ch is a professional e-commerce platform specializing in martial arts and fitness equipment, serving primarily the European market with a focus on German and French-speaking customers. The company SPACEFOOT SAS operates the site, providing a wide range of products including gloves, protective gear, clothing, and training equipment for various martial arts disciplines. The website demonstrates a solid market position in the niche retail sector with fast shipping and customer service based in France. Technically, the site is built on Magento (OpenMage), leveraging modern marketing and analytics tools such as Google Analytics, Google Tag Manager, and Actito marketing automation. Security measures include HTTPS, invisible reCAPTCHA, and a consent management platform, reflecting good privacy compliance and user data protection. Overall, the site is well-structured, professionally designed, and trustworthy, with no indications of malicious activity or content safety concerns.

M

Made In Paradis

madeinparadis.ch

67

Made In Paradis is a Swiss-based e-commerce retailer specializing in women's fashion, including clothing, shoes, sportswear, accessories, and beauty products. The website offers a broad catalog with over 300 brands, targeting female consumers interested in fashion and sportswear. The business operates primarily online with a medium-sized market presence in Switzerland and neighboring European countries. Technically, the website is built on Magento (OpenMage), leveraging modern marketing and analytics tools such as Google Analytics, Google Ads, and Actito. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS, reCAPTCHA, and secure payment methods, though some security headers and policies could be improved. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the domain registration is consistent with the business claims, and no suspicious patterns were detected. The site maintains active social media channels and partners with several related retail domains.