Security Directory

R

Raiffeisen banka

raiffeisen.sk

50

Raiffeisen banka is a well-established Slovak financial institution with over 130 years of tradition, operating as a branch of Tatra banka. The website presents a professional and customer-centric banking service offering personal accounts, loans, savings, and pension products. The digital infrastructure leverages modern web technologies including jQuery, Bootstrap, and Google Tag Manager, ensuring a responsive and user-friendly experience. Security posture is strong with HTTPS enforcement, CSRF protection, and privacy compliance, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site reflects a mature digital presence aligned with industry standards and regulatory requirements.

T

The HISTORY Channel

history.com

56

The HISTORY Channel website (www.history.de) serves as the German-language digital presence for a pay-TV channel specializing in history documentaries and related content. It offers TV programming schedules, streaming options via HISTORY Play, educational materials, and a blog. The site targets a general audience interested in history and documentary content, positioning itself as a reputable media provider in the German market. The business model revolves around pay-TV subscriptions and digital streaming partnerships, notably with Amazon Prime Video Channels. The website is professionally designed, with consistent branding and comprehensive content that supports its market position.

B

BrAIn

ozbrain.sk

45

BrAIn is a Slovak non-profit organization dedicated to supporting the development of young talents in artificial intelligence and intelligent technologies. Founded in 2023 by researchers from the Kempelen Institute of Intelligent Technologies, it aims to prepare gifted students for professional careers in technology and innovation. The organization facilitates internships, educational courses, and networking opportunities with experts and companies, funded partly through 2% tax donations and other contributions. The website reflects a well-structured and professional digital presence with detailed profiles of supported talents and supporters, emphasizing transparency and community engagement. Technically, the website is built on WordPress with modern JavaScript libraries like jQuery and optimized using Autoptimize. It is hosted on a Slovak hosting provider with DNSSEC enabled and uses HTTPS, ensuring secure communication. The site is mobile-optimized and SEO-friendly but lacks some advanced security headers and privacy compliance features such as privacy and cookie policies. From a security perspective, the site benefits from HTTPS and DNSSEC but misses critical security headers and formal privacy compliance mechanisms. No incident response or vulnerability disclosure information is provided. The WHOIS data is consistent with the organization's claims, showing a recently registered domain appropriate for a new non-profit. No suspicious patterns or privacy protection are used, enhancing trustworthiness. Overall, BrAIn's website demonstrates a strong business credibility and content quality with moderate technical implementation and security posture. The main gaps lie in privacy compliance and security best practices, which should be addressed to improve trust and regulatory adherence.

B

Berufsverband der Kinder- und Jugendärzt*innen e.V.

kinderaerzte-im-netz.de

57

Kinderaerzte-im-Netz.de is a comprehensive German healthcare information platform operated by the Berufsverband der Kinder- und Jugendärzt*innen e.V. (BVKJ), focusing on pediatric and adolescent health. The site offers extensive resources including disease information, vaccination schedules, developmental milestones, and preventive care tips, targeting parents, children, and healthcare professionals. It also provides a doctor search service and a dedicated mobile app for patient communication. The platform holds a strong market position as a trusted source in pediatric healthcare in Germany. Technically, the website is built on TYPO3 CMS and employs modern web technologies such as jQuery, FlexSlider, and FontAwesome. It uses Matomo analytics configured to disable cookies, reflecting a privacy-conscious approach. The site is mobile-optimized with good navigation and content structure, although some accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks some security headers and does not publicly disclose a security policy or incident response contacts. No cookie consent mechanism is present, which is a minor compliance gap. No vulnerabilities or suspicious patterns were identified. Overall, the security posture is solid but could be improved with additional headers and transparency. The domain registration data aligns well with the website's purpose and business entity, indicating legitimacy. External links point to reputable partner and related domains. No adult or inappropriate content is present, making the site safe for general audiences. Strategic recommendations include implementing cookie consent, publishing security policies, and enhancing security headers to strengthen compliance and trust.

B

BVKJ-Service GmbH

bvkj-service-gmbh.de

55

BVKJ-Service GmbH operates as a specialized service provider in the pediatric healthcare sector in Germany, offering selective contracts, care projects, digital services, seminars, cooperations, and an online shop. The company targets pediatric and adolescent medical practices as well as parents, positioning itself as a niche partner within this healthcare segment. The website is built on TYPO3 CMS and uses modern JavaScript libraries such as jQuery and Modernizr, indicating a moderate level of digital maturity. The site is mobile-optimized and provides clear navigation and professional design, though some accessibility and SEO features are basic. From a security perspective, the website enforces HTTPS and uses secure form submissions but lacks important security headers and explicit privacy compliance mechanisms such as cookie consent banners. No incident response or vulnerability disclosure policies are published, and no direct contact emails or phone numbers are visible, which may impact user trust and compliance with GDPR requirements. The WHOIS data shows a standard domain setup with no privacy protection, consistent with the business purpose, but lacks detailed registrant information. Overall, the website is functional and professional but could improve its privacy compliance and security posture. The absence of cookie consent and detailed privacy indicators, along with missing security headers, represent areas for enhancement. The business credibility is moderate, supported by clear service offerings and partner links, but contact transparency could be improved.

Protetika Plzeň is a specialized healthcare provider focused on orthopedic prosthetics and orthotics with a long-standing tradition dating back to the first world war. The company offers a range of services including the production of prostheses, orthoses, and orthopedic insoles, with a particular emphasis on pediatric orthoses. Their market position is that of a regional specialist serving western Czech Republic, supported by partnerships with notable institutions such as FN Plzeň and Cortex. The website reflects a professional business model targeting patients with physical disabilities and healthcare providers in the region. Technically, the website employs a modern but basic technology stack including jQuery, Google Maps API, and Google Analytics, hosted on WEDOS servers. While the site is functional and moderately optimized for performance and mobile use, it lacks advanced accessibility and SEO features. Security posture is adequate with HTTPS and reCAPTCHA implemented, but the absence of security headers and formal security policies indicates room for improvement. Privacy compliance is weak due to missing privacy and cookie policies, which poses a compliance risk. Overall, the website is trustworthy and safe for general audiences but would benefit from enhanced privacy and security measures.

The Landesarbeitsgemeinschaft Jazz in Thüringen e. V. is a regional non-profit organization dedicated to promoting jazz music within the Thuringia region of Germany. The website serves as a cultural hub, providing information and networking opportunities for jazz enthusiasts and local jazz clubs. It maintains partnerships with several regional jazz clubs, as evidenced by multiple external links. The site is built on the Contao CMS platform and utilizes common JavaScript libraries such as jQuery and Colorbox, indicating a moderate level of technical maturity. The website is accessible, mobile-optimized, and presents a consistent branding aligned with its cultural mission. However, it lacks advanced privacy and security features such as cookie consent mechanisms and security headers, which are important for compliance and protection.

T

Technologické centrum AV ČR

h2020.cz

44

The website www.h2020.cz serves as the official Czech national portal for the EU Horizon 2020 research and innovation framework program. Operated by Technologické centrum AV ČR, it provides comprehensive information, news, event calendars, and documentation related to Horizon 2020. The portal targets researchers, innovators, industry stakeholders, and public institutions interested in EU research funding opportunities. It positions itself as a trusted government-affiliated resource with consistent branding and clear navigation. Technically, the site uses a combination of jQuery, Bootstrap 3.3.7, jQuery UI, and a custom CMS named FoxFrame. It integrates Google Tag Manager and Google Analytics for tracking. The site is mobile optimized and performs moderately well, though accessibility features are basic. The HTML structure and meta tags support good SEO practices. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers such as Content-Security-Policy and X-Frame-Options, which could improve protection. There is no visible privacy or cookie policy, which is a compliance gap especially under GDPR. No WHOIS data is available for the domain, which slightly reduces trust but the content and external links strongly indicate legitimacy. Overall, the site is a professional and trustworthy government information portal with good content quality and technical implementation. To enhance security and compliance, it should implement security headers, publish privacy and cookie policies, and provide clear contact information for security and privacy concerns.

Parzival-Jugendhilfe is a small, non-profit educational and youth support organization based in Karlsruhe, Germany. It operates as part of the Parzival-Zentrum Karlsruhe and offers integrative educational services based on Waldorf pedagogy, targeting male youths aged 12 to 18. The website reflects a professional and consistent brand image with clear navigation and relevant content focused on its educational mission. Technically, the site is built on WordPress with modern SEO practices via Yoast SEO and uses standard web technologies such as jQuery. Hosting is provided by kasserver.com, as indicated by the nameservers. Security posture is adequate with HTTPS enforced and some anti-spam measures, but lacks advanced security headers and explicit incident response or security policies. Privacy compliance is basic with a privacy and cookie policy present but no active cookie consent mechanism. Overall, the website is trustworthy and well-positioned within its regional educational sector.

A

Akabo Media

akabomedia.co.uk

45

Akabo Media is a UK-based small business specializing in publishing and event organization focused on logistics, supply chain, and intelligent transportation systems. The company provides decision makers in these sectors with informed intelligence, analysis, and industry events to maintain competitive advantage. The website is professionally designed using WordPress with Elementor and Yoast SEO, indicating a moderate level of digital maturity. The technical infrastructure includes modern web technologies and analytics tools, supporting good performance and SEO optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal policies. The absence of privacy and cookie policies, as well as contact information, represents compliance and trust gaps. WHOIS data is unavailable due to domain registration errors, which impacts domain legitimacy assessment. Overall, the website is functional and business-focused but would benefit from enhanced compliance and security transparency.

Primatour s.r.o. is a Slovak travel agency based in Trnava, offering a wide range of holiday packages including last minute deals, exotic vacations, family and adult-only hotels, and cruises. The company emphasizes 20 years of experience and positions itself as a trusted provider in the Slovak travel market. Their website is well-structured, professionally designed, and targets Slovak-speaking travelers seeking vacation options. The business model revolves around travel package sales and customer service with a strong digital presence including social media and newsletter marketing. Technically, the website leverages modern web technologies such as jQuery, Bootstrap, and Slick Slider, integrated with a specialized travel agency system (CeSYS). It uses CDN-hosted assets and includes marketing and analytics tools like Google Tag Manager, Facebook Pixel, and Mailchimp. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms compliant with GDPR. However, explicit security headers and incident response policies are not evident. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the business claims, supporting legitimacy and trustworthiness. Overall, Primatour's website demonstrates a solid digital maturity level with good privacy compliance and business credibility. Strategic improvements could focus on enhancing security headers, incident response transparency, and accessibility features to further strengthen their security posture and user trust.

B

brand MARINE CONSULTANTS GmbH

brand-marine.com

51

brand MARINE CONSULTANTS GmbH is a specialized marine consultancy founded in 2014, offering a broad range of services including salvage operations, casualty management, surveys, and expert witness services. The company targets shipowners, law firms, insurance companies, and offshore contractors globally. The website is professionally designed, mobile optimized, and uses modern web technologies including Contao CMS and various JavaScript libraries. Privacy and cookie policies are implemented with GDPR compliance. However, the WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy. No direct contact emails or phone numbers are present on the services page, which could impact user trust. Overall, the security posture is moderate with room for improvement in security headers and incident response transparency.

D

Datatilsynet

datatilsynet.no

74

Datatilsynet is the Norwegian Data Protection Authority, serving as both a supervisory and ombudsman body responsible for ensuring compliance with privacy regulations and protecting individuals from misuse of personal data. The website provides comprehensive information on privacy rights, obligations for businesses, and regulatory frameworks, targeting Norwegian citizens, organizations, and privacy professionals. It holds a strong market position as a national government agency with authoritative content and services. Technically, the website employs a modern tech stack including Vue.js and jQuery, is built on the EPiServer CMS platform, and demonstrates good mobile optimization and accessibility. The site uses HTTPS and implements a cookie consent mechanism aligned with GDPR requirements, reflecting a mature digital infrastructure suitable for a government entity. From a security perspective, the site benefits from HTTPS and secure cookie handling but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is consistent with Norwegian domain registry policies and does not detract from the site's legitimacy. Overall, Datatilsynet's website is professional, trustworthy, and compliant with privacy regulations, offering valuable resources and guidance on data protection. Strategic improvements could include enhancing security headers, publishing incident response information, and adding vulnerability disclosure mechanisms to further strengthen security posture.

V

Verein Stiftungen für Bildung e.V.

netzwerk-stiftungen-bildung.de

58

Netzwerk Stiftungen und Bildung is a German non-profit organization that facilitates collaboration and knowledge sharing among educational foundations and actors. The website serves as a platform offering a directory of members (Netties), news, events, and educational resources. It targets foundations, educational institutions, and stakeholders interested in local educational development. The organization appears well-established with a medium-sized network and a professional online presence. Technically, the website is built on Drupal 10, leveraging modern JavaScript libraries such as jQuery UI and Klaro for cookie consent management. The site is mobile-optimized, accessible, and implements good SEO practices. Google Analytics is used for visitor statistics with user consent. The site uses HTTPS and shows good security hygiene, although some security headers could be improved. From a security perspective, the site enforces HTTPS and uses a consent manager for privacy compliance. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not present, which could be enhanced to improve trust and compliance. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It provides clear contact information and a comprehensive cookie consent mechanism. The domain WHOIS data is limited but does not raise immediate concerns. Strategic improvements in security headers and incident response transparency are recommended to further strengthen the security posture.

Technické služby Lanškroun, s.r.o. is a municipal service provider based in the Czech Republic, offering a range of public services including waste management, maintenance of green areas, public lighting, transport and construction works, sports facility management, and cemetery services. The company primarily serves the town of Lanškroun and its residents, positioning itself as a local essential service provider. The website content is well-structured and relevant to its audience, with clear navigation and consistent branding. However, the absence of WHOIS data and lack of explicit contact information on the site limits external verification of legitimacy. From a technical perspective, the website employs standard web technologies such as jQuery and custom JavaScript, with basic mobile optimization and accessibility features. The site includes a cookie consent mechanism indicating some level of privacy awareness, but lacks comprehensive privacy and security policies. No evidence of modern CMS or advanced frameworks was found, and performance is moderate. Security posture is weak due to missing HTTPS confirmation, absence of security headers, and no visible incident response or vulnerability disclosure information. The lack of WHOIS data further reduces trustworthiness. There are no signs of malicious content or adult material, and the site appears safe for general audiences. Overall, while the business appears legitimate and focused on municipal services, the website would benefit from improved security measures, transparency in privacy practices, and clearer contact information to enhance trust and compliance.

H

Hülskens Liebersee GmbH & Co. KG

huelskens-liebersee.de

51

Hülskens Liebersee GmbH & Co. KG operates as a regional supplier of high-quality sand and gravel products primarily serving the construction and concrete industries in Germany, specifically in the regions of Sachsen and Brandenburg. The company emphasizes product quality, reliable delivery, and partnership with customers. The website is professionally designed using the Contao CMS platform and hosted on agenturserver infrastructure. It features comprehensive product information, downloadable resources, and career opportunities, reflecting a mature digital presence. Security posture is moderate with HTTPS usage and cookie consent mechanisms in place, but lacks explicit security policies or vulnerability disclosures. No significant vulnerabilities or tracking technologies were detected, indicating a privacy-conscious approach. Overall, the website is trustworthy and well-aligned with the business's operational scope and regional market.

H

Hülskens Barleben GmbH & Co. KG

huelskens-barleben.de

51

Hülskens Barleben GmbH & Co. KG is a medium-sized German company specializing in the extraction and supply of construction materials, primarily sand and gravel, for public and private building projects. The company operates multiple sites and offers a comprehensive product range including standard and specialized aggregates. Their business model focuses on providing a full supply chain solution from extraction to delivery via truck and ship, positioning them as a reliable regional partner within the construction materials industry. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to construction professionals and clients. Technically, the website is built on the Contao Open Source CMS platform, utilizing common JavaScript libraries such as jQuery and Colorbox for UI enhancements. The site demonstrates good mobile optimization and basic accessibility features, with moderate performance. SEO practices are adequately implemented through meta tags and structured navigation. The absence of heavy analytics or tracking scripts suggests a privacy-conscious approach. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and a dedicated security policy or incident response contact, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is consistent with the business identity, supporting domain legitimacy. Overall, the website presents a trustworthy and professional digital presence for Hülskens Barleben GmbH & Co. KG, with solid business credibility and privacy compliance. Strategic enhancements in security headers and incident response transparency would further strengthen their security posture.

The BKC-Spendenportal website serves as an online donation platform operated by the Bank für Kirche und Caritas eG, targeting charitable organizations primarily within the church and caritas sectors in Germany. It facilitates the connection between donors and charitable projects, providing a streamlined platform for online donations. The website is professionally designed with clear navigation and content relevant to its audience, emphasizing transparency and trust through visible contact information and testimonials. Technically, the site is built on the Contao Open Source CMS and leverages common JavaScript libraries such as jQuery, Colorbox, and Isotope for enhanced user experience. Hosting is provided by Schlundtech, a reputable German hosting provider. The site demonstrates good mobile optimization and SEO practices, although performance is moderate rather than fast. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism aligned with GDPR requirements. However, it lacks explicit security policies, incident response contacts, and advanced security headers, which are recommended for improved security posture. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the site maintains a good security baseline appropriate for its business model. The overall risk assessment is low, with the site presenting a trustworthy and professional front for its niche market. Strategic recommendations include formalizing security policies, adding vulnerability disclosure mechanisms, and enhancing security headers to further strengthen trust and compliance.

C

Caritasverband für den Kreis Lippe und die Stadt Bad Pyrmont e.V.

caritas-detmold.de

50

The Caritasverband für den Kreis Lippe und die Stadt Bad Pyrmont e.V. is a regional non-profit organization providing a broad range of social services including general social counseling, debt counseling, refugee support, and legal advice. The website serves as an information and contact portal for individuals seeking assistance in the Lippe district and Bad Pyrmont city in Germany. The organization positions itself as a trusted local social service provider with a clear focus on community support and volunteer engagement. Technically, the website is built on WordPress 6.8.3 with common plugins such as Yoast SEO for search optimization and Borlabs Cookie for GDPR-compliant cookie management. The site uses HTTPS with a strong SSL configuration and is hosted on servers associated with rzone.de. The technical infrastructure is modern and supports good mobile responsiveness and accessibility, although some improvements in security headers could be made. From a security perspective, the site demonstrates good practices including HTTPS enforcement and cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies or incident response information suggests room for improvement in transparency and preparedness. The use of Google Analytics is compliant with user consent, reflecting moderate user tracking. Overall, the website is professional, trustworthy, and well-maintained, with a strong focus on privacy compliance and user experience. Strategic recommendations include enhancing security headers, publishing security policies, and considering a vulnerability disclosure mechanism to further strengthen the security posture and trustworthiness.

W

World Dredgers GmbH & Co. KG

world-dredgers.de

49

World Dredgers GmbH & Co. KG is a specialized engineering company focused on the design, construction, and servicing of suction dredgers and related equipment for efficient gravel and sand extraction. The company emphasizes innovation, notably with its autonomous GPS-based movement control system for dredgers, enhancing operational efficiency and automation. Their market position is that of a niche specialist serving B2B clients in the energy and transportation sectors related to raw material extraction. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries and frameworks, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking explicit security headers and incident response policies. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, reflecting a credible small-sized enterprise with a clear business focus and parent company affiliation.

O

OTTO MAURER Assekuranzmakler GmbH

maurer-assekuranz.de

51

OTTO MAURER Assekuranzmakler GmbH is a specialized insurance brokerage firm focusing on inland navigation, construction, recycling, and related industries primarily in Germany and the BeNeLux region. With over 30 years of experience and affiliation to the HÜLSKENS-Firmenverband group, the company offers tailored insurance solutions including Flusskasko, P&I, machinery breakdown, and freight loss insurance. The website reflects a professional and consistent brand presence with clear service descriptions and multiple contact points. Technically, the website is built on the Contao Open Source CMS platform, utilizing common JavaScript libraries such as jQuery and Swipe.js for UI components. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Hosting appears to be managed via Agenturserver, with no direct evidence of advanced security headers or analytics tools. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR. However, no explicit security policy or incident response contacts are published, and security headers are not evident. No vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the business claims, showing consistent registration and no privacy protection, supporting legitimacy. Overall, the website is trustworthy, professional, and compliant with privacy regulations, though improvements in security policy transparency and technical security headers are recommended to enhance the security posture and trust further.

R

Ruhrmann Logistik GmbH & Co. KG

ruhrmann-logistik.de

51

Ruhrmann Logistik GmbH & Co. KG is a well-established logistics company specializing in bulk goods handling and port logistics with multiple locations in North Rhine-Westphalia, Germany. The company operates its own port facilities and is part of the larger Hülskens Firmenverband corporate group, which has a long history in the construction and logistics sectors. The website clearly targets business clients in transportation and waste management, offering comprehensive logistics services including ship disposition and specialized material handling. Technically, the website is built on the Contao CMS platform and uses common JavaScript libraries such as jQuery and Swipe.js for UI components. The site is moderately performant, mobile-optimized, and includes basic accessibility features. SEO is well addressed with proper meta tags and structured data. Security-wise, the site enforces HTTPS and implements a cookie consent mechanism, but lacks explicit security headers and published security policies. The security posture is solid but could be improved by adding formal security and incident response policies and enhancing HTTP security headers. No vulnerabilities or suspicious elements were detected in the content or scripts. WHOIS data aligns well with the business claims, indicating a trustworthy domain with consistent registration information. Overall, the website presents a professional and credible business presence with good content quality and technical implementation. Strategic improvements in security transparency and incident response readiness would further strengthen trust and compliance.

H

Heinr. Elskes GmbH & Co. KG

elskes.de

51

Heinr. Elskes GmbH & Co. KG is a medium-sized, leading concrete manufacturing and supply company based in Nordrhein-Westfalen, Germany. The company operates under the Hülskens Holding group and offers a broad range of products including transport concrete, precast concrete elements, construction steel, and material testing services. Their market position is strong regionally, supported by sustainability certifications such as CSC Platinum and Gold, and a modern online ordering platform enhancing customer experience. The website reflects a professional and trustworthy business with clear contact channels and a focus on quality and sustainability. Technically, the site is built on the Contao CMS platform using modern JavaScript libraries, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. No blocking or WAF challenges were detected, allowing full content access and analysis. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, making it a reliable digital presence for the company.

H

Hülskens GmbH & Co. KG

huelskens-kies-sand.de

50

Hülskens GmbH & Co. KG is a well-established German company specializing in the extraction and supply of mineral raw materials such as sand and gravel, primarily serving the construction and infrastructure sectors. With over 100 years of experience and multiple regional subsidiaries, the company emphasizes sustainable land use and ecological projects alongside its core business. The website reflects a professional and regionally focused business model with clear communication of services and corporate values. Technically, the website is built on the Contao CMS platform, utilizing modern web technologies including Bootstrap and jQuery. It is hosted on agenturserver infrastructure, with good mobile optimization and SEO practices. The site employs HTTPS and cookie consent mechanisms, demonstrating compliance with GDPR requirements. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site shows a solid posture with no detected vulnerabilities or exposed sensitive data. The absence of analytics scripts suggests a privacy-conscious approach. WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website is trustworthy, professional, and compliant, with room for improvement in security policy transparency and header implementation. The risk level is low, with no critical issues detected. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to sustain and improve security and compliance posture.

Z

ZľavaDňa

zlavadna.sk

55

ZľavaDňa is a Slovakian online platform specializing in daily discount deals across multiple categories including travel, wellness, food, and goods. The website targets consumers primarily in Slovakia seeking value offers and experiences. Technically, the site uses a modern JavaScript stack with jQuery, Google Tag Manager, Hotjar, and cookie consent mechanisms, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though security headers could be enhanced. Privacy compliance is basic, lacking explicit privacy and terms of service pages in the analyzed content. Overall, the site is professional and trustworthy with a strong market position in its niche.

L

Landratsamt Miltenberg

landratsamt-miltenberg.de

61

Landkreis Miltenberg operates a professional and comprehensive local government website providing residents and stakeholders with current news, career opportunities, departmental information, and citizen services. The site is well-structured, accessible, and includes privacy and cookie consent mechanisms, reflecting a mature digital presence. Technically, the site uses modern JavaScript libraries and a reputable CMS (Contao), hosted on a known provider, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and privacy compliance, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website is trustworthy and serves its public sector role effectively.

C

Cruise Gate Hamburg GmbH

cruisegate-hamburg.de

49

Cruise Gate Hamburg GmbH operates the cruise terminals in Hamburg, managing berth allocations and serving as the central contact for cruise operators. The company also markets Hamburg as a cruise destination internationally. The website is professionally designed, primarily in German, and targets cruise operators, passengers, and tourism stakeholders. Technically, the site uses modern JavaScript libraries such as jQuery and Video.js, with a CMS likely Kirby. It is mobile-optimized and SEO-friendly, though some accessibility features are basic. Security posture is good with HTTPS enforced, but lacks some security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Contact is mainly via forms, with no direct emails or phone numbers visible. Social media presence is strong, enhancing trust and engagement.

H

Hülskens Holding GmbH & Co. KG

huelskens.de

51

Hülskens Holding GmbH & Co. KG is a well-established German company specializing in the supply of mineral resources such as Kies and Sand, production of transport concrete and precast concrete elements, water construction, logistics, and insurance brokerage. With a history dating back to the early 20th century and a workforce exceeding 900 employees, the company holds a strong regional market position serving construction, energy, and logistics sectors. Their business model focuses on B2B services with multiple subsidiaries and specialized business units, supported by a professional and content-rich website. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries and frameworks, and hosted by agenturserver. The site is mobile-optimized and SEO-friendly, though some improvements in accessibility and security headers could be made. Security posture is moderate with HTTPS usage and cookie consent mechanisms in place, but lacks explicit security policies or incident response information. Overall, the domain registration and WHOIS data align well with the company's claims, supporting legitimacy and trustworthiness.

The Pax-BKC Spendenportal is a German-language online donation platform operated by Pax-Bank für Kirche und Caritas eG, focused on connecting donors with charitable projects and organizations primarily related to church and Caritas sectors. The platform offers project listings, organization registrations, and facilitates online donations, targeting donors and non-profit institutions in Germany. The website is professionally designed with clear navigation and mobile optimization, built on the Contao CMS with modern JavaScript libraries enhancing user experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, though formal security policies and incident response contacts are absent. No suspicious or malicious content is detected, and privacy compliance is well addressed with GDPR-aligned cookie consent and privacy policy. Overall, the site presents a trustworthy and professional presence in the non-profit donation space.

Axians eWaste GmbH operates the eTFSportal, a specialized cloud-based software solution designed to facilitate compliance with EU regulations on cross-border waste shipments. The portal supports electronic notification and transport management processes, targeting companies involved in waste transport and disposal. The business is positioned as a niche provider within the energy and transportation sectors, leveraging its parent company Axians' expertise and infrastructure. The website demonstrates a professional and consistent brand presence with clear business information and multilingual support. Technically, the website employs a modern technology stack including jQuery, Bootstrap, FontAwesome, and Google reCAPTCHA v3 for security. The portal integrates various UI components and validation mechanisms to ensure usability and security. Hosting appears professional and GDPR compliant, though some security enhancements such as DNSSEC and security headers could be improved. Security posture is solid with HTTPS enforced and bot protection via reCAPTCHA, but lacks explicit security policies and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website and business present a trustworthy and professional image with moderate technical sophistication and good compliance practices. Strategic improvements in security headers and incident response transparency would further enhance trust and resilience.

K

Kolb Erdbau & Abbruch GmbH

kolb-erdbau-abbruch.de

48

Kolb Erdbau & Abbruch GmbH is a German construction services company specializing in earthworks, demolition, special deep foundation, area recycling, and pollutant remediation. The company targets regional construction and real estate clients, offering consulting and specialized services. The website is built on the Contao CMS platform, utilizing modern JavaScript libraries such as jQuery and Rocksolid Slider, providing a professional and responsive user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies are absent. Contact information is clearly presented, enhancing business credibility. Overall, the website reflects a small but professional business with a focus on local market presence and compliance with GDPR cookie regulations.

H

Hülskens Wasserbau GmbH & Co. KG

huelskens-wasserbau.de

47

Hülskens Wasserbau GmbH & Co. KG is a well-established German company specializing in constructive water engineering with over 100 years of experience. The company offers a broad range of services including engineering water construction, sheet piling, dredging, sediment management, and specialized techniques. It operates nationwide in Germany and is part of the larger Hülskens Firmenverband group. The website targets B2B clients in infrastructure and waterway sectors as well as young professionals seeking apprenticeships. Technically, the site is built on the Contao CMS platform, uses common JavaScript libraries for UI enhancements, and is hosted on agenturserver infrastructure. The website is well-structured, mobile-optimized, and includes a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Contact information is clearly presented, and social media presence is active across major platforms. No terms of service or explicit security policy pages were found, which could be areas for improvement.

K

KulturKirche2025 – Die Kirchen in der Kulturhauptstadtregion Chemnitz 2025

kulturkirche2025.de

45

KulturKirche2025 is a cultural initiative centered on churches in the Chemnitz region, aligned with the European Capital of Culture 2025 program. The website serves as a platform to promote cultural exhibitions, spiritual events, and community projects, targeting visitors, pilgrims, and local cultural participants. The business model is non-profit and community-focused, emphasizing cultural heritage and spiritual engagement. Technically, the site is built on WordPress with modern plugins such as Advanced Custom Fields Pro and WPML for multilingual support. The infrastructure is hosted on rzone.de nameservers, indicating a professional hosting environment. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks explicit security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is accessible, well-structured, and provides relevant cultural content but would benefit from enhanced privacy and security documentation.

Sozialpolitik aktuell is an academic and informational website operated by the Institut für Arbeit und Qualifikation (IAQ) at Universität Duisburg-Essen. It provides extensive, up-to-date information on social policy topics in Germany, including analyses, infographics, legislative updates, and reports. The site targets researchers, policymakers, students, and the interested public, positioning itself as a trusted source in the social policy domain. Technically, the website is built on the Contao CMS platform, uses common JavaScript libraries, and employs Matomo analytics with IP anonymization to respect user privacy. The site is well-structured, mobile-optimized, and includes a comprehensive cookie consent mechanism. Security posture is good with HTTPS enforced, though security headers are not explicitly detected. No direct contact emails or phone numbers are present, but a contact form is available. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

K

Katholische Akademie der Erzdiözese Freiburg

katholische-akademie-freiburg.de

38

The Katholische Akademie der Erzdiözese Freiburg is a regional non-profit educational and cultural institution affiliated with the Catholic Archdiocese of Freiburg, Germany. It organizes interdisciplinary events and discussions on theology, philosophy, ethics, church matters, and social topics, targeting interested individuals and the broader community. The website reflects a professional and consistent brand presence with a focus on event promotion and educational content. Technically, the website is built on the Edith CMS platform, utilizing jQuery, Bootstrap, and Matomo analytics for tracking. Hosting is provided by w-commerce.de, with multiple authoritative nameservers ensuring domain stability. The site is mobile-optimized with good navigation and SEO practices, although performance is moderate. From a security perspective, the site enforces HTTPS and uses Matomo with cookie disable options, indicating some privacy awareness. However, it lacks explicit privacy and cookie policies, security headers, and incident response information, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is safe, trustworthy, and professionally maintained but would benefit from enhanced privacy compliance and security best practices to strengthen user trust and regulatory adherence.

H

Heidelberg Materials

heidelbergmaterials.de

71

Heidelberg Materials is a leading global construction materials company with a strong market presence in Germany, particularly as the market leader in cement and ready-mixed concrete. The company offers a broad portfolio including cement, concrete, aggregates (sand, gravel), and precast concrete elements, with a strong focus on sustainability and innovation such as their evoZero® Carbon Captured Net-Zero Cement. The website reflects a mature enterprise with comprehensive product information, customer engagement through events and newsletters, and a consistent brand identity. Technically, the site is built on Drupal 11, leveraging modern web technologies and analytics tools, with good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

The website www.informationsportal.de is an official information portal operated by ITSG GmbH, providing comprehensive guidance to employers in Germany about their social security reporting obligations. It serves as a government-related resource offering question-answer catalogs, glossaries, brief profiles, and a document library to assist employers in compliance. The portal targets German employers and is positioned as a niche authoritative source in the social security domain. Technically, the site is built on WordPress with modern plugins such as Yoast SEO Premium and Borlabs Cookie for privacy compliance. It uses Matomo for analytics, ensuring user data is anonymized and GDPR compliant. The site is well-structured, mobile-optimized, and employs HTTPS with appropriate security headers, although some advanced headers could be added for enhanced security. No direct contact emails or phone numbers are published; contact is primarily via a form. No explicit security or incident response policies are published, which could be improved. Overall, the site demonstrates a good security posture, strong privacy compliance, and professional content quality, making it a trustworthy resource for its audience.

E

Elementare Vielfalt

periodensystem.de

47

The website www.periodensystem.de is a specialized educational platform offering a free interactive periodic table of elements aimed at students and professionals in chemistry-related fields. It is positioned as a niche resource within the German education sector, providing accessible and app-free learning tools. The site is powered by TYPO3 CMS and leverages modern JavaScript libraries to enhance user experience. Hosting is provided by SchlundTech, a reputable German hosting provider, ensuring reliable infrastructure. The site demonstrates good technical maturity with responsive design and SEO optimization. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent managed via Usercentrics, although some security headers are missing and no explicit security policies or incident response contacts are provided. Overall, the site is trustworthy, safe, and professionally maintained, with room for improvement in transparency and security documentation.

deponata GmbH & Co. KG is a German company specializing in environmental services, particularly the disposal and processing of mineral construction and production waste, soil material brokerage, and electronic waste tracking. The company is qualified for public procurement and actively engages in environmental sponsorships, positioning itself as a reliable and certified disposal specialist within the energy and environmental sector. The website content is professional, well-structured, and targeted primarily at public sector clients and environmental stakeholders. Technically, the website employs a moderate technology stack including jQuery, Google Fonts, and Google Analytics with IP anonymization, hosted likely by Prointernet. The site is served over HTTPS with basic mobile optimization and accessibility features. Consent management is implemented via a third-party platform, supporting GDPR compliance. SEO practices are good with proper meta tags and structured navigation. From a security perspective, the site benefits from HTTPS and privacy-conscious analytics but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of a vulnerability disclosure policy or security.txt file is noted as an area for improvement. Overall, the website is trustworthy, professional, and compliant with privacy regulations, with a moderate security posture. Strategic recommendations include enhancing security headers, publishing security policies, and improving mobile optimization to further strengthen the digital maturity and trustworthiness of the company’s online presence.

C

CAL GmbH & Co. KG

cal-darmstadt.de

60

CAL GmbH & Co. KG is a German-based chemical analysis service provider established in 1984. The company specializes in precise chemical analyses for soil, water, dietary supplements, and cosmetics, targeting businesses requiring quality assurance in these sectors. Their website is professionally designed using the Contao CMS platform and modern JavaScript libraries, providing a good user experience with clear navigation and relevant content in German. The technical infrastructure is moderate in performance with good mobile optimization but lacks advanced security headers and cookie consent mechanisms. Security posture is basic with HTTPS enabled but missing several best practices such as security policies and incident response contacts. WHOIS data confirms the domain's legitimacy and consistency with the business history. Overall, the website is trustworthy and functional but could improve in privacy compliance and security transparency.

K

Koordinierungsstelle für Hospiz- u. Palliativversorgung in Deutschland

koordinierung-hospiz-palliativ.de

48

The website www.koordinierung-hospiz-palliativ.de serves as the official coordination center for hospice and palliative care services in Germany. It provides informational resources, including multilingual explanatory videos, targeting patients, relatives, healthcare institutions, and care providers. The site positions itself as a national non-profit entity focused on improving access and awareness of hospice and palliative care. Technically, the site is built on the Contao CMS platform, utilizing jQuery and jQuery UI for interactive elements. The infrastructure supports HTTPS with good SSL configuration, but lacks advanced security headers and cookie consent mechanisms. The content is well-structured, professionally presented, and accessible, though mobile optimization and accessibility could be improved. Security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of a security policy and incident response contacts is noted. Overall, the site is trustworthy and credible, with clear contact information and consistent branding.

B

BDE Bundesverband der Deutschen Entsorgungs-, Wasser- und Kreislaufwirtschaft e. V.

bde.de

55

BDE Bundesverband der Deutschen Entsorgungs-, Wasser- und Kreislaufwirtschaft e. V. is a prominent German industry association representing Europe's largest network of private circular economy companies. The organization focuses on advocacy, information dissemination, training, and networking within the waste management, water, and recycling sectors. Their website reflects a professional and consistent brand image, targeting companies and stakeholders in the circular economy sector primarily in Germany and Europe. The business model centers on providing member services, industry representation, and policy influence. Technically, the website is built on a Django-based CMS platform, utilizing modern JavaScript libraries such as jQuery and Slick Carousel for interactive elements. The site is mobile-optimized with good SEO practices and moderate performance. Security measures include HTTPS enforcement and CSRF protection on forms, though additional security headers and explicit security policies are absent. The security posture is solid but could be enhanced by publishing incident response contacts and vulnerability disclosure policies. Privacy compliance is well addressed with a clear privacy policy, cookie consent banner, and GDPR adherence. Contact information is comprehensive, including multiple emails, phone numbers, and physical addresses, enhancing business credibility. Overall, the website is trustworthy, professionally maintained, and serves its target audience effectively. Strategic improvements in security transparency and accessibility could further strengthen its position.

N

Nordic CAMPUS Berufsbildungswerk Bremen gGmbH

bbw-bremen.de

56

Nordic CAMPUS Berufsbildungswerk Bremen gGmbH is a well-established non-profit vocational training institution in Germany focused on educating and supporting young people with disabilities. With over 40 years of experience and multiple locations, it offers a broad range of training programs, personal and health support services, and fosters inclusion through strong partnerships and community engagement. The website reflects a professional and inclusive brand with comprehensive content and clear navigation. Technically, the website uses a custom or unknown CMS with a technology stack including jQuery and responsive design elements. Hosting is provided by a German ISP (Ewetel). The site is mobile-optimized and SEO-friendly but lacks some modern security headers. Cookie consent mechanisms are implemented, supporting GDPR compliance. Security posture is moderate with HTTPS enforced and email obfuscation in place, but missing explicit security headers and incident response contacts. No vulnerabilities or malware indicators were found. Overall, the site is trustworthy and professionally maintained, with room for security enhancements. The risk level is low, with recommendations to improve security headers, publish a security policy, and enhance incident response transparency to further strengthen trust and compliance.

U

Unitus

unitus.it

56

The website www.unitus.it represents the official online presence of the Università degli Studi della Tuscia, a public university based in Italy. The site provides information about degree courses, research activities, and university life, targeting students, researchers, and the academic community. It holds a regional market position as an educational institution and offers key services related to higher education and research. Technically, the website is built on WordPress with multilingual support via WPML, utilizing common web libraries such as jQuery and DataTables. Google Analytics and Google Tag Manager are employed for user tracking and analytics. The site demonstrates moderate performance and good mobile optimization, with a professional design and clear navigation structure. Security-wise, HTTPS is enforced, and a cookie consent mechanism is implemented, indicating GDPR awareness. However, the absence of security headers and explicit security policies suggests room for improvement in security posture. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professionally maintained, though it lacks some compliance documentation such as privacy and terms of service pages. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility features.

T

Tourismuszentrale Fränkische Schweiz

fraenkische-schweiz.com

47

The website www.fraenkische-schweiz.com serves as the official tourism portal for the Fränkische Schweiz region in Bavaria, Germany. It provides comprehensive information on activities, accommodations, gastronomy, and events, targeting tourists and vacationers interested in this historic and scenic area. The site is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, it is built on the TYPO3 CMS platform and integrates modern JavaScript libraries and Google Analytics for tracking. Security measures include HTTPS and a cookie consent mechanism, though explicit security headers and detailed security policies are not evident. The absence of WHOIS registration data raises concerns about domain legitimacy, which should be verified to ensure full trust. Overall, the site is a reliable resource for regional tourism but would benefit from enhanced transparency in domain registration and security disclosures.

F

Das Fichtelgebirge: Fichtelgebirge

fichtelgebirge.bayern

47

The website www.fichtelgebirge.bayern serves as a regional tourism portal dedicated to the Fichtelgebirge region in Germany. It provides comprehensive information about accommodations, cultural events, outdoor activities, and regional specialties, targeting tourists and visitors interested in exploring the area. The site is multilingual, offering translations via Google Translate, enhancing accessibility for international visitors. Technically, the site is built on TYPO3 CMS, utilizing modern frontend libraries such as jQuery UI and Slick Carousel, and integrates Google Analytics for visitor tracking alongside a CookieFirst consent management system. Security-wise, the site enforces HTTPS and implements cookie consent, but lacks explicit security headers and vulnerability disclosure mechanisms. The WHOIS data is privacy protected, which is common for such regional tourism sites, and no suspicious patterns were detected. Overall, the site presents a professional and trustworthy digital presence for regional tourism promotion.

Kassensuche GmbH operates a German-language online portal focused on helping users find and compare statutory health insurance providers (gesetzliche Krankenkassen) in Germany. The website offers multiple tools including a contribution calculator, user-type based search, and detailed benefit comparisons. The portal targets insured individuals in Germany seeking optimal health insurance options. Technically, the site uses modern JavaScript modules, jQuery, and lazy loading techniques to enhance performance and user experience. The site is hosted with reputable DNS providers and uses HTTPS, ensuring secure connections. Security posture is adequate but could be improved by adding security headers and explicit incident response information. Privacy compliance is partially met with a clear privacy policy and terms of service, but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-positioned in its niche market.

H

Hamburger Verkehrsverbund

hvv.de

68

Hamburger Verkehrsverbund (hvv) operates as the primary public transportation network for Hamburg and its surrounding areas, providing comprehensive services including timetable information, ticket sales, and mobility consulting. The website serves as a digital portal for users to access schedules, purchase tickets, and stay informed about service updates. The platform targets public transit users in the Hamburg region and positions itself as a leading transportation provider with a strong regional presence. Technically, the website employs a modern JavaScript stack with libraries such as jQuery UI, GSAP, and Moment.js to enhance user experience and performance. It features responsive design and accessibility considerations, including keyboard navigation and ARIA roles. The site integrates tracking via etracker for analytics while maintaining GDPR compliance through cookie consent mechanisms and a detailed privacy policy. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, indicating attention to secure data handling. However, explicit security headers and a published security policy or vulnerability disclosure are absent, representing areas for improvement. No signs of WAF or blocking mechanisms were detected, allowing full content access. Overall, the website demonstrates a solid balance of usability, compliance, and security suitable for a public transportation entity. Strategic enhancements in security transparency and incident response readiness would further strengthen its posture.

B

Bergspiritualität: Endlich Pilgern

bergspiritualitaet.com

10

The website bergspiritualitaet.de is a German-language platform dedicated to spiritual mountain experiences, including retreats, pilgrimages, and mountain masses. It targets a broad audience interested in spirituality and nature, offering educational courses and community events. The site is built on TYPO3 CMS with a moderate technical infrastructure, incorporating common JavaScript libraries and a cookie consent mechanism. Security posture is adequate with HTTPS enforced, but lacks explicit security headers and incident response information. Privacy compliance is good with a clear privacy policy and cookie consent. Business credibility is moderate due to limited explicit company or contact information. Overall, the site is professionally presented with consistent branding and relevant content for its niche.