Security Directory

L

Landschaftspflegeverband Miltenberg e. V.

lpv-miltenberg.de

53

Landschaftspflegeverband Miltenberg e. V. is a regional non-profit organization dedicated to the preservation and care of the natural and cultural landscape in the Miltenberg district of Germany. The organization focuses on landscape maintenance, species protection, and community engagement through educational seminars and volunteer activities. Their market position is that of a trusted local environmental steward with a clear mission and active social media presence. Technically, the website employs a moderate technology stack including jQuery, Slick Slider, and Matomo for analytics, hosted on a professional hosting provider indicated by the nameservers. The site is well-structured, mobile-optimized, and includes accessibility features such as the eyeAble tool, reflecting a good level of digital maturity. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected, but security headers are not explicitly present, suggesting room for improvement. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its target audience effectively. The risk profile is low with recommendations to enhance security headers and publish security policies to further strengthen trust and compliance.

L

Lokale AktionsGruppe Main4Eck Miltenberg e.V.

main4eck.de

53

Lokale AktionsGruppe Main4Eck Miltenberg e.V. is a recognized local action group supported by the European Union and the Bavarian state, focusing on rural development in the region around Miltenberg and parts of Aschaffenburg in Germany. The organization acts as a key regional stakeholder facilitating projects, monitoring, and networking to promote sustainable development and education, including the educational platform fabuly. The website reflects a professional and consistent brand presence with clear contact information and active news updates. Technically, the site uses a modern but straightforward stack including jQuery, Slick Slider, and Matomo analytics, hosted likely on kasserver.com. Accessibility features and cookie consent mechanisms are implemented, supporting GDPR compliance. Security posture is good with HTTPS and no visible vulnerabilities, though formal security policies and incident response contacts are absent. Overall, the site is trustworthy, well-maintained, and serves its target audience effectively.

S

Stadt Obernburg a.Main

obernburg.de

55

Stadt Obernburg a.Main operates a comprehensive municipal website providing residents and visitors with information about city administration, public services, events, tourism, and cultural offerings. The site is well-structured, primarily in German, and targets local citizens and tourists. It maintains a consistent brand presence and offers clear contact channels including phone, email, and a contact form. The website leverages modern web technologies such as JavaScript, jQuery, and accessibility tools to enhance user experience. Hosting is managed via UI-DNS, a common provider for German municipal sites. From a security perspective, the website enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. It uses Matomo analytics configured to disable cookies by default, reflecting a privacy-conscious approach. However, no explicit security policy or incident response information is published, and security headers are not explicitly detected. The WHOIS data is limited but consistent with a legitimate municipal domain. No blocking or WAF mechanisms interfere with content access. Overall, the website demonstrates a solid technical and privacy foundation suitable for a government entity, with room for improvement in formal security disclosures and header implementations. The site is safe, free from adult or questionable content, and maintains a trustworthy online presence.

A

Axians Deutschland

axians.de

80

Axians Deutschland is a prominent ICT solutions provider and digital transformation partner operating as part of the global VINCI Energies network. The company focuses on delivering industry-specific digitalization services, primarily targeting business customers in Germany's energy and technology sectors. The website reflects a professional and consistent brand presence, emphasizing Axians' role as a pioneer in digital transformation. Technically, the site is built on WordPress with modern libraries and includes SEO and analytics tools such as Yoast SEO Premium and Matomo Analytics. Security measures include HTTPS usage and Google reCAPTCHA integration, alongside a cookie consent mechanism, although explicit security policies and headers are not evident. The WHOIS data is partially consistent with the website's claims but lacks detailed registrant information, slightly impacting trust. Overall, the site is well-structured, secure, and compliant with basic privacy standards, suitable for its business audience.

B

Bremische Evangelische Kirche

kirche-bremen.de

55

The Bremische Evangelische Kirche website serves as the official online presence of the regional evangelical church in Bremen, Germany. It offers comprehensive information about its communities, faith, events, and social support services. The site targets a general audience interested in religious and community activities, positioning itself as a trusted non-profit organization within the Bremen region. The business model focuses on community engagement, religious services, and social assistance, supported by educational and cultural programs.

The website www.karriere-im-kreis.de serves as the official career portal for the Rhein-Sieg-Kreis regional government in Germany. It provides comprehensive information about job opportunities, dual education, and studies within the public sector, targeting job seekers in the Rhein-Sieg-Kreis area. The site is professionally designed with consistent branding and high-quality content, reflecting a strong regional government presence. Technically, the site uses the Sitepark CMS platform with modern JavaScript libraries and is hosted by a regional IT provider, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and secure form handling, though explicit security headers and incident response policies are not published. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the site is trustworthy, safe, and well-suited for its audience.

T

TC-Innovations GmbH

themeware.design

50

TC-Innovations GmbH operates the website themeware.design, offering ThemeWare®, a leading Shopware theme designed to boost sales and provide extensive customization options. The company positions itself as a market leader with over 20,000 downloads and 500+ five-star reviews, targeting Shopware e-commerce merchants seeking advanced theming solutions. The website demonstrates a mature technical infrastructure with modern frontend technologies, mobile optimization, and SEO best practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some improvements like DNSSEC and security headers could enhance protection. Overall, the domain registration aligns well with the business, supporting legitimacy and trust. No critical security or compliance issues were detected, and the site maintains a professional and trustworthy online presence.

E

Evangelische Medienarbeit

evangelische-medienarbeit.de

59

Evangelische Medienarbeit (EMA) is a non-profit organization affiliated with the Landeskirche Hannovers, providing communication solutions, training, and media support primarily for church-related entities and professionals. The website serves as an information hub for their services including newsletters, events, and contact points. Technically, the site uses modern web technologies with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS and CSRF protections, though some improvements in security headers and cookie consent mechanisms are recommended. Overall, the site is trustworthy, professionally presented, and aligned with its organizational mission.

D

Das Ephoralbüro

das-ephoralbuero.de

56

Das Ephoralbüro website serves as an online handbook and resource platform primarily aimed at supporting office management within church administrative offices in Germany. It provides structured, transparent information to assist both new and experienced staff in their daily tasks. The platform is positioned as a niche internal resource within the government/non-profit sector, specifically church administration. Technically, the site is built on a modern web stack likely involving Ruby on Rails, with standard HTML5, CSS3, and JavaScript components. The site demonstrates moderate performance and basic mobile optimization, with room for improvement in accessibility and SEO. Security posture is moderate, with HTTPS implied and CSRF protections in place, but lacking explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Business credibility is supported by consistent branding and official contact emails, though no phone or physical address is provided. Overall, the site is professional, trustworthy, and safe for general audiences.

R

Rechnungsprüfungsamt der evangelisch-lutherischen Landeskirche Hannovers

rpa-kirche.de

57

The Rechnungsprüfungsamt der evangelisch-lutherischen Landeskirche Hannovers is a specialized public institution responsible for financial auditing and control within the Evangelical Lutheran Church of Hanover. The website serves as an informational portal for church districts, congregations, and affiliated institutions, providing insights into their auditing activities, news, and career opportunities. The organization holds a stable market position within the government and non-profit sectors, focusing on transparency and accountability in church finances. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and Matomo analytics, hosted on a CDN for performance. Security posture is solid with HTTPS and CSRF protections, though improvements in security headers and cookie consent mechanisms are recommended. Overall, the site is professional, trustworthy, and well-structured, supporting the organization's mission effectively.

E

Evangelisch- Lutherische Kirche in Bayern

kirche-tourismus.bayern

47

The website kirche-tourismus.bayern is operated by the Evangelisch-Lutherische Kirche in Bayern and serves as a comprehensive informational platform promoting church-related tourism and spiritual activities in Bavaria. It targets tourists, church communities, and groups interested in religious and spiritual experiences, offering detailed information on events such as mountain services, open churches, pilgrimages, and group accommodations. The site is well-positioned within a niche market of religious tourism and collaborates with multiple partner organizations to provide rich content and resources. Technically, the website is built on Drupal 10, leveraging modern libraries such as jQuery, Superfish menus, and Slick sliders, with Bootstrap 5 for styling. The site is hosted on a provider associated with the domain's nameservers and demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, and the site is fully accessible without any WAF or security challenges. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers, which are recommended to enhance protection. No sensitive data exposure or vulnerable libraries were detected. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR explicit indicators. Contact information is limited to a contact form, with no direct emails or phone numbers publicly listed. Overall, the website is legitimate, consistent with its WHOIS registration data, and trustworthy. Strategic improvements in security headers, privacy compliance, and cookie consent would enhance its posture. The site effectively serves its target audience with relevant content and a professional presentation.

C

CAL GmbH & Co. KG

cal-darmstadt.de

60

CAL GmbH & Co. KG is a German-based chemical analysis service provider established in 1984. The company specializes in precise chemical analyses for soil, water, dietary supplements, and cosmetics, targeting businesses requiring quality assurance in these sectors. Their website is professionally designed using the Contao CMS platform and modern JavaScript libraries, providing a good user experience with clear navigation and relevant content in German. The technical infrastructure is moderate in performance with good mobile optimization but lacks advanced security headers and cookie consent mechanisms. Security posture is basic with HTTPS enabled but missing several best practices such as security policies and incident response contacts. WHOIS data confirms the domain's legitimacy and consistency with the business history. Overall, the website is trustworthy and functional but could improve in privacy compliance and security transparency.

The Verband für Sicherheit in der Wirtschaft Hessen (VSW) is a professional association serving as a key interface between government security agencies and the private sector in Germany, particularly in Hessen. It provides a platform for information exchange, networking, and professional development through seminars, events, and an expert pool. The organization collaborates closely with federal and state security bodies, enhancing its credibility and influence in the security domain. The website reflects a mature digital presence built on TYPO3 CMS, featuring modern web technologies and a responsive design that caters well to its professional audience. Security-wise, the site enforces HTTPS, uses GDPR-compliant cookie consent mechanisms, and integrates Google reCAPTCHA to protect forms. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the site is trustworthy, well-maintained, and aligned with its business mission.

H

HOME OF LOGISTICS

home-of-intralogistics.de

45

HOME OF LOGISTICS is a German-language industry portal focused on logistics, intralogistics, and autonomous transport. Operated by DVS Media, it provides news, event information, and advertising services targeted at logistics professionals and companies. The website demonstrates a solid market position as a niche media platform with consistent branding and a professional content offering. Technically, the site uses modern web technologies including JavaScript libraries, a consent management system, and Google Analytics 4 for tracking, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and CSRF protections, though security headers and explicit policies could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, with no signs of malicious or adult content.

H

HOME OF STEEL

home-of-steel.de

45

HOME OF STEEL is a German-language online portal dedicated to the steel industry, providing free access to specialized information, news, product and company listings, and event details. The platform targets companies, professionals, and interested parties within the steel sector, positioning itself as a reputable media and information hub supported by DVS Media. The website demonstrates a professional design with consistent branding and a clear navigation structure, including integration with partner portals and social media presence on LinkedIn. Technically, the site uses modern web technologies including JavaScript libraries, a consent management system, and Google Analytics 4 for user tracking, ensuring GDPR compliance through explicit cookie consent mechanisms. Security-wise, the site enforces HTTPS, includes CSRF tokens, and uses a consent manager, but lacks explicit security headers and published security policies or incident response contacts. WHOIS data indicates a legitimate and consistent domain registration with no privacy protection, supporting the site's credibility. Overall, the website is well-maintained, secure, and compliant with privacy regulations, serving as a trusted resource for the steel industry.

H

Hanseatische Krankenkasse (HEK)

hek.de

65

Hanseatische Krankenkasse (HEK) is a German statutory health insurance provider offering a wide range of health-related services including digital health management, family support, preventive care, and alternative medicine. The company holds a strong market position as a top-rated Krankenkasse with multiple awards and a professional online presence. The website is built on TYPO3 CMS and leverages modern web technologies such as Bootstrap, jQuery, and Matomo analytics, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not publicly available. Overall, the site is trustworthy, well-branded, and compliant with GDPR requirements.

A

Avantal

avantal.de

43

Avantal operates as a German-based e-commerce platform specializing in healthcare and medical supplies. The website offers a wide range of products including wound care, diabetes management, hygiene articles, and related medical equipment. The platform targets healthcare professionals, patients, and consumers seeking quality medical products. Avantal positions itself as a niche retailer within the German healthcare market, providing convenient online shopping with features such as customer accounts, wishlists, and payment options including PayPal Express Checkout and installment plans. Technically, the website is built on a modern stack leveraging jQuery, Bootstrap, and various UI libraries to deliver a responsive and user-friendly experience. The presence of cookie consent mechanisms and GDPR-compliant privacy policies indicates a mature approach to privacy and regulatory compliance. The site is mobile-optimized and accessible, with moderate performance characteristics. From a security perspective, Avantal enforces HTTPS and implements secure login forms with CSRF tokens. While explicit security headers are not fully confirmed, the site follows best practices in data protection and user consent. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit incident response or vulnerability disclosure pages suggests room for improvement in security transparency. Overall, Avantal presents a trustworthy and professional online presence with a solid foundation in privacy and security compliance. Strategic enhancements in security headers and incident response documentation would further strengthen its security posture and customer trust.

B

Bayerische Landesarbeitsgemeinschaft Zahngesundheit e.V. (LAGZ)

lagz.de

54

Bayerische Landesarbeitsgemeinschaft Zahngesundheit e.V. (LAGZ) is a Bavarian non-profit organization dedicated to promoting dental health among children and youth, particularly in kindergartens and schools. The organization provides educational materials, organizes events such as the 'Tag der Zahngesundheit', and collaborates with health insurance and dental associations to support dental health initiatives. The website reflects a clear focus on healthcare education with a strong regional presence in Bavaria, Germany. Technically, the website is built on TYPO3 CMS, a mature and widely used content management system, indicating a stable and maintainable infrastructure. The site uses modern JavaScript libraries and includes a consent management platform (Usercentrics) to comply with GDPR requirements. The website is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site enforces HTTPS and uses a consent management system for cookies, which supports privacy compliance. However, it lacks explicit security headers and published security or incident response policies. No vulnerabilities or suspicious content were detected. The WHOIS data aligns with the organization's identity, supporting legitimacy. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its target audience effectively. Strategic improvements could include enhancing security headers, publishing security policies, and expanding accessibility features to further strengthen the security posture and user trust.

C

ChemieNord - Arbeitgeberverband für die Chemische Industrie in Norddeutschland e. V.

chemienord.de

53

ChemieNord is a regional employer association representing approximately 300 medium-sized companies in the chemical and pharmaceutical industry across Northern Germany, including Niedersachsen, Hamburg, and Schleswig-Holstein. The organization focuses on social-political representation, labor law support, tariff negotiations, apprenticeship marketing, health management, and mediation services for its members. The website reflects a professional and consistent brand image, targeting industry stakeholders and member companies. The association maintains active social media channels and a network of partner organizations, reinforcing its market position. Technically, the website is built on TYPO3 CMS, utilizing modern frontend components such as the slick slider. The site is mobile-optimized with good SEO practices and moderate performance. Security-wise, HTTPS is enforced, and email addresses are obfuscated to reduce spam. However, the site lacks advanced security headers and a cookie consent mechanism, which are recommended for compliance and enhanced security posture. Overall, the security posture is solid but could be improved by implementing security headers, publishing incident response information, and adding a vulnerability disclosure policy. The absence of cookie consent and limited privacy compliance indicators suggest room for improvement in GDPR adherence. The domain WHOIS data is minimal but consistent with the website's claims, supporting legitimacy. The website is safe for general audiences, with no adult or questionable content detected. It serves as a credible and professional platform for the chemical industry's employer association in Northern Germany.

E

Eckstein - das Haus der Evang.-Luth. Kirche in Nürnberg

eckstein-evangelisch.de

43

Eckstein is a medium-sized non-profit institution serving as the heart of the Evangelical Lutheran Church in Nuremberg. It offers a broad range of educational, counseling, and community services, hosting events and providing meeting spaces in the city center. The website reflects a well-structured, professionally designed platform that effectively communicates its mission and services to a general audience interested in evangelical church activities. Technically, the site is built on TYPO3 CMS with Bootstrap and incorporates modern web technologies ensuring good performance, mobile optimization, and accessibility. Privacy compliance is well addressed with GDPR-aligned policies and a cookie consent mechanism. Security posture is solid with HTTPS and privacy-conscious analytics, though additional security headers and incident response information could enhance trust. Overall, the site is trustworthy, safe, and professionally maintained, supporting the institution's community-focused mission.

K

Kirche und Tourismus in Bayern | Kirche & Tourismus in Bayern

kirche-tourismus-bayern.de

44

The website kirche-tourismus-bayern.de serves as an informational and promotional platform dedicated to church-related tourism and spiritual activities in Bavaria, Germany. It aggregates and links to various partner organizations offering services such as mountain church services, open churches, pilgrimage routes, church music events, and group accommodations. The target audience primarily includes tourists and visitors interested in religious and spiritual tourism within the Bavarian region. The business model is informational, supporting regional church tourism initiatives and community engagement. Technically, the site is built on Drupal 10 CMS, leveraging modern web technologies including jQuery, Bootstrap 5, and various Drupal modules for menus and sliders. The site is hosted on servers associated with kunde24.de, indicating a professional hosting environment. The website demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security or incident response policies. There is no cookie consent mechanism detected, which may affect GDPR compliance. No analytics or tracking scripts are present, indicating minimal user tracking. Contact information is limited to a contact form, with no direct emails or phone numbers provided. Overall, the website is trustworthy and professional, with a clear focus on its niche market. Strategic improvements include implementing cookie consent, enhancing security headers, publishing security policies, and providing clearer contact details to improve compliance and user trust.

O

ORMED GmbH, a company of Enovis

djoglobal.de

60

Enovis, represented by ORMED GmbH, is a leading global provider specializing in orthopedic aids and physical therapy solutions in orthopedics, traumatology, and sports medicine. The company targets both healthcare professionals and patients, offering a comprehensive range of products, digital therapy applications, and educational services. Their market position is strong, supported by a professional and well-structured website that reflects their expertise and commitment to quality healthcare solutions. The website is primarily in German and serves the German and Austrian markets.

Vogler technische Leistungen GmbH is a Berlin-based electrical engineering company founded in 2002, specializing in residential and commercial construction projects. Their clientele includes Berlin housing cooperatives, government bodies, and private clients. The company offers services such as new construction, renovations, building technology, data technology, and project planning. The website is built on TYPO3 CMS with a moderate technical infrastructure including jQuery and Google reCAPTCHA for security. The site is well-structured, mobile-optimized, and includes GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and reCAPTCHA, though lacking advanced security headers and explicit incident response policies. Overall, the website reflects a trustworthy small business with professional presentation and clear contact information.

B

Bayerisches Staatsministerium für Ernährung, Landwirtschaft, Forsten und Tourismus

100genussorte.bayern

71

Genussorte Bayern is a government-backed initiative promoting the culinary richness of Bavaria through a well-structured website featuring regional specialties, events, recipes, and interactive maps. The platform targets both residents and tourists interested in exploring Bavarian food culture. Technically, the site is built on WordPress with Elementor and uses modern JavaScript libraries and plugins to enhance user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some HTTP security headers could be improved. Privacy compliance is robust, with a comprehensive privacy policy and cookie management system. Overall, the site presents a trustworthy and professional image consistent with its government affiliation.

B

Bundesministerium für Familie, Senioren, Frauen und Jugend

hilfetelefon-schwangere.de

59

The website 'Hilfetelefon Schwangere in Not' is an official German government service operated by the Bundesministerium für Familie, Senioren, Frauen und Jugend. It provides confidential, anonymous, and free counseling services for pregnant women in distress, including chat, telephone, and email support, as well as information on confidential birth and local counseling centers. The site is well-positioned as a trusted national resource with extensive reach and multilingual accessibility. Technically, the website is built on TYPO3 CMS, uses Matomo for analytics with a clear cookie consent mechanism, and incorporates modern UI elements such as responsive design and accessibility features. The performance is moderate with good SEO and mobile optimization. Hosting details are not explicit but DNS data shows stable name servers. From a security perspective, the site uses encrypted communication channels for counseling, has a GDPR-compliant privacy policy, and implements cookie consent with opt-in. However, explicit security headers and incident response contacts are not visible, and no vulnerability disclosure policy is published. Overall, the security posture is solid but could be improved with additional transparency and technical controls. The domain WHOIS data aligns well with the website's government affiliation, indicating high legitimacy and trustworthiness. No WAF or blocking mechanisms were detected, allowing full content access and analysis.

M

Mehrgenerationenhaus Ingelheim

mgh-ingelheim.de

50

Mehrgenerationenhaus Ingelheim is a local non-profit community center in Ingelheim am Rhein, Germany, providing a wide range of social, cultural, educational, and health-related services to residents of all ages. The organization focuses on fostering community engagement, volunteering, and multi-generational interaction. Their website reflects a well-structured and community-oriented approach with clear contact information and social media presence on Facebook and Instagram. Technically, the website is built on TYPO3 CMS with Bootstrap 4 and uses several JavaScript libraries including jQuery 1.11.3, FontAwesome, and Slick Slider. The site is mobile responsive and includes a cookie consent mechanism compliant with GDPR. However, some technical improvements could be made, such as updating jQuery to a more secure version and implementing security headers. From a security perspective, the site uses HTTPS and has a cookie consent banner, but lacks explicit security policies, incident response information, and security headers. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is consistent with the website's community focus and shows no privacy protection, indicating transparency. Overall, the website is trustworthy, safe, and professionally maintained, with minor technical and security enhancements recommended to improve its posture and compliance further.

L

Landesverband Niedersachsen und Bremen der holz- und kunststoffverarbeitenden Industrie e. V.

hknb.de

47

The Landesverband Niedersachsen und Bremen der holz- und kunststoffverarbeitenden Industrie e. V. is a regional industry association representing employers in the wood and plastics processing sectors within the German states of Niedersachsen and Bremen. The organization provides specialized legal, economic, and PR support services tailored to the needs of its members, focusing on labor, social, and tariff law, as well as offering process representation in legal disputes. The website reflects a professional and focused business model aimed at supporting industry employers through advisory and networking services. Technically, the website is built on WordPress with a modern theme and plugins such as Yoast SEO and Borlabs Cookie for SEO and privacy compliance. The site is mobile-optimized, uses HTTPS with strong SSL configuration, and includes cookie consent mechanisms, indicating a mature digital infrastructure. Performance is moderate, with good navigation and accessibility features. From a security perspective, the site enforces HTTPS and cookie consent but lacks explicit security headers and incident response contact information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is limited but does not raise suspicion. Overall, the security posture is solid but could be improved with additional headers and formal incident response details. The overall risk assessment is low, with no blocking or WAF detected, no adult or questionable content, and clear contact information. Strategic recommendations include enhancing security headers, adding incident response contacts, and maintaining up-to-date software to ensure continued compliance and security.

R

Reactflow

cdnflow.co

58

Reactflow is a SaaS company specializing in conversion optimization tools such as session replay, heatmaps, funnel analytics, bug tracking, and customer feedback collection. The company targets marketers, UX designers, developers, and product managers aiming to improve website performance and user experience. The website is professionally designed, well-structured, and provides comprehensive information about its services and benefits. The technical infrastructure leverages modern JavaScript libraries and frameworks, with hosting and DNS managed via Cloudflare, ensuring good performance and availability. Security posture is solid with HTTPS enforced, data masking, and encryption in place, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is emphasized with GDPR adherence and data masking technologies, but no cookie consent mechanism was detected. Overall, the website and business demonstrate a mature and trustworthy presence in the technology SaaS market.

The Verband der Nordwestdeutschen Textil- und Bekleidungsindustrie is a regional industry association representing the textile and clothing sector in North Rhine-Westphalia, Germany. The website serves as an information hub for members and interested parties, offering news, educational resources, training opportunities, and insights into research and innovation within the textile industry. The association positions itself as a key player supporting industry development and workforce education. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as jQuery, Bootstrap, and slick sliders for interactive content. The site is mobile-optimized and incorporates a consent management platform (Usercentrics) to ensure GDPR compliance. Hosting is managed via domaincontrol.com nameservers, indicating professional domain management. From a security perspective, the site enforces HTTPS and uses a consent management platform to control third-party tracking. However, it lacks explicit security headers and published security policies or incident response information. No vulnerabilities or suspicious content were detected, and the site maintains good privacy compliance. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. Strategic improvements in security headers and transparency around security policies could further enhance its posture.

H

HBS Firmengruppe

hbs-group.de

47

HBS Firmengruppe is a family-owned group of companies specializing in electrical and planning services with multiple subsidiaries distributed across Germany and one in Poland. The group combines craftsmanship with innovative planning, serving a professional audience in the energy sector. Their website is built on TYPO3 CMS and employs modern frontend technologies, offering a good user experience with mobile optimization and clear navigation. Social media presence is strong, supporting brand visibility and engagement. Security posture is solid with HTTPS enforced and secure forms, though explicit security headers and policies are absent. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the website reflects a professional medium-sized enterprise with a consistent brand and trustworthy online presence.

A

Acción Episcopal Adveniat

adveniat.org

48

Acción Episcopal Adveniat is a German Catholic charitable organization dedicated to supporting impoverished communities in Latin America and the Caribbean. The organization operates primarily through donations and campaigns within the Catholic community in Germany, focusing on sustainable development projects initiated by local church counterparts. Their key services include project funding, scholarship programs, and environmental initiatives such as solar energy support. The website is well-branded and consistent with the organization's mission, targeting donors and supporters interested in Latin American aid.

F

Fresh radio - DAB+ celoplošně, Ostrava 88.6FM a 103.6FM, Třinec 106.5FM

freshradio.cz

46

Fresh radio is a Czech regional radio broadcaster offering DAB+ and FM radio services primarily targeting listeners interested in pop, dance, and electro music. The station operates an online streaming platform and an e-commerce merchandise shop, positioning itself as a modern media outlet with a digital presence. The website is built on WordPress with Elementor, leveraging common web technologies such as jQuery and Facebook SDK for social integration. Hosting is provided by Nethost, consistent with the Czech Republic location. Security posture is moderate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies, indicating areas for compliance improvement. Contact channels are mainly via social media and contact forms, with no direct emails or phone numbers publicly listed. Overall, the site is professionally designed, mobile-optimized, and SEO-friendly, serving a general audience with safe content.

M

MEDICLIN GmbH & Co. KG

mediclin.de

69

MEDICLIN GmbH & Co. KG is a large German healthcare provider operating 32 clinics, six nursing homes, and ten medical care centers nationwide. The company specializes in rehabilitation, medical care, and therapy services, supported by approximately 10,000 employees and over 8,000 beds. Their digital therapy platform MEDICLIN HOME highlights their commitment to innovative healthcare delivery. The website is professionally designed, well-structured, and optimized for mobile users, reflecting a mature digital presence. Technically, the site runs on TYPO3 CMS with integrations for Google Tag Manager, reCAPTCHA, and Usercentrics consent management, indicating a modern and privacy-conscious infrastructure. Security posture is strong with HTTPS enforced and anti-bot protections, though explicit security headers and incident response policies are not publicly documented. Overall, the site demonstrates high professionalism, GDPR compliance, and trustworthy business practices, positioning MEDICLIN as a reputable healthcare entity in Germany.

R

reha team Nordbayern Gesundheitstechnik GmbH

rehateam-nordbayern.de

47

reha team Nordbayern Gesundheitstechnik GmbH is a regional healthcare provider specializing in orthopaedic technology, mobility aids, compression therapy, and prosthetics with 19 branches across Northern Bavaria. The company targets patients and customers requiring rehabilitation and medical aids, positioning itself as a trusted regional leader with a comprehensive service offering. The website is built on TYPO3 CMS with modern frontend technologies, providing a professional and user-friendly experience optimized for mobile devices. Security posture is strong with HTTPS, cookie consent, and email obfuscation, though some security headers and explicit incident response contacts are missing. Overall, the site demonstrates good privacy compliance and business credibility, with clear contact information and partner affiliations. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable and trustworthy online presence.

C

Caritas München und Oberbayern

caritas-nah-am-naechsten.de

54

Caritas München und Oberbayern is a well-established non-profit organization providing a broad range of social services including care for the elderly, support for children and families, assistance for people with disabilities, migration and integration services, and volunteer engagement opportunities. The organization maintains a strong regional presence in Munich and Upper Bavaria, supported by a professional website that reflects its mission and services. The website features comprehensive contact information, official branding, and active social media channels, reinforcing its credibility and community engagement. Technically, the website employs modern web technologies such as Bootstrap for responsive design, Matomo for privacy-conscious analytics, and Klaro for cookie consent management. The site is mobile-optimized and accessible, with good SEO practices evident. The use of HTTPS and privacy-focused analytics demonstrates a mature approach to user privacy and security. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks publicly available security policies or incident response contacts. No critical vulnerabilities or suspicious domains were detected. The WHOIS data is limited but does not raise significant concerns, aligning with the organization's profile. Overall, the website presents a trustworthy, professional, and privacy-compliant digital presence for a reputable non-profit social service provider. Strategic improvements could include publishing explicit security policies and incident response information to enhance transparency and trust further.

B

Bundesarbeitsgemeinschaft der Seniorenorganisationen

digitalpakt-alter.de

52

The DigitalPakt Alter website represents a well-established non-profit initiative under the Bundesarbeitsgemeinschaft der Seniorenorganisationen (BAGSO) umbrella, aimed at empowering older adults in Germany to enhance their digital skills and social participation. The site offers a variety of services including funding programs, workshops, materials, and events, targeting seniors and volunteers. It enjoys strong institutional backing from BAGSO and the German Federal Ministry for Family Affairs, which enhances its credibility and market position. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies such as jQuery and slick sliders, with a focus on accessibility and mobile responsiveness. Hosting is provided via rzone.de, and the site implements a comprehensive cookie consent mechanism with Matomo analytics for privacy-conscious user tracking. The site demonstrates good SEO and accessibility practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS, employs standard security headers, and uses secure forms with validation. However, it lacks publicly available security policies or incident response contacts, which could be improved to enhance transparency and readiness. No vulnerabilities or suspicious content were detected, and privacy compliance is strong with GDPR-aligned policies and consent mechanisms. Overall, the website is trustworthy, professionally maintained, and aligned with its mission to support digital inclusion for seniors. Strategic recommendations include publishing explicit security and incident response policies, considering a vulnerability disclosure program, and maintaining regular audits of third-party scripts to sustain security posture.

B

Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend (BMBFSFJ)

jugend-staerken.de

63

The website www.jugend-staerken.de is a German government initiative operated by the Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend (BMBFSFJ). It focuses on supporting youth with special needs in their transition to independence through various programs and partnerships. The site serves as an informational and coordination platform for these programs, targeting young people, municipalities, and youth welfare organizations. Technically, the site uses a modern tech stack including jQuery UI and Matomo analytics, hosted on domaincontrol.com nameservers, and employs a CMS likely tailored for government use. The website is well-structured, mobile-optimized, and accessible, with clear navigation and professional design. Security posture is good with HTTPS enforced and privacy-respecting analytics, though some security headers and explicit incident response contacts are missing. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, reflecting its government affiliation.

T

Terra Nostra Pizzeria-Ristorante

terranostra.pl

50

Terra Nostra Pizzeria-Ristorante is a small hospitality business based in Poland, specializing in authentic Italian cuisine including gluten-free options. Established in 2018, the restaurant emphasizes quality ingredients and traditional recipes, with a strong local presence and an online ordering platform. The website is built on Joomla CMS and incorporates modern web technologies such as jQuery and slick sliders, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and incident response information are missing. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is unavailable likely due to privacy protection, which is common for this business type.

BM Real Property s.r.o. is a small family-owned real estate development company operating primarily in the Moravskoslezský region of the Czech Republic. The company focuses on delivering comprehensive construction and real estate services, managing projects from inception to completion. Their market position is that of a local developer emphasizing quality and client satisfaction, with a portfolio including residential and hospitality projects such as Vila 48 and Penzion Závada. The website is professionally built on WordPress using Elementor and related plugins, hosted on a Czech hosting provider, and supports Czech and English languages. Technically, the site is moderately performant and mobile-optimized but lacks some security headers and privacy compliance elements. Security posture is good with HTTPS enabled and no visible vulnerabilities, though improvements in security headers and privacy policies are recommended. Overall, the website is trustworthy and professional, with clear contact information and business legitimacy confirmed by WHOIS data.

K

Katholischer Akademischer Ausländer-Dienst

kaad.de

49

The Katholischer Akademischer Ausländer-Dienst (KAAD) is a well-established non-profit organization affiliated with the Catholic Church in Germany, focused on providing scholarships and educational support to postgraduate students and young professionals from developing countries across Africa, Asia, Latin America, Eastern Europe, and the Middle East. With a history spanning over 65 years, KAAD supports leadership development through academic programs, networking, and spiritual guidance. The website reflects a professional and consistent brand image, targeting academics and emerging leaders in global development contexts. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies such as Bootstrap, FontAwesome, and jQuery. It is hosted on Goneo servers, uses HTTPS with good SSL configuration, and demonstrates moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though some accessibility features could be enhanced. From a security perspective, the website enforces HTTPS and uses secure form submissions but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is generally good with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a minor gap. Overall, the KAAD website presents a trustworthy, professional, and secure platform suitable for its educational and non-profit mission. Strategic improvements in security headers, cookie consent, and vulnerability disclosure would further strengthen its security posture and compliance.

Casino Aschaffenburg operates as a cultural arthouse cinema located in Aschaffenburg, Germany, offering a curated program of arthouse films, special film series, and events. The business targets local cinema enthusiasts and cultural audiences, providing ticket sales, café services, and venue rental. The website reflects a small-sized, community-focused business with consistent branding and good content quality. Technically, the site is built on TYPO3 CMS with modern frontend technologies including jQuery and Slick Slider, and incorporates a cookie consent manager (Klaro) to comply with privacy regulations. The site is mobile-optimized and provides a clear navigation structure. Security-wise, the website enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and incident response information. No vulnerabilities or suspicious content were detected. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

L

Lucerne Festival

lucernefestival.ch

68

Lucerne Festival is a prominent international classical music festival organizer based in Switzerland, offering a range of cultural events, concerts, and educational programs. The website serves as a comprehensive platform for event information, ticket sales, digital content, and audience engagement. The organization targets classical music enthusiasts and cultural audiences globally, maintaining a strong market position as a leading festival in its sector. Technically, the website is built on a Django-based CMS with modern JavaScript libraries such as Fancybox and Slick Slider, ensuring a responsive and user-friendly experience. The site demonstrates good mobile optimization, accessibility, and SEO practices, supported by a cookie consent mechanism that complies with GDPR requirements. From a security perspective, the site enforces HTTPS and employs cookie consent with granular user controls. While no explicit security headers were detected in the provided data, no vulnerabilities or exposed sensitive data were found. The absence of a published security policy or incident response contact suggests room for improvement in transparency and readiness. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with a high AI score reflecting strong content quality, technical implementation, and business credibility. Strategic recommendations include enhancing security headers, publishing security policies, and providing clear security incident contacts to further strengthen the security posture.

V

VEMA Versicherungsmakler Genossenschaft eG

vemaeg.de

63

VEMA Versicherungsmakler Genossenschaft eG is a well-established German cooperative founded in 1997, serving as the largest cooperative network for insurance brokers in Germany. The organization focuses on digitalization, product development, and continuing education for insurance brokers, providing a comprehensive B2B platform and various services including events and training. Their market position is strong, supported by a large user base and extensive service offerings. Technically, the website uses modern JavaScript libraries like jQuery and Slick Slider, with good mobile optimization and SEO practices, though no CMS or hosting provider is explicitly identified. Security posture is solid with HTTPS and cookie consent mechanisms, but lacks published security policies or incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR, with clear contact information and active social media presence.

E

Emerald Technology Ventures

emerald.vc

68

Emerald Technology Ventures is a well-established venture capital firm specializing in sustainable industrial innovation. With over €1 billion in commitments and a portfolio of more than 90 companies, Emerald connects startups with corporate partners and institutional investors to accelerate green technologies. The website targets corporates, institutional investors, governments, and entrepreneurs, offering services such as CVC-as-a-Service and Emerald Sprints. The company is based in Switzerland and has a strong market position in the energy and industrial innovation sectors. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Fonts, Google Maps API, HubSpot forms, and advanced animation libraries like Lottie and GSAP. It demonstrates excellent performance, mobile optimization, accessibility, and SEO practices. Analytics and marketing tools such as Google Analytics, HubSpot, and LinkedIn Insight Tag are used with appropriate consent mechanisms. From a security perspective, the site enforces HTTPS, employs multiple security headers, uses reCAPTCHA on forms, and avoids exposing sensitive data. However, it lacks a dedicated security policy and incident response contact information, which are recommended for enhanced transparency and readiness. Privacy compliance is strong with clear privacy and cookie policies and GDPR indicators. Overall, the website presents a professional, trustworthy, and secure digital presence aligned with the company's business goals. Strategic recommendations include publishing a security policy, adding incident response contacts, and implementing a vulnerability disclosure program to further strengthen security posture and stakeholder trust.

T

TK Hannover Luchse

tkh-luchse.de

50

TK Hannover Luchse is a German women's basketball team competing in the 1. Damen Basketball Bundesliga. Their website serves as a hub for fans and stakeholders, providing schedules, team rosters, ticket purchasing options, and live streaming links. The site is professionally designed using WordPress with modern plugins and SEO optimizations, reflecting a mature digital presence suitable for a sports organization of its size. Hosting is managed via Google Cloud DNS, ensuring reliable infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy and well-aligned with its business objectives.

S

SEITZ GREMKE Steuerberatungsgesellschaft

seitzgremke.de

59

SEITZ GREMKE Steuerberatungsgesellschaft is a medium-sized tax consultancy firm based in Hannover, Germany, with a team of approximately 30 professionals. The company recently merged with Steuer-Online24, expanding its service offerings and market reach. Their business model focuses on providing comprehensive tax consulting and advisory services with a strong emphasis on digital solutions. The website reflects a professional and consistent brand image, targeting businesses and individuals seeking expert tax advice. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Borlabs Cookie, ensuring good SEO and privacy compliance. The site is mobile-optimized and performs moderately well. Security-wise, the website enforces HTTPS, uses cookie consent mechanisms, and avoids exposing sensitive data, though it lacks published formal security policies or incident response contacts. Overall, the site demonstrates a high level of professionalism and trustworthiness with no signs of blocking or WAF interference.

D

Duda Deine Zeitung

duda-kinderzeitung.de

59

Duda Kinderzeitung is a German weekly children's newspaper targeting children aged 6 and above, providing current news and educational content in a child-friendly format. The website supports subscription services, educational resources for schools, and additional interactive content such as puzzles and comics. It maintains a consistent brand presence with social media channels and links to partner regional news sites. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and implements GDPR-compliant privacy and cookie management. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers could be improved. Overall, the site is professional, trustworthy, and well-suited for its target audience.

R

Regens Wagner Burgkunstadt

regens-wagner-burgkunstadt.de

49

Regens Wagner Burgkunstadt is a medium-sized non-profit organization based in Germany that provides comprehensive social services for people with disabilities. Their offerings include housing, education, employment, open help, leisure activities, day care, accompanying services, care, and pastoral care. The website reflects a well-structured and professionally maintained digital presence, leveraging auctores CMS and common web technologies such as jQuery and Bootstrap. The site is mobile-optimized and accessible, with clear navigation and relevant content for its target audience. From a security perspective, the website employs HTTPS with good SSL configuration and includes CSRF tokens in forms, indicating attention to basic security practices. However, it lacks several important security headers and does not provide explicit incident response or vulnerability disclosure information. Privacy compliance is supported by a comprehensive GDPR-aligned privacy policy, though no explicit cookie consent mechanism is observed. Contact information is clearly presented, including phone numbers and a company email address, enhancing business credibility. Overall, the website is trustworthy and safe, with no adult or explicit content detected. The domain registration data aligns well with the website's content and business purpose, supporting legitimacy. Strategic improvements in security headers, incident response transparency, and cookie consent would further enhance the site's security posture and compliance. The organization maintains active social media channels on Facebook, YouTube, and Instagram, supporting community engagement and outreach.

K

Katholischer Deutscher Frauenbund Landesverband Bayern e.V.

frauenbund-bayern.de

55

The Katholischer Deutscher Frauenbund Landesverband Bayern e.V. is a well-established non-profit organization dedicated to advocating for women's equality in church, society, and politics within Bavaria, Germany. Founded in 1911, it offers a range of services including educational programs, social initiatives, publications, and campaigns to empower women. The website reflects a mature digital presence with clear branding, consistent messaging, and active engagement through social media channels. Technically, the site is built on WordPress with modern plugins and integrations such as Gravity Forms and Captcha.eu, ensuring functional user interaction and spam protection. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security headers and explicit incident response documentation. Overall, the site is trustworthy, compliant with GDPR, and serves its target audience effectively.