Security Directory

A

Autohaus Heydasch GmbH

nissan-heydasch-worms.de

49

Autohaus Heydasch GmbH is an established automobile dealership located in Worms, Germany, serving as an official Nissan partner. The company offers a wide range of services including new and used car sales, vehicle trade-ins, service bookings, and maintenance. Their market position is that of a trusted local Nissan dealership catering to private and commercial customers. The website reflects a professional business model focused on automotive sales and services with clear contact channels and customer engagement features. Technically, the site is built on modern frameworks such as React and Next.js, ensuring a responsive and user-friendly experience. Privacy compliance is well addressed with GDPR-aligned policies and a visible data protection officer contact. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response information are absent. Overall, the website is trustworthy, well-structured, and suitable for its target audience.

S

Schwäbischer Turnerbund (STB) e.V.

stb.de

53

The Schwäbischer Turnerbund (STB) e.V. is a well-established non-profit sports federation based in Stuttgart, Germany, serving sports clubs, volunteers, and various age groups including children, youth, and seniors. The organization offers a broad range of services including education, event organization, fitness and health programs, and support for member clubs. Their market position is strong regionally within Baden-Württemberg, supported by a professional and content-rich website. The digital infrastructure is based on TYPO3 CMS with modern technologies and integrations such as Usercentrics for consent management and Matomo for analytics, hosted on a reputable provider (Hetzner).

M

Mapp

mapp.com

51

Mapp is a well-established marketing cloud technology company founded in 2003, offering AI-powered digital analytics, marketing automation, and multi-channel campaign management solutions. The company targets businesses seeking to leverage customer data for personalized marketing across email, SMS, apps, and websites. With over 3500 brands trusting their platform and a recent acquisition of Dressipi, Mapp positions itself strongly in the retail and e-commerce sectors with a focus on AI-driven personalization. Technically, the website is built on WordPress hosted on AWS infrastructure, utilizing modern JavaScript libraries such as Swiper.js and Slick Carousel for UI components, and integrates multiple analytics and tracking tools including Google Tag Manager, Hotjar, and proprietary Mapp Intelligence. The site is well optimized for SEO, mobile responsiveness, and accessibility, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS, employs domain registration protections, and uses a consent management platform (Usercentrics) to comply with privacy regulations. However, DNSSEC is not enabled, and explicit security headers are not detected, indicating room for improvement. No critical vulnerabilities or exposed sensitive data were found. Overall, Mapp demonstrates a strong business credibility and technical maturity with good privacy compliance. The website content is professional and safe for general audiences. Strategic recommendations include enabling DNSSEC, publishing a dedicated security policy, and enhancing security headers to further strengthen the security posture.

S

SEFE

sefe.eu

68

SEFE is a European energy company focused on securing reliable energy supply through trading, sales, infrastructure, and services across gas, power, and hydrogen sectors. The company positions itself as a key player in enhancing energy security and accelerating the transition to a low-carbon future in Europe. Their website reflects a professional and comprehensive digital presence with detailed sections on company strategy, sustainability, portfolio, and career opportunities. Technically, the website employs modern web technologies including ES6 JavaScript modules, jQuery, and integrates a GDPR-compliant cookie management platform (Usercentrics). Google Tag Manager is used for analytics and tracking, indicating a mature digital marketing approach. Security-wise, the site uses HTTPS and shows evidence of good security practices, although explicit security headers are not fully visible in the HTML content. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is common for corporate domains, and no suspicious patterns were found. Overall, the website is trustworthy, well-designed, and compliant with privacy regulations.

T

Tucher Privatbrauerei

tucher-privatbrauerei.de

67

Tucher Privatbrauerei is a historic German brewery established in 1672, specializing in the production and distribution of premium beer products primarily targeted at mature audiences. The company maintains a strong market position as a national premium beer manufacturer with a focus on craftsmanship, reliability, and tradition. Their website reflects this heritage with professional design, clear navigation, and content emphasizing their brand values and product range. The site includes age verification to comply with alcohol advertising regulations and links to responsible drinking campaigns, underscoring their commitment to social responsibility. Technically, the website employs modern web technologies including Google Tag Manager for analytics and Usercentrics for consent management, ensuring GDPR compliance. The site is mobile-optimized with good SEO practices and moderate performance. However, no CMS or hosting provider details were detected, and accessibility features are basic. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of explicit security headers and a vulnerability disclosure page suggests room for improvement. From a security perspective, the site shows good compliance with privacy regulations and responsible data handling, but lacks explicit incident response contacts and security.txt files. No vulnerabilities or suspicious domains were detected. The WHOIS data confirms the domain's legitimacy and consistency with the business claims, supporting a high trustworthiness rating. Overall, the website presents a professional and trustworthy digital presence for Tucher Privatbrauerei, with strong compliance and security foundations. Strategic recommendations include enhancing security headers, publishing incident response information, and improving accessibility to further strengthen their security posture and user trust.

T

Tucher

tucher.de

64

Tucher is a historic German brewery established in 1855, specializing in the production and promotion of traditional beers such as Weizenbier and Rotbier. The website reflects a mature, professional brand targeting adult consumers with a focus on cultural heritage and responsible alcohol consumption. The company maintains a moderate digital presence with social media integration and offers brewery tours and engagement initiatives. Technically, the website employs modern JavaScript libraries and consent management tools, ensuring GDPR compliance and user privacy. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies or incident response contacts. Overall, the site is well-structured, mobile-optimized, and trustworthy, with no signs of blocking or WAF interference.

C

Centigrade GmbH

centigrade.de

48

Centigrade GmbH is a medium-sized German technology company specializing in human-centered IT solutions, focusing on digital product development, UX design, software engineering, and AI integration. The company serves business clients seeking to enhance user experience and digital transformation success. Their website reflects a mature digital presence with comprehensive service descriptions, client references, and industry awards, positioning them as a reputable player in the UX and software engineering consultancy market. Technically, the website employs a modern tech stack including jQuery, lazy loading, Google Analytics with privacy features, and a consent management platform (Usercentrics). The site is mobile-optimized, accessible, and SEO-friendly, though it appears to use a custom or proprietary CMS. Performance is moderate, with good user experience and navigation clarity. From a security perspective, the site enforces HTTPS, uses consent management for GDPR compliance, and implements form validation with required privacy consent. However, it lacks explicit security policies, incident response information, and security.txt files. No critical vulnerabilities or exposed sensitive data were detected, indicating a solid security posture but with room for improvement in transparency and security headers. Overall, the website is professional, trustworthy, and compliant with privacy regulations. The risk level is low, but strategic enhancements in security documentation and incident response readiness are recommended to further strengthen trust and compliance.

H

Haufe-Lexware GmbH & Co. KG

advolux.de

68

Haufe-Lexware GmbH & Co. KG operates the Advolux website, offering specialized legal practice management software tailored for law firms in Germany. The company is a subsidiary of Haufe Group SE, a well-established entity headquartered in Freiburg im Breisgau. Advolux provides a comprehensive suite of digital tools including document management, deadline tracking, and integration with the German electronic lawyer mailbox (beA), supporting both cloud and on-premises deployments. The website demonstrates a strong market position with professional branding, extensive feature descriptions, and customer testimonials, targeting legal professionals seeking efficient digital solutions.

D

dm drogerie markt s.r.o.

activebeauty.cz

57

The website www.activebeauty.cz is an online magazine operated by dm drogerie markt s.r.o., focusing on beauty, health, lifestyle, and family content targeted at a general audience in the Czech Republic. It serves as a brand engagement platform complementing dm's retail operations, offering articles, tutorials, recipes, and travel tips. The site demonstrates consistent branding aligned with dm drogerie markt and maintains a professional content presentation. Technically, the site uses modern JavaScript libraries including jQuery and Usercentrics for consent management, with a custom CMS backend inferred. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, which limits domain trust assessment; however, the website's content quality, branding, and social media presence strongly indicate legitimacy. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Contact information is available via a contact form, but no direct emails or phone numbers are publicly listed. Overall, the site is a trustworthy, professionally maintained content platform supporting dm drogerie markt's brand presence in the Czech market, with recommendations to enhance security headers and provide clearer terms of service for improved compliance and trust.

M

Magyarország Kormánya

startolj-ra.hu

62

The website startolj-ra.hu is an official Hungarian government platform dedicated to promoting and providing information about the FIX 3% Lakáshitel program, a state-supported housing loan initiative for first-time homebuyers. The site offers comprehensive details about eligibility, loan conditions, and related news, supported by multimedia content such as embedded YouTube videos and downloadable resources. It targets Hungarian residents seeking affordable housing finance solutions, emphasizing accessibility and clarity. Technically, the site is built as a modern Angular single-page application, leveraging Google Tag Manager for analytics and Usercentrics for GDPR-compliant cookie consent management. The platform demonstrates strong digital maturity with responsive design, good SEO practices, and accessibility considerations. Hosting details are not explicit but performance is fast and user experience is smooth. From a security perspective, the site enforces HTTPS, employs standard security headers, and integrates a consent management platform to ensure privacy compliance. No critical vulnerabilities or exposed sensitive data were detected. Incident response contact is provided via a dedicated email address, though a formal security policy or vulnerability disclosure page is absent. Overall, the website presents a trustworthy, professional, and well-maintained digital presence for a significant government housing program. It effectively balances user engagement, compliance, and security, making it a reliable resource for its target audience.

N

NOVASOL

novasol.us

68

NOVASOL is a well-established European vacation rental provider with a history dating back to 1968. It offers a broad portfolio of holiday homes across 18 countries, targeting vacationers seeking unique and comfortable holiday experiences. The company operates under the Awaze Group, enhancing its market credibility and reach. The website is professionally designed, mobile-optimized, and leverages modern web technologies including React (Next.js), Google Tag Manager, and AppsFlyer for marketing and analytics. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms implemented. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. WHOIS data is unavailable, which slightly impacts trust but is mitigated by the company's established brand and parent company association. Overall, the website and business demonstrate a mature digital presence with good security and privacy practices.

N

NOVASOL

novasol.se

63

NOVASOL is a well-established European holiday rental company offering a wide range of cottages, houses, and apartments across 19 countries. With a history dating back to 1968 and a large inventory of over 50,000 properties, NOVASOL positions itself as a trusted and comprehensive provider in the hospitality sector. The website reflects a mature digital presence with modern technologies such as React and Next.js, integrated analytics, and marketing tools. Security measures including HTTPS, CSP, and reCAPTCHA Enterprise are implemented, indicating a strong security posture. However, explicit security policies and incident response information are not publicly available, which could be improved to enhance trust. Overall, the site is professional, user-friendly, and compliant with privacy regulations, serving a broad consumer audience seeking holiday rentals in Europe.

N

NOVASOL

novasol-vacances.fr

63

NOVASOL is a well-established European vacation rental company offering a wide range of holiday homes including villas, houses, and apartments across multiple European countries. The website is professionally designed with a clear focus on user experience, mobile optimization, and accessibility. It leverages modern web technologies such as React and Next.js, and integrates advanced analytics and monitoring tools including Google Tag Manager, New Relic, and Usercentrics for privacy compliance. Security measures are robust, with HTTPS enforced, content security policies, and reCAPTCHA Enterprise implemented to protect user interactions. However, the absence of publicly available WHOIS data suggests privacy protection, which is justified for this business type. Overall, the site demonstrates a mature digital presence with good compliance and security posture.

H

HUMANIC

humanic.at

64

HUMANIC operates as a large-scale retail e-commerce platform specializing in shoes, bags, and accessories primarily targeting the Austrian market. The website presents a professional and consistent brand image with clear product offerings and customer incentives such as free shipping and newsletter bonuses. The technical infrastructure includes common analytics and consent management tools, indicating a moderate level of digital maturity. However, the absence of WHOIS data and domain registration details raises concerns about domain legitimacy and transparency. Security posture is moderate with HTTPS likely enabled but lacking visible security headers and explicit privacy or cookie policies. Overall, the website is functional and trustworthy from a user perspective but would benefit from enhanced transparency and security practices.

N

NOVASOL

novasol.at

73

NOVASOL is a well-established European vacation rental company specializing in holiday homes and apartments across Europe, with a strong focus on Denmark. Owned by the parent company Awaze, NOVASOL leverages over 50 years of experience to provide a wide selection of vacation properties. The website is professionally designed, mobile-optimized, and uses modern technologies such as Next.js, Google Tag Manager, and reCAPTCHA Enterprise to ensure a smooth user experience and security. Privacy and cookie policies are present with consent management, supporting GDPR compliance. Security posture is strong with HTTPS, security headers, and bot protection, though explicit security policies and incident response contacts are not publicly disclosed. WHOIS data confirms the legitimacy and consistency of the domain registration. Overall, NOVASOL presents a trustworthy and professional online presence suitable for its target audience of European vacationers.

G

GetYourGuide

getyourguide.at

65

GetYourGuide operates as a leading global online marketplace specializing in booking tours, attractions, and travel activities worldwide. The platform targets travelers seeking convenient and direct access to local experiences, positioning itself strongly in the hospitality sector with a large-scale digital presence. The website demonstrates a mature technical infrastructure leveraging modern JavaScript frameworks, third-party analytics, and fraud prevention technologies, ensuring a fast, responsive, and user-friendly experience. Security posture is robust with HTTPS, Content Security Policy, and consent management integrated, although no explicit incident response or vulnerability disclosure pages were found. The absence of WHOIS data slightly impacts trust but is likely due to privacy protection measures common in large enterprises. Overall, the site is professional, secure, and compliant with GDPR, making it a trustworthy platform for travel bookings.

R

Radio Bielefeld

radiobielefeld.de

44

Radio Bielefeld is a regional German radio station offering a mix of local news, music, podcasts, and community engagement. The website serves as a digital platform to complement its broadcasting services, featuring news articles, program schedules, and advertising opportunities. The station holds a recognized certification (Radiosiegel) indicating trustworthiness in the media sector. Technically, the site is built on TYPO3 CMS with modern web technologies and integrates multiple third-party services for analytics, advertising, and user consent management, reflecting a mature digital infrastructure. Security posture is solid with HTTPS, consent management, and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site is professional, compliant with GDPR, and safe for general audiences.

О

ООО “Solvas”

solvas.uz

67

ООО “Solvas” operates as a regional branch of ALSO Holding AG, focusing on delivering Microsoft cloud solutions and related services in Uzbekistan and the broader EMEA region. The website presents a professional business offering including licensing, support, and integration of Microsoft products such as Microsoft 365, Azure, and Dynamics. The company leverages its parent group's extensive network and expertise to provide localized support and advanced cloud technologies. Technically, the website uses a proprietary CMS with modern but somewhat dated JavaScript libraries and frameworks, ensuring a functional and responsive user experience. Privacy compliance is well addressed with clear policies and a consent management platform. Security posture is adequate but could be improved by adding explicit security headers and publishing incident response information. The absence of WHOIS data limits domain trust verification, but the strong corporate branding and contact information support legitimacy. Overall, the site is a credible, business-focused platform with room for technical and security enhancements.

A

ALSO Cloud UK

also.co.uk

74

ALSO Cloud UK operates a comprehensive cloud marketplace platform targeting B2B customers such as MSPs, system integrators, and corporate clients. The platform offers white-label capabilities, automated provisioning, billing, and extensive cloud services including Microsoft and Adobe integrations. The company is positioned as a leading technology provider in the European ICT sector with a strong brand presence and professional digital assets. Technically, the website employs a mature tech stack including Bootstrap, jQuery, and advanced analytics tools, supported by a consent management platform ensuring GDPR compliance. Security posture is solid with HTTPS and privacy controls, though improvements in HTTP security headers and form protections are recommended. WHOIS data is unavailable, slightly impacting domain trust, but overall the website demonstrates high professionalism and business credibility.

A

ALSO Schweiz AG

also.ch

73

ALSO Schweiz AG operates a comprehensive B2B technology distribution platform serving approximately 120,000 resellers with hardware, software, and IT services from over 700 vendors. The company is positioned as a leading technology provider in Europe, offering a broad portfolio including cloud services, cybersecurity, virtualization, and AI solutions. The website reflects a mature digital infrastructure with modern technologies and integrated marketing and analytics tools, supported by a consent management platform ensuring GDPR compliance. Security posture is strong with HTTPS enforcement and no visible vulnerabilities, though improvements in security headers and incident response transparency are recommended. Overall, the site demonstrates professionalism, trustworthiness, and a clear business focus on B2B technology distribution and services.

A

ALSO Technology Ljubljana d.o.o

also.si

68

ALSO Technology Ljubljana d.o.o is a prominent ICT technology provider operating primarily in Slovenia and across Europe through a vast partner network. The company offers a comprehensive ecosystem of hardware, software, and IT services sourced from over 700 suppliers, supporting approximately 120,000 resellers. Their business model focuses on B2B distribution, customized IT solutions, and cloud-based services, positioning them as a leading player in the European technology market. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support, emphasizing ALSO's commitment to sustainable and innovative IT solutions. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and various specialized JavaScript libraries for UI and analytics. It uses a proprietary CMS platform (CMS5) and integrates multiple tracking and marketing tools such as Webtrekk, Google Ads, Facebook Pixel, and Usercentrics for consent management. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some improvements in security headers and incident response documentation are recommended. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, indicating compliance with GDPR and privacy regulations. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for enhancement in security transparency and readiness. The lack of WHOIS data limits domain registration trust verification, but the overall professional presentation and external references support the site's legitimacy. Overall, ALSO Technology Ljubljana d.o.o's website is a well-structured, secure, and privacy-conscious platform that effectively supports its business objectives. Strategic recommendations include enhancing security headers, publishing incident response information, and improving WHOIS transparency to further strengthen trust and compliance.

A

ALSO Technology SRL

also.ro

68

ALSO Technology SRL is a prominent B2B technology provider operating in Romania and across Europe, offering a comprehensive portfolio of hardware, software, and IT services. The company supports a large reseller ecosystem and focuses on sustainable IT solutions including cloud services, cybersecurity, virtualization, and AI platforms. The website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to business partners and resellers. Technically, the site employs a modern technology stack including Bootstrap, jQuery, and advanced tracking and marketing tools integrated with user consent management, ensuring compliance with GDPR. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. WHOIS data is unavailable, which slightly impacts trust but the overall business credibility remains high due to consistent branding and comprehensive legal disclosures.

A

ALSO Portugal Unipessoal Lda.

also.pt

66

ALSO Portugal Unipessoal Lda. operates as a prominent technology provider in Portugal, specializing in IT product distribution, e-commerce supply, and cloud marketplace services. The company targets B2B customers and IT resellers, offering a broad portfolio of IT brands and cloud solutions through its ALSO Cloud Marketplace platform. The website reflects a professional and consistent brand presence with clear business information and a focus on partner engagement. Technically, the website employs a mature technology stack including Bootstrap, jQuery, and various analytics and marketing tools such as Webtrekk, Google Ads, Facebook Pixel, LinkedIn Insight Tag, and Marketo. The site uses a consent management platform (Usercentrics) to ensure GDPR compliance. Performance and mobile optimization are moderate to good, with room for improvement in accessibility. From a security perspective, the site uses HTTPS and cookie consent mechanisms but lacks visible security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The domain WHOIS data aligns well with the business identity, supporting legitimacy. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic improvements in security transparency and accessibility would enhance trust and resilience.

A

ALSO AS

also.no

67

ALSO AS operates as a major B2B technology distributor in Norway, offering a comprehensive ecosystem of hardware, software, and IT services through a vast network of approximately 120,000 resellers and over 700 suppliers. The company targets IT resellers and service providers, positioning itself as a key partner in the technology distribution market. The website reflects a mature digital presence with structured navigation, supplier microsites, and extensive product categorization. Technically, the site employs a custom CMS (Pegasos) with modern JavaScript libraries and frameworks such as jQuery, Bootstrap, and Usercentrics for consent management, indicating a moderate to advanced digital infrastructure. Security posture is adequate with HTTPS usage and cookie consent mechanisms, though the absence of visible security headers suggests room for improvement. The lack of WHOIS data limits domain trust verification, but the professional content and business focus mitigate concerns. Overall, the site is well-structured, compliant with GDPR, and suitable for its B2B audience.

S

Solvas

solvas.kz

69

Solvas is a Kazakhstan-based company operating as part of the ALSO group, a leading Microsoft cloud solutions provider in the EMEA region. The company focuses on delivering cloud-based Microsoft products and services including Microsoft 365, Azure, Teams, and Dynamics, targeting business partners and enterprises. Their offerings include licensing, subscription management, security reporting, and API integrations, supported by a local office in Almaty. The website reflects a professional and consistent brand presence aligned with ALSO Holding AG. Technically, the website employs a modern but somewhat dated technology stack including jQuery 2.1.3, Bootstrap 3.3.4, and various UI libraries. It uses a custom CMS and integrates third-party services such as Usercentrics for consent management and Marketo for marketing forms. The site is mobile optimized and SEO friendly but could improve accessibility and performance. No hosting provider or SSL configuration details were found in the data. Security posture is moderate with HTTPS implied but no explicit security headers detected in the provided data. The site implements GDPR-compliant privacy and cookie policies with a consent mechanism. However, no dedicated security or incident response policies are published. WHOIS data is unavailable, which slightly reduces trust but the strong brand association with ALSO Holding AG mitigates concerns. Overall, the website is professional, secure, and compliant with privacy regulations, serving a clear business purpose in cloud solutions distribution. Strategic improvements in security headers, incident response transparency, and WHOIS data clarity would enhance trust and security posture.

A

ALSO Hungary Kft.

alsohungary.hu

66

ALSO Hungary Kft. is a leading ICT technology service provider operating in 30 European countries and globally through PaaS partners in 143 countries. The company offers a broad portfolio of hardware, software, and IT services across more than 1450 product categories, targeting resellers and enterprise customers. Their business model integrates supply chain management, tailored IT solutions, and cloud-based services including cybersecurity and AI platforms. The website reflects a mature digital presence with comprehensive content, clear navigation, and consistent branding aligned with the parent ALSO Group. Technically, the site employs a modern technology stack including jQuery, Bootstrap, and advanced tracking and consent management tools, ensuring a good user experience and compliance with privacy regulations. Security posture is solid with HTTPS and consent-based script loading, though security headers and incident response details are not explicitly visible. WHOIS data is unavailable, which limits domain trust verification, but the overall digital footprint and business information support legitimacy.

A

ALSO France S.A.S.

alsofrance.fr

68

ALSO France S.A.S. operates as a major B2B technology distributor and service provider in the IT and Telecom sectors, serving a large reseller network across Europe and globally. The company offers a broad portfolio of hardware, software, and cloud services, supported by a robust e-commerce platform and a cloud marketplace. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored for business partners and resellers. Technically, the site employs a modern technology stack including jQuery, Bootstrap, and Usercentrics for consent management, ensuring compliance with privacy regulations. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and explicit incident response information is lacking. Overall, the domain WHOIS data is unavailable, which slightly impacts trust but the website's professionalism and business signals support legitimacy.

A

ALSO Finland Oy

also.fi

65

ALSO Finland Oy operates a large B2B marketplace focused on technology products and IT services, serving approximately 120,000 resellers with offerings from over 700 suppliers across 1,450 product categories. The company positions itself as a key regional distributor and service provider in Finland's technology sector, providing hardware, software, cloud, and digital services. The website reflects a mature digital infrastructure with a custom CMS, modern JavaScript libraries, and integration of multiple analytics and marketing tools, including Webtrekk, Google Ads, Facebook Pixel, and LinkedIn Insight Tag, all managed with a GDPR-compliant consent mechanism. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit incident response information are absent. The WHOIS data is unavailable, which slightly impacts trust but is mitigated by the professional presentation and extensive business content. Overall, the site is well-structured, user-friendly, and targeted at B2B technology resellers and partners.

A

ALSO A/S

also.dk

70

ALSO A/S operates a large B2B e-commerce platform specializing in IT hardware, software, and services distribution primarily in Denmark. The company supports a vast ecosystem of approximately 120,000 resellers and over 700 suppliers, offering products across more than 1450 categories. The website is professionally designed with a clear focus on B2B customers, featuring extensive navigation and supplier-specific microsites. Technically, the site employs a modern JavaScript stack including jQuery, Bootstrap, and custom Pegasos framework components, alongside advanced analytics and consent management tools. Security posture is moderate with HTTPS implied and cookie consent managed via Usercentrics, but lacks visible security headers and explicit security policies. WHOIS data is unavailable, limiting domain trust assessment. Overall, the site demonstrates a mature digital presence suitable for a large IT distributor but could improve transparency and security practices.

A

ASVÖ Salzburg

asvoe-sbg.at

52

ASVÖ Salzburg is a regional non-profit umbrella sports association representing over 380 member clubs in Salzburg, Austria. It provides advisory and service functions, supports sports clubs with legal, tax, and sports-specific questions, and manages various projects and funding programs. The website reflects a well-established organization with a clear focus on community sports development and member support. The target audience includes sports clubs, officials, trainers, and athletes within the Salzburg region. Technically, the website is built on TYPO3 CMS, utilizing modern JavaScript libraries such as jQuery, fancybox, and slick slider for enhanced user experience. The site is mobile-optimized and includes a cookie consent mechanism via Usercentrics, demonstrating compliance with GDPR requirements. Google Analytics 4 is used for visitor tracking with consent. From a security perspective, the site enforces HTTPS and uses a consent management platform for privacy compliance. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns well with the website's claims, supporting legitimacy and trustworthiness. Overall, the website presents a professional and trustworthy digital presence for a regional non-profit sports association, with good content quality, technical implementation, and privacy compliance. Security posture is adequate but could be improved by adding security headers and incident response information.

S

Sportstiftung Hessen

sportstiftung-hessen.de

57

Sportstiftung Hessen is a regional non-profit foundation dedicated to supporting young athletes and trainers in the Hessen region of Germany. The foundation provides financial aid, scholarships, and advisory services to foster athletic talent, focusing on Olympic, Paralympic, Deaflympic, Special Olympics, and World Games disciplines. The website reflects a well-structured and professionally designed digital presence, leveraging modern web technologies including Webflow CMS, Usercentrics for consent management, and accessibility tools like eyeAble. The content is primarily in German and targets athletes, trainers, and sports supporters within Hessen. Security posture is strong with HTTPS enforced and GDPR compliance mechanisms in place, although explicit security policies and incident response contacts are not published. Overall, the website is trustworthy, accessible, and aligned with its mission to promote sports excellence in Hessen.

D

Deutsche Apotheker- und Ärztebank

apobank.de

70

Deutsche Apotheker- und Ärztebank (apoBank) is a specialized financial institution serving healthcare professionals and their organizations in Germany. The website clearly communicates its banking and financial services tailored to this niche, including accounts, financing, asset management, and insurance products. The bank positions itself as the leading financial service provider in the healthcare sector, targeting professionals such as pharmacists, doctors, and related entities. The business model focuses on specialized banking solutions with a strong emphasis on customer service and sector expertise. Technically, the website is built on a modern infrastructure using Magnolia CMS, jQuery UI, and integrates consent management via Usercentrics and CAPTCHA protection through FriendlyCaptcha. The site is hosted on UltraDNS name servers and employs HTTPS with proper security headers, ensuring secure and reliable access. The design is professional, mobile-optimized, and accessible, providing a positive user experience. From a security perspective, the site demonstrates good practices including HTTPS enforcement, CAPTCHA on forms, and privacy compliance with GDPR. However, there is room for improvement by adding additional security headers and publishing incident response contacts or a security.txt file. No vulnerabilities or suspicious content were detected. Overall, the apoBank website is a trustworthy, professional, and secure platform that aligns well with its business goals and regulatory requirements. It effectively serves its target audience with clear communication and robust technical implementation.

G

Guémas Immopro

guemas.fr

58

Guémas Immopro is a French real estate company specializing in commercial properties such as offices, activity spaces, and parking in cities including La Rochelle, Paris, and Bordeaux. The website is professionally designed using the Wix platform, featuring modern web technologies and a cookie consent mechanism via Usercentrics, indicating some level of GDPR compliance. However, the absence of explicit privacy and terms of service pages and lack of visible contact information limit transparency. The WHOIS data for the domain is unavailable, which raises concerns about domain registration legitimacy and age, especially given the company's claim of 30 years in business. Security posture is moderate with HTTPS implied but no detected security headers or advanced protections. Overall, the website presents a professional front but would benefit from enhanced transparency and security measures.

F

FOOBY

fooby.ch

66

FOOBY is a culinary content platform operated under the Swiss retail giant Coop, offering recipes, cooking inspiration, and community engagement. The website targets general consumers interested in cooking and food culture, providing a rich set of features including recipe categories, cooking school content, and interactive tools like menu configurators and apps. The platform is well-branded and consistent with Coop's retail identity, positioning FOOBY as a trusted source for culinary content in Switzerland. Technically, the website employs modern web technologies including service workers, consent management via Usercentrics, and tag management with Tealium, indicating a mature digital infrastructure. However, explicit privacy policies and terms of service pages were not found in the analyzed content, which is a gap in compliance and transparency. Security posture is generally good with HTTPS and service workers, but lacks visible security headers and incident response contacts. Overall, FOOBY presents a professional, trustworthy, and content-rich platform with room for improvement in privacy and security disclosures.

C

Christliche Ostmission

ostmission.ch

66

Christliche Ostmission is a Swiss-based non-profit organization dedicated to combating human trafficking, promoting education and business development, and providing direct aid in emergency situations primarily in Eastern Europe. The organization has a strong market position supported by over 50 years of history and recognized certifications such as the Ehrenkodex SEA. Their website reflects a professional and trustworthy presence with clear calls to action for donations and volunteer engagement. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes a consent management platform for GDPR compliance. Security posture is solid with HTTPS and privacy-conscious analytics, though there is room for improvement in security headers and incident response transparency. Overall, the website is well-structured, accessible, and compliant with privacy regulations, supporting the organization's credibility and donor confidence.

R

ROTTLER

rottler.de

69

ROTTLER is a German retail and service company specializing in optical and hearing products including eyeglasses, sunglasses, hearing aids, and contact lenses. The company operates both physical stores and an online shop, targeting end customers in Germany seeking vision and hearing solutions. The website is professionally designed, content-rich, and well-structured, providing comprehensive product information, offers, and appointment booking services. Technically, the site is built on the HubSpot CMS platform, leveraging modern JavaScript frameworks and marketing tools such as Google Tag Manager and Usercentrics for consent management. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.

A

ALSO Holding AG

also.com

74

ALSO Holding AG operates as a leading technology provider specializing in comprehensive IT solutions for SMB resellers, offering a broad portfolio including webshop services, cloud marketplace, AI, IoT, cybersecurity, and value-added services. The company targets IT partners and resellers, positioning itself as a central ecosystem player in the ICT industry with enterprise scale and a strong presence in Switzerland. The website reflects a mature digital infrastructure utilizing modern JavaScript libraries, consent management, and analytics tools, indicating a high level of digital maturity and compliance with privacy regulations. Security posture is solid with HTTPS enforcement and consent mechanisms, though lacks explicit published security policies and incident response contacts. Overall, the site is professional, trustworthy, and well-structured, supporting the company's market position effectively.

G

Göttingen Tourismus

goettingen-marketing.de

69

Göttingen Tourismus operates a comprehensive and professionally designed official tourism website for the city of Göttingen, Germany. The site provides extensive information on local attractions, events, accommodations, and cultural offerings, targeting tourists, families, and business visitors. The business model focuses on destination marketing and visitor engagement through digital content, event promotion, and booking facilitation. The website demonstrates strong branding consistency and trust indicators, including social media integration and structured data usage. Technically, the site is built on WordPress with modern plugins such as Yoast SEO, Oxygen Builder, and Usercentrics for cookie consent management. It employs various third-party services for analytics (etracker), booking (Regiondo), and email marketing (Sendinblue). The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate and could benefit from further optimization. From a security perspective, the website enforces HTTPS and uses cookie consent mechanisms aligned with GDPR. While no critical vulnerabilities or exposed sensitive data were detected, the site lacks explicit security headers and a published security policy or incident response contact. The WHOIS data is consistent with the website's official nature, showing no suspicious patterns or privacy protection that would raise concerns. Overall, Göttingen Tourismus presents a low-risk, trustworthy online presence with good privacy compliance and a solid technical foundation. Strategic improvements in security headers and incident response transparency could further enhance its security posture.

D

D.SPORTS

d-sports.de

50

D.SPORTS is a German sports-related website powered by TYPO3 CMS, targeting a general audience interested in sports activities or services. The website employs modern technologies such as Google Tag Manager for analytics and Usercentrics for cookie consent management, indicating a moderate level of digital maturity. However, the absence of explicit privacy policies, terms of service, and clear contact information suggests room for improvement in compliance and user trust. The security posture is adequate with HTTPS enabled and no detected blocking mechanisms, but lacks comprehensive security headers and incident response details. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices to improve trust and compliance.

Schleswig-Holstein Netz GmbH operates as a regional energy network operator serving Schleswig-Holstein and parts of Nordniedersachsen in Germany. The company provides essential services including electricity and gas network connections, energy feed-in, and customer support portals. The website is professionally designed, well-structured, and targets both residential and commercial customers in the energy sector. The presence of multiple customer portals and detailed service information indicates a mature digital presence. Technically, the site leverages modern JavaScript frameworks like React, integrates consent management via Usercentrics, and uses analytics tools such as Matomo and Google Tag Manager, reflecting a good level of digital maturity. Security posture is strong with HTTPS enforced, consent mechanisms in place, and no obvious vulnerabilities detected. However, the absence of publicly available WHOIS registration data for the domain www.sh-netz.com raises concerns about domain legitimacy and ownership transparency. This discrepancy should be addressed to improve trust. Overall, the site is a reliable and professional resource for energy network customers but would benefit from clearer domain registration information and enhanced security policy disclosures.

M

Messe München GmbH

bauma.de

61

The bauma.de website represents the official online presence of the bauma trade fair, the world's leading exhibition for construction, mining, and building machinery. Managed by Messe München GmbH, the site serves a global audience of exhibitors, visitors, and journalists, providing comprehensive information about the event, including dates, exhibitor directories, programs, and visitor services. The business model centers on event organization and industry networking, positioning bauma as a key innovation and market platform in the manufacturing and transportation sectors. Technically, the website employs modern web technologies such as JavaScript ES modules, web components, and cloud-based hosting via Amazon Cloudfront and Azure Elastic Cloud, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and GDPR-compliant cookie consent mechanisms, although explicit security policies and incident response contacts are not prominently published. Overall, the site is professional, trustworthy, and well-aligned with industry standards, with no detected vulnerabilities or suspicious elements.

H

Haufe-Lexware GmbH & Co. KG

lexfree.de

70

Haufe-Lexware GmbH & Co. KG operates the website lexware.de, providing comprehensive business software solutions primarily targeting small and medium-sized enterprises, freelancers, and founders in Germany. The company is a market leader with over 360,000 customers and offers a broad range of services including accounting, invoicing, payroll, e-invoicing, and integrated banking solutions. The website is professionally designed, well-structured, and optimized for mobile devices, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS and leverages modern JavaScript libraries and consent management tools to ensure compliance and user experience. Security posture is strong, with HTTPS enforced, TÜV and ISO certifications, and GDPR compliance clearly demonstrated. No critical vulnerabilities or blocking mechanisms were detected, indicating a secure and trustworthy platform. Overall, the site scores highly on content quality, technical implementation, security, privacy compliance, and business credibility.

P

Penzilla

penzilla.de

67

Penzilla is a German-based company specializing in digital solutions for company pension schemes (betriebliche Altersvorsorge). Their platform offers comprehensive services including contract digitalization, automated administration, and consulting tailored for insurance brokers, HR departments, and large enterprises. The website reflects a mature business with strong branding, client trust signals, and integration capabilities with major HR and payroll systems such as DATEV and SAP. Technically, the site is built on WordPress with Elementor and leverages modern marketing and consent management tools like HubSpot and Usercentrics. Security posture is good with HTTPS and GDPR-compliant cookie consent, though explicit security policies and headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

H

Haufe-Lexware GmbH & Co. KG

lexware.de

70

Lexware, a division of the Haufe Group since 1993, is a leading German software provider specializing in business and accounting software for self-employed individuals, freelancers, and small to medium-sized enterprises. The company offers a comprehensive suite of products including invoicing, bookkeeping, payroll, e-invoicing, and integrated business banking solutions. With over one million customers and multiple industry certifications, Lexware holds a strong market position as a trusted provider in the German SME software market. The website reflects a mature digital presence with modern technologies, strong branding, and extensive customer engagement features.

G

Göttingen Marketing GmbH

einkaufen-in-goettingen.de

65

The website 'Einkaufen in Göttingen' is a professionally developed local city marketing platform operated by Göttingen Marketing GmbH. It serves as a comprehensive shopping and event guide for residents and visitors of Göttingen, focusing on retail, gastronomy, cultural events, and city services. The platform leverages modern web technologies including WordPress and Elementor, with integrations for maps and user consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, cookie consent, and no visible vulnerabilities, although formal security policies and incident response information are absent. Overall, the site is trustworthy, well-branded, and compliant with GDPR requirements, making it a reliable resource for its target audience.

G

Göttingen Pro City e. V.

procity.de

45

Göttingen Pro City e. V. is a small non-profit association dedicated to representing the interests of businesses in the Göttingen city center. Established in 1998, it organizes events, marketing campaigns, and offers member benefits to strengthen the local retail community. The website is professionally designed using WordPress with modern plugins such as Elementor and Yoast SEO, providing good content quality and clear navigation. The technical infrastructure is solid, hosted via INWX, and employs HTTPS with cookie consent managed by Usercentrics. Security posture is adequate but could be improved by adding security headers and explicit privacy and terms of service pages. No critical vulnerabilities or blocking mechanisms were detected, and the site content is safe for general audiences.

G

Göttingen Tourismus

goettingen-tourismus.de

69

Göttingen Tourismus operates an official city tourism website providing comprehensive information on sightseeing, events, accommodations, and cultural offerings in Göttingen, Germany. The site targets tourists, families, and business visitors, positioning itself as the authoritative source for local tourism and city marketing. The business model focuses on destination promotion and visitor engagement through digital content and services such as city tours and newsletters. Technically, the website is built on WordPress with modern plugins and frameworks, optimized for SEO, mobile responsiveness, and accessibility. Privacy compliance is well addressed with GDPR-aligned policies and consent management. Security posture is solid with HTTPS and some best practices, though some security headers could be improved. No critical vulnerabilities or suspicious elements were detected. Overall, the site is professional, trustworthy, and well-maintained, serving its purpose effectively.

N

Norske arkitekters landsforbund

arkitektforbundet.no

71

Norske arkitekters landsforbund (NAL) is a well-established Norwegian non-profit professional association for architects, founded in 2001. The organization focuses on promoting good architecture and representing architects' common interests in Norway. Their services include membership benefits, professional courses, architecture competitions, publications, and political advocacy. The website reflects a mature digital presence with clear navigation, relevant content, and active engagement with its target audience of architecture professionals and students in Norway. Technically, the site uses modern JavaScript libraries, a consent management platform (Usercentrics), Google Analytics, and Google reCAPTCHA to secure forms and comply with privacy regulations. The CMS is Umbraco, indicating a professional content management approach. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security policies and headers could be improved. Overall, the site is trustworthy, professional, and compliant with GDPR requirements.

U

Universitätsklinikum Ulm

uniklinik-ulm.de

65

Universitätsklinikum Ulm is a prominent university hospital in Germany, providing advanced medical care, research, and education. The website reflects a well-structured institution focused on patient services, clinical studies, and academic excellence. The digital infrastructure is built on TYPO3 CMS with modern frontend technologies, ensuring a responsive and accessible user experience. Privacy compliance is robust, leveraging Usercentrics for consent management and self-hosted Matomo for analytics, indicating a strong commitment to data protection. Security posture is good with HTTPS enforced, though the absence of certain security headers suggests room for enhancement. Overall, the domain registration and website content align well, confirming legitimacy and trustworthiness.