Security Directory

The website www.capterra.ca is currently inaccessible due to a Cloudflare security challenge page (Turnstile captcha) that blocks direct access to content. This prevents extraction of any meaningful business, contact, or policy information. The domain WHOIS data is unavailable, indicating privacy protection or non-registration under the exact subdomain. The site is protected by Cloudflare's WAF, which enhances security but limits external analysis. Without access to actual content, the business overview, market position, and services cannot be determined. The technical infrastructure includes Cloudflare security services and standard web technologies, but no CMS or advanced frameworks are detectable. Security posture is difficult to assess fully but benefits from Cloudflare protection. Overall risk assessment is moderate due to lack of accessible data and inability to verify legitimacy fully. Strategic recommendations include obtaining access to full site content for analysis, verifying domain registration details, and ensuring transparency of business and security policies.

P

Paul Mellon Centre

paul-mellon-centre.ac.uk

73

The Paul Mellon Centre is a UK-based non-profit educational charity dedicated to supporting original research into the history of British art and architecture across all periods. The organization offers key services including research support, publishing, events, conferences, grants, and fellowships, targeting academics, researchers, and students interested in British art history. The website reflects a professional and consistent brand image with good content quality and clear navigation, supporting its mission effectively. Technically, the site employs modern web technologies including JavaScript libraries, Google Analytics, and Cookiebot for privacy compliance, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of visible security headers and lack of published security policies suggest room for improvement. WHOIS data is unavailable due to privacy protection, which is justified for this type of organization. Overall, the site is trustworthy, safe, and compliant with GDPR, but could enhance transparency by publishing contact and security-related policies.

C

Cornell University

cornell.edu

67

Cornell University is a prestigious Ivy League private research university offering comprehensive undergraduate, graduate, and professional education across multiple campuses including Ithaca, New York City, and Doha, Qatar. The institution is well-positioned in the education sector with a strong reputation for research and public engagement. The website reflects this stature with rich content, multimedia, and clear navigation targeting students, faculty, alumni, and the general public. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, and integrates analytics and tag management tools to optimize user experience and data collection. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though additional security headers and published security policies could enhance protection. Privacy compliance is robust with clear privacy and cookie policies and GDPR considerations. Overall, the site demonstrates high professionalism and trustworthiness consistent with a leading educational institution.

BDP is a large, internationally recognized multidisciplinary design practice specializing in architecture, engineering, urban planning, and design services. The company positions itself as a leader in creating sustainable and innovative environments, targeting clients in real estate, media, education, and other sectors. The website reflects a mature digital presence with professional branding, multimedia content, and comprehensive project showcases. Technically, the site is built on modern frameworks such as Nuxt.js and Tailwind CSS, with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response information are not publicly available. Privacy compliance is well addressed with clear cookie consent and privacy policies. The absence of WHOIS data limits domain trust assessment, but the overall professional presentation supports legitimacy. Strategic recommendations include publishing security and vulnerability disclosure policies and enhancing contact transparency for data protection officers.

University College London's merchandise website is an official e-commerce platform hosted on Shopify, offering branded products such as clothing, accessories, and stationery targeted at students, staff, alumni, and supporters. The site uses a modern Shopify Dawn theme and integrates various Shopify and third-party scripts for analytics and form management. The domain is newly registered, consistent with a recently launched dedicated merchandise store. Security measures include HTTPS enforcement, domain transfer locks, and hCaptcha for bot protection, though DNSSEC is not enabled and no explicit privacy or cookie policies are present. Overall, the site presents a professional and trustworthy front with room for improvement in privacy compliance and DNS security.

The website represents 건축사공제조합, a Korean cooperative association serving architects with financial products such as insurance, guarantees, loans, and welfare benefits. The site is professionally designed with comprehensive service menus and clear contact information, targeting Korean architectural professionals. Technically, it uses standard web technologies including jQuery and Swiper for UI components, with moderate performance and good mobile optimization. Security posture is moderate with HTTPS usage but lacks visible security headers and cookie consent mechanisms. The absence of WHOIS registration data is a notable concern, potentially indicating a registry or data retrieval issue. Overall, the site is trustworthy and business-focused but would benefit from improved security and privacy compliance measures.

(

(주)현신종합건축사사무소

hyunshin.com

61

The website www.hyunshin.com represents (주)현신종합건축사사무소, a specialized architectural firm in Korea focusing on healthcare facility design and construction supervision. The site is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies such as JavaScript, CSS, and HTML5. The content is primarily in Korean with some English, targeting healthcare and architectural clients in Korea. The business model centers on architectural design and supervision services with a niche in healthcare projects. The website presents a professional design and good user experience but lacks comprehensive privacy, cookie, and contact information pages, which are critical for compliance and trust.

Horizons by heise is a well-established German conference platform focusing on digital transformation, AI, data-driven organizations, and the future of work. It is backed by the reputable heise medien group and targets decision-makers and digital change agents. The website provides comprehensive event information, speaker profiles, and additional content such as podcasts and online meetups. Technically, the site uses modern JavaScript libraries like Swiper and Fancybox, and employs Matomo for privacy-conscious analytics. The hosting is consistent with the domain's WHOIS data, indicating a legitimate and professional setup. Security posture is good with HTTPS enforced and no visible vulnerabilities, though the site lacks some security headers and a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-positioned in its niche.

L

Start – Landesgartenschau Bad Nenndorf 2026

landesgartenschau-badnenndorf.de

48

The website for Landesgartenschau Bad Nenndorf 2026 serves as an informational portal for a regional garden exhibition event in Germany. It provides visitors with event dates, planning updates, and engagement opportunities. The site is built on Joomla CMS and uses modern frontend libraries such as Swiper and Fancybox, indicating a moderate level of technical maturity. However, the absence of privacy and cookie policies, as well as explicit contact information, suggests gaps in compliance and user trust facilitation. Security posture is basic, with no visible security headers or incident response contacts. Overall, the site is functional and informative but would benefit from enhanced privacy, security, and contact transparency to improve trust and compliance.

K

Kassenärztliche Bundesvereinigung (KBV)

116117.de

56

The website www.116117.de is the official patient service platform operated by the Kassenärztliche Bundesvereinigung (KBV) in Germany, providing comprehensive medical on-call services, appointment booking, and healthcare information. It serves as a critical public healthcare resource, offering 24/7 telephone medical advice and digital tools such as symptom assessment and doctor search. The platform is well-positioned as the national gateway for non-emergency medical assistance, targeting patients across Germany. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript with jQuery, hosted on Akamai CDN infrastructure for performance and reliability. The site is mobile-optimized, accessible, and SEO-friendly, with multilingual support and accessibility features such as sign language and easy language options. Privacy and cookie consent mechanisms are robustly implemented, reflecting compliance with GDPR requirements. From a security perspective, the site enforces HTTPS and employs cookie consent banners but lacks explicit security headers and public security policies or incident response disclosures. No vulnerabilities or sensitive data exposures were detected in the content. The WHOIS data and hosting details align with a legitimate, professionally managed government healthcare service domain. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance, with minor recommendations to enhance security headers and publish security policies. The risk profile is low, making it a reliable and safe resource for healthcare information and services in Germany.

C

Collectivité européenne d'Alsace

alsace.eu

68

The Collectivité européenne d'Alsace (CeA) is a regional governmental entity serving the Alsace region in France. The website provides comprehensive information about public services, social aid, cultural events, transport, environment, and education, targeting residents and stakeholders of Alsace. The site is well-branded, consistent, and professionally maintained, reflecting its official government status. Technically, the website uses modern web standards including HTML5, CSS3, and JavaScript, with privacy-conscious analytics via Matomo and a cookie consent mechanism powered by OreJime. The site is mobile-optimized and accessible, with good SEO practices and structured data for enhanced search engine understanding. From a security perspective, the site enforces HTTPS and uses script integrity checks but lacks some recommended security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with GDPR-aligned policies and clear cookie consent. Overall, the website presents a low risk profile with high trustworthiness and professionalism. The lack of WHOIS data is due to EURid privacy policies and is typical for .eu domains. Strategic improvements include adding security headers and publishing a security policy or vulnerability disclosure to enhance transparency and security posture.

K

Kraftfahrt-Bundesamt

kba.de

64

The Kraftfahrt-Bundesamt (KBA) website serves as the official digital presence of the German Federal Motor Transport Authority. It provides extensive information and services related to vehicle registration, driver licensing, type approvals, market surveillance, and statistical data. The site targets a broad audience including the general public, automotive professionals, and government entities. The business model is that of a government regulatory and administrative authority with a strong national presence in Germany. The website is well-structured, professionally designed, and consistent with government branding standards.

G

GKV-Spitzenverband

gkv-spitzenverband.de

66

The GKV-Spitzenverband website serves as the official portal for Germany's statutory health and long-term care insurance umbrella organization. It provides comprehensive information on health insurance, care insurance, policy updates, research, and services for insured persons and healthcare providers. The site is well-structured, professionally designed, and offers content in German and English, targeting insured individuals, healthcare professionals, policymakers, and the public. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and Matomo analytics with a strong emphasis on privacy and consent. Security posture is robust with HTTPS enforcement and cookie consent mechanisms, though formal security policies and incident response contacts are not explicitly published. Overall, the site reflects a mature digital presence consistent with a large, government-related healthcare entity.

C

Carl Götz

carlgoetz.de

63

Carl Götz is a medium-sized German company specializing in the retail and distribution of wood products and related construction materials. The website presents a comprehensive catalog of products including panels, wood construction materials, flooring, doors, and garden-related items, targeting both business and private customers. The company maintains multiple physical locations and offers digital services such as customer login, configurators, and sample services. Technically, the website is built on the Shopware CMS platform, uses modern web technologies including Google reCAPTCHA and Google Tag Manager, and is hosted on a reliable DNS provider. Security posture is good with HTTPS enforced and CSRF protection on forms, though additional security headers and policies could enhance protection. Privacy compliance is basic with a cookie consent mechanism but lacks a visible privacy policy or terms of service. Overall, the website is professional, trustworthy, and well-structured, with room for improvement in privacy and security transparency.

B

Bundesministerium für Bildung und Forschung

bne-portal.de

61

The BNE-Portal is an official German government platform managed by the Bundesministerium für Bildung und Forschung (BMBF) dedicated to promoting education for sustainable development (Bildung für nachhaltige Entwicklung - BNE). It serves as a comprehensive resource hub offering educational materials, news, event calendars, and information on funding opportunities. The portal targets educators, learners, policymakers, and the general public interested in sustainability education. Technically, the site is built on the Government Site Builder CMS, employs modern web standards, and is optimized for accessibility and mobile devices. Security-wise, the site uses HTTPS and provides a cookie consent mechanism with anonymized analytics via Matomo, but lacks explicit security policies or incident response contacts. Overall, the site demonstrates a strong professional and trustworthy presence consistent with a government educational service.

D

Deutscher Gründerpreis für Schüler:innen

dgp-schueler.de

56

The Deutscher Gründerpreis für Schüler:innen is a German educational initiative focused on promoting entrepreneurship education among students, primarily targeting those in the 9th grade and above, as well as teachers and Sparkasseninstitutes. The initiative organizes competitions, provides educational materials, and fosters practical learning experiences to sensitize young people to economic topics and entrepreneurial self-employment. The website is professionally designed, well-structured, and consistent with the brand's mission, supported by recognized partners such as Sparkasse, ZDF, Porsche, and others. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with embedded YouTube videos and Google Tag Manager for analytics. The site appears to be built on TYPO3 CMS, indicated by URL patterns and asset naming conventions. Performance and mobile optimization are good, with accessibility features implemented. Privacy compliance is strong, featuring a cookie consent banner and a comprehensive privacy policy aligned with GDPR requirements. From a security perspective, the site uses HTTPS with good SSL configuration and anonymizes IP addresses in analytics. However, no explicit security headers were detected in the HTML content, and there is no visible incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were found. The domain WHOIS data is consistent with the website's purpose, supporting legitimacy. Overall, the website presents a low-risk profile with a solid security posture and good privacy compliance. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding a security.txt file to improve vulnerability disclosure transparency.

The website hostay.fr is currently inaccessible due to a Cloudflare Turnstile CAPTCHA security challenge, which blocks direct access to any business content or information. The domain is registered with Scaleway and uses Cloudflare nameservers, indicating a hosting and security setup consistent with a French-based small business or service. Due to the lack of visible content, no privacy, cookie, or terms of service policies are available, nor is there any contact or security policy information. The technical infrastructure includes modern security measures such as Cloudflare's WAF and CAPTCHA, but the absence of accessible content limits the ability to assess the website's full digital maturity or business model. The security posture is moderate based on the presence of Cloudflare protections, but the lack of visible security headers or policies reduces confidence. Overall, the site is low in trustworthiness and content quality due to the blocking mechanism.

LeadBI is a digital marketing platform offering marketing automation and real-time customer insights, targeting businesses and marketers seeking to enhance their marketing beyond traditional email campaigns. The company is operated by LINK Mobility Italia S.r.l, based in Italy, with a domain registered since 2016, reflecting a mature and stable business presence. The website presents a clean, professional design with good mobile optimization and clear navigation, although it lacks comprehensive privacy and cookie policies, which are critical for compliance and user trust. Technically, the website is hosted on Amazon AWS infrastructure as inferred from DNS nameservers, uses standard HTML5 and CSS3 technologies, and performs moderately well. However, it lacks advanced security headers and DNSSEC, which could improve its security posture. No analytics or tracking scripts were detected, indicating minimal user tracking but also limited marketing analytics integration. From a security perspective, the site uses HTTPS (implied by the login link), but no explicit security policies or incident response information is provided. The WHOIS data shows a consistent and legitimate domain registration without privacy protection, appropriate for the business type. Overall, the security posture is moderate but could be improved by implementing security best practices and compliance documentation. The overall risk is moderate with no critical vulnerabilities detected, but the absence of privacy and cookie policies and security headers are notable gaps. Strategic recommendations include adding comprehensive privacy and cookie policies, enabling DNSSEC, publishing security and incident response policies, and enhancing security headers to improve trust and compliance.

D

Dinas Lingkungan Hidup Kota Semarang

dlhkotasemarang.id

42

Dinas Lingkungan Hidup Kota Semarang is a government environmental agency responsible for managing environmental affairs in Semarang city, Indonesia. The website serves as an official portal providing information about the agency's structure, mission, and public services such as business permits, environmental impact assessments, and public reporting. The site targets the general public and stakeholders interested in environmental governance. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and Google Fonts, with Cloudflare DNS services. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and important security headers. Privacy and cookie policies are absent, which impacts compliance. The domain WHOIS data shows an anomalous future creation date, which may be a data error but slightly reduces trust. Overall, the website is a credible government resource with room for improvement in security and privacy compliance.

D

Dinas Lingkungan Hidup Kota Depok

dlhdepok.id

43

Dinas Lingkungan Hidup Kota Depok is the official government agency responsible for environmental management in Depok city, Indonesia. The website serves as a public information portal providing services such as environmental permits, waste management, and public complaint reporting. The agency operates under local government regulations and targets local citizens and stakeholders interested in environmental governance. Technically, the website is built with standard web technologies, uses HTTPS, and is hosted behind Cloudflare DNS, indicating a moderate level of digital maturity. However, the absence of privacy and cookie policies, lack of security headers, and no incident response information highlight areas for improvement in security and compliance. The domain WHOIS data shows a future creation date, which is inconsistent with the agency's founding year, suggesting a data anomaly but not necessarily a legitimacy issue. Overall, the website is professional, trustworthy, and safe for general audiences.

D

Dinas Lingkungan Hidup Kota Bekasi

dlhbekasi.id

50

Dinas Lingkungan Hidup Kota Bekasi is a government environmental agency responsible for managing environmental affairs in Bekasi city, Indonesia. The website serves as an official portal providing information about the agency, its organizational structure, and public services such as business permits, environmental impact assessments, and complaint reporting. The site targets the general public and local businesses requiring environmental services. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and Google Fonts, with Cloudflare DNS hosting. It is mobile responsive and employs lazy loading for images, contributing to moderate performance and good user experience. However, the site lacks advanced SEO and accessibility features and does not use a known CMS.

D

Dinas Lingkungan Hidup Kota Bandung

dlhbandung.id

51

Dinas Lingkungan Hidup Kota Bandung is the official government environmental agency for Bandung city, Indonesia, responsible for managing environmental affairs including waste management, forestry, and public works related to environmental issues. The website serves as an information portal offering services such as business permit information, registration for technical permits, environmental impact assessment network access, and public reporting. The site targets the general public and government stakeholders, positioning itself as a leading local government agency in environmental management. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and Google Fonts, hosted with Cloudflare DNS services. It is mobile responsive with good navigation and basic SEO optimization. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is professional and trustworthy but could improve in privacy and security practices.

D

Dinas Lingkungan Hidup Kota Jakarta

dlhkotajakarta.id

51

Dinas Lingkungan Hidup Kota Jakarta operates as the official government environmental agency for Jakarta city, focusing on environmental governance, waste management, and public environmental services. The website serves as an information portal for citizens and stakeholders, providing contact details and links to related government services. Technically, the site uses standard web technologies with Cloudflare DNS but lacks advanced CMS or frameworks. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Privacy and cookie policies are absent, indicating compliance gaps. The domain WHOIS data shows inconsistencies, including a future creation date and a private registrar, which may warrant further verification. Overall, the site is functional, safe, and professional but could improve in security and compliance.

D

DLH Provinsi Sumatera Selatan

dlhsumateraselatan.id

49

The website dlhsumateraselatan.id serves as the official online portal for the Dinas Lingkungan Hidup (Environmental Agency) of South Sumatra Province, Indonesia. It provides public information including news, announcements, documents, and contact details relevant to environmental management and policies. The site targets residents and stakeholders within the province, functioning as a government information dissemination platform. Technically, the site employs standard web technologies such as Bootstrap, jQuery, and Font Awesome, hosted behind Cloudflare DNS services. The design and content quality are basic but functional, with moderate mobile optimization and navigation clarity. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy and cookie policies are absent, indicating compliance gaps. WHOIS data shows inconsistencies with a future domain creation date and a private registrar, raising legitimacy concerns. Overall, the site is accessible and safe for general audiences but requires improvements in security and privacy compliance to enhance trust and resilience.

G

GKV-Bündnis für Gesundheit

gkv-buendnis.de

59

The GKV-Bündnis für Gesundheit website represents a collaborative initiative of statutory health insurance funds in Germany focused on advancing health promotion and prevention across various life settings such as communities, schools, and care facilities. The site provides practical resources and information targeting health professionals and stakeholders involved in these sectors. The business model is non-profit and government-related, emphasizing public health improvement. Technically, the website employs modern web standards with responsive design, accessibility features, and uses Matomo analytics with a consent mechanism, reflecting a privacy-conscious approach. Hosting and DNS infrastructure align with official statutory health insurance IT services, indicating a stable and trustworthy technical foundation. From a security perspective, the site enforces HTTPS, uses cookie consent, and avoids exposing sensitive data. However, it lacks explicit security policy documentation and incident response contacts, which could be improved to enhance transparency and trust. No vulnerabilities or suspicious elements were detected. Overall, the website is professional, trustworthy, and well-aligned with its public health mission. Strategic recommendations include publishing dedicated security and incident response policies, enhancing security headers, and providing clearer contact information to strengthen user trust and compliance.

R

Repair-Café Tösstal

repair-cafe-toesstal.ch

36

Repair-Café Tösstal is a small, community-driven non-profit organization based in Switzerland, focused on providing free repair services for various household and personal items to reduce waste and promote sustainability. Founded in 2018, it operates with a volunteer team and enjoys strong local support from municipalities and schools. The website reflects a well-structured and informative platform that clearly communicates its mission, services, and contact information. Technically, the site uses standard web technologies such as HTML5, CSS3, JavaScript, and jQuery, with moderate performance and good mobile optimization. However, there is a lack of formal privacy and cookie policies, and no visible security headers, which are areas for improvement. The security posture is moderate with no visible vulnerabilities or sensitive data exposure, but the absence of security best practices and compliance documentation lowers the overall security score. Overall, the website is trustworthy and professional, serving its target audience effectively with a clear business model and community focus.

G

Gewerbeausstellung GEWA | 17. – 19. April 2026 | Reithalle Turbenthal

gewa-turbenthal.ch

61

The website www.gewa-turbenthal.ch appears to represent a small Swiss business, likely in the energy or local services sector, based on the domain and partial content context. The site is built on the Wix platform, utilizing Wix Thunderbolt framework and standard Wix hosting infrastructure. The technical infrastructure is modern but basic, with no advanced SEO or accessibility features detected. Security posture is moderate with HTTPS enabled but lacks security headers and formal privacy or cookie policies. No contact or business registration information is clearly presented, limiting trust and compliance assessment. Overall, the site is functional but minimal in content and security maturity.

The analyzed content corresponds to an internal Chrome browser error page (chrome-error://chromewebdata/) which is displayed when a requested website is not accessible or offline. This page includes embedded Chromium offline game scripts and styling but contains no actual business or website content. Consequently, there is no identifiable company, no privacy or cookie policies, no contact information, and no external links or marketing content. The technical infrastructure is limited to Chromium internal scripts and basic HTML/CSS, with no hosting or CMS details available. Security posture is minimal due to the nature of the page being an error display rather than a public website. Overall, this page does not represent a legitimate business website and cannot be evaluated for compliance or security beyond its role as a browser error page.

Unser-stadtplan.de is a German website operated by Städte-Verlag E. v. Wagner & J. Mitterhuber GmbH, providing digital and printed city maps, district maps, and comprehensive business directories. The platform also features job listings, targeting local residents and businesses in Germany. The website content is primarily in German and focuses on delivering detailed geographic and commercial information to its users. The business model revolves around map publishing and local business promotion, positioning itself as a regional leader in city planning and local information services. Technically, the website uses standard web technologies including JavaScript and CSS with custom scripts for UI interactions and animations. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. No CMS or major frameworks are detected. The hosting provider and SSL configuration details are not explicitly available, limiting a full technical assessment. From a security perspective, the site does not explicitly show HTTPS status or security headers in the provided data, indicating potential gaps in security best practices. No privacy or cookie consent banners are present, which is a compliance concern under GDPR. The site includes a privacy policy and contact form but lacks visible incident response or security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is functional and provides valuable local information but would benefit from enhanced security measures, improved privacy compliance, and better technical modernization to strengthen trust and user experience.

W

Weil am Rhein Wirtschaft und Tourismus GmbH

w-wt.de

55

The website for Weil am Rhein Wirtschaft und Tourismus GmbH serves as the official platform for economic development, tourism, and city marketing in the municipality of Weil am Rhein, Germany. It targets local businesses, tourists, and residents, providing information on commercial real estate, events, and tourism services. The site is built on the Weblication® CMS platform and features a well-structured navigation system with multilingual support. Accessibility is a key focus, evidenced by the dedicated accessibility menu offering font size, contrast, dark mode, and reading options. However, the site lacks explicit privacy, cookie, and security policies, which are critical for compliance and user trust.

L

Landkreis Lörrach

loerrach-landkreis.de

49

Landkreis Lörrach operates as a regional government authority in Germany, providing a broad range of public services including transportation, economic development, social and family support, environmental initiatives, and tourism promotion. The website serves residents and visitors with comprehensive information and digital services, reflecting a mature public sector entity with a consistent brand and professional presentation. Technically, the site is built on the cEasy CMS platform, employs modern web technologies, and integrates privacy-conscious analytics via Matomo. The site is well-optimized for mobile and accessibility standards, ensuring a good user experience. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website demonstrates a trustworthy and professional digital presence aligned with its governmental role.

C

Collectivité européenne d'Alsace

haut-rhin.fr

68

The Collectivité européenne d'Alsace operates as a regional government entity providing a comprehensive range of public services and information to residents and stakeholders in the Alsace region of France. The website serves as an official portal with detailed information on social services, culture, transport, environment, and citizen engagement. It maintains a strong market position as the authoritative regional government body with a clear focus on transparency and public communication. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with privacy-conscious analytics via Matomo and a cookie consent mechanism powered by OreJime. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure suitable for a government portal. From a security perspective, the site enforces HTTPS and demonstrates good security hygiene with no exposed sensitive data or vulnerable libraries detected. However, it lacks explicit security headers and a published security policy or incident response contact, which are recommended for enhanced security posture. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. The absence of WHOIS data is standard for .eu domains and does not detract from the legitimacy of the site. Strategic recommendations include implementing security headers, publishing a security policy, and adding a vulnerability disclosure channel to further strengthen trust and security.

E

Einwohnergemeinde Allschwil

allschwil.ch

62

The Einwohnergemeinde Allschwil website serves as the official digital presence of the municipal government of Allschwil, Switzerland. It provides comprehensive information on local government services, cultural events, political activities, and community resources. The site targets residents and stakeholders interested in municipal affairs, offering a broad range of services including administrative forms, event calendars, and contact information. The business model is that of a public sector entity focused on community service and governance. Technically, the website is built on the Weblication CMS platform, utilizing standard web technologies such as HTML5, CSS3, JavaScript, and jQuery. It integrates external resources like FontAwesome for icons and ReadSpeaker for accessibility. The site demonstrates good mobile optimization and accessibility features, with a moderate performance profile. SEO practices are adequately implemented with meta tags and structured navigation. From a security perspective, the site enforces HTTPS and uses some security headers, though it lacks advanced headers like Content-Security-Policy. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and a consent mechanism in place. However, no explicit security policy or incident response contact information is provided. Overall, the website is trustworthy and professional, reflecting the legitimacy of a municipal government entity. It maintains a good balance between usability, compliance, and security, with room for improvement in security header implementation and incident response transparency.

K

KaktusApps

kaktusapp.com

10

KaktusApps is a specialized eCommerce development company focused on providing a suite of innovative apps designed to enhance online store performance, increase sales, and improve customer engagement. Their offerings primarily target Shopify merchants but also extend to other eCommerce platforms. The company has established a solid market position with multiple apps available on the Shopify app store, supported by positive customer ratings and testimonials. Technically, the website is built using modern web technologies including Webflow CMS, Cloudflare DNS, and integrates marketing and analytics tools such as Google Tag Manager and Crisp Chat. The site is mobile optimized and demonstrates good performance and SEO practices. Security-wise, the domain is well protected with registrar locks and HTTPS is enforced, though DNSSEC is not enabled. However, the site lacks explicit privacy and cookie policies, and no direct contact information is provided, which are areas for improvement. Overall, the website is professional, trustworthy, and safe for general audiences.

L

Loonexx AG

smartaxxess.io

9

The website smartaxxess.io serves as a login portal for the smartakte service, operated by Loonexx AG, a German technology company founded in 2022. The site targets professional users requiring secure access to digital services. The business model appears to be subscription or account-based access to a technology platform. The website is professionally designed with a consistent brand presence and basic content quality focused on user authentication. Technically, the site uses modern web technologies including JavaScript ES modules and CSS, hosted by IONOS SE. The site is mobile optimized and performs moderately well. However, it lacks advanced SEO and accessibility features. Security is enforced via HTTPS and CSRF tokens in forms, but no security headers or DNSSEC are implemented, representing areas for improvement. From a security posture perspective, the site shows good basic protections but lacks published privacy, cookie, and terms policies, as well as incident response or vulnerability disclosure information. No contact information or social media presence is visible, which limits transparency. The WHOIS data is consistent and trustworthy, with no suspicious patterns. Overall, the site is safe and suitable for general audiences, with no adult or questionable content. The main risks relate to compliance and security best practices gaps. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, enabling DNSSEC, and providing clear contact and incident response information to enhance trust and compliance.

B

B. Metzler seel. Sohn & Co. AG

metzler.com

10

Bankhaus Metzler is Germany's oldest family-owned bank, specializing in capital market services for institutions and discerning private clients. The company operates across four main business areas: Asset Management, Capital Markets, Corporate Finance, and Private Banking. The website reflects a strong market position with a focus on personalized, long-term financial solutions. The bank emphasizes stability, reliability, and a tradition of excellence in its services. Technically, the website is well-structured with modern HTML5, CSS, and JavaScript technologies. It is mobile-optimized and provides a good user experience with clear navigation and comprehensive content. The presence of structured data (JSON-LD) enhances SEO and trustworthiness. However, explicit security headers are missing, and no CMS or hosting provider details are evident from the source. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a notable concern for a financial institution, potentially indicating privacy protection or registry issues. No incident response or vulnerability disclosure information is publicly available, which could be improved to enhance transparency and trust. Overall, the website is professional, trustworthy, and compliant with privacy regulations, but improvements in security headers, incident response transparency, and WHOIS data availability are recommended to strengthen the security posture and business credibility.

T

Team PAPREC ARKÉA

teampaprecarkea.com

39

Team PAPREC ARKÉA is a French offshore sailing team prominently preparing for the Vendée Globe 2024-2025 race, sponsored by Paprec and Arkéa. The website serves as an official platform to share news, media, and team information, targeting sailing enthusiasts and sports fans. The business model revolves around sponsorship and promotion within competitive sailing circuits. Technically, the site employs modern web standards, including responsive design, accessibility features, and structured data, ensuring a good user experience across devices. Security posture is solid with HTTPS and consent management, though improvements in security headers and explicit incident response information are recommended. The absence of WHOIS data introduces some uncertainty regarding domain legitimacy, but the professional presentation and active social media presence support the site's credibility. Overall, the site is well-maintained, compliant with privacy regulations, and effectively supports the team's branding and communication objectives.

H

herzog kommunikation GmbH

herzogkommunikation.de

53

herzog kommunikation GmbH is a small digital agency based in Stuttgart, Germany, specializing in scalable and future-proof web and application development. Their services include customized web tools, mobile apps, digital installations, and concept development, targeting both established companies and startups. The website reflects a professional digital agency with a clear portfolio and contact information, positioning them as a regional player in the technology sector. Technically, the site uses modern web technologies such as HTML5, Bootstrap, PHP, and Docker, ensuring responsive design and moderate performance. Security posture is good with HTTPS enforced and CSRF tokens present, but lacks advanced security headers and formal security policies. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is trustworthy and professionally maintained.

A

Albert und Barbara von Metzler-Stiftung

metzler-stiftung.de

61

The Albert und Barbara von Metzler-Stiftung is a small non-profit foundation based in Germany, focused on supporting children and youth through targeted social projects primarily in Frankfurt and surrounding areas. Established in 1998, the foundation operates with a clear mission to improve societal well-being through financial support and active engagement in projects. The website reflects a professional and consistent brand image, emphasizing transparency and community involvement. Technically, the site is hosted on Colt's infrastructure and likely uses an enterprise CMS, delivering a moderate performance with good mobile optimization and SEO practices. Security-wise, the site implements cookie consent mechanisms and avoids exposing sensitive data, but lacks explicit security policies or incident response information. Overall, the foundation demonstrates a trustworthy online presence with strong business credibility and privacy compliance.

The website lexikon-riehen.ch is an online municipal lexicon dedicated to the history and culture of Riehen, Switzerland. It is supported by the local government and related foundations, providing a curated collection of articles on persons, places, events, and organizations relevant to the community. The platform targets residents, researchers, and history enthusiasts, offering a participatory approach to content enrichment. Technically, the site uses a simple but effective stack including jQuery and CSS, with responsive design for mobile users. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and formal policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, reflecting its public sector backing.

Omnisend operates as an omnichannel marketing platform specializing in email and multi-channel messaging services designed to help businesses engage customers effectively and compliantly. The website analyzed is a minimal landing page primarily used for tracking links from emails sent via Omnisend's platform and providing an abuse reporting contact. The business is positioned as a technology provider in the marketing automation space, founded in 2017, with a medium-sized operational scale. Technically, the website is hosted via Cloudflare with basic HTML, CSS, and JavaScript technologies. The site lacks advanced frameworks or CMS indications and shows moderate performance and basic mobile optimization. No analytics or tracking scripts were detected in the provided content, indicating a privacy-conscious minimal landing page. From a security perspective, the domain is registered with a reputable registrar and protected against unauthorized transfers. However, DNSSEC is not enabled, and no security headers were detected, representing areas for improvement. The presence of an anti-abuse contact email demonstrates incident response readiness, but the absence of privacy and cookie policies indicates compliance gaps. Overall, the website is functional for its purpose but limited in content and compliance documentation. Strategic improvements in security headers, privacy policies, and mobile optimization would enhance trust and compliance posture.

M

modmore development

modmore.com

68

modmore is a specialized technology company focused on developing premium and open source extras for the MODX Revolution CMS platform. Established in 2012 and based in the Netherlands, modmore serves a professional audience of web developers and agencies with high-quality software products, support services, and a remote site management platform called SiteDash. The company maintains a strong market position within the MODX ecosystem, supported by a loyal user base and active community engagement. Technically, the website is built on modern web standards with a robust tech stack including jQuery, Google Analytics, Disqus, and Cloudflare DNS, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS enforcement and domain transfer protections, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, modmore demonstrates a mature digital presence with professional branding, comprehensive content, and trustworthy business information.

O

OWNBIT GmbH

ownbit.net

56

OWNBIT GmbH is a Swiss web agency specializing in custom websites and web applications, with a strong focus on user-centered digital solutions. The company targets Swiss SMEs, corporations, and design agencies, offering tailored WordPress and web development services. With over 12 years of market presence and more than 200 clients, OWNBIT holds a reputable position in the local technology sector. The website reflects a professional and consistent brand image, supported by client testimonials and a 5-star Google rating. Technically, the website is built using modern frameworks such as Vue.js and Gridsome, ensuring fast performance and excellent mobile optimization. The use of WordPress for client projects indicates flexibility in CMS solutions. The site includes cookie consent mechanisms and a comprehensive privacy policy, demonstrating good GDPR compliance. However, explicit security headers and SSL configuration details are not evident from the data, suggesting areas for security enhancement. The security posture is moderate with no visible vulnerabilities or exposed sensitive data, but the absence of detailed security policies and incident response information indicates room for improvement. The WHOIS data is privacy protected, which is justified for this business type, though it limits domain age verification. Overall, the website is trustworthy, professional, and compliant with privacy regulations, with recommendations to strengthen security headers and transparency. Strategically, OWNBIT should focus on enhancing security best practices and publishing vulnerability disclosure policies to further build client trust and compliance readiness.

J

Jubla Region Basel

jublabasel.ch

10

Jubla Region Basel is a non-profit youth organization dedicated to providing children and adolescents in the Basel region with meaningful leisure activities such as group meetings, camps, and events. The organization emphasizes community, nature exploration, responsibility, and friendship, serving approximately 20 groups locally. The website is built on modern web technologies and the Neos CMS platform, offering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and no exposed sensitive data, though it lacks some security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the domain registration aligns well with the organization's identity, indicating legitimacy and trustworthiness.

Y

Yetkin Mercan-Çağlayansoy | Web Consulting

yc-webconsulting.de

64

Yetkin Mercan-Çağlayansoy | Web Consulting is a small, local German web consulting and social media advisory business based in Köln. The company offers modern, secure, and responsive website creation services alongside social media consulting and support, targeting small business owners and professionals. The website demonstrates a professional presence with clear contact information, client references, and a GDPR-compliant cookie consent mechanism powered by Cookiebot. Technically, the site uses modern frontend technologies such as Bootstrap and jQuery, hosted on DomainControl nameservers, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enabled and cookie consent management, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, and the site content is safe for general audiences.

D

Deutsche Stiftung für junge Erwachsene mit Krebs

junges-krebsportal.de

49

The Deutsche Stiftung für junge Erwachsene mit Krebs operates the Junges Krebsportal, a specialized online platform providing young cancer patients in Germany with direct access to expert advice and support. The portal offers multiple communication channels including online chats, telephone consultations, and in-person meetings, complemented by a Tandem-Beratung program where affected individuals support each other. The foundation is supported by recognized partners and foundations, reinforcing its credibility in the healthcare non-profit sector. Technically, the website is built using modern web standards including HTML5, CSS3, JavaScript, and the UIkit framework, hosted on a reputable German hosting provider. The site is mobile-optimized with good SEO practices and clear navigation, although accessibility features are basic. No major performance or technical issues were detected. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and explicit security or incident response policies. Privacy compliance is good with a comprehensive privacy policy, but no cookie consent mechanism is evident. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. Overall, the website presents a trustworthy, professional, and focused service with a strong business credibility score. Security posture is solid but could be improved with additional headers and policies. The absence of cookie consent mechanisms and incident response information are notable gaps. The domain WHOIS data is limited but consistent with the business purpose. No WAF or blocking mechanisms interfere with content access.

S

Sparkassen- und Giroverband Hessen-Thüringen (SGVHT)

mein-fahrtwind.de

55

Mein Fahrtwind is a promotional website operated by the Sparkassen- und Giroverband Hessen-Thüringen (SGVHT), a public financial association in Germany. The site hosts a contest offering participants the chance to win one of eight electric scooters, targeting residents of Hessen, Thüringen, and parts of Rheinland-Pfalz. The website is professionally designed with comprehensive legal and privacy documentation, reflecting a strong commitment to GDPR compliance and user data protection. The contest employs a double opt-in mechanism to ensure participant consent and data accuracy. Technically, the site uses modern web technologies including Google Tag Manager, Matomo analytics, Adobe Typekit fonts, and a cookie consent management system. Hosting is managed via DomainControl, indicating a professional infrastructure. The site is mobile-optimized and accessible, with good SEO practices. Security measures include HTTPS and IP masking in analytics, though HTTP security headers are not explicitly detected. From a security perspective, the site demonstrates good practices with no visible vulnerabilities or exposed sensitive data. Privacy policies are detailed and transparent, including a named data protection officer contact. No incident response or vulnerability disclosure policies are found, which could be areas for improvement. Overall, the site presents a low risk profile with strong compliance and trust indicators. Strategically, the site effectively supports the SGVHT's marketing and public engagement goals, leveraging digital tools to promote sustainable mobility. The integration of multiple marketing and tracking tools is balanced with user privacy considerations, positioning the organization as responsible and trustworthy in its digital presence.

S

Sparkassen- und Giroverband Hessen-Thüringen (SGVHT)

finanzen-mit-daniel-jung.de

47

The website 'finanzen-mit-daniel-jung.de' is an educational platform focused on financial literacy, primarily targeting students and educators in the Hessen and Thüringen regions of Germany. It is operated under the auspices of the Sparkassen- und Giroverband Hessen-Thüringen, a reputable financial association. The site offers a series of well-structured, easy-to-understand videos and learning materials to enhance financial knowledge. The partnership with Sparkassen and the inclusion of the Sparkassen-SchulService platform reinforce its credibility and regional relevance. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates Google Tag Manager and Matomo for analytics, alongside a GDPR-compliant cookie consent mechanism. The site is hosted on servers indicated by the nameservers 'your-server.de' and related domains, suggesting a professional hosting environment. The site is mobile-optimized and demonstrates good SEO and accessibility practices, though some improvements in accessibility and security headers could be made. From a security perspective, the site uses HTTPS with strong SSL configuration and implements cookie consent for privacy compliance. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and terms of service are comprehensive and clearly presented, with a designated data protection officer contact provided. The site does not employ a vulnerability disclosure policy, which could be considered for future enhancement. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. It effectively serves its educational mission with professional content and transparent governance. Strategic recommendations include enhancing HTTP security headers, formalizing a vulnerability disclosure process, and improving accessibility features to further strengthen the site's security and user experience.

G

Geschwister Meier Stiftung

gmstiftung.ch

61

The Geschwister Meier Stiftung is a Swiss non-profit foundation dedicated to supporting music and cultural activities ranging from traditional folk music to avant-garde experimental sounds. The website serves as an informational platform to present the foundation's mission and activities, targeting a general audience interested in arts and culture within Switzerland. The foundation operates in a niche cultural sector with a small organizational size and a focused business model centered on cultural funding and promotion. Technically, the website is built on the Wix platform, utilizing Wix's standard JavaScript libraries and hosting infrastructure. The site demonstrates moderate performance and good mobile optimization, with basic accessibility and SEO features. The technical stack is modern but limited to Wix's ecosystem, which simplifies maintenance but may restrict advanced customization. From a security perspective, the site benefits from HTTPS and a good SSL configuration. However, it lacks several security best practices such as security headers and explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security transparency and readiness. Overall, the website is professionally designed and consistent with the foundation's branding and mission. The absence of contact details and privacy-related policies slightly diminishes trust and compliance posture. Strategic enhancements in privacy compliance, security headers, and contact transparency would strengthen the foundation's digital presence and user confidence.

O

Office du Tourisme et des Congrès de la métropole de Lyon

visiterlyon.com

69

The website www.visiterlyon.com serves as the official tourism portal for Lyon and its metropolitan area, operated by the Office du Tourisme et des Congrès de la métropole de Lyon. It provides comprehensive tourism information, online booking services for hotels, restaurants, leisure activities, and city passes such as the Lyon City Card. The site targets tourists, families, business travelers, and groups, positioning itself as an authoritative and trusted source for visiting Lyon. The content is rich, professionally presented, and available in multiple languages, enhancing accessibility and user experience. Technically, the website employs modern web technologies including Alpine.js for interactivity, Swiper.js for sliders, and MapLibre GL for mapping. It integrates Google Tag Manager and Google reCAPTCHA for analytics and security. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. Security best practices are observed with HTTPS enforcement, security headers, and secure forms, although explicit security policy and incident response information are not published. The security posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, GDPR adherence, and consent mechanisms. However, WHOIS data for the domain is missing or unavailable, which is unusual for an official entity and slightly impacts trustworthiness. Despite this, the website's certifications, social media presence, and comprehensive content support its legitimacy. Overall, the website is a high-quality, secure, and user-friendly platform for promoting tourism in Lyon. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and a vulnerability disclosure policy to further enhance trust and transparency.