Security Directory

M

Michelin

michelin.fr

60

Michelin is a globally recognized enterprise specializing in the manufacturing and retail of tires for automobiles, motorcycles, bicycles, and related mobility products. The website serves as a comprehensive platform offering product information, dealer locators, promotions, and expert advice targeted at a broad audience including individual consumers and professionals. The brand maintains a strong market position as a leader in the transportation sector with consistent branding and high-quality content. Technically, the website leverages modern frameworks such as Astro and Svelte, integrates advanced consent management tools like Didomi, and employs performance optimization via CDNs and asynchronous loading of scripts. Security posture is robust with HTTPS enforcement, comprehensive security headers, and GDPR compliance, although explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates a mature digital presence with excellent user experience and trustworthiness, suitable for an enterprise of Michelin's stature.

W

WBA | Bauhaus Weiterbildungsakademie Weimar e.V.

wba-weimar.de

43

WBA | Bauhaus Weiterbildungsakademie Weimar e.V. is a specialized educational institution affiliated with the Bauhaus-Universität Weimar, offering over 25 years of experience in professional development through part-time studies, seminars, workshops, and conferences primarily in the construction and architecture sectors. Their offerings include master’s programs, certificate courses, inhouse training, and language courses tailored for professionals. The website reflects a well-established niche player with a clear academic and practical orientation, targeting professionals and students seeking continuing education in related fields. Technically, the website uses a mix of JavaScript libraries including jQuery and TinyMCE, hosted on Keymachine servers, and employs a consent management platform to comply with GDPR requirements. The site is mobile-optimized with moderate performance and good SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and trustworthy entity.

B

Branchentag

branchentag.de

33

Branchentag is a professional trade fair organizer specializing in the wood industry sector in Germany, hosting a biennial event in Cologne that attracts exhibitors, visitors, and industry stakeholders. The website provides comprehensive information about the event, sponsors, and visitor services, positioning itself as a key industry gathering. Technically, the site is built on WordPress using Elementor and Astra theme, hosted on German servers, and employs modern web technologies with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

P

proHolzBW GmbH

proholzbw.de

62

proHolzBW GmbH is a regional organization dedicated to promoting the use of wood in Baden-Württemberg, Germany. It serves a broad audience including forestry operators, construction clients, architects, and planners by providing information, consulting, and support services. The organization is well-positioned in its niche with strong backing from EU and regional funding bodies, as evidenced by displayed logos and certifications. The website reflects a professional and consistent brand image with clear navigation and relevant content focused on sustainability and wood industry promotion. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates Google Analytics and Tag Manager for tracking. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with comprehensive policies and GDPR adherence. No direct contact emails or phone numbers are publicly listed, relying instead on contact forms and social media channels. Overall, the site is trustworthy, well-maintained, and serves its business purpose effectively.

I

IZES gGmbH

izes.eu

53

IZES gGmbH is a well-established, Saarland-supported, non-university research institute specializing in energy and material flow systems. With over 25 years of experience, it conducts transdisciplinary national and international projects focused on sustainable and climate-neutral energy and resource systems. The organization operates primarily through project funding and employs around 80 experts. The website is professionally designed using WordPress with modern plugins and provides comprehensive information about its research fields, projects, and events. Privacy and cookie compliance are well implemented, reflecting a strong commitment to GDPR standards. Security posture is good with HTTPS and security best practices in place, though explicit security policies and incident response contacts are not published. Overall, the website is trustworthy, technically sound, and serves its target audience effectively.

S

Schweizer Milchproduzenten SMP Genossenschaft

swissmilk.ch

66

Swissmilk is the official online platform of the Schweizer Milchproduzenten SMP Genossenschaft, a Swiss dairy cooperative focused on promoting Swiss milk and milk products. The website serves as an online cookbook featuring seasonal recipes, kitchen tips, healthy nutrition information, and competitions, targeting a general audience interested in Swiss dairy products. The cooperative holds a strong market position within Switzerland as a trusted promoter of local dairy. Technically, the website is built using modern frameworks such as Nuxt.js and Vue.js, with integration of Cloudinary for media and Google Tag Manager for analytics. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response information are not published. Privacy compliance is limited due to the absence of visible privacy and cookie policies. Overall, the website is trustworthy, well-maintained, and serves its business purpose effectively.

M

Meier AG

meier.ch

54

Meier AG is a specialized communication and web development agency based in Schaffhausen, Switzerland, with a history rooted in the predecessor agency SOBAG since 1999 and formally established as Meier AG in 2019. The company offers a comprehensive suite of services including consulting, web development, web design, communication and PR, social media management, and ongoing support. Positioned as a reliable and innovative partner, Meier AG targets a broad range of clients from startups to large enterprises within Switzerland. The website reflects a professional and consistent brand image with clear navigation and rich content, supporting its market position effectively. Technically, the website is built on TYPO3 CMS with Bootstrap 4 and integrates modern technologies such as Google Analytics, Google Tag Manager, and Google Maps API. The site is mobile-optimized and performs moderately well, with good SEO and basic accessibility features. Privacy compliance is well addressed with a comprehensive privacy policy and an explicit cookie consent mechanism. From a security perspective, the site uses HTTPS and implements cookie consent but lacks explicit security headers and a published security policy or vulnerability disclosure. No critical vulnerabilities or exposed sensitive data were detected. The domain registration details are consistent with the business claims, showing transparency and legitimacy. Overall, Meier AG presents a trustworthy and professional digital presence with solid technical infrastructure and privacy compliance. Strategic improvements in security policy publication and enhanced accessibility could further strengthen its posture.

S

Sportschule Dürnten

sportschule-duernten.ch

50

Sportschule Dürnten is a state-approved private secondary school in Switzerland specializing in education for sport talents and enthusiasts. The school offers a combination of academic programs including international Matura and extensive sports training options such as tennis, golf, and riding. Their business model integrates educational services with athletic development, targeting families and young athletes seeking a balanced and professional environment. The website reflects a niche market position with a focus on quality and family-friendly services.

F

firma.de

firma.de

65

firma.de is a German-based digital platform specializing in company formation and business services, targeting entrepreneurs and startups. The website offers a comprehensive suite of services including various legal forms of company formation, bookkeeping, payroll, tax consulting, and legal advice. With over 25,000 firm foundations supported, firma.de holds a strong market position as a trusted partner for business founders in Germany. The platform emphasizes ease of use, transparency, and expert support throughout the business lifecycle. Technically, the website leverages modern web technologies such as Google Tag Manager, Stripe for payments, and AWS Cloudfront for content delivery, ensuring fast and responsive user experience across devices. Security posture is good with HTTPS enforced and secure third-party integrations, though there is room for improvement in security headers and incident response transparency. Privacy compliance is partially addressed with a comprehensive GDPR privacy policy but lacks a cookie consent mechanism. Overall, firma.de presents a professional, trustworthy, and user-friendly platform with a solid business model and digital maturity.

D

dorsa + 820 Architektur AG

dorsa-820.com

52

dorsa + 820 Architektur AG is a small Swiss architecture firm with a minimalist online presence hosted on the Cargo Collective platform. The website primarily serves as a portfolio and contact point, providing essential contact details and links to partner sites. The technical infrastructure is modern and secure with HTTPS enabled, but lacks advanced security headers and privacy policies. The domain is newly registered, which aligns with a potentially new or rebranded business. Overall, the site is functional but basic in content and compliance.

V

Valaisdigital

wirtschaft-wallis.ch

56

Wirtschaftsförderung Wallis, operated by Valaisdigital, is a government-affiliated economic promotion organization serving entrepreneurs and businesses in the Wallis region of Switzerland. The website provides comprehensive information about business support services, innovation assistance, financial aid, and real estate search, positioning itself as a key regional partner for economic development. The site is multilingual, with German as the primary language and links to French and English partner sites, enhancing accessibility for a diverse audience. Technically, the website is built on WordPress using modern plugins such as Elementor and Yoast SEO, ensuring good SEO optimization and mobile responsiveness. Security measures include HTTPS enforcement, standard security headers, and a GDPR-compliant cookie consent mechanism. However, explicit security policies and incident response contacts are not present, which could be improved. Overall, the website demonstrates a solid security posture and professional digital presence, supporting its role as a trusted government economic promotion entity.

F

Feratel Medien Technologien GmbH

feratel.de

67

Feratel Medien Technologien GmbH is a medium-sized technology company specializing in comprehensive tourism marketing and data management solutions. The company operates multiple country-specific domains, indicating a strong international presence in the tourism sector. Their business model focuses on providing B2B software and services tailored to tourism marketing, upselling, service, data strategies, communication, and interfaces. The website content is professionally presented, targeting tourism industry stakeholders and marketing professionals. Technically, the site is built on TYPO3 CMS, integrates Cookiebot for GDPR-compliant cookie management, and uses Google Tag Manager and Facebook Pixel for analytics and marketing. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not found. Privacy compliance is well addressed with detailed cookie policies and consent mechanisms. Overall, the website is trustworthy, well-structured, and compliant with GDPR requirements.

F

Feratel

feratel.nl

64

Feratel is a medium-sized technology company specializing in B2B solutions across marketing, upselling, service, data strategy, communication, and interface integration. The company operates in multiple European countries with localized domains, indicating a strong regional presence. Their website is built on TYPO3 CMS, demonstrating a mature technical infrastructure with modern consent management via Cookiebot and analytics integration using Google Tag Manager and Facebook Pixel. Security posture is solid with HTTPS and security headers implemented, though explicit security policies and incident response contacts are not publicly visible. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website presents a professional and trustworthy digital presence suitable for its business audience.

F

Feratel Medien Technologien AG

feratel.it

69

Feratel is a medium-sized technology company specializing in providing digital solutions primarily for the tourism and media sectors. Their offerings include marketing, up-selling, assistance, data strategy, communication, and interface development services. The company has an established market presence with a professional and consistent brand image. The website is built on TYPO3 CMS and integrates modern tools such as Cookiebot for GDPR-compliant cookie management and Google Analytics for traffic analysis. The technical infrastructure is solid with good SSL configuration and security headers, ensuring a secure browsing experience for users. Privacy compliance is well addressed with clear policies and consent mechanisms. However, the site lacks visible contact information and a terms of service page, which could be improved to enhance business credibility and user trust. Overall, the website reflects a mature digital presence aligned with business goals and regulatory requirements.

F

Feratel

feratel.fr

67

Feratel is a medium-sized technology company specializing in providing comprehensive, customized tourism marketing and data management solutions. The company has a strong market presence in France and other European countries, supported by multiple regional domains and multilingual content. Their business model focuses on B2B services targeting tourism industry professionals and destination managers. The website is professionally designed, well-structured, and optimized for mobile devices, reflecting a mature digital infrastructure. Technically, the website is built on TYPO3 CMS and integrates modern cookie consent management via Cookiebot, ensuring GDPR compliance. The use of HTTPS and inclusion of detailed cookie categories demonstrate a commitment to privacy and security. However, some security headers are not explicitly detected, and no dedicated security or incident response pages are found, indicating room for improvement in security posture. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but the absence of WHOIS data limits full domain trust assessment. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and granular user consent options. Overall, the website and business appear legitimate and professional, with a good balance of content quality, technical implementation, and privacy compliance. Strategic recommendations include enhancing security headers, publishing explicit security policies, and providing clear contact information for incident response to further strengthen trust and security.

F

feratel media technologies AG

feratel.at

67

Feratel media technologies AG is a specialized provider of digital destination management and marketing solutions primarily serving the tourism industry. The company offers a comprehensive suite of services including marketing, upselling, service, data strategies, and communication tailored to enhance digital tourism experiences. Positioned as a key player in Austria and surrounding markets, Feratel targets tourism stakeholders and destination managers with B2B digital solutions. The website reflects a mature digital presence with multilingual support and professional branding. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies and third-party tools such as Cookiebot and Google Tag Manager to manage consent and analytics. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response contacts are absent. Overall, the site demonstrates good compliance with GDPR through detailed privacy and cookie policies. The domain registration data aligns well with the business claims, reinforcing legitimacy and trustworthiness.

S

SORA Bern

sora-bern.ch

56

SORA Bern is a Swiss non-profit organization providing social support services primarily targeting families with children up to 18 years and young adults including young parents. Their services focus on strengthening parenting competencies, child welfare, housing skills, and personal development. The website is built on the Plone CMS platform and uses modern web technologies such as jQuery and Handlebars.js. It features a clear navigation structure and is mobile optimized, providing a good user experience. Security-wise, the site enforces HTTPS but lacks several security headers and explicit security policies. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional but could improve in security and privacy transparency.

B

Berner Generationenhaus

begh.ch

51

Berner Generationenhaus is a Swiss non-profit community and cultural center located in Bern, focused on fostering intergenerational dialogue and providing social services. The website presents a well-structured platform offering information about events, exhibitions, social institutions, and room rentals, targeting a broad audience across generations. The organization maintains a strong local presence with clear contact details and active social media channels. Technically, the site is built on Drupal 11 with modern libraries and analytics tools, showing good mobile optimization and accessibility. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks some security headers and formal security policies. Privacy compliance is limited by the absence of explicit privacy and cookie policies. Overall, the site is professional, trustworthy, and serves its community role effectively.

W

Webspatz Webdesign GmbH

webspatz.ch

51

Webspatz Webdesign GmbH is a small, specialized web design and SEO agency based in Zürich, Switzerland. The company focuses on creating modern, responsive WordPress websites, Shopify shops, and providing SEO optimization services including local SEO. Their market position is that of a boutique agency offering personalized and high-quality digital services to small and medium-sized businesses. The website demonstrates a strong digital maturity with a well-structured WordPress platform, modern technologies such as Bootstrap and Slider Revolution, and integration of analytics tools like Google Analytics and Microsoft Clarity. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and well-optimized for SEO and user experience.

E

Evang.-ref. Kirchgemeinde Zürich

reformiert-zuerich.ch

46

The Reformierte Kirche Zürich is the largest and most member-rich Protestant church community in Switzerland, offering a broad range of religious, social, and cultural services to the city of Zürich. Their website reflects a well-established non-profit organization focused on community engagement, spiritual services, and social support. The site provides extensive information on events, church districts, and various church-related services, targeting members and interested residents of Zürich. Technically, the website uses a custom CMS (DynPG), integrates modern JavaScript libraries, and employs Matomo analytics for user tracking. The site is mobile-optimized and well-structured with clear navigation and professional design. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some HTTP security headers are missing. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Contact information is comprehensive, including phone, email, physical address, and a contact form. Overall, the website is trustworthy, professional, and serves its community effectively.

B

Bundesinstitut für Öffentliche Gesundheit (BIÖG)

familienplanung.de

65

familienplanung.de is an authoritative German government-backed health information portal operated by the Bundesinstitut für Öffentliche Gesundheit (BIÖG). It provides comprehensive, scientifically grounded information on pregnancy, childbirth, contraception, fertility, and related counseling services. The site targets pregnant women, couples planning families, and individuals facing pregnancy conflicts. The portal offers educational content, online tests, and access to counseling resources, positioning itself as a trusted public health resource in Germany. Technically, the website is built on TYPO3 CMS, uses Matomo analytics with strong privacy protections, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS enforcement and privacy-conscious analytics, though formal security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a reliable source for family planning information.

A

Astra

stadtautobahn.ch

69

The website stadtautobahn.ch serves as the official information portal for the renewal of the Stadtautobahn in St. Gallen, Switzerland, managed by Astra, the Federal Roads Office. It provides timely updates on construction, traffic conditions, and community engagement through news articles and an SMS notification service. The site targets local residents and commuters, offering clear and relevant content about the infrastructure project. Technically, the site is built on WordPress with Yoast SEO for optimization, uses Matomo for privacy-conscious analytics, and integrates Google reCAPTCHA to secure user input forms. The design is professional, mobile-optimized, and user-friendly, with consistent branding and trust indicators such as official logos and HTTPS encryption. Security posture is solid with HTTPS and form protections, though it lacks some advanced security headers and published security policies. Privacy compliance is partial due to the absence of a visible privacy policy and terms of service. Overall, the domain registration aligns well with the website's governmental purpose and project timeline, indicating high legitimacy and trustworthiness.

A

Ariane Studio Sàrl

ariane-studio.ch

49

Ariane Studio Sàrl is a small media company based in Neuchâtel, Switzerland, specializing in video production, community management, digital design, and website creation. The company presents itself as a passionate creative studio focused on authentic storytelling and digital content creation for businesses. The website is professionally designed with rich multimedia content, including videos and social media integration, targeting businesses seeking to enhance their digital presence. The business model is service-oriented, focusing on creative digital solutions and video production services. The company was founded in 2017, consistent with the domain registration date, indicating a stable market presence. Technically, the website is built on WordPress using the Yoast SEO plugin and UIkit framework, ensuring good SEO optimization and mobile responsiveness. The site loads moderately fast and includes accessibility features, though some improvements could be made. Security posture is adequate with HTTPS enabled and use of spam protection plugins, but lacks explicit security headers and cookie consent mechanisms, which are recommended for GDPR compliance. Analytics are minimal, using Jetpack Stats for basic tracking. Overall, the security posture is solid but could be enhanced by implementing security headers and explicit privacy compliance features. The website shows no signs of malicious activity or vulnerabilities. Business credibility is high with clear contact information, legal pages, and consistent branding. The domain WHOIS data aligns well with the business identity, supporting legitimacy. Strategic recommendations include adding a cookie consent banner to improve privacy compliance, implementing security headers to strengthen security posture, and providing explicit incident response contact information to enhance trust and readiness. These improvements will help Ariane Studio maintain a professional and secure online presence while complying with relevant regulations.

E

Eventfactory

valley-eventfactory.ch

48

Eventfactory operates an exclusive event and conference location known as The Valley, situated in the historic Maggi-Areal in Kemptthal, Switzerland. The company targets corporate, private, and public event organizers, offering a range of event spaces with an industrial-modern ambiance. The website reflects a professional and consistent brand image with strong visual content and customer testimonials, positioning the business as a reputable venue provider in the hospitality sector. Technically, the website leverages modern marketing and analytics tools including Google Tag Manager, Google Analytics, HubSpot, and Google reCAPTCHA v3 for bot protection. It is built on the CMSBox 3.0 platform and integrates Google Maps for location display. The site is mobile optimized and performs moderately well, though there is room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and includes bot mitigation measures but lacks visible security headers and published security policies. Privacy compliance is limited due to the absence of explicit privacy and cookie policies or consent mechanisms, which poses a compliance risk under GDPR. Contact information is clearly provided, but no contact forms or incident response contacts are found. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy disclosures, security hardening, and accessibility improvements to reduce risk and improve compliance.

T

Thurgau 360 Grad

thurgau360.ch

37

Thurgau 360 Grad is a small regional business specializing in providing virtual 360-degree tours and interactive digital marketing solutions for the tourism sector and local businesses in the Thurgau region of Switzerland. The website is professionally designed using WordPress and integrates various plugins to deliver rich multimedia content and interactive experiences. The company positions itself as a niche player offering innovative destination marketing tools to municipalities, hospitality providers, and tourist attractions. Technically, the site employs modern web technologies including Google Maps API, reCAPTCHA, and SEO plugins, ensuring a good user experience and moderate performance. Security posture is adequate with HTTPS enforced and use of reCAPTCHA, but lacks comprehensive security headers and explicit incident response policies. Privacy compliance is partially addressed with a privacy policy page but no visible cookie consent mechanism. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and trustworthiness.

V

Vy

vy.no

63

Vy is a major Norwegian transportation company offering train, bus, and taxi services. The website serves as a platform for ticket purchases and travel information, targeting Norwegian public transport users. The site is professionally designed with excellent content quality and clear branding, reflecting Vy's strong market position in Norway's transportation sector. Technically, the site uses modern web technologies including React and bot protection via Datadome, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced, though explicit security headers and policies are not publicly visible. Privacy compliance is limited due to missing explicit privacy and cookie policies in the analyzed content. Overall, Vy's website is trustworthy and professional, with room for improvement in transparency around privacy and security policies.

E

Eidgenössische Turnveteranen-Vereinigung (ETVV)

etvv.ch

66

The Eidgenössische Turnveteranen-Vereinigung (ETVV) is a Swiss non-profit association dedicated to veteran gymnasts aged 50 and above within the Swiss Gymnastics Federation. The organization promotes camaraderie, ethical values, and the ideals of Swiss gymnastics, while also supporting youth sports through sponsorships. The website is bilingual (German and French), professionally designed, and provides clear organizational and contact information. Technically, it is built on the Jimdo Creator CMS platform, uses modern web technologies, and includes standard privacy and cookie consent mechanisms. Security posture is good with HTTPS enforced and appropriate security headers, though no explicit security policy or incident response information is provided. Overall, the site is trustworthy, compliant with GDPR, and serves its niche audience effectively.

S

Sportversicherungskasse

sportversicherungskasse.ch

57

The Sportversicherungskasse (SVK) is a specialized non-profit insurance provider serving active members of the Swiss Gymnastics Federation (STV) since 1919. It offers accident and liability insurance tailored to the needs of gymnasts and their clubs, emphasizing rapid financial and advisory support in case of accidents during STV activities. The website reflects a mature, well-established organization with a clear focus on its niche market within Switzerland. Technically, the website is built on the TYPO3 CMS platform, integrating modern web technologies such as Google Tag Manager and YouTube APIs for enhanced user engagement and analytics. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience with clear navigation and professional design. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security policies and incident response contact information, which could be improved to enhance trust and compliance. No critical vulnerabilities or suspicious activities were detected. Overall, the SVK website demonstrates a solid digital presence with good privacy compliance and business credibility. Strategic enhancements in security transparency and incident response readiness are recommended to further strengthen its security posture and stakeholder confidence.

O

OCHSNER SPORT

ochsnersport.ch

67

OCHSNER SPORT is a prominent Swiss sports retail company operating a comprehensive e-commerce platform offering over 30,000 sports articles and top brands. The website targets sports enthusiasts in Switzerland, providing a broad range of sportswear and equipment with value-added services such as free shipping and free in-store returns. The business model is focused on online retail complemented by physical stores, positioning itself as a leading player in the Swiss sports retail market. Technically, the website leverages modern web technologies including Vue.js and Nuxt.js frameworks, styled with Tailwind CSS, and integrates marketing and analytics tools such as Google Tag Manager and Dynamic Yield. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Performance is moderate with room for improvement. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks visible security headers and explicit security policies. Cookie consent is managed via a consent manager, indicating some privacy compliance efforts. No critical vulnerabilities or blocking mechanisms were detected, suggesting a stable security posture but with opportunities for enhancement. Overall, the website is professional and trustworthy with a strong business presence. However, it would benefit from publishing clear privacy and terms of service policies and implementing additional security headers to strengthen its security and compliance posture.

Naturparkmagazin.de is an online magazine dedicated to German nature parks, providing news, event information, product promotions, and educational content targeted at nature enthusiasts and visitors. The website operates on a WordPress platform with modern SEO and cookie consent tools, indicating a moderate level of digital maturity. The technical infrastructure includes Cloudflare DNS services and standard WordPress plugins, ensuring reasonable performance and security. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy and cookie consent banner. Business credibility is supported by consistent branding, partner links, and professional content, although direct contact details like emails or phone numbers are not explicitly provided. Overall, the website presents a trustworthy and professional front for its niche audience.

Zentralstelle Deutschland is a small non-profit organization focused on the collection, coordination, and online presentation of biological data related to organisms in Germany, specifically mosses, lichens, and fungi. The website serves as an informational hub for researchers, biologists, and enthusiasts, providing distribution maps and data coordination support. The organization collaborates with regional and scientific partners to maintain and expand biological data coverage. Technically, the website is built using Bootstrap and jQuery, with a basic but functional design. It lacks modern CMS features and advanced SEO or accessibility optimizations. Security posture is modest, with no detected HTTPS enforcement or security headers, though no sensitive data collection is present. Privacy compliance is minimal, with a privacy policy page but no cookie consent mechanism. Overall, the site is trustworthy for its niche but would benefit from improved security and privacy practices.

Wissenschaft aktuell is a German media company specializing in delivering up-to-date news and articles on science, research, and technology. Operated by Scientec Internet Applications + Media GmbH, the website targets a general audience interested in scientific developments, offering press agency services, newsletters, and RSS feeds. The site maintains a professional presentation with consistent branding and a clear focus on scientific content. Technically, the website uses a custom CMS (onTEAM), standard web technologies, and monetizes via Google Adsense and Google Funding Choices. While the site is accessible and uses HTTPS, it lacks advanced security headers and explicit security policies. Privacy compliance is basic with a cookie consent banner and a privacy policy page. No direct company contact emails or phone numbers are publicly listed, but a contact form is available. Overall, the site is trustworthy and well-positioned within its niche media segment.

The website www.moose-deutschland.de serves as an authoritative informational platform dedicated to the documentation and dissemination of data related to moss species in Germany. Operated by the Zentralstelle Deutschland, it provides comprehensive checklists, distribution data, photographs, and educational content targeting researchers, bryologists, and nature enthusiasts. The site maintains a consistent and professional brand presence with clear navigation and relevant content focused on biodiversity and environmental education. Technically, the site employs modern web technologies including HTML5, Tailwind CSS for styling, and jQuery for scripting, hosted likely on a stable infrastructure with no detected blocking or WAF interference. The content is responsive and optimized for mobile devices, though some accessibility features are basic. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and a cookie consent mechanism, which are recommended for enhanced security and GDPR compliance. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security transparency. Overall, the website presents a low-risk profile with a good level of trustworthiness and business credibility. Strategic enhancements in privacy compliance and security best practices would further strengthen its posture and user trust.

The website www.flechten-deutschland.de is a specialized scientific project operated by Zentralstelle Deutschland, focusing on the distribution, description, and photographic documentation of lichens in Germany. It serves a niche audience of biologists, environmentalists, and nature enthusiasts by providing comprehensive data, checklists, and community engagement opportunities such as mapping and data maintenance. The site is supported by reputable Bavarian environmental and botanical institutions, enhancing its credibility and trustworthiness. Technically, the website employs modern frontend technologies including Tailwind CSS and jQuery, hosted on INWX infrastructure, and is optimized for mobile devices with good navigation and content structure. Security posture is moderate with HTTPS usage but lacks explicit security headers and published security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and well-aligned with its scientific mission.

The website pilze-ammersee.de serves as an educational and informational platform dedicated to the fungi species of the Ammersee region in Germany. It offers extensive photographic content, distribution maps, and detailed descriptions of over 3000 mushroom species, targeting nature enthusiasts, mycology hobbyists, and conservationists. The project is regionally focused and supported by local governmental and mycological organizations, positioning it as a niche but valuable resource within Bavaria and potentially broader German-speaking audiences. Technically, the site is built on the Mezzanine CMS with Bootstrap and jQuery 1.7.1, indicating a somewhat dated but functional technology stack. The site is moderately optimized for mobile and accessibility, with clear navigation and good content relevance. However, there is no evidence of modern security headers or advanced performance optimizations. The absence of HTTPS confirmation and use of an outdated jQuery version pose potential security risks. From a security and compliance perspective, the site lacks visible privacy and cookie policies, GDPR compliance indicators, and contact information for incident response or data protection officers. No analytics or tracking scripts were detected, suggesting minimal user tracking. The WHOIS data is limited but consistent with a legitimate domain registered via GoDaddy's nameservers. No WAF or blocking mechanisms were detected, and the content is safe and appropriate for general audiences. Overall, the site is a credible, regionally focused educational resource with moderate technical maturity and some security and compliance gaps. Strategic improvements in security posture, privacy compliance, and technical modernization would enhance trust and resilience.

N

NGC-UK Partnership

natgeotv.com

59

The website www.natgeotv.com serves as a regional gateway portal for the National Geographic Channel, providing access to localized National Geographic content across multiple countries. It is part of the larger National Geographic brand under the ownership of The Walt Disney Company. The site offers multimedia content such as photos, videos, and articles related to National Geographic shows, targeting a general audience interested in educational and entertainment media. The business model focuses on media content distribution and broadcasting with a strong global presence. Technically, the website employs legacy JavaScript libraries like jQuery 1.5.2 and uses OneTrust for cookie consent management, alongside Google Analytics for user tracking with consent. The site is moderately optimized for performance and mobile use but shows signs of technical debt due to older libraries and basic accessibility features. No CMS or hosting provider details are evident from the source. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms to comply with privacy regulations such as GDPR. However, it lacks modern security headers and uses an outdated analytics implementation. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registration data reduces trust slightly but the branding and external links strongly indicate legitimacy. Overall, the website is professionally maintained with good content quality and user experience. The main risks relate to technical modernization and enhanced security practices. Strategic recommendations include updating analytics tools, improving security headers, and enhancing accessibility and mobile responsiveness to maintain trust and compliance.

D

Disney+

disneyplus.com

66

Disney+ is a leading global streaming platform operated by The Walt Disney Company, offering a wide range of family-friendly content including movies, series, and original productions from Disney, Marvel, Pixar, Star Wars, National Geographic, and Hulu. The website targets a general audience with a subscription-based business model and strong market positioning in the media industry. The platform is optimized for multiple devices and regions, including Finland as indicated by the localized content. Technically, the site leverages modern web technologies such as React and is hosted on AWS with CDN support for high performance and availability. Security posture is strong with HTTPS, comprehensive security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and digital maturity.

V

Verlagshaus24.com | Bücher, Magazine, Verlage

verlagshaus24.com

55

Verlagshaus24.com is a German-language e-commerce platform specializing in the sale of books, magazines, calendars, and subscription services. The website targets German-speaking readers and hobbyists interested in various thematic worlds such as travel, history, DIY, and more. The business operates primarily as an online retailer leveraging a Magento 2 infrastructure, integrating multiple marketing and tracking tools to optimize customer engagement and sales. The platform offers a broad catalog with clear navigation and thematic categorization, supporting a medium-sized retail operation in the publishing sector. Technically, the website is built on a modern Magento 2 CMS with extensive use of RequireJS, jQuery, and integrations such as Google Tag Manager, Facebook Pixel, Taboola, Hotjar, and GetResponse. The site is mobile-optimized and employs security measures including HTTPS and invisible reCAPTCHA on forms. However, explicit security headers are not fully implemented, and privacy policy documentation is not clearly accessible, which may impact compliance and user trust. From a security perspective, the site enforces HTTPS and uses CAPTCHA to protect forms, but lacks visible security policies or incident response contacts. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration status, which is a critical trust factor. No vulnerabilities or malicious content were detected in the accessible content, and the site does not contain adult or explicit material. Overall, Verlagshaus24.com presents as a professional and functional e-commerce platform with good content quality and marketing sophistication. The primary risks relate to incomplete domain registration transparency and privacy compliance documentation. Strategic improvements in security headers, privacy policy visibility, and domain registration clarity would enhance trust and compliance.

Q

Quality Media Network

qualitymedianetwork.de

52

Quality Media Network is a specialized digital advertising monetization platform targeting content creators and digital publishers primarily in Germany. The company offers premium advertising campaigns, technical support, and exclusive partnerships to help content creators maximize their revenue while maintaining high user experience standards. The website is professionally designed using WordPress with modern plugins and technologies, ensuring good SEO and mobile optimization. Security posture is solid with HTTPS and GDPR compliance via a consent management platform, although explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, well-branded, and provides clear business value to its target audience.

F

F11 - The One-Stop-Platform For Digital Advertising

f11-ads.com

56

The website www.factor-eleven.com appears to be a Wix-hosted site with standard Wix scripts and polyfills. However, the absence of WHOIS registration data raises concerns about the domain's legitimacy and registration status. The website lacks critical compliance documents such as privacy and cookie policies, and no contact information is provided, which diminishes business credibility. Technically, the site uses modern JavaScript polyfills and Wix platform technologies but lacks advanced security headers and practices. Overall, the security posture is weak, and the site does not demonstrate GDPR compliance or incident response readiness. The content quality and business information are minimal, limiting the ability to assess the company's market position or services. Strategic recommendations include verifying domain registration, implementing privacy and cookie policies, enhancing security headers, and providing clear contact information to improve trust and compliance.

L

Landkreis Leipzig

landkreisleipzig.de

50

Landkreis Leipzig operates as the official regional government authority providing a wide range of public services and information to its citizens. The website serves as a comprehensive portal for residents to access services such as vehicle registration, job center information, and local news. It is well-positioned as a trusted regional administration entity with a focus on accessibility and citizen engagement. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies and accessibility tools like ReadSpeaker, ensuring a good user experience across devices. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and incident response policies are not publicly documented. Overall, the site demonstrates a mature digital presence aligned with public sector standards.

The website www.grossenhain.de is the official online presence of the city administration of Großenhain, Germany. It serves as a comprehensive information portal for residents, visitors, and local businesses, offering city news, event calendars, citizen services, and tourism information. The site is well-structured, primarily in German, and reflects the identity and functions of a municipal government entity. The business model is focused on public service and community engagement, positioning itself as a trusted local government resource. Technically, the website is built on the Contao Open Source CMS platform and leverages several JavaScript libraries such as jQuery, bxSlider, and Usercentrics for cookie consent management. Hosting is provided by heitech.net, as indicated by the nameservers. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features and solid SEO practices. The presence of structured data (JSON-LD) enhances search engine understanding. From a security perspective, the site uses HTTPS with a good SSL configuration and employs a consent management platform to comply with GDPR. However, explicit security headers are not detected, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data aligns well with the website's claims, supporting its legitimacy and trustworthiness. Overall, the website is professional, trustworthy, and suitable for its intended audience. It maintains good privacy compliance and provides clear contact information. Strategic improvements could include adding explicit security headers, publishing security policies, and enhancing accessibility features to further strengthen its security posture and user experience.

AgiL – Sächsische Agentur für Regionale Lebensmittel is a government-backed agency focused on supporting the development and expansion of regional food value chains in Saxony, Germany. It provides free consulting, networking, and informational services to companies in the agricultural and food sectors, including farms, food crafts, wholesalers, retailers, and logistics companies. The agency operates under the Saxon Ministry of Agriculture and the Saxon State Office for Environment, Agriculture and Geology. The website is professionally designed, content-rich, and well-structured, targeting regional businesses and stakeholders in the food industry.

IT-Atelier is a small engineering office based in Leipzig, Germany, specializing in IT coordination, consulting, and web-based software solutions primarily for businesses and public sector clients. The company emphasizes over two decades of experience since 2003, offering services including technical marketing and citizen participation platforms for municipalities. The website reflects a focused business model targeting IT management and public engagement solutions with a professional but basic online presence. Technically, the website uses legacy technologies such as jQuery 1.4.4 and basic CSS styling, hosted on SchlundTech servers. The site is mobile responsive at a basic level and contains no complex CMS or analytics integrations. Performance is moderate, with no advanced SEO or accessibility features detected. Security posture is limited, with no visible security headers and use of outdated JavaScript libraries posing potential risks. From a security perspective, the site lacks privacy and cookie policies, incident response contacts, and vulnerability disclosure mechanisms, indicating compliance gaps especially regarding GDPR. Contact information is clearly presented, but no forms or data collection reduce immediate privacy risks. The domain registration aligns well with the business claims, supporting legitimacy. Overall, the website is functional and trustworthy for its niche but requires improvements in security practices, privacy compliance, and modernization of technical components to enhance its risk posture and professional image.

B

Börsenvereinsgruppe

boersenvereinsgruppe.de

57

The Börsenvereinsgruppe website serves as the digital presence for a key organization supporting the German book industry. It provides comprehensive information about the group's mission to foster cultural, economic, and legal frameworks for the book market, alongside education and event services. The site targets professionals, career entrants, apprentices, and students interested in the book sector. Technically, the website employs modern web technologies including Bootstrap and FontAwesome, is hosted by Anexia, and features responsive design and accessibility considerations. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and headers. The domain registration is consistent and trustworthy, with no privacy protection masking ownership, aligning well with the organization's transparency. Overall, the site is professional, content-rich, and trustworthy, supporting the group's role as a central industry stakeholder.

M

MVB GmbH

isni-service.de

59

MVB GmbH operates as an official ISNI agency providing services to uniquely identify authors and creators in the book trade, enhancing product visibility. The company holds a strong market position within the German media and publishing sector, offering key services such as ISNI search and registration, metadata management, and related book trade solutions. The website reflects a professional and consistent brand image targeting publishers, authors, and book trade professionals. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and integrates third-party services such as Google Tag Manager and CookieFirst for consent management. Hosting is managed via Anexia, indicated by the nameservers. The site is mobile optimized with good SEO practices and moderate performance. From a security perspective, the site enforces HTTPS and uses consent mechanisms for cookies, but lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or suspicious content were detected. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR. Overall, the website is trustworthy and professionally maintained with a high legitimacy score. Strategic improvements include implementing security headers, publishing a security policy, and adding a security.txt file to enhance transparency and incident response readiness.

K

Kulturpassinitiative Neuenhaus e.V.

kulturpass-neuenhaus.de

58

Kulturpassinitiative Neuenhaus e.V. operates a regional cultural subscription service in the Grafschaft Bentheim area of Germany, providing access to a variety of cultural events including concerts, theater, jazz, and cabaret. The organization supports local culture by offering a yearly Kulturpass that serves as an all-access ticket to multiple events, fostering community engagement and cultural participation. The website is built on WordPress with a modern theme and uses various web technologies to deliver a visually appealing and mobile-optimized experience. Security posture is solid with HTTPS enforced, though there is room for improvement in security headers and incident response transparency. Privacy compliance is adequate with a privacy policy and cookie information present, but no explicit consent mechanism is implemented. Overall, the site is trustworthy, professionally maintained, and serves a clear non-profit cultural mission.

R

robin-shop.com

robin-shop.com

65

robin-shop.com is a German-based e-commerce business specializing in sustainable, handmade headwear products such as stirnbänder, mützen, and caps. The company positions itself as the only cap manufacturer in Germany, producing unique items in their Allgäu manufactory. The website targets environmentally conscious consumers seeking high-quality, locally made fashion accessories. Technically, the site is built on the Shopify platform using the Broadcast theme, leveraging modern JavaScript libraries and consent management tools to ensure GDPR compliance. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and no explicit security policies are published. Marketing and analytics are implemented via trusted services such as Google Analytics, Klaviyo, and Facebook Pixel, with user consent mechanisms in place. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

A

all about FUNGI

allaboutfungi.net

45

all about FUNGI is a small German e-commerce business specializing in the sale of vital mushroom products such as Lions Mane, Cordyceps, and Reishi. The website is built on a modern WordPress platform using WooCommerce and Elementor, providing a professional and user-friendly shopping experience. The company appears to be well-positioned in a niche market focused on natural health supplements. Technically, the site uses common industry tools including Google Analytics, Klaviyo, and Borlabs Cookie for GDPR-compliant cookie management. Security posture is adequate with HTTPS enforced, though some security headers are missing and no explicit security or incident response policies are published. Privacy compliance is partial, with cookie consent mechanisms but no visible privacy policy or terms of service. Contact information is not readily available, which may impact user trust. Overall, the site is safe, well-branded, and functional, but could improve transparency and security practices.