Security Directory

W

Westermann Gruppe

hoelzel.at

75

Westermann Gruppe is a well-established educational publisher in Austria, offering a broad range of educational media including school books, digital learning platforms, and specialized services such as the OMNIA Schularbeitengenerator. The website targets educators, parents, students, and therapists, providing comprehensive digital and physical educational resources. The company maintains a consistent brand presence and integrates modern digital services to enhance user engagement and learning experiences. Technically, the website employs modern JavaScript frameworks, responsive design, and analytics tools, ensuring good performance and accessibility. Security posture is solid with HTTPS enforcement and GDPR-compliant cookie consent, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

M

MOBILEE

mobilee-plattform.de

43

MOBILEE is a German non-profit platform dedicated to social work through sport and movement. It serves as a networking and resource hub for initiatives, organizations, and individuals working at the intersection of social work and sports. The platform is supported by notable foundations and sport organizations, enhancing its credibility and reach within its niche. The website is professionally designed using WordPress and Elementor, featuring rich content, event information, and partner links. Technically, the site uses modern web technologies and privacy-conscious analytics (Matomo), but lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is good with HTTPS and no exposed sensitive data, but could be improved by adding security headers and vulnerability disclosure mechanisms. Overall, the site is trustworthy, well-branded, and serves its target audience effectively.

S

Spielfeld Gesellschaft

spielfeld-gesellschaft.de

10

Spielfeld Gesellschaft is a German non-profit platform focused on fostering social cohesion and integration within the Niedersachsen region. Supported by the Niedersächsische Lotto-Sport-Stiftung, it offers community engagement through events, podcasts, newsletters, and networking opportunities. The website reflects a clear mission to connect people and ideas for an open society. Technically, the site uses modern JavaScript modules, Matomo analytics with cookies disabled, and good accessibility and SEO practices, though some improvements in cookie consent and security headers are recommended. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks published security policies or incident response contacts. Overall, the site is professional, trustworthy, and safe for general audiences.

W

Westermann Gruppe

westermann.at

75

Westermann Gruppe is a well-established educational publisher in Austria, offering a broad range of educational media including schoolbooks, digital learning platforms, and educational services targeted primarily at educators, parents, and students. The website reflects a mature digital presence with integrated services such as digital libraries, learning media, and user account management. The company maintains a consistent brand identity and provides comprehensive customer support and engagement channels. Technically, the website employs modern web technologies, responsive design, and analytics tools while ensuring GDPR compliance through detailed privacy and cookie policies. Security posture is strong with HTTPS enforcement and secure form handling, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for its audience.

L

lernando

lernando.de

72

lernando.de is a German e-commerce website specializing in educational materials such as school books, learning aids, and exercise booklets for children of all school grades. The platform targets parents and children seeking verified publisher materials with convenient shipping options. Technically, the site is built on Drupal 11 with Commerce 3, leveraging modern web technologies including jQuery UI, Cookiebot for consent management, Google Tag Manager, and Meta Pixel for marketing and analytics. The website demonstrates good digital maturity with mobile optimization and SEO best practices. Security-wise, the site enforces HTTPS and employs a comprehensive cookie consent mechanism, but lacks explicit security policies or incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR, though it could improve by adding Terms of Service and security disclosure information.

A

Arena Verlag

arena-verlag.de

72

Arena Verlag is a reputable German publishing company specializing in high-quality children's and youth books. The website reflects a professional digital presence with a focus on book publishing and e-commerce, targeting children and youth audiences. The company leverages modern technologies including Drupal 11 CMS and integrates marketing and analytics tools such as Facebook Pixel and Google Ads. The website demonstrates good mobile optimization and SEO practices, enhancing user experience and accessibility. Privacy compliance is well addressed through a comprehensive cookie consent mechanism powered by Cookiebot, ensuring GDPR adherence. However, explicit contact information and terms of service are not readily found, which could be improved to enhance transparency and user trust. Security posture is solid with HTTPS enforced, but the absence of security headers and a security.txt file suggests room for improvement in security best practices.

W

Westermann Schweiz AG

westermann-schweiz.ch

72

Westermann Schweiz AG is a reputable Swiss educational publisher offering a wide range of print and digital learning materials across all school levels. Their portfolio includes well-known imprints such as SCHUBI, WSS, and KLV, targeting educators, parents, students, and therapists. The company maintains a strong market position within the Swiss education sector, supported by a professional website with comprehensive product information, customer services, and digital learning solutions. Technically, the website employs modern JavaScript frameworks, analytics tools, and responsive design, ensuring good performance and accessibility. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though formal security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.

A

Amadeu Antonio Stiftung

swipeaway.de

50

SwipeAway is an educational self-learning tool designed to raise awareness about recognizing hostile narratives on social media platforms and to promote digital civil courage. The project is operated by the Amadeu Antonio Stiftung, a reputable non-profit foundation in Germany, and is supported by Stiftung Mercator. The website targets a general audience interested in social media literacy and digital rights education. The business model is non-commercial, focusing on social impact and education. Technically, the website is built using modern web technologies including Nuxt.js, JavaScript, HTML5, and CSS3. It is hosted on servers associated with agenturserver, with good mobile optimization and moderate performance. The site uses HTTPS with an excellent SSL configuration but lacks some security headers that could enhance protection. The site employs minimal user tracking via the privacy-conscious Umami analytics platform. From a security perspective, the website demonstrates a solid baseline with HTTPS enabled and no exposed sensitive data. However, it lacks security headers and a cookie consent mechanism, which are important for GDPR compliance and security best practices. No incident response or security policy information is provided, and no contact information is readily available on the main page, which could impact user trust and compliance. Overall, the website is professional, trustworthy, and focused on educational content without any adult or questionable material. The domain registration data aligns well with the website's stated purpose and parent organization, indicating legitimacy. Strategic recommendations include implementing security headers, adding a cookie consent mechanism, publishing security and incident response policies, and providing clear contact information to enhance trust and compliance.

L

Landesverband Nachhaltiges Sachsen e.V.

nachhaltiges-sachsen.de

57

Landesverband Nachhaltiges Sachsen e.V. is a regional non-profit organization dedicated to promoting sustainable development in Saxony, Germany. The website serves as a platform for networking, supporting projects, and providing educational materials related to sustainability. It targets stakeholders interested in social-ecological transformation and regional engagement. The organization maintains an active presence through newsletters, social media, and project coordination. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and Matomo for privacy-respecting analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a good level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and policies could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting the organization's credibility and mission.

A

Afeefa - Digitaler Zusammenhalt e.V.

afeefa.de

48

Afeefa - Digitaler Zusammenhalt e.V. operates a non-profit digital platform focused on social integration and community engagement in Leipzig, Germany. The website provides multilingual access to information about social services, volunteer opportunities, and local offers for people with diverse backgrounds. The platform positions itself as a local community hub fostering inclusion and participation. Technically, the website uses modern frontend technologies such as Vue.js and MapLibre GL for interactive maps, indicating a moderate level of digital maturity. However, the site lacks visible security headers and explicit privacy or cookie consent mechanisms, which are areas for improvement. Social media presence on Instagram and Facebook supports community outreach. Overall, the security posture is basic with no critical vulnerabilities detected but improvements are recommended to enhance compliance and trust. The domain registration data is consistent and supports the legitimacy of the website. Strategic recommendations include implementing security headers, cookie consent, and clearer contact information to improve user trust and regulatory compliance.

The website 'Tajas Welt 2053' offers an interactive exploration experience themed around a futuristic world in the year 2053. It targets a general audience, including children, providing an educational and engaging map-based interface. The site is built using modern web technologies such as Nuxt.js and Leaflet.js, indicating a moderate level of digital maturity. However, the absence of business contact information, privacy policies, and security headers suggests limited compliance and security posture. The WHOIS data is incomplete due to TLD restrictions, which affects domain trustworthiness assessment. Overall, the site is functional and content-rich but lacks critical security and compliance elements.

Cowiki is a non-profit project affiliated with anstiftung and the Verbund offener Werkstätten, providing a structured knowledge base platform aimed at supporting open workshops and collaborative communities in Germany. The website serves as a community resource with links to partner organizations and open source code repositories, reflecting a niche market position focused on knowledge sharing and collaboration. Technically, the site uses modern JavaScript frameworks such as Vue.js and integrates Umami Analytics for minimal user tracking, indicating a moderate level of digital maturity. The website is accessible, mobile-optimized, and presents a consistent brand image aligned with its non-profit mission. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. Privacy compliance is basic, with a privacy policy linked externally but no cookie consent mechanism detected. Overall, the site is trustworthy and safe for general audiences, with no adult or questionable content detected.

N

NDK Wurzen

leerstellen-lkl.de

47

The website leerstellen-lkl.de is a well-structured non-profit project focused on documenting cases of right-wing violence in the Leipzig district. It provides a digital memorial and educational resource through a web documentary, peer networks, and workshops primarily targeting youth and affected communities. The project is funded by reputable organizations and operated by NDK Wurzen, indicating a credible and mission-driven initiative. Technically, the site uses modern frameworks like Nuxt.js and Vue.js, ensuring a responsive and user-friendly experience, though some improvements in accessibility and SEO could be made. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and cookie consent mechanisms, which are recommended for GDPR compliance. Overall, the site is trustworthy, professional, and safe for general audiences.

K

kollygujer

kollygujer.ch

48

kollygujer.ch is a website representing a small creative studio or agency based in Switzerland, focusing on showcasing creative work, offering a shop, and sharing content such as gossip and about pages. The business model appears to be service-oriented with an e-commerce component. The website uses basic web technologies including HTML, CSS, JavaScript, and the p5.js library for interactive graphics. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. Security posture is minimal with no detected security headers or privacy policies, and no evidence of HTTPS was found in the provided data. Contact information is limited to a single email address and an Instagram social media link. The domain WHOIS is privacy protected, which is common and justified for small creative businesses. Overall, the website is functional but basic in design and security.

G

Get a Newsletter: Skapa och skicka snygga nyhetsbrev

getanewsletter.com

62

Get a Newsletter is a Swedish-language focused SaaS platform that enables users to create and send visually appealing newsletters. The website is built on WordPress using Elementor and integrates Cookiebot for cookie consent management and Google Tag Manager for analytics. The domain is well-established since 2007, indicating a mature presence in the newsletter service market. However, the site lacks explicit privacy policies, terms of service, and direct contact information, which are important for trust and compliance. Technically, the site is moderately optimized with good mobile responsiveness and SEO practices but could improve security by enabling DNSSEC and adding security headers.

T

CMS und Webseiten Lösung speziell für Tourismus - TourismusWeb

tourismusweb.site

48

TourismusWeb is a specialized modular open-source CMS and website solution tailored specifically for the tourism industry. It offers a flexible content management system with integrated content hubs, image databases, AI tools, and various integrations designed to meet the needs of tourism organizations, destinations, associations, and related sectors. The platform leverages the Contao Open Source CMS and is supported by modern web technologies and analytics tools such as Google Tag Manager and Plausible Analytics. The website presents a professional and consistent brand image, targeting primarily tourism-related businesses in Denmark and possibly broader European markets.

T

TSO AG

digital.fitness

42

Digital.Fitness® is a Swiss-based software solution focused on providing digital maturity assessments and benchmarking tools for businesses. Operated by TSO AG, the platform offers a modular SaaS product that includes a digital fitness app, a 7-C model framework developed in partnership with Fachhochschule Westschweiz (HES-SO), and a network membership for consultants, system providers, and educational institutions. The website targets business consultants, system providers, and educational entities seeking to evaluate and improve digital transformation levels within companies. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and integrates analytics tools like Google Analytics and Plausible. The site is mobile-optimized and well-structured, providing a professional user experience.

H

Hochschule für Gestaltung und Kunst FHNW

campusderkuenste.ch

57

Campus der Künste is an educational and cultural platform operated by the Hochschule für Gestaltung und Kunst FHNW, located in Basel, Switzerland. The website serves as a hub for arts and design education, cultural events, and collaboration among various creative institutions. It targets students, artists, and cultural professionals, positioning itself as a regional leader in arts education and cultural engagement. The business model focuses on providing educational services and fostering a vibrant cultural community. Technically, the website is built using modern JavaScript frameworks such as Nuxt.js and includes polyfills for compatibility. It uses Matomo analytics for privacy-conscious user tracking. The site is moderately performant, mobile-optimized, and has a consistent branding approach. However, some accessibility and SEO optimizations could be improved. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and does not provide visible security or incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing trust. Overall, the website is professional and trustworthy with a good security posture but could improve privacy compliance and security best practices. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and enhancing accessibility.

E

Eisen Optikergeschäft AG

eisen-optiker.ch

49

Eisen Optikergeschäft AG is a small retail optical business based in Winterthur, Switzerland, specializing in eyewear, contact lenses, and related optical services. The website serves as an informational and promotional platform showcasing their products, team, and services, targeting local customers seeking quality optical solutions. The company maintains a consistent brand presence with clear contact details and social media engagement on Instagram and Facebook. Technically, the site is built on the Zeta Producer CMS platform, utilizing standard web technologies such as HTML5, CSS3, and JavaScript with jQuery and FlexSlider for UI components. The website is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS but lacks several security headers and explicit security policies, indicating room for improvement in security posture and GDPR compliance. No cookie consent mechanism is present, and privacy policy coverage is basic. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Ö

Öpfelchasper GmbH

oepfelchasper.ch

64

Öpfelchasper GmbH is a small Swiss company specializing in the delivery of organic fruits and vegetables to urban customers, including offices and private homes. Their business model centers on eco-friendly bicycle courier delivery, emphasizing bio-quality and CO2-neutral logistics. The company offers subscription services, gift vouchers, and extras to enhance customer experience. Their market position is that of a niche local provider with a strong sustainability focus. Technically, the website employs modern JavaScript libraries and tracking tools such as Google Tag Manager, Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is hosted behind Cloudflare CDN, ensuring good performance and security. The website is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. From a security perspective, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. However, it lacks some advanced security headers and explicit incident response information. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR indicators. Contact information is transparent and consistent with WHOIS data, supporting business credibility. Overall, the website presents a trustworthy, professional, and user-friendly platform for its target audience. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and adding incident response contacts to further strengthen security posture.

C

Coucou

coucoumagazin.ch

53

Coucoumagazin.ch is an independent cultural and city magazine serving the residents of Winterthur, Switzerland. It provides critical, pointed descriptions and information about local culture, including a comprehensive online event calendar. The website is built on the WebZen CMS platform and uses standard web technologies including Google Analytics and Google Tag Manager for visitor tracking. The site is well-structured with good navigation and mobile optimization, targeting local cultural enthusiasts and residents. However, it lacks explicit privacy and cookie policies, which impacts its privacy compliance score. Security posture is moderate with HTTPS enabled but missing some security headers and no visible vulnerability disclosure or security contact information. Overall, the site is a legitimate, small media publication with a focus on local culture and events.

R

Radio Stadtfilter

stadtfilter.ch

46

Radio Stadtfilter is a community-focused radio station based in Winterthur, Switzerland, providing live streaming, archived shows, and a variety of cultural and music programming. The website serves as a hub for listeners to access streams, program schedules, and community engagement features. The business operates as a small non-profit entity with a clear local audience and a mission to promote local culture through media. Technically, the website is built on WordPress with modern plugins and frameworks, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and security headers implemented, though there is room for improvement in privacy compliance and incident response transparency. Overall, the site is trustworthy and professionally maintained, with no critical security issues detected.

H

Hans Späti AG Wohnkultur

spaetiwohnkultur.ch

41

Hans Späti AG Wohnkultur operates a retail business specializing in design furniture, lighting, and textiles with physical showrooms in Wil and Winterthur, Switzerland. The company offers consulting services in planning, furnishing, and interior architecture, targeting design-conscious consumers and professionals. The website reflects a professional retail presence with good design and navigation but lacks comprehensive privacy and security disclosures. Technically, the site uses modern frontend technologies including Bootstrap and jQuery, with Google Analytics for tracking. Security posture is adequate with HTTPS enabled but missing important security headers and privacy policies. Overall, the site is legitimate and trustworthy but could improve compliance and security transparency.

R

Revendo

revendo.ch

78

Revendo is a Swiss-based e-commerce platform specializing in the buying and selling of used and refurbished Apple devices such as iPhones, iPads, MacBooks, and iMacs. The website positions itself as a trusted reseller offering free shipping and warranty services, targeting consumers looking for affordable, quality used electronics. The platform leverages Shopify's robust infrastructure and integrates with trusted third-party services like Trustpilot for reviews and Klaviyo for marketing, indicating a mature digital presence. Technically, the site is well-implemented with modern frameworks, fast performance, and good mobile optimization. Security-wise, the site enforces HTTPS, employs standard security headers, and integrates secure payment options including Apple Pay and Shopify Payments. Privacy compliance is strong with clear policies and cookie consent mechanisms. However, there is room for improvement in publishing explicit security policies and incident response contacts. Overall, Revendo presents a professional, trustworthy, and secure e-commerce experience with a solid market position in Switzerland.

S

scherrer

designmoebel.ch

45

The website designmoebel.ch represents 'scherrer', a small retail business specializing in high-end design furniture and interior planning services in Winterthur, Zürich, and the Eastern Switzerland region. The company partners with renowned furniture brands such as USM, Vitra, Cassina, and Alias, positioning itself as a niche player in the Swiss design furniture market. The website content is primarily in German and targets consumers and businesses interested in premium furniture solutions. Technically, the site is built on the cm4all CMS platform hosted by Hostpoint, utilizing older JavaScript libraries and standard web technologies. While the site offers good content quality and clear navigation, it lacks modern security headers and privacy compliance elements such as a privacy policy or terms of service. The cookie policy is present but lacks an explicit consent mechanism. Security posture is moderate with room for improvement, especially in updating libraries and implementing security best practices. Overall, the site is legitimate and professional but would benefit from enhanced privacy and security measures.

V

Verein Horizonte

horizonte.ch

51

Verein Horizonte is a Swiss non-profit organization founded in 1990, dedicated to providing housing and employment opportunities for people with mental disabilities who face challenges accessing these services in the open market. The website serves as an informational platform primarily targeting individuals in need of social support and their networks. Technically, the site is built on WordPress using the Divi theme and WooCommerce plugin, with moderate performance and good mobile optimization. It employs Google Analytics for visitor tracking and includes a cookie consent mechanism, reflecting basic privacy compliance. Security posture is adequate with HTTPS enabled and some bot detection scripts, but lacks published security policies or incident response contacts. Overall, the domain registration data aligns well with the organization's claims, indicating legitimacy and trustworthiness.

K

Klinikgruppe Valens

kliniken-valens.ch

51

Klinikgruppe Valens is a Swiss healthcare provider specializing in rehabilitation, prevention, and health promotion services. The website reflects a medium-sized organization with a strong regional presence in Switzerland's healthcare sector. The digital infrastructure is based on WordPress with a modern theme and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting the organization's credibility and patient trust.

E

ETC Hotels

edwardthomasco.com

71

Edward Thomas Co (ETC Hotels) operates a luxury hospitality website focused on Santa Monica beach hotels, restaurants, and spas, highlighting properties such as Shutters on the Beach and Hotel Casa del Mar. The website targets affluent travelers seeking premium beachside accommodations and amenities. The business model centers on luxury hospitality services with a focus on high-end customer experience. Technically, the website is built on WordPress, utilizing modern JavaScript libraries such as jQuery and Swiper.js, and integrates Google Tag Manager and OneTrust for analytics and cookie consent management. The site demonstrates good mobile optimization and SEO practices but lacks explicit privacy and terms of service pages. Security posture is moderate with HTTPS enforced and cookie consent implemented, but no advanced security headers or incident response information is present. WHOIS data is unavailable, which reduces trustworthiness and suggests the domain may be unregistered or privacy protected. Overall, the website is professional and functional but would benefit from enhanced transparency and security documentation.

T

The Set

thesetcollection.com

68

The Set is a curated collection of luxury hotels and resorts, targeting affluent travelers seeking exceptional independent properties worldwide. The website presents a professional and visually appealing interface built on WordPress, leveraging popular plugins for SEO and user management. The technical infrastructure is modern and includes GDPR-compliant cookie consent mechanisms. Security posture is adequate with HTTPS enforced and no obvious vulnerabilities detected, though additional security headers could enhance protection. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, warranting further verification. Overall, the site demonstrates a good balance of business professionalism and technical maturity, but lacks visible privacy and terms of service documentation, which are important for compliance and trust.

W

Weyell Zipse

weyellzipse.ch

44

Weyell Zipse is a Swiss architecture studio specializing in architectural design, competitions, exhibitions, and academic guest critiques. The firm has a strong presence in Switzerland and Germany, with a portfolio including schools, residential buildings, and public spaces. Their market position is that of an established, award-winning practice engaged in both professional projects and academic discourse. Technically, the website is built on WordPress with modern JavaScript libraries, offering good mobile optimization and accessibility. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy but could improve in compliance and security transparency.

HANSEPILZ is a small local business specializing in mushroom consulting and educational mushroom walks primarily serving the Northern Germany region including Hamburg, Schleswig-Holstein, and Niedersachsen. The website also showcases mushroom photography, appealing to enthusiasts and learners interested in mycology. The business maintains a niche market position with a focus on education and community engagement, supported by media appearances and active social media channels on Instagram and Facebook. Technically, the website is built on WordPress using the Twenty Seventeen theme, with standard plugins such as Contact Form 7 and CleanTalk for spam protection. Hosting is provided by 1blu, as indicated by the nameservers. The site demonstrates moderate performance and basic mobile optimization, with room for improvement in accessibility and SEO. Security posture is adequate with HTTPS enabled and anti-spam measures in place, but lacks important security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. Overall, the site is trustworthy and professional but could benefit from enhanced security and privacy features to improve compliance and user trust.

K

KMU Werk

kmuwerk.de

66

KMU Werk is a German-based consulting network specializing in providing comprehensive, cross-disciplinary services to small and medium-sized enterprises (SMEs). Their focus is on practical, result-oriented business consulting covering topics from company foundation to succession, addressing challenges such as skilled labor shortages and digital transformation. The website is professionally designed using WordPress and Elementor, featuring clear navigation, contact information, and GDPR-compliant privacy and cookie policies. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are absent. Overall, the site reflects a trustworthy and credible business presence in the SME consulting sector.

V

Vulkan Verlag

vulkan-shop.de

52

Vulkan Shop is a German-based e-commerce platform specializing in the sale of technical books, magazines, and eBooks focused on energy, automation, water, and industrial sectors. The website is professionally designed using Magento 2, featuring a comprehensive catalog of specialized publications targeting professionals and specialists in these industries. The platform supports German and English languages and integrates Google Analytics for user behavior tracking. Cookie consent mechanisms are implemented to comply with GDPR requirements. Security posture is solid with HTTPS enforced and secure cookie settings, although explicit security headers and policies are not fully documented. Contact information and terms of service pages are not clearly presented in the analyzed content, which could impact user trust and compliance transparency.

D

Deutscher Olympischer Sportbund e.V.

sportdeutschland.de

44

Sportdeutschland is the official digital platform of the Deutscher Olympischer Sportbund e.V., Germany's leading sports organization. It promotes sports participation nationwide, offering digital tools such as an interactive sports club map, a club app, and website services tailored for sports clubs and associations. The platform supports Olympic and Paralympic initiatives and targets sports enthusiasts, clubs, and volunteers across Germany. Technically, the website is built on TYPO3 CMS with modern front-end libraries and uses Matomo for privacy-conscious analytics. The site is well-structured, mobile-optimized, and professionally designed, reflecting a mature digital presence. Security posture is solid with HTTPS and secure forms, though it lacks some security headers and a cookie consent mechanism. Privacy compliance is strong with a comprehensive GDPR-aligned privacy policy. Overall, the site is trustworthy and authoritative in its domain.

B

BOTAX Steuerberatungsgesellschaft mbH

botax.de

49

BOTAX Steuerberatungsgesellschaft mbH is a German tax consulting firm offering a range of services including corporate, private individual, employee, association, and testament-related tax consulting. The company positions itself as a trusted advisor with certifications and memberships in professional organizations, targeting businesses and private clients in Germany. The website is built on WordPress using the Themify Ultra theme and employs common plugins such as Contact Form 7 and GDPR Cookie Compliance, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

S

Sparkasse Hannover

sparkasse-hannover.de

68

Sparkasse Hannover is a prominent regional bank serving Hannover and its surrounding region, offering a broad spectrum of financial services including online banking, investment products, insurance, real estate financing, and personalized advisory services. The website reflects a mature digital presence with comprehensive content tailored to private, corporate, and young customers. The bank holds recognized certifications and awards, underscoring its market leadership and customer service excellence. Technically, the site is built on Adobe Experience Manager, leveraging modern web technologies and providing a responsive, accessible user experience. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security headers could be better documented. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and cookie regulations.

H

Hannoversche Volksbank eG

hannoversche-volksbank.de

63

Hannoversche Volksbank eG is a regional cooperative bank in Germany focused on providing local banking and financial services. The website reflects a professional and consistent brand presence, targeting local customers with a clear business model centered on cooperative banking. The digital infrastructure uses modern web technologies including Angular framework and integrates marketing consent management and analytics tools such as Adobe Launch and OneTrust. Security posture is solid with HTTPS enforced and monitoring scripts in place, though explicit security headers and published security policies are absent. Privacy compliance is partially addressed via cookie consent mechanisms but lacks visible privacy and terms of service documentation. Overall, the website is trustworthy and well-positioned in its market segment, with room for improvement in transparency and security documentation.

D

Deutscher Olympischer Sportbund (DOSB)

deutsches-sportabzeichen.de

57

The Deutsches Sportabzeichen website serves as the official platform for Germany's prestigious multi-disciplinary sports award, managed by the Deutscher Olympischer Sportbund (DOSB). It targets a broad audience including individuals of all ages and abilities, schools, sports clubs, and examiners. The site offers comprehensive information, digital services for submitting and managing awards, event details, and community engagement resources. The platform is well-positioned as the authoritative source for the Sportabzeichen, supported by strong partnerships and a large active user base.

R

Roomcard

roomcard.com

64

Roomcard is a UK-based digital hotel gift card platform offering access to over one million hotels worldwide. The service allows users to purchase personalized hotel gift cards that can be delivered digitally at a chosen time, with options for custom greetings and wrapping. Positioned as a sophisticated and global solution, Roomcard targets consumers seeking flexible and unique gifting options in the hospitality sector. The platform is supported by its parent company, HotelMap, and leverages a modern technical infrastructure including AWS hosting and multiple third-party analytics and marketing tools. Security posture is solid with HTTPS and domain transfer protections, though improvements are needed in DNS security and security headers. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the website is professional, user-friendly, and trustworthy, with extensive content and clear business information.

S

SoVD-Landesverband Niedersachsen e.V.

inklusionspreis-niedersachsen.de

48

The website www.inklusionspreis-niedersachsen.de represents a regional non-profit initiative jointly managed by the SoVD-Landesverband Niedersachsen e.V. and the LandesSportBund Niedersachsen e.V. It focuses on promoting and awarding projects that foster inclusion and equal participation of people with and without disabilities in Niedersachsen, Germany. The site provides detailed information about award categories, past winners, and event highlights, targeting volunteers, media professionals, sports clubs, and the general public interested in inclusion. The business model is centered on recognition and awareness rather than commercial activities. Technically, the website is built on TYPO3 CMS, leveraging modern frontend libraries such as jQuery and Slick Slider for interactive content. It demonstrates good digital maturity with mobile responsiveness, accessibility features, and SEO optimization. The cookie consent mechanism is implemented with clear user options, reflecting compliance with GDPR requirements. Hosting appears to be managed via Your-Server.de, with secure HTTPS enforced. From a security perspective, the site benefits from HTTPS and a cookie consent framework but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is minimal but consistent with a legitimate non-profit entity. Overall, the security posture is solid but could be enhanced by adding security headers and formal incident response information. The overall risk is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include improving security headers, publishing security and incident response policies, and enhancing contact information transparency to further build trust and compliance.

Radpass Hannover is a small, community-focused organization dedicated to promoting cycling sports and organizing cycling events in Hannover, Germany. The website serves as a hub for event information, registration links, and showcases partner cycling clubs. Technically, the site is built on WordPress with modern plugins for gallery display, GDPR compliance, and lightweight analytics. The site is well-optimized for performance and mobile devices, with good SEO and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or compliance gaps were detected. Overall, the site presents a trustworthy and professional image suitable for its local community audience.

E

eichels GmbH

marathon-hannover.de

45

The ADAC Marathon Hannover website represents a well-established regional sports event organizer specializing in marathon and related running events in Lower Saxony, Germany. The business is operated by eichels GmbH and enjoys strong partnerships with reputable sponsors and regional organizations such as ADAC. The website provides comprehensive event information, registration options, media galleries, and community engagement features, targeting runners, sponsors, and local participants. Technically, the site is built on TYPO3 CMS with a modern yet slightly dated technology stack including Bootstrap 3 and jQuery 3.2.1. It demonstrates good mobile optimization, accessibility features, and SEO practices. The site uses HTTPS with strong SSL configuration and employs spam protection for email addresses. However, it lacks some advanced security headers and a formal security policy or incident response information. From a security perspective, the site is generally secure with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR adherence. Contact information is transparent and includes multiple channels. No suspicious or malicious content is detected, and the site is free from adult or NSFW content. Overall, the website scores well in content quality, technical implementation, security posture, privacy compliance, and business credibility. Strategic improvements in security headers, incident response transparency, and modernization of the tech stack could further enhance the site's security and resilience.

D

Deutsche Stiftung für Engagement und Ehrenamt

deutsche-stiftung-engagement-und-ehrenamt.de

53

The Deutsche Stiftung für Engagement und Ehrenamt is a German non-profit foundation dedicated to strengthening volunteer engagement through funding, consulting, education, and networking services. The organization holds a reputable position in the national non-profit sector, targeting volunteers and community organizations across Germany. Their digital presence is built on a modern WordPress infrastructure with professional design and good SEO practices, supported by plugins such as Rank Math and Borlabs Cookie for privacy compliance. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit privacy and terms of service pages are missing. Overall, the website reflects a trustworthy and professional entity with a clear mission to support civic engagement.

W

Wilhelm Hirte Stiftung

wilhelm-hirte-stiftung.de

42

The Wilhelm Hirte Stiftung is a small non-profit foundation based in Hannover, Germany, focused on supporting projects in youth aid, sports, and social sectors. The website clearly communicates its mission and provides donation information, targeting a general audience interested in charitable activities. The foundation appears to have a stable market position within its local/regional context, with a business model centered on funding and supporting community projects. Technically, the website is built on WordPress, utilizing common plugins such as Yoast SEO and Contact Form 7, with additional anti-spam measures like Honeypot. The hosting provider is inferred to be netcup based on DNS data. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features and good SEO practices. However, some technical improvements could enhance security and privacy compliance. From a security perspective, the site uses HTTPS and implements basic anti-spam protections. However, it lacks important security headers and does not provide explicit security policies or incident response contacts. The absence of a cookie consent mechanism despite using Google Analytics indicates a gap in privacy compliance. No vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the website's claims, supporting legitimacy. Overall, the website presents a trustworthy and professional image for a non-profit foundation but would benefit from enhanced security headers, privacy compliance improvements, and clearer security policies to strengthen its security posture and user trust.

N

Niedersächsische Bingo-Umweltstiftung

bingo-umweltstiftung.de

46

The Niedersächsische Bingo-Umweltstiftung is a well-established non-profit foundation based in Lower Saxony, Germany, dedicated to environmental protection and development cooperation. The foundation supports various projects and initiatives aimed at sustainability and community engagement. The website reflects a professional and consistent brand presence, targeting residents and organizations interested in environmental causes within the region. The foundation operates with a transparent and accessible digital presence, including multilingual accessibility features and comprehensive content about its activities and funding opportunities. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and accessibility enhancements, hosted on a professional hosting provider (hostpress.de). The site demonstrates good performance, mobile optimization, and SEO practices. Security posture is solid with HTTPS enabled and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the security posture is strong for a non-profit organization, with no critical vulnerabilities detected. The site lacks explicit public security policies or incident response contacts, which could be enhanced. The domain registration is consistent and trustworthy, supporting the legitimacy of the foundation. No adult or questionable content is present, making the site safe for general audiences. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and maintaining regular updates and audits to sustain security and compliance standards.

Penny is a well-established German discount grocery retailer operating under the PENNY Markt GmbH legal entity. The website serves as a digital storefront and information portal for customers, offering online shopping, market location services, and promotional content. The site is professionally designed, mobile-optimized, and uses modern web technologies including Adobe Experience Platform and Usercentrics for consent management. Security posture is strong with HTTPS enforced and consent mechanisms in place, though explicit security headers should be verified. Privacy compliance is robust, with comprehensive privacy and cookie policies and GDPR adherence clearly communicated. Overall, Penny's digital presence reflects its large market position and commitment to user privacy and security.

L

LandesSportBund Niedersachsen

lsb-niedersachsen.de

55

The LandesSportBund Niedersachsen is a prominent non-profit sports federation serving the Niedersachsen region in Germany. It acts as a lobbyist, service provider, and promoter of sports activities, offering a wide range of services including advocacy, funding, education, and member support. The website reflects a mature organization with a clear market position as the leading sports federation in the region, targeting a broad audience including sports clubs, athletes, and the general public. Technically, the website is built on TYPO3 CMS with a modern technology stack including jQuery, Bootstrap, and Matomo analytics configured for privacy compliance. The site is well-optimized for mobile and accessibility, featuring structured navigation and comprehensive content. Hosting appears to be local to Germany, consistent with the organization's regional focus. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms with disabled tracking cookies by default. While no explicit security policies or incident response contacts are published, no vulnerabilities or sensitive data exposures were detected. Security headers could be improved for enhanced protection. Overall, the website presents a professional, trustworthy, and privacy-conscious digital presence suitable for a large non-profit organization. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to strengthen trust and compliance.

D

DOSB New Media GmbH

sportdeutschland.tv

60

Sport Europe, operated by DOSB New Media GmbH, is a German-based media platform specializing in streaming and broadcasting European sports content. The website targets sports fans primarily in Europe, offering live and on-demand sports media services. The business is relatively young, founded in 2018, and operates with a medium-sized organizational footprint. The domain registration details align well with the company's German origin and media focus, indicating legitimacy and consistency in business operations. Technically, the website employs modern web technologies including HTML5, CSS3, Bootstrap framework, and Font Awesome icons, ensuring a responsive and visually appealing user experience. Hosting is provided by IONOS SE, a reputable provider. Performance is moderate with good mobile optimization, though accessibility features are basic. SEO optimization is present but could be improved with more comprehensive metadata and structured data. From a security perspective, the site uses HTTPS but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. No privacy or cookie policies were detected, which is a compliance gap especially under GDPR regulations. No contact information or incident response details were found, limiting transparency and user trust. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website presents a professional and functional sports media platform with room for improvement in privacy compliance and security hardening. Strategic enhancements in these areas would improve trustworthiness and regulatory adherence.

T

trainersuchportal

trainersuchportal.de

66

trainersuchportal.de is a specialized online job board platform focused on the sports sector, connecting trainers, coaches, and sports professionals with employers such as clubs, associations, and fitness studios primarily in Germany. The platform offers job listings, trainer profiles, and integrates partner job boards to expand reach. The website is professionally designed, mobile-optimized, and provides rich content including blogs and testimonials, positioning itself as a niche leader in the sports employment market. Technically, it employs modern web technologies including Google Tag Manager, Google Analytics, and Cloudflare DNS/CDN, ensuring good performance and security. Security posture is solid with HTTPS and error monitoring via Sentry, though explicit security headers and policies could be enhanced. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the site is trustworthy, user-friendly, and well-positioned in its market niche.

The website lsb-nds.net serves as the official portal for the LandesSportBund Niedersachsen, a regional sports association in Germany. It primarily facilitates members in applying for funding and accessing educational and administrative services related to sports. The site targets members of the LandesSportBund Niedersachsen and operates as a non-profit government-related entity. The business model focuses on providing digital access to sports-related funding and educational resources within the Niedersachsen region. Technically, the website employs basic web technologies including HTML5, CSS, and JavaScript, with a custom MD5-based challenge-response login mechanism. The infrastructure is moderate in performance and mobile optimization, with hosting linked to InterNetX GmbH and DNS servers under htp-tel.de. However, the site lacks modern security enhancements such as DNSSEC and security headers, and uses outdated cryptographic methods for authentication. From a security perspective, while the domain registration is consistent and legitimate, the use of MD5 hashing and absence of DNSSEC and security headers present vulnerabilities. No explicit privacy or cookie consent mechanisms are implemented, though a privacy policy is linked externally. The site is accessible without WAF or blocking mechanisms, but improvements in security posture and privacy compliance are recommended. Overall, the website is functional and serves its intended audience but would benefit from modernization of security practices, enhanced privacy compliance, and improved technical implementation to strengthen trust and resilience against threats.