Security Directory

A

AME International

ame.eu

53

AME International is an Austrian healthcare company specializing in turnkey tertiary care hospitals, medical equipment packages, and digital healthcare solutions. The company positions itself as a provider of comprehensive healthcare infrastructure projects on a global scale, targeting healthcare providers and government agencies. The website reflects a professional and modern digital presence built on WordPress, featuring multimedia content and clear navigation. The technical infrastructure is well-implemented with modern libraries and performance optimizations. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the website demonstrates a mature digital footprint with strong compliance to GDPR and privacy standards, supporting the company's credibility in the healthcare sector.

A

ApoScout

aposcout.at

45

ApoScout is a healthcare-focused digital service providing Austrian consumers with real-time information on medication availability across local pharmacies. The platform offers a mobile app that enables users to search for pharmacies, check medication stock, view night and emergency service schedules, and reserve medications at participating pharmacies. The website is professionally designed, mobile-optimized, and compliant with GDPR regulations, targeting primarily Austrian users seeking efficient pharmacy services. Technically, the website is built on WordPress using the Enfold theme and integrates several plugins including Contact Form 7 for user communication and Complianz for cookie and privacy management. The site employs modern web technologies such as jQuery and Google Tag Manager for analytics and marketing. Performance is moderate with good mobile responsiveness and basic accessibility features. From a security perspective, the site enforces HTTPS and uses security plugins to mitigate spam and attacks. However, explicit security headers are not detected, and there is no dedicated security policy or incident response information publicly available. The privacy and cookie policies are comprehensive and clearly presented, reflecting good compliance with EU data protection laws. Overall, ApoScout presents a trustworthy and professional digital presence with a clear business focus in healthcare. The site is secure and compliant, though improvements in security headers and incident response transparency could enhance its security posture further.

L

Loxone Lighthouse

loxone-lighthouse.com

52

Loxone Lighthouse is a specialized participation company focused on corporate succession, offering responsible and sustainable business handover services primarily targeting entrepreneurs and business owners in Germany. The website presents a professional and consistent brand image, emphasizing trust and long-term development of acquired companies. Technically, the site is built on WordPress with modern plugins and tracking tools, providing a good user experience with mobile optimization and GDPR-compliant cookie management. Security posture is adequate with HTTPS and consent mechanisms, though lacking some advanced security headers and explicit incident response information. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy, warranting further verification. Overall, the site is functional, trustworthy, and business-oriented but could improve transparency and security practices.

H

Höllinger

hoellinger-juice.at

57

Höllinger Juice is a small Austrian retail company specializing in organic syrups, fruit juices, energy drinks, and related beverages. Established in 1998, the company emphasizes natural ingredients and regional sourcing, targeting health-conscious consumers seeking high-quality organic products. The website serves as an e-commerce platform showcasing their product range and brand philosophy. Technically, the site is built on WordPress with WooCommerce, enhanced by modern JavaScript libraries and marketing integrations such as Google Analytics and Facebook Pixel. The site demonstrates good SEO and mobile optimization but lacks explicit privacy and terms of service pages, which are critical for compliance and user trust. Security posture is adequate with HTTPS and privacy plugins but could be improved by adding security headers and incident response information. Overall, the site is professional and trustworthy but would benefit from enhanced privacy disclosures and security hardening.

W

Wildshut, ein Liebesbeweis an unser Bier

wildshut.at

61

Wildshut is a small Austrian hospitality business focused on craft beer production and retail, positioning itself as Austria's first beer estate. The website is built on a modern WordPress platform with WooCommerce for e-commerce capabilities and uses popular plugins such as Yoast SEO and Cookiebot for SEO and privacy compliance. The site demonstrates good design quality, mobile optimization, and basic accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and policies are lacking. No privacy policy or terms of service pages were detected, which is a compliance gap. The domain registration data aligns well with the business claims, indicating legitimacy. Overall, the website is professional and trustworthy but could improve in privacy and security documentation.

M

MAKAvA

makava.bio

57

MAKAvA is an Austrian small business specializing in organic, vegan, and fair trade iced tea products made from caffeinated Mate tea. The company emphasizes sustainability, regional sourcing, and climate neutrality, positioning itself as a niche player in the organic beverage retail market. The website is professionally designed with good content quality, clear navigation, and mobile optimization, targeting health-conscious consumers in Austria and German-speaking regions. Technically, the site runs on WordPress with modern plugins for SEO and GDPR compliance, and uses tracking pixels from Facebook, TikTok, and Google Analytics for marketing and analytics purposes. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and published security policies could enhance trust. WHOIS data is privacy protected but consistent with a legitimate small business profile. Overall, the site is safe, trustworthy, and compliant with GDPR, with no critical security issues detected.

D

DATEV

datev.at

56

DATEV.at is a professional website representing DATEV, a leading provider of software solutions and consulting services primarily targeting tax advisors and businesses in Austria. The site offers a comprehensive range of products and services including digital signature solutions, cloud services, IT support, and consulting. The website is well-structured, professionally designed, and optimized for both desktop and mobile users, reflecting a mature digital presence. The technical infrastructure is based on WordPress with modern libraries and plugins, ensuring a stable and maintainable platform. Security posture is solid with HTTPS enforced and a detailed cookie consent mechanism in place, although some security headers could be improved. Privacy compliance is strong, with accessible privacy and cookie policies adhering to GDPR standards. Overall, the site demonstrates high business credibility and trustworthiness with consistent branding and clear communication.

F

Faktor B gGmbH

faktor-b.org

56

Faktor B gGmbH is a German non-profit organization specializing in innovative educational financing based on a reverse generational contract model. The organization aims to promote equitable access to higher education by pooling donations and subordinated loans to fund students, who later repay a share of their income to sustain the fund. The website is professionally designed, content-rich, and targets students, donors, foundations, and companies interested in social impact through education. Technically, the site is built on WordPress with modern plugins and SEO optimizations, delivering good performance and mobile responsiveness. Security posture is solid with HTTPS and consent management, though some HTTP security headers are missing and no explicit security policy is published. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is common for non-profits. Overall, the site is trustworthy, compliant with GDPR, and well-positioned in the education non-profit sector.

A

Austrian Exhibition Experts GmbH

ferien-messe.at

51

Ferien-Messe Wien is Austria's largest trade fair dedicated to holidays, travel, and leisure, organized by Austrian Exhibition Experts GmbH. The event is held at Messe Wien and includes a mobility exhibition called Vienna Drive. The website presents a professional and well-structured digital presence, targeting travelers, exhibitors, and visitors interested in travel and mobility. It offers online ticketing, exhibitor information, and visitor guidance, supported by active social media channels and partner collaborations. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Complianz GDPR for SEO and privacy compliance. It uses Google Tag Manager for analytics and GTranslate for multilingual support. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and obfuscated emails to reduce spam. However, explicit security headers are not detected, and no dedicated security or incident response policies are published. The domain registration is consistent with the business entity, enhancing trustworthiness. Overall, Ferien-Messe Wien's website is a credible, secure, and privacy-compliant platform supporting a major event in Austria's hospitality and transportation sectors. Strategic improvements in security headers and incident response transparency would further strengthen its posture.

A

Advanced Technologies Austria GmbH

atechnologies.eu

45

Advanced Technologies Austria GmbH (ATA) is a specialized Austrian company focused on developing integrated agricultural projects that enhance efficiency and productivity. Their offerings include mechanization, irrigation, food processing, and animal husbandry solutions tailored to client needs. The company positions itself as a forward-thinking partner for agricultural businesses seeking innovative and sustainable technologies. The website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Security posture is solid with HTTPS and security plugins, though explicit security policies and incident response details are absent. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, ATA presents a trustworthy and credible business profile with room for enhanced security transparency.

A

ATTYS 05 Rechtsanwälte GmbH

attys.law

48

ATTYS 05 Rechtsanwälte GmbH is a young, dynamic Austrian law firm specializing in employment, corporate, real estate, and intellectual property law. The firm targets entrepreneurial clients and businesses, offering tailored, transparent, and forward-looking legal solutions. Their market position is that of a modern boutique law firm with a strong emphasis on business and IP legal services. Technically, the website is built on WordPress with modern plugins and SEO optimizations, delivering a good user experience and mobile responsiveness. Security posture is solid with HTTPS and domain transfer protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is mostly met with a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with the firm's business objectives.

L

Loxone International

loxone.com

72

Loxone International operates as a provider of comprehensive home and building automation solutions, targeting both residential and commercial markets. The company offers a range of products and services designed to enable intuitive control and automation for smart homes, offices, hospitality, and specialized applications. Their market position is that of an established international player with a medium-sized footprint and a focus on technology innovation in automation. Technically, the website is built on WordPress using the Divi theme, enhanced with modern JavaScript libraries such as jQuery and Lottie Player, and integrates Google Tag Manager and Zoho SalesIQ for analytics and customer engagement. The site demonstrates good mobile optimization, SEO practices, and moderate performance, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. It employs a GDPR-compliant cookie consent mechanism and maintains a comprehensive privacy policy. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with no indications of security or content safety concerns. Strategic recommendations include enhancing transparency around security policies and incident response, adding vulnerability disclosure information, and improving accessibility features to further strengthen the security posture and user trust.

P

Pilates Babes GmbH

pilatesbabes.com

67

Pilates Babes GmbH operates a professionally designed e-commerce website focused on Pilates fitness classes, events, retreats, and merchandise primarily targeting the Austrian and German markets. The company leverages the Shopify platform to deliver a mobile-optimized, fast-loading website with integrated social media presence and customer testimonials, positioning itself as a niche wellness brand. Technically, the site uses modern web technologies including Shopify's Dawn theme, JavaScript, CSS, and hCaptcha for form security. The security posture is solid with HTTPS enforced and domain locking, though explicit security policies and incident response contacts are absent. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the website is trustworthy and professional but could improve transparency and compliance documentation.

A

Austrian Exhibition Experts GmbH

wohnen-interieur.at

50

The website www.wohnen-interieur.at represents Austrian Exhibition Experts GmbH, organizing Austria's largest exhibition for home living, furniture, garden, and design, scheduled for March 2026 in Vienna. It targets both exhibitors and visitors interested in interior design, renovation, and sustainable living. The site is professionally designed with comprehensive content, clear navigation, and strong branding consistency. It integrates modern web technologies including WordPress CMS, Yoast SEO, and GDPR-compliant cookie management, reflecting a mature digital infrastructure. Security posture is solid with HTTPS, obfuscated emails, and security plugins, though some security headers could be improved. Privacy compliance is well addressed with explicit policies and consent mechanisms. Overall, the site is trustworthy, user-friendly, and well-positioned in its market segment.

N

New Originals Company

neworiginals.company

64

New Originals Company is a small European-based business specializing in the production of tofu and natural plant protein foods crafted from soy, grains, and legumes. The company emphasizes innovation rooted in culinary tradition and sustainability, targeting consumers interested in authentic plant-based nutrition and a new food culture. Their market position is niche, focusing on quality and European-crafted products. The website is built on a modern WordPress platform with multilingual support and GDPR-compliant cookie consent mechanisms. Technical infrastructure is solid with good mobile optimization and SEO practices. Security posture is good with HTTPS enforced and no visible vulnerabilities, though additional security headers and explicit security policies could enhance protection. Overall, the business appears credible and professional with clear branding and trust indicators such as EU funding acknowledgment and LinkedIn presence.

R

Rozet & Fischmeister

rozetundfischmeister.at

64

Rozet & Fischmeister is a traditional Austrian jewelry retailer established in 1770, currently operated by the sixth generation of the Fischmeister family. The company offers a wide range of jewelry products including rings, earrings, bracelets, and silverware, targeting consumers seeking high-quality and traditionally crafted jewelry. The website serves as both a brand showcase and an e-commerce platform, leveraging WooCommerce on WordPress to facilitate online sales. The site is professionally designed with good navigation and mobile optimization, reflecting a mature digital presence. Technically, the website employs a modern technology stack including WordPress, WooCommerce, and various marketing and tracking tools such as Facebook Pixel and Google Tag Manager. The site uses HTTPS with good SSL configuration and implements cookie consent mechanisms compliant with GDPR. However, some security headers are not explicitly detected, and no dedicated security or incident response policies are published on the site. From a security perspective, the website demonstrates a solid baseline with HTTPS enforcement and no visible critical vulnerabilities. The use of third-party tracking scripts is managed with user consent, aligning with privacy regulations. The WHOIS data confirms domain legitimacy with consistent registrant information and domain age appropriate to the company's long history. Overall, Rozet & Fischmeister presents a trustworthy and professional online presence with good compliance and security posture. Strategic improvements could include enhancing security headers, publishing explicit security policies, and providing direct contact information for security incidents to further strengthen trust and resilience.

D

Diamond Country Club

countryclub.at

53

Diamond Country Club is a well-established hospitality and golf resort located in Austria, offering multiple golf courses, hotel accommodations, event hosting, and retail services. The website positions itself as Austria's only European Tour Destination, targeting golf enthusiasts and travelers seeking premium leisure experiences. The business model integrates golf, hospitality, and event services with online booking capabilities, supported by a professional and consistent brand presence. Technically, the website is built on WordPress with WooCommerce for e-commerce functionalities, leveraging modern JavaScript libraries such as jQuery, GSAP, and Slick Carousel for enhanced user experience. The site demonstrates good mobile optimization and SEO practices, though accessibility features could be improved. Performance is moderate, with caching and optimization plugins in use. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. It implements a cookie consent mechanism compliant with GDPR, and privacy policies are comprehensive and clearly presented. However, there is no dedicated security policy or incident response information publicly available, nor a vulnerability disclosure program, which could be areas for enhancement. Overall, the website is trustworthy, professional, and compliant with privacy regulations, with a strong business credibility and digital maturity. Strategic improvements in security transparency and accessibility would further strengthen its posture.

G

GAIL's

gailsbread.co.uk

69

GAIL's is an established bakery business based in the United Kingdom, specializing in fresh handmade bread, pastries, sandwiches, and specialty coffee with delivery services in London. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations such as Google Tag Manager, Bing Clarity, and Freshchat for customer engagement and analytics. The domain is long-standing, created in 2001, and shows consistent registration details with no privacy protection, indicating transparency and legitimacy. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. However, explicit terms of service and security policies are not evident in the provided content. The website demonstrates good design quality, mobile optimization, and SEO practices, providing a professional user experience.

The website atreemo.uk currently serves only a default IIS Windows Server start page, indicating that no active website content or business presence is established. The domain is registered with a reputable registrar, Tucows Inc, since November 2021, with a valid expiry in 2025. However, the lack of any business information, contact details, or policies on the website suggests it is either under development or abandoned. Technically, the site runs on Microsoft IIS on Windows Server, but no modern web technologies, CMS, or frameworks are detected. Security posture is weak due to absence of HTTPS, security headers, and privacy compliance mechanisms. Overall, the site is not suitable for business operations in its current state and lacks trust signals.

Ost|Est Osteuropanetzwerk is a small non-profit association based in Switzerland focused on fostering cultural, historical, political, and economic understanding of East-Central, Eastern, and Southeastern Europe. The organization operates primarily in the Bern-Fribourg region and targets academic and public audiences interested in Eastern European studies. Their activities include organizing cultural events, lectures, film screenings, and facilitating engagement between universities and the public. The website reflects this mission with multilingual content and event listings. Technically, the site is built on the Weebly/EditMySite platform, using older JavaScript libraries and standard web technologies. While HTTPS is properly implemented, the site lacks modern security headers and privacy compliance documents, which are areas for improvement. Overall, the security posture is moderate with no critical vulnerabilities detected. The site is accessible without WAF or blocking mechanisms, and WHOIS data aligns well with the organization's profile, indicating legitimacy.

I Never Read is an established independent art book fair and publishing platform based in Basel, Switzerland, founded in 2012. It organizes annual fairs, pop-up shops, radio projects, and workshops focused on independent and institutional art publishers. The platform serves artists, publishers, and art enthusiasts internationally, positioning itself as a niche cultural event with strong local and international partnerships. Technically, the website uses a traditional tech stack including jQuery 2.0.3, Bootstrap, and jPlayer, hosted behind Cloudflare for DNS and performance benefits. While the site is content-rich and professionally presented, it lacks modern security enhancements such as DNSSEC and explicit security headers, and uses an outdated jQuery version which may pose security risks. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is safe, trustworthy, and well-regarded in its niche, but could improve its security and privacy posture.

V

VOLUMES

volumeszurich.ch

66

VOLUMES is a small non-profit organization based in Zürich, Switzerland, focused on supporting the DIY facet of art publishing through an annual book fair and related events. The website is built on Drupal 10 and uses modern web technologies such as Polymer and Flickity for UI components. The site is well-structured, mobile-optimized, and accessible, providing clear information about the event and participants. However, it lacks critical privacy and cookie policies, contact information, and security headers, which impacts its overall security and compliance posture. The domain uses privacy protection in WHOIS, which is typical and justified for a non-profit cultural entity. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security measures.

M

Mastodon.ART

mastodon.art

65

Mastodon.ART is a community-driven Mastodon instance dedicated to creatives and artists, providing a safe, ad-free social media platform within the fediverse. It emphasizes inclusivity, safety for marginalized groups, and prohibits AI-generated content and NFTs. The platform is supported by donations and managed by a transparent moderation team. Technically, it runs Mastodon 4.4.8 with React and modern web technologies, hosted by Masto.host. The website is well-designed, mobile-optimized, and accessible, with clear navigation and professional content. Security posture is good with HTTPS and domain transfer protections, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy compliance is moderate with a comprehensive privacy policy but no cookie consent mechanism. Overall, the site is trustworthy, legitimate, and well-positioned within its niche.

W

WebFactory Ltd

underconstructionpage.com

59

WebFactory Ltd operates the UnderConstructionPage website, offering a popular WordPress plugin designed to create under construction, maintenance, landing, and sales pages quickly and easily. The company targets WordPress site owners including business owners, bloggers, and developers, providing a drag-and-drop builder, extensive templates, and premium image integration. With over 12 million downloads and a strong user base, the company holds a solid market position in the WordPress plugin ecosystem. The website is professionally designed, SEO optimized, and rich in content including user reviews and blog posts, reflecting a mature digital presence. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses several third-party services such as Paddle for payments, Helpscout for support, and Tooltip.io for marketing. The site is mobile optimized, fast, and accessible, with good SEO practices and structured data implemented. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit security policies could be improved. The security posture is solid with no critical vulnerabilities detected. The site uses nonce tokens for AJAX calls and avoids exposing sensitive data. Privacy compliance is well addressed with clear GDPR and cookie policies, including a consent mechanism. Contact information is available primarily via email and support forms, though no phone numbers or physical addresses are listed. The domain is long-standing since 2006, consistent with the business maturity, and WHOIS data shows no suspicious patterns. Overall, the website presents a trustworthy, professional, and secure platform for its users. Strategic recommendations include enhancing security headers, publishing explicit security policies, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.

T

TIVENTS

tivents.info

51

TIVENTS is a German-based B2B platform specializing in the sale and management of event tickets, vouchers, and related services such as seat plan bookings and certificates. The company targets event organizers and partners, offering a streamlined process for registering, creating, and managing sales through their platform. The website demonstrates a professional presence with consistent branding and partner testimonials, indicating a trusted regional market position. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS enforced, though some improvements in security headers and explicit privacy compliance are recommended. Overall, the platform shows a mature digital infrastructure suitable for its business model.

T

TIVENTS

tivents.de

60

TIVENTS is a German-based e-commerce platform specializing in the sale of event tickets, gift vouchers, and animal sponsorships. The website targets consumers interested in local events and unique gifting options, operating primarily within Germany. The platform leverages Shopware 6 technology and integrates payment solutions such as PayPal, providing a modern and functional user experience. The site is mobile-optimized and includes features like pagination and sorting to enhance usability. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and formal privacy or terms of service documentation. Overall, the website presents a moderate security posture with room for improvement in compliance and transparency.

P

PRO ASYL

proasyl-shop.de

39

PRO ASYL is a German non-profit organization dedicated to advocating for the rights of refugees and migrants in Germany and Europe. The website serves as a platform to provide information about their mission and to offer publications and materials through an integrated webshop. The organization maintains a strong presence on multiple social media platforms and provides clear contact information, enhancing its accessibility and outreach. Technically, the website is built using the One.com Web Editor CMS and hosted by checkdomain.de. It employs modern web technologies such as Swiper.js for image sliders and integrates Termly for cookie consent management, indicating a moderate level of digital maturity. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features could be improved. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks published security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. Overall, the security posture is adequate but could benefit from enhanced transparency and formal policies. The overall risk assessment is low, with the website appearing trustworthy and professionally maintained. Strategic recommendations include publishing a security policy, adding incident response and vulnerability disclosure information, improving accessibility, and creating a terms of service page to enhance compliance and user trust.

Berlin gegen Nazis is a small non-profit organization focused on anti-Nazi activism and social justice in Berlin. Their website serves as an informational and mobilization platform, providing news, event announcements, and calls to action for protests and rallies. The platform targets the general public interested in combating right-wing extremism and promoting solidarity. The website is multilingual, supporting English, German, and Turkish, enhancing accessibility to diverse audiences. Technically, the website is built on WordPress and utilizes a range of plugins including Yoast SEO for search optimization, Matomo for privacy-conscious analytics, and a GDPR-compliant cookie consent plugin. Hosting is provided by a German hosting provider (oopen.de), and the site uses HTTPS with a good SSL configuration. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of a security.txt file or vulnerability disclosure policy suggests room for improvement in transparency and security maturity. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It effectively serves its mission as an anti-Nazi informational platform but could enhance its security posture and transparency to further build trust and resilience.

V

Verein für Demokratische Kultur in Berlin (VDK) e.V.

regishut.de

52

Regishut is a non-profit project supporting the Berlin Police through political education aimed at preventing and prosecuting antisemitic crimes. The project, active since 2021, focuses on sensitizing police staff to current forms of antisemitism and supporting democratic culture in Berlin. The website reflects a niche, mission-driven organization with clear funding from the Berlin Senate and donation mechanisms to support its activities. Technically, the site uses a modern CMS (KONTEXT-CMS), jQuery, Tailwind CSS, and FontAwesome, providing a good user experience with responsive design and clear navigation. However, the site lacks explicit privacy and cookie policies, security headers, and contact information, which are areas for improvement. No blocking or WAF mechanisms were detected, and the domain registration data is consistent and legitimate for the business purpose. Overall, the site is professional and trustworthy but could enhance its security and compliance posture.

R

Report Antisemitism

report-antisemitism.de

51

The website 'Report Antisemitism' serves as a platform dedicated to reporting and raising awareness about antisemitism incidents, primarily focused on Germany. It targets the general public, victims, researchers, and policymakers interested in antisemitism data and reporting. The business model appears non-commercial and informational, with no evident monetization or advertising. The website uses a modern static site generator (Gatsby) and is hosted on Hetzner, a reputable German hosting provider, indicating a solid technical infrastructure. The site is mobile-optimized and has a good design quality, but lacks comprehensive privacy and cookie policies, which is a compliance gap. Security posture is strong with a strict Content-Security-Policy, but additional security headers could enhance protection. No contact information or social media links were found, limiting direct communication channels. Overall, the site is safe, professional, and trustworthy but would benefit from improved privacy compliance and contact transparency.

D

German TV in Thailand - streaming, download, Apps

deutsches-fernsehen-weltweit.de

49

The website deutsches-fernsehen-weltweit.de offers a subscription-based streaming and cloud DVR service providing access to 44 German TV channels worldwide, targeting German expatriates and German-speaking audiences, especially in Thailand. The business model centers on providing easy access to German TV content without hardware requirements, leveraging cloud recording technology. The site is well-branded and consistent, with clear service descriptions and pricing, positioning itself as a niche media provider in the German expatriate market. Technically, the site uses modern web technologies including Google Analytics, Google Tag Manager, and Google Fonts, hosted on AWS infrastructure. The site is mobile-optimized and SEO-friendly, with moderate performance and basic accessibility features. However, no CMS or advanced frameworks are detected. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and does not publish privacy, cookie, or security policies, which reduces its privacy compliance posture. No incident response or vulnerability disclosure information is provided, limiting transparency. The WHOIS data aligns with the website content and hosting, indicating a legitimate domain. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures to improve trust and compliance. There are no indications of malicious or adult content, making it safe for general audiences.

The website termsfeedtag.com is currently inaccessible due to a security block resulting in a 403 Forbidden error page served via Cloudflare. The page content is minimal and only displays an unauthorized access message with instructions to authenticate or contact support. No business, legal, or privacy-related content is available for analysis. The domain is registered with NameCheap, Inc. since 2020 with a long expiry date, indicating a legitimate registration. However, the lack of accessible content and security block significantly limit the ability to assess the website's business model, services, or compliance posture. Technical infrastructure includes Cloudflare DNS and security services, but no further technology or CMS details are available. Security posture cannot be fully evaluated due to lack of accessible data, but the presence of a security block suggests some level of protection is in place. Overall, the website is currently not usable for end users or analysis, and improvements are needed to provide accessible content and clear security and privacy policies.

W

Walzwerk

walzwerk.ch

52

Walzwerk is a mixed-use commercial real estate area located in Münchenstein and Arlesheim, Switzerland, offering a vibrant environment combining business, education, culture, gastronomy, and leisure. The website presents the property as a regional hub for diverse activities, targeting local businesses, cultural participants, and visitors seeking educational and recreational experiences. The business model centers on leasing commercial and cultural spaces and hosting events, supported by a parent company, SF Urban. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript with jQuery and GSAP, and integrates Google Analytics for user tracking. The site is well-structured, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. No critical vulnerabilities or suspicious elements were detected. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though contact information is not explicitly provided in the HTML content.

I

Interessengemeinschaft Dreispitz Basel

ig-dreispitz.ch

56

Interessengemeinschaft Dreispitz Basel is a small community interest group focused on the Dreispitz area in Basel, Switzerland. The website serves as an informational portal about the association, its board, and membership opportunities. It targets local community members and stakeholders interested in the development and activities of the Dreispitz area. The business model is non-profit and community-oriented, with no commercial services offered. The site content is consistent and professionally presented for a small organization, with downloadable documents and a contact form for engagement. Technically, the website is built on the cm4all CMS platform hosted by Hostpoint, utilizing older but stable JavaScript libraries such as jQuery 1.7 and Prototype.js 1.7.3. The site is mobile optimized and accessible, with basic SEO and performance characteristics. The cookie consent mechanism is implemented with granular user options, reflecting a basic level of privacy compliance. However, no privacy policy or terms of service pages are present, which limits full compliance transparency. From a security perspective, the site enforces HTTPS and includes a cookie consent banner, but lacks security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain uses privacy protection for WHOIS data, which is typical for small community organizations. Overall, the security posture is moderate but could be improved with additional headers and policies. The overall risk assessment is low given the non-commercial nature and limited data collection. Strategic recommendations include adding a privacy policy and terms of service, implementing security headers, and providing incident response contact information to enhance trust and compliance. The website is suitable for its purpose but could benefit from modernization and improved security practices.

M

Malheur&Fortuna

malheur-fortuna.ch

62

Malheur&Fortuna is a small Swiss architectural and urban planning firm based in Basel, specializing in projects, research, and publications related to urban infrastructure, architecture, and city planning. The company is founded by three architects with Master of Science degrees from ETH Zürich, indicating a high level of professional expertise. Their website reflects a niche market position targeting professionals and academics interested in urban design and infrastructure. Technically, the website uses modern JavaScript modules and Google Analytics with IP anonymization, indicating a moderate level of digital maturity. The site is mobile optimized and SEO friendly but lacks some accessibility features and security headers. Security posture is generally good with HTTPS enforced and cookie consent implemented, but the absence of privacy policy and terms of service pages represents a compliance gap. No critical vulnerabilities or suspicious elements were detected. Overall, the website is professional, trustworthy, and safe for general audiences.

O

Opportunus s.r.o.

ecpaper.cz

42

EcPaper, operated by Opportunus s.r.o., provides a digital solution for converting traditional printed catalogs and flyers into interactive online formats. Their service targets businesses seeking to enhance customer engagement through responsive, SEO-optimized digital catalogs accessible on multiple devices. The company positions itself as a niche technology provider within the Czech Republic, offering tools for catalog management, analytics integration, and online sales channel enhancement. The website reflects a professional and consistent brand image with clear contact information and client references, supporting its credibility in the market. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and jQuery, with responsive design facilitated by Bootstrap. Integration with Google Fonts and Google Maps API enhances user experience. The site is powered by dmpCMS, indicating a managed content platform. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are evident through meta tags and structured content. Security posture is adequate with HTTPS usage and secure form handling, but lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance. No WHOIS data was retrievable, which raises concerns about domain registration transparency. No signs of malicious content or vulnerabilities were detected in the visible content. Overall, the website presents a trustworthy business front with room for improvement in security best practices and privacy compliance. Strategic recommendations include implementing security headers, cookie consent, and publishing terms of service to enhance user trust and regulatory adherence.

A

A*dS – Autorinnen und Autoren der Schweiz

a-d-s.ch

40

A*dS – Autorinnen und Autoren der Schweiz is a Swiss non-profit association dedicated to supporting authors and translators across Switzerland's linguistic regions. The organization promotes cultural, trade union, and political goals related to literature dissemination and exchange. The website serves as an information hub offering resources, funding opportunities, events, and member services, positioning itself as a key player in the Swiss literary community. Supported by the Swiss Federal Office of Culture, it maintains a credible and professional presence with clear contact information and multilingual content.

The Studer/Ganz Stiftung website represents a small Swiss non-profit foundation focused on promoting literature and cultural initiatives, as evidenced by the mention of the CHRYSALIDE Binding Förderpreis für Literatur. The site is multilingual, targeting German, French, and Italian speakers, reflecting Switzerland's linguistic diversity. The business model centers on cultural sponsorship and foundation activities, positioning it as a niche player within the Swiss cultural sector. Technically, the website employs basic web technologies including HTML5, CSS, JavaScript, and jQuery. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. There is no evidence of a CMS or modern frameworks, indicating a simple, possibly static site architecture. From a security perspective, the site lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and user trust. No forms or direct contact information are present on the homepage, limiting user engagement and transparency. The WHOIS data aligns well with the website's claims, showing consistent registration details without privacy protection, appropriate for a non-profit entity. Overall, the website is functional but basic, with room for improvement in privacy compliance, security posture, and user engagement. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

S

Sophie und Karl Binding Stiftung

binding-stiftung.ch

51

The Sophie und Karl Binding Stiftung is a Swiss foundation dedicated to promoting social cohesion and preserving natural, cultural, and intellectual values in Switzerland. It operates primarily in the environmental, social, and cultural sectors, providing funding and engaging in projects and partnerships such as the Binding Biodiversity Prize. The website reflects a professional and consistent brand presence with clear navigation and relevant content targeting Swiss society and nonprofit organizations. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates Google Analytics and reCAPTCHA for security and analytics. Security posture is solid with HTTPS and no exposed sensitive data, though it lacks some advanced security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and well-maintained, suitable for its nonprofit mission.

M

Marketing Mavens

marketingmavens.com

52

Marketing Mavens is a small, established digital marketing agency founded in 2009, specializing in delivering comprehensive sales and marketing strategies including branding, audience targeting, offer crafting, traffic generation, conversion optimization, and automation. The company positions itself as an experienced boutique agency with over 12 years of experience and more than 1,000 client projects, targeting businesses seeking predictable and profitable marketing results. Technically, the website is built on WordPress using the GeneratePress theme, integrating modern marketing and analytics tools such as Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Inspectlet. The site is mobile optimized and demonstrates good SEO and accessibility basics. Security posture is adequate with HTTPS enforced and use of reCAPTCHA on forms, but lacks advanced security headers and published security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism despite tracking scripts. Overall, the domain registration data is consistent and transparent, supporting the legitimacy of the business.

F

FeedBear

feedbear.com

69

FeedBear is a SaaS platform specializing in customer feedback management, enabling app developers and product teams to collect, organize, and act on user feedback efficiently. The company positions itself as an affordable, customizable solution with a strong focus on user engagement through feature request boards, public roadmaps, and changelog announcements. The website demonstrates a professional and consistent brand presence, supported by multiple customer testimonials and reputable third-party review badges, indicating a solid market position within the technology sector. Technically, the website is built on Webflow with integrations including Google Tag Manager, LoopBear analytics, and HelpScout Beacon for customer support. The site is well-optimized for mobile devices, loads quickly, and employs modern web technologies. However, some security headers are not explicitly present, and there is no visible cookie consent mechanism, which could be improved to enhance privacy compliance. Security posture is generally good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data due to privacy protection or domain registration issues slightly reduces transparency but is common for SaaS businesses. Overall, the site maintains a high level of professionalism and trustworthiness, though improvements in privacy and security disclosures are recommended. Strategically, FeedBear should focus on enhancing privacy compliance by implementing cookie consent and publishing detailed security and incident response policies. These steps will strengthen user trust and align with regulatory requirements. The technical infrastructure is robust but could benefit from additional security headers to mitigate potential risks.

F

Freiheitswolke

freiheitswolke.org

58

Freiheitswolke is a German community-driven platform offering privacy-focused open-source cloud and communication services, primarily Nextcloud and Mattermost. Founded in 2014, it operates on a donation-based model emphasizing data freedom and security. The website is built on GravCMS and uses modern web technologies, providing a good user experience with clear navigation and mobile optimization. However, it lacks explicit privacy and cookie policies, which impacts compliance with GDPR standards. Security practices include encrypted connections and redundant backups, but DNSSEC is not enabled and security headers are missing, indicating room for improvement. Overall, the domain registration and hosting details are consistent and legitimate, supporting trust in the platform.

A

Arbeit und Leben Niedersachsen e.V.

aul.app

44

Arbeit und Leben Niedersachsen e.V. operates the platform aul.app, which serves as a hub for their websites and apps. The organization is a regional non-profit based in Germany, focusing on providing digital platform services. The website content is minimal but clearly communicates the platform's purpose. The business model centers on supporting digital presence for their initiatives. The site is built on WordPress with custom theming, indicating moderate digital maturity. Technical infrastructure is basic with room for improvement in performance and mobile optimization. Security posture is average; HTTPS is assumed but no explicit security headers or policies are detected. Privacy compliance is partially met with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is trustworthy but could benefit from enhanced security and compliance measures.

Z

Zisterzienserabtei Wettingen-Mehrerau

mehrerau.at

66

Kloster Mehrerau is a religious institution operating as the Zisterzienserabtei Wettingen-Mehrerau located in Bregenz, Austria. The website serves as a comprehensive portal for visitors and community members, offering information about monastic life, guest accommodations, events, and spiritual services. The institution positions itself as a vibrant community hub with a focus on faith, hospitality, and cultural engagement. The site features detailed event calendars, news updates, and opportunities for donations, reflecting an active and engaged organization. Technically, the website employs modern web technologies including Google Analytics, Facebook Pixel, Google Tag Manager, and CookieHub for privacy compliance. The site is served over HTTPS with good security practices such as IP anonymization in analytics and a cookie consent mechanism. The design is professional, mobile-optimized, and accessible, providing a positive user experience. However, some security headers are not explicitly detected, and no dedicated security policy or incident response information is published. From a security perspective, the site demonstrates a solid baseline with HTTPS and privacy compliance but could improve by publishing explicit security policies and vulnerability disclosure information. No vulnerabilities or suspicious content were detected. The WHOIS data is unavailable due to quota limits, but the website content and contact details strongly support legitimacy and trustworthiness. Overall, Kloster Mehrerau presents a trustworthy, well-maintained online presence suitable for its non-profit religious mission. Strategic recommendations include enhancing security header implementation, publishing security and incident response policies, and continuing to maintain privacy compliance and transparency.

D

Diözese Sankt Pölten

dsp.at

66

The website www.dsp.at represents the official online presence of the Diocese of St. Pölten, a well-established Austrian Roman Catholic diocese founded in 1784. It serves as a comprehensive portal for religious services, community engagement, cultural events, and educational resources targeted primarily at parishioners and the broader Catholic community in Austria. The site features a modern design with clear navigation, mobile optimization, and a structured content hierarchy that supports user engagement and information dissemination. Technically, the site is built on the siteswift CMS platform and leverages popular JavaScript libraries such as jQuery and Swiper.js, ensuring a responsive and interactive user experience. Privacy and cookie consent mechanisms are robustly implemented, reflecting compliance with GDPR requirements. Security posture is strong with HTTPS enforced, CSRF protections, and security headers present, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates high business credibility and trustworthiness, supported by consistent WHOIS data and legitimate domain registration.

K

Katholische Kirche Steiermark

katholische-kirche-steiermark.at

68

Katholische Kirche Steiermark operates as the official Catholic Church diocese for the Steiermark region in Austria, providing religious, educational, and community services. The website serves as a comprehensive portal for news, events, parish information, and faith resources, targeting the general public and church members. The organization has a long history dating back to 1218, reflected in the domain's age and consistent WHOIS data. Technically, the site uses a modern CMS (siteswift), integrates various JavaScript libraries, and employs a consent management system to comply with privacy regulations. Security posture is strong with HTTPS, security headers, and CSRF protections in place, though explicit security policies and incident response information are not published. Overall, the site is professional, accessible, and trustworthy, with active social media engagement and good privacy compliance.