Security Directory

S

Stadtwerke Halle GmbH

energieinitiative-halle.de

57

The Energie-Initiative Halle (Saale) website represents a regional energy and climate protection initiative operated by Stadtwerke Halle GmbH. It serves as an information hub for local citizens, businesses, and partners interested in sustainable energy projects, climate policies, and transformation initiatives in Halle (Saale). The site reflects a medium-sized municipal energy provider with a strong local presence and a network of subsidiaries and partners. Technically, the website uses a traditional but stable tech stack including jQuery, jQuery UI, and Matomo analytics, with a CMS identified as SixCMS. The site is mobile optimized and includes modern privacy compliance tools such as Usercentrics for cookie consent. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some improvements like updated libraries and enhanced security headers are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR, but lacks explicit published security policies and incident response contacts.

W

W+H Wasser- und Haustechnik GmbH

wuh-halle.de

60

W+H Wasser- und Haustechnik GmbH is a regional service provider specializing in water and sanitary technology services in Halle (Saale), Germany. The company offers comprehensive solutions including water meter testing, standpipe rental for water extraction, and sanitary installations. It operates as part of the larger Stadtwerke Halle GmbH (SWH) group, which encompasses multiple subsidiaries in energy, water, transportation, and related sectors. The website reflects a professional and consistent brand image aligned with its parent group, targeting local businesses and residents requiring water and heating services. Technically, the website is built on a CMS platform (likely SixCMS) and employs common JavaScript libraries such as jQuery and Modernizr, along with the Slick carousel for UI elements. It integrates Usercentrics for cookie consent management and Matomo for analytics, indicating a moderate level of digital maturity and privacy awareness. The site is mobile-optimized and uses HTTPS, but lacks some advanced security headers and explicit security policies. From a security perspective, the site demonstrates good baseline practices including HTTPS enforcement and consent management. However, it does not publish a security.txt file or detailed security policies, and security headers are not explicitly detected. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data is consistent with the website's branding and hosting, reinforcing legitimacy. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. Strategic recommendations include enhancing security headers, publishing explicit security policies, and considering a vulnerability disclosure policy to improve security posture and stakeholder trust.

M

Maya mare

mayamare.de

52

Maya mare is a medium-sized hospitality business based in Germany, operating a unique themed water park, sauna, wellness, and fitness club. The website reflects a well-established brand with a clear market position as the first fully themed experience bath in Germany. The business targets general audiences including families and fitness enthusiasts, offering a broad range of leisure services. Technically, the site is built on WordPress with the Divi theme and uses modern plugins for SEO, cookie management, and analytics. The hosting provider is EVH, a reputable German hosting service. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities were detected. Privacy compliance is strong with comprehensive policies and GDPR-aligned cookie management. Overall, the website is professional, trustworthy, and user-friendly, supporting the business's credibility and customer engagement.

S

SWH. Bäder Halle GmbH

baden-in-halle.de

54

SWH. Bäder Halle GmbH operates a network of public bathing and sauna facilities in Halle, Germany, including indoor pools, outdoor pools, and camping sites. The company is part of the larger SWH group, which encompasses various regional utility and service providers. The website serves local residents and visitors seeking leisure and wellness services. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and SVG graphics, with a focus on accessibility and mobile responsiveness. Cookie consent is managed through Usercentrics, indicating GDPR awareness, though explicit privacy and terms of service pages were not found in the analyzed content. Security measures include HTTPS and bot protection via FriendlyCaptcha, but lack visible security headers and a published security policy. Overall, the site is professional and trustworthy, with room for improvement in privacy disclosures and security hardening.

C

Container Terminal Halle (Saale) GmbH

ct-hs.de

57

Container Terminal Halle (Saale) GmbH operates as a regional logistics and transportation service provider specializing in container terminal operations, rail services, and combined transport solutions. The company is part of the larger Stadtwerke Halle GmbH (SWH) group, which encompasses multiple energy and infrastructure-related subsidiaries. The website reflects a professional business presence targeting logistics customers primarily in Germany, with a focus on the Halle (Saale) region. Technically, the website employs a traditional tech stack including jQuery, jQuery UI, Modernizr, and Slick Carousel, managed via the SixCMS platform. It integrates modern consent management through Usercentrics and uses Matomo for analytics, indicating a moderate level of digital maturity. The site is mobile optimized and provides clear navigation and relevant content, although some libraries are outdated. From a security perspective, the site enforces HTTPS and uses consent management for cookies, but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website content, supporting legitimacy and trustworthiness. Overall, the website presents a solid business and technical foundation with room for improvement in security transparency and modernization. The risk profile is low, with recommendations focusing on enhancing security policies, updating libraries, and improving accessibility.

I

IT-Consult Halle GmbH

itc-halle.de

62

IT-Consult Halle GmbH is a medium-sized IT service provider based in Halle (Saale), Germany, specializing in comprehensive IT solutions for the public sector and medium-sized enterprises. The company operates under the umbrella of Stadtwerke Halle GmbH, offering services including IT consulting, SAP system management, document management systems, GIS solutions, and data center services. Their market position is solid within the regional public and private sectors, supported by certifications such as ISO 27001 and a professional online presence. Technically, the website employs a modern technology stack including jQuery, Modernizr, Slick Carousel, and FontAwesome, alongside a CMS likely based on SixCMS. The site is mobile-optimized, uses HTTPS with strong SSL configuration, and integrates a consent management platform (Usercentrics) and Matomo analytics for privacy-conscious tracking. Performance is moderate with good SEO and basic accessibility features. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, cookie consent, and no visible vulnerabilities or exposed sensitive data. However, it lacks publicly available security policies and incident response contacts, which could be improved to enhance trust and compliance. Privacy compliance is strong with a comprehensive privacy policy and cookie management. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives. The risk profile is low, with recommendations focusing on enhancing security transparency and accessibility compliance.

H

Hallesche Verkehrs-AG

havag.com

62

Hallesche Verkehrs-AG (HAVAG) is a regional public transportation company serving the Halle (Saale) and Merseburg areas in Germany. It operates under the Mitteldeutscher Verkehrsverbund and is part of the larger SWH group. The website provides comprehensive information about public transport services, ticketing options, customer service, and multimodal transport offers. It targets local residents and commuters seeking reliable public transit information and services. The company maintains a medium-sized regional presence with a clear business model focused on public transportation and customer support. Technically, the website employs a modern technology stack including jQuery, Leaflet for mapping, FontAwesome icons, and Matomo for analytics, complemented by Usercentrics for consent management. The site is hosted by Vautron Rechenzentrum AG and shows good mobile optimization and SEO practices. The infrastructure is stable with HTTPS enforced, though some security headers are not explicitly confirmed. Privacy compliance is well addressed with visible cookie consent and a detailed privacy policy. From a security perspective, the site demonstrates good practices such as HTTPS usage and consent management but lacks explicit incident response contacts and vulnerability disclosure mechanisms. DNSSEC is not enabled, which is a recommended improvement. No critical vulnerabilities or suspicious content were detected. Overall, the site is trustworthy, professional, and compliant with GDPR requirements. The overall risk is low, with recommendations focusing on enhancing DNS security, publishing security.txt, and adding explicit security headers to strengthen the security posture further. The website is suitable for its audience and business purpose, with a strong alignment between domain registration data and business claims.

A

Abfallwirtschaft GmbH Halle-Lochau

aw-halle.de

60

Abfallwirtschaft GmbH Halle-Lochau is a regional waste management company operating in Halle (Saale), Germany. It provides landfill management, recycling, and waste disposal services and is part of the larger SWH group, which includes energy, water, and transportation services. The website reflects a professional and consistent brand presence with clear service offerings and contact information. Technically, the site uses a mix of legacy and modern web technologies, including jQuery, FontAwesome, and a consent management platform, hosted likely by EVH. Security posture is adequate with HTTPS and consent mechanisms but lacks some security headers and uses an outdated jQuery version, which could pose risks. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, the website is trustworthy and well-positioned in its market segment.

H

Hallesche Wasser und Stadtwirtschaft GmbH

hws-halle.de

61

Hallesche Wasser und Stadtwirtschaft GmbH is a regional utility company based in Halle, Germany, providing essential municipal services including water supply, wastewater management, waste disposal, and city cleaning primarily targeting private customers. The company operates as part of the larger SWH Gruppe, which encompasses multiple related entities in energy, transportation, and municipal services. Their website reflects a structured and comprehensive presentation of services, targeting local residents and businesses with clear navigation and service menus. Technically, the website employs modern frontend technologies such as jQuery, FontAwesome, and Slick Carousel, alongside privacy-conscious tools like Usercentrics for consent management and Matomo for analytics. The site is mobile optimized and demonstrates moderate performance and accessibility standards. However, some security headers are not explicitly detected, and there is no visible security policy or incident response information. From a security perspective, the site enforces HTTPS and uses consent management, but lacks published security policies and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were found in the provided content. The WHOIS data aligns well with the website's claims, indicating a legitimate and trustworthy domain registration. Overall, the website presents a professional and trustworthy digital presence for a municipal utility provider, with room for improvement in security policy transparency and enhanced privacy compliance documentation.

N

NETZ HALLE GmbH

netzhalle.de

60

NETZ HALLE GmbH operates as a regional energy network operator in Halle (Saale), Germany, providing essential services such as electricity, gas, and heat network connections, metering, and customer support. The company is part of the larger Stadtwerke Halle group, which includes various utility and service subsidiaries. The website reflects a professional and regionally focused utility provider with clear service offerings and customer engagement channels. Technically, the website employs a legacy CMS (SixCMS) with common JavaScript libraries like jQuery and Modernizr, enhanced by user consent management via Usercentrics and analytics through Matomo. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Hosting appears to be managed by EVH, consistent with the regional focus. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and a public security policy or vulnerability disclosure. No critical vulnerabilities or suspicious content were detected. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent. Overall, the website is trustworthy, professionally maintained, and suitable for its target audience. Recommendations include enhancing security headers, publishing a security policy, and improving accessibility features to further strengthen compliance and security posture.

E

Energieversorgung Halle Netz GmbH (EVH)

evh.de

58

Energieversorgung Halle Netz GmbH (EVH) is a regional energy provider based in Halle, Germany, offering a comprehensive portfolio of energy products including electricity, gas, heat, and innovative energy solutions such as e-mobility and photovoltaics. The company targets private and commercial customers, positioning itself as a key player in the regional energy market with a focus on sustainable and customer-centric services. The website reflects a mature digital presence with clear navigation, professional design, and comprehensive content tailored to its audience. Technically, the site employs modern frameworks like Bootstrap and integrates privacy and security tools such as Usercentrics CMP and FriendlyCaptcha, indicating a commitment to GDPR compliance and user security. Security posture is strong with HTTPS enforcement, security headers, and bot mitigation mechanisms, though explicit security policies and incident response contacts are not publicly detailed. Overall, EVH demonstrates a solid business and technical foundation with room for enhanced transparency in security governance.

MeinBeitragWirkt.at is a regional non-profit website dedicated to informing and supporting members of the Catholic Church in Salzburg regarding their church contributions. The platform provides detailed information on contribution usage, payment options, frequently asked questions, and contact services, positioning itself as a trusted resource for church members. The website is built on TYPO3 CMS with modern frontend technologies like Bootstrap and jQuery, and employs Matomo analytics to ensure privacy-conscious user tracking. The site is well-designed, mobile-optimized, and offers a clear navigation structure, enhancing user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding security headers and explicit cookie consent mechanisms. Overall, the domain registration data aligns well with the website's purpose and location, indicating a trustworthy and legitimate online presence.

Kirchedirekt.at is a German-language website focused on providing church-related information and community services in Austria. The site offers advice, FAQs, and cultural heritage information related to church buildings, targeting a general audience interested in church and social institution topics. The website is built on TYPO3 CMS and features a professional design with clear navigation and mobile optimization. However, the absence of WHOIS data and domain registration details limits full trust verification. Security posture is moderate with no detected security headers or cookie consent mechanisms, and no analytics or tracking scripts are present, indicating a privacy-conscious approach. Overall, the site is functional and informative but would benefit from enhanced security and compliance features.

E

Erzdiözese Salzburg

rupertusblatt.at

59

The Rupertusblatt website serves as the official weekly newspaper for the Erzdiözese Salzburg, providing religious, cultural, and social news relevant to the Archdiocese and its community. It offers subscription services, e-paper access, and community engagement features. The site is well-branded and professionally maintained, reflecting its role as a trusted regional media outlet. Technically, the site uses a modern CMS (siteswift), integrates popular JavaScript libraries for UI and interactivity, and implements a cookie consent mechanism aligned with GDPR requirements. Security practices include CSRF token usage and consent management, though HTTP security headers and SSL configuration details are not explicitly visible. The absence of WHOIS data limits domain registration transparency but does not detract from the site's evident legitimacy and professional presentation. Overall, the site is a reliable, well-structured platform serving its target audience effectively.

E

Erzdiözese Salzburg

edsbg.at

59

Erzdiözese Salzburg operates as a large, established Catholic diocese serving the Salzburg region and Tiroler Unterland in Austria. The website functions as an informational and community engagement platform, offering news, event details, and religious content tailored to its Catholic audience. The organization maintains a consistent brand presence and leverages social media channels to extend its outreach. Technically, the site uses the siteswift CMS platform with modern JavaScript libraries, ensuring a responsive and user-friendly experience. Security measures include HTTPS enforcement, CSRF protection on forms, and a comprehensive cookie consent mechanism, although explicit security headers and incident response policies are not publicly documented. Overall, the site demonstrates a good balance of content quality, technical implementation, and privacy compliance, reflecting the organization's credibility and commitment to user trust.

E

Erzdiözese Salzburg

eds.at

67

The website eds.at serves as the official online presence of the Erzdiözese Salzburg, the Catholic Church in Salzburg and the Tiroler Unterland region. It provides comprehensive information on religious services, community events, social support, and educational content targeted at church members and the general public interested in faith and community activities. The site is well-positioned as a regional religious authority and community service provider with a large audience base. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies such as Bootstrap and jQuery, and integrates privacy-conscious analytics via Matomo. The site demonstrates good digital maturity with mobile optimization, accessibility, and SEO best practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR requirements.

The Liturgy Office website serves as the official online presence for the Department for Christian Life and Worship under the Catholic Bishops' Conference of England and Wales. It provides liturgical resources, calendar information, prayers, and news relevant to the Catholic community in England and Wales. The site targets clergy, church members, and religious scholars, positioning itself as a trusted resource within the religious non-profit sector. The business model is non-commercial, focusing on service and information dissemination. Technically, the website employs basic web technologies including HTML5, CSS, Google Fonts, and Google Tag Manager for analytics. The site lacks a modern CMS and advanced frameworks, indicating a relatively simple infrastructure. Performance and mobile optimization are basic, with room for improvement in accessibility and SEO. No forms or user input fields reduce complexity and security risks. From a security perspective, the site uses HTTPS (assumed but not explicitly confirmed), but lacks DNSSEC and security headers, which are recommended for enhanced protection. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. The WHOIS data is transparent and consistent with the organization's identity, supporting legitimacy. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is a reliable and safe resource with good business credibility but requires improvements in privacy compliance, security hardening, and technical modernization to enhance user trust and regulatory adherence.

C

Catholic Bishops' Conference of England and Wales

dayforlife.org

49

The Catholic Bishops' Conference of England and Wales operates a professional and authoritative website dedicated to religious advocacy and raising awareness on life issues. The site provides comprehensive resources including messages, prayer booklets, and grant information, targeting Catholics and interested individuals in England and Wales. The organization holds a strong market position as a recognized religious authority with consistent branding and a clear mission. Technically, the website is built on WordPress with modern technologies such as Bootstrap, Yoast SEO, and Google Analytics, hosted with CDN support for performance. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site uses HTTPS and employs security best practices, although explicit security headers are not detected in the provided data. No vulnerabilities or exposed sensitive data were found. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a low risk profile with strong business credibility and technical maturity. The main limitation is the lack of WHOIS data due to querying the 'www' subdomain, but this does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers and publishing explicit security and incident response policies.

C

Catholic Bishops' Conference of England and Wales

taking-stock.org.uk

45

Taking Stock is a non-profit project managed by the Catholic Bishops' Conference of England and Wales, focusing on the architectural and historical review of Catholic churches and chapels across England and Wales. The website serves as an informational resource and partnership platform involving dioceses and Historic England. The target audience includes researchers, heritage professionals, and the Catholic community. The business model is collaborative and heritage-focused, with a niche market position in religious architectural documentation. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and advanced SEO plugins like Yoast. Hosting utilizes a CDN for performance, and Google Analytics is implemented for visitor tracking. The site demonstrates good mobile optimization and basic accessibility features, though there is room for improvement in security headers and cookie consent mechanisms. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks explicit security policies, incident response information, and cookie consent banners, which are important for GDPR compliance and user trust. No critical vulnerabilities or suspicious activities were detected. Overall, the website is professionally maintained with a strong business credibility and good content quality. Strategic recommendations include enhancing privacy compliance with cookie consent, implementing security headers, and publishing security and incident response policies to improve trust and compliance posture.

The Kairos Forum is a specialized consultancy focused on supporting people with intellectual disabilities through spiritual and community engagement. It provides advisory services to religious organizations, educational providers, and health and social care sectors, with a notable history of training over two thousand teachers in the UK. The organization also collaborates internationally, including with the Pontifical Council for Culture. The website is built on WordPress with common plugins and presents a professional, content-rich platform targeting organizations and individuals involved in disability support and education. Technically, the site uses modern web technologies and HTTPS but lacks some security headers and privacy compliance documentation. No WHOIS registrant data is available due to query failure, but the domain appears legitimate and consistent with the business profile. Overall, the site demonstrates good business credibility and technical implementation but should improve privacy and security policy disclosures to enhance trust and compliance.

The website catholicsafeguarding.org.uk currently serves a security verification page employing Google reCAPTCHA v3 to prevent automated access. This indicates the presence of a Web Application Firewall or bot protection mechanism restricting direct content access. Due to this, no substantive business content, contact information, or policies are accessible for analysis. The domain is registered since 2008 with a reputable registrar, suggesting legitimacy, but the lack of visible content limits trust and user engagement assessment. The technical infrastructure includes Bootstrap for styling and Google reCAPTCHA for security, but no other modern CMS or analytics tools are detected. Security posture shows basic bot protection but lacks visible security headers or privacy compliance indicators. Overall, the site is safe in terms of content but inaccessible for full evaluation, resulting in a low AI score and limited business insights.

N

National Protective Security Authority

npsa.gov.uk

78

The National Protective Security Authority (NPSA) is the UK government's National Technical Authority for physical and personnel protective security, operating as part of MI5. The website serves as a comprehensive resource offering guidance, tools, and risk management information targeted at security professionals, government entities, industry sectors, and high-risk individuals. It holds a strong market position as an authoritative government agency providing protective security expertise. Technically, the website is built on Drupal CMS with modern JavaScript libraries and integrates analytics and tracking tools such as Google Tag Manager, Facebook Pixel, Hotjar, and LinkedIn Insight. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, though it lacks explicit security headers and a public security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is robust with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website presents a low risk profile with strong trust indicators including official UK government domain usage, Crown copyright, and consistent branding. The absence of WHOIS data is typical for government domains and does not detract from legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and providing clear incident response contacts to further strengthen security posture.

S

Secret Intelligence Service (SIS) / MI6

sis.gov.uk

57

The website www.sis.gov.uk represents the UK Secret Intelligence Service (SIS), commonly known as MI6. It serves as the official digital presence of the UK's foreign intelligence agency, providing detailed information about its mission, history, leadership, recruitment opportunities, and partnerships. The site targets potential recruits, government partners, and the general public interested in intelligence services. The business model is that of a government agency focused on intelligence gathering and national security. The website is well-branded, professionally designed, and consistent with government standards, reflecting a high level of trustworthiness and authority. Technically, the site is built on the Drupal CMS platform and employs Matomo for privacy-conscious analytics. It demonstrates good mobile optimization, accessibility, and SEO practices. The site uses HTTPS with strong SSL configuration, though no explicit security headers were detected in the provided data. Privacy compliance is robust, with clear privacy and cookie policies and a consent mechanism in place. Contact information is limited to a contact form, with no direct emails or phone numbers publicly listed, which aligns with the sensitive nature of the organization. From a security perspective, the site shows good practices such as HTTPS enforcement and privacy-respecting analytics. However, it lacks publicly visible security policies or incident response contacts, and no security.txt file was found. The WHOIS data is unavailable, which is typical for sensitive government domains and is justified in this context. Overall, the site presents a strong security posture with room for improvement in transparency around security policies. The overall risk assessment is low given the official nature of the site, its consistent branding, and government affiliation. Strategic recommendations include enhancing security header implementation, publishing a dedicated security policy and incident response information, and adding a security.txt file to facilitate vulnerability disclosures. These steps would further strengthen trust and security culture while maintaining operational security.

G

GCHQ

gchq.gov.uk

71

GCHQ is the United Kingdom's official intelligence, security, and cyber agency, tasked with protecting the country from threats both in the physical and digital realms. The website clearly communicates its mission, key services, and organizational culture, targeting UK citizens, government stakeholders, and cybersecurity professionals. The site is well-branded and professionally designed, reflecting its authoritative government status. Technically, the website employs modern web technologies including React and JSON-LD structured data for SEO and accessibility. The site is mobile-optimized and provides a smooth user experience with clear navigation and relevant content. While no explicit CMS or hosting provider is identified, the site demonstrates good performance and technical maturity. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and a public security policy or vulnerability disclosure program. No contact information for security incidents is provided, which is common for government sites but could be improved for transparency. The absence of WHOIS data is typical for UK government domains, and the domain's legitimacy is supported by its .gov.uk TLD and consistent official content. Overall, the website is trustworthy, secure, and professionally maintained, with minor recommendations to enhance security headers and incident response transparency. The risk level is low, and the site effectively serves its purpose as a government intelligence agency portal.

O

one4vision GmbH

one4vision.de

72

one4vision GmbH is a well-established IT consulting and service provider based in Saarbrücken, Germany, with nearly 30 years of experience. The company specializes in TYPO3 CMS web development, network and security solutions, cloud services, and remote support. Their market position is strong regionally, particularly in the Saarland and Luxembourg areas, with a focus on delivering flexible and secure IT solutions to businesses. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site is built on TYPO3 CMS, uses Matomo for privacy-conscious analytics, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and formal security policies. Overall, the website is trustworthy, compliant with GDPR, and provides a positive user experience.

EVENTIM Inhouse is a medium-sized technology company specializing in flexible ticketing solutions and event management services primarily targeting event organizers, cultural institutions, and museums in Germany. Their offerings include ticketing systems, CRM, reporting, sales channels, access control, and consulting services. The website is built on TYPO3 CMS and uses modern web technologies such as Bootstrap and jQuery, with integrated GDPR-compliant consent management and Google Tag Manager for analytics. Security posture is solid with HTTPS and secure login forms, though explicit security policies and incident response information are not publicly available. Overall, the site is professional, well-branded, and trustworthy with good content quality and user experience.

O

one4vision GmbH

14v.de

72

one4vision GmbH is a well-established IT consulting and service provider based in Saarbrücken, Germany, with nearly 30 years of experience. The company specializes in TYPO3 CMS web development, network and security solutions, and cloud services, targeting businesses seeking flexible and secure IT infrastructure and digital presence. Their market position is strong regionally, supported by a consistent brand and multiple related service domains. Technically, the website is built on TYPO3 CMS with a modern tech stack including PHP, MySQL, and Matomo analytics, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security headers and published security policies. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

S

SHC Netzwerktechnik GmbH

shc.eu

60

SHC Netzwerktechnik GmbH is a German-based IT security and infrastructure company specializing in comprehensive solutions for data centers, core networking, and cloud computing. The company partners with leading manufacturers such as Sophos, Dell, VMware, and Microsoft, positioning itself as a trusted provider of managed detection and response, endpoint protection, and security operations center services. Their market presence is focused on serving businesses across Germany with a strong emphasis on IT security and network technology. Technically, the website is built on WordPress using the Divi theme, incorporating modern web technologies and analytics tools like Matomo. The site demonstrates good mobile optimization and SEO practices, with GDPR compliance mechanisms in place, including cookie consent banners. The technical infrastructure reflects a moderate to good level of digital maturity suitable for their business model. From a security perspective, the website enforces HTTPS and employs GDPR-compliant cookie management. However, it lacks some advanced security headers and does not publicly disclose a formal security policy or incident response plan. The WHOIS data is privacy protected, which is typical for European domains and justified given the company's IT security focus. No critical vulnerabilities or suspicious indicators were found in the website content or technical setup. Overall, SHC Netzwerktechnik GmbH presents a professional and trustworthy online presence with a solid foundation in IT security services. Strategic improvements in security transparency and enhanced header configurations could further strengthen their security posture and customer trust.

K

Koeln.Business

koelnbusiness.de

60

Koeln.Business is the official economic development agency for the city of Cologne, Germany, providing support for businesses, startups, and investors. The website offers services such as funding consultation and business facilitation, targeting entrepreneurs and startups primarily within Cologne. The organization positions itself as a key facilitator for economic growth and business establishment in the region. Technically, the website is built on TYPO3 CMS, a mature and widely used content management system, and incorporates modern JavaScript libraries such as Slick Slider and Owl Carousel for enhanced user experience. Cookiebot is implemented for GDPR-compliant cookie consent management, and Matomo Analytics is used for privacy-conscious visitor tracking. The site is mobile-optimized and demonstrates good SEO and accessibility practices. From a security perspective, the site enforces HTTPS and uses a comprehensive cookie consent mechanism. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure information, which are recommended for improving transparency and trust. No critical vulnerabilities or suspicious content were detected. Overall, Koeln.Business presents a professional and trustworthy online presence consistent with a government economic development entity. The domain WHOIS data is privacy protected but shows no signs of suspicious activity. Strategic recommendations include publishing security and incident response policies, enhancing security headers, and maintaining regular audits of third-party scripts to sustain a strong security posture.

The website at mafis-digital.de currently presents no accessible content, with an empty HTML body and no metadata or visible information. This lack of content prevents any meaningful analysis of the business, its services, or its market positioning. The domain is registered with standard UI-DNS name servers, but no registrant or organizational data is available to verify legitimacy or business claims. Technically, the site lacks HTTPS, security headers, and any detectable technologies or frameworks, indicating a minimal or placeholder web presence. Security posture is weak due to the absence of basic protections and policies. Overall, the site appears either blocked, under construction, or abandoned, resulting in a low trust and credibility score.

CodeSandbox operates as a technology platform providing an online code editor and sandbox environment primarily targeting web developers and programmers. The website serves as a gateway to a sophisticated JavaScript-based single-page application hosted under the codesandbox.io domain, focusing on enabling rapid prototyping and cloud-based development. The business model is SaaS-oriented, catering to a medium-sized technology company audience with a consistent brand presence but minimal direct content on the csb.app domain itself. Technically, the site relies heavily on modern JavaScript libraries such as BrowserFS, Babel, CodeMirror, and Monaco Editor, indicating a mature and modern tech stack optimized for web development. However, the HTML snapshot shows minimal static content, limited SEO metadata, and basic mobile and accessibility features. Performance is moderate given the reliance on multiple large JavaScript chunks loaded asynchronously. From a security perspective, the site lacks visible security headers and explicit privacy or cookie policies, which reduces its compliance posture. No contact or incident response information is provided, and no analytics or tracking scripts are detected in the provided content. The domain uses privacy protection in WHOIS, which is typical for tech SaaS companies, and no suspicious patterns were found. Overall security posture is basic with room for improvement in transparency and compliance. The overall risk is moderate given the lack of visible compliance documentation and security headers, but the site does not exhibit any critical vulnerabilities or suspicious behavior. Strategic recommendations include adding privacy and cookie policies, implementing security headers, providing contact and incident response information, and enhancing SEO and accessibility to improve trust and compliance.

The website mind.de represents Sinma GmbH, a small German company specializing in AI hosting and internet services since 2005. The business emphasizes reliable infrastructure, hosting in the NTT datacenter Berlin with multiple ISO and security certifications, positioning itself as a niche provider in AI hosting. The website is minimalistic, generated with RocketCake, and provides basic navigation and content focused on the company's AI offerings and infrastructure capabilities. Contact is primarily via a contact form, with no explicit emails or phone numbers listed. No privacy or cookie policies are present, and no security headers or HTTPS status are visible in the provided data. The WHOIS data shows consistent domain naming and name servers related to Sinma GmbH, supporting legitimacy but lacks detailed registrant info. Overall, the site demonstrates moderate business credibility but lacks in privacy compliance and technical security visibility.

R

Ruby

artibot.ai

63

ArtiBot.ai is a technology company offering a free AI-powered chatbot solution designed to capture leads, schedule appointments, and accept payments for websites. Positioned as a user-friendly SaaS product, it targets businesses seeking to automate customer engagement and improve conversion rates. The website is professionally designed with clear navigation and demonstrates digital maturity through integration of modern technologies such as Google Tag Manager and OneTrust for privacy compliance. The presence of a parent company, Ruby, adds credibility and stability to the business. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though explicit security policies and incident response details are not publicly disclosed. Overall, the website presents a trustworthy and functional platform with room for enhanced security transparency and contact accessibility.

I

INAIL - Istituto Nazionale per l'Assicurazione contro gli Infortuni sul Lavoro

inail.it

71

INAIL is the Italian National Institute for Insurance against Accidents at Work, operating as a government agency providing mandatory insurance, prevention, research, and rehabilitation services related to workplace injuries and occupational diseases. The website serves a broad audience including workers, employers, institutions, and stakeholders involved in workplace safety and insurance. It holds a strong national market position as an authoritative public institution. The site offers key services such as insurance coverage, safety programs, research initiatives, prosthetic and rehabilitation services, and statistical data dissemination. Technically, the website is built on Adobe Experience Manager, leveraging modern web technologies including Adobe Helix RUM, Google reCAPTCHA, Adobe Document Services Viewer SDK, and Dynatrace monitoring. The site demonstrates good performance, mobile optimization, accessibility, and SEO practices. It integrates multiple social media platforms and uses advanced analytics and monitoring tools. From a security perspective, the site employs HTTPS with strong SSL configuration, uses security headers, and implements bot protection mechanisms. However, explicit security policies and vulnerability disclosure information are not publicly visible. No vulnerabilities or suspicious activities were detected. The WHOIS data aligns well with the website's claims, confirming legitimacy and trustworthiness. Overall, the website is professional, secure, and compliant with privacy regulations, providing a trustworthy digital presence for INAIL. Strategic recommendations include publishing explicit security and incident response policies, adding vulnerability disclosure mechanisms, and enhancing transparency around security headers and third-party script integrity.

F

FORMEDIL Abruzzo PMI ed Artigianato

edilformas.it

52

FORMEDIL Abruzzo PMI ed Artigianato is a regional non-profit entity dedicated to providing training and safety services in the construction sector within the Abruzzo region of Italy. The organization offers a variety of free and funded courses targeted at construction workers and companies registered with Edilcassa Abruzzo. It also functions as an accredited employment agency (APL) and provides technical assistance related to workplace safety and regulatory compliance. The website reflects a professional and consistent brand presence with clear navigation and relevant content for its target audience of SMEs and artisans in the construction industry. Technically, the site is built on Joomla CMS with the Gridbox builder, uses modern web technologies, and integrates Google Tag Manager and hCaptcha for analytics and security. However, the site lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is generally good with HTTPS and DNSSEC enabled, but incident response and vulnerability disclosure information are absent. The domain is very recently registered, which may indicate a new web presence or rebranding rather than a new business. Overall, the site is trustworthy and serves its business purpose well but should improve privacy compliance and security transparency.

V

Vietnamese-German Programme Reform of TVET in Viet Nam

tvet-vietnam.org

54

The website www.tvet-vietnam.org represents the Vietnamese-German Programme focused on reforming Technical and Vocational Education and Training (TVET) in Vietnam. It serves as an informational and resource platform for stakeholders involved in vocational education reform, including policy makers, educational institutions, and business partners. The site offers news, events, publications, and program details, targeting a professional audience interested in education and development cooperation. Technically, the site is built on WordPress with Elementor and Smart Slider 3, providing a modern and responsive user experience. Security posture is adequate with HTTPS and cookie consent implemented, though additional security headers and incident response information are absent. WHOIS data is unavailable due to privacy protection or registry issues, which slightly impacts transparency but is common for non-profit or international cooperation entities. Overall, the site is professional, trustworthy, and safe for general audiences.

P

Prager Frühling

prager-fruehling-magazin.de

51

Prager Frühling is a German political magazine focused on themes of freedom and socialism, targeting a politically left-leaning audience. The website offers multiple content formats including magazine issues, podcasts, blogs, and newsletters, positioning itself as a niche media outlet within the German political discourse. The business model centers on content publishing and community engagement through digital channels. Technically, the site is built on the KONTEXT-CMS platform, leveraging JavaScript libraries such as jQuery, RoyalSlider, and Modernizr, with hosting and DNS managed by Warenform. While the site uses HTTPS and includes basic SEO and accessibility features, some technologies are outdated and there is no cookie consent mechanism, which is a GDPR compliance gap. Security posture is moderate with no visible vulnerabilities but lacks published security policies or incident response contacts. Overall, the site is professionally presented with consistent branding and moderate trust indicators but could improve in privacy compliance and security transparency.

F

FormPro Angola

formpro-angola.org

44

FormPro Angola is a vocational training and workforce development project focused on Angola, resulting from cooperation between Angola and Germany. The website provides educational resources, event information, and publications related to professional training. It targets professionals, trainees, and institutions involved in Angola's labor market development. The project is positioned as a niche non-profit educational initiative supported by reputable partners such as BMZ and GIZ. Technically, the website uses an older CMS (KONTEXT-CMS) and includes legacy technologies like jQuery 1.7.1, indicating moderate digital maturity. The site is accessible and well-structured but lacks modern security and privacy features. Security posture is moderate with no visible HTTPS enforcement or security headers and outdated JavaScript libraries posing potential risks. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is safe and professional but requires updates to improve security and compliance.

S

Sprachenatelier Berlin [isk] gGmbH

sprachenatelier-berlin.de

53

Sprachenatelier Berlin [isk] gGmbH is a small, established language school located in Berlin, Germany, specializing in German language courses from beginner to advanced levels (A1 to C2), including telc German exams and over 50 foreign language offerings. The school provides both onsite and online learning options, catering to international students, professionals, and language enthusiasts. Recognized by the Berlin Senate and holding multiple certifications, the institution maintains a strong market position within the education sector. The website reflects a professional and comprehensive presentation of their services, pricing, and cultural programs, targeting a broad audience seeking language education in Berlin. Technically, the website is built on the KONTEXT-CMS platform, utilizing modern web technologies such as jQuery, Google Analytics, Google Tag Manager, and Matomo for analytics. The site is mobile-optimized with good SEO practices and moderate performance. Hosting is provided by warenform.de, consistent with the domain's nameservers and analytics endpoints. From a security perspective, the site enforces HTTPS with an excellent SSL configuration and avoids exposing sensitive data. However, it lacks visible security headers and does not provide explicit security policies or incident response contacts. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism, which is a GDPR compliance gap. The business credibility is high, supported by clear contact information, certifications, and professional content. Overall, the website is trustworthy, well-maintained, and suitable for its educational purpose. Strategic improvements in privacy compliance and security transparency would enhance its security posture and regulatory adherence.

C

Caren Lay MdB

caren-lay.de

49

The website www.caren-lay.de represents Caren Lay, a member of the German Bundestag affiliated with the DIE LINKE party. It serves as a political communication platform focusing on housing policy, social issues, and club policy. The site provides articles, brochures, and information about her political work and positions. The target audience is German-speaking citizens interested in left-wing politics and social housing matters. The business model is centered on political representation and public engagement. Technically, the site is built on KONTEXT-CMS 3.9.9, uses modern frontend technologies such as Tailwind CSS and FontAwesome, and includes jQuery 3.5.1. Hosting is provided by Warenform, with CDN usage for fonts and images. The site is mobile optimized and has good SEO practices. Analytics are handled by Matomo with an opt-in cookie consent mechanism, reflecting a privacy-conscious approach. From a security perspective, the site enforces HTTPS and uses cookie consent with opt-in for tracking. However, it lacks explicit security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent and legitimate, supporting trustworthiness. Overall, the site demonstrates a good security posture but could improve by adding security headers and incident response information. The overall risk is low given the nature of the site as a political information platform with no sensitive transactions or personal data collection beyond a contact form. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility features to further strengthen trust and compliance.

I

Institut Solidarische Moderne

solidarische-moderne.de

50

Institut Solidarische Moderne is a German non-profit think tank and platform focused on developing progressive political concepts through dialogue among parties, movements, trade unions, civil society, and academia. The organization offers analysis, publications, podcasts, events, and forums to promote social-ecological transformation and solidarity politics. Their business model relies on memberships and donations, emphasizing independence and community engagement. The website is professionally designed, content-rich, and well-structured, targeting progressive political actors and the general public interested in leftist political discourse. Technically, the website is built on the KONTEXT-CMS platform, uses modern frontend technologies like Tailwind CSS and jQuery, and is hosted via Warenform DNS servers. It features responsive design and good SEO practices. Analytics are implemented via Matomo with a GDPR-compliant opt-in cookie consent mechanism, reflecting a mature approach to privacy and data protection. However, some security best practices such as explicit security headers and published security policies are missing. From a security perspective, the site enforces HTTPS, uses cookie consent with opt-in for tracking, and does not expose sensitive data or vulnerable libraries. There is no evidence of incident response or vulnerability disclosure policies, which could be improved. The WHOIS data is limited but consistent with a small non-profit organization using CMS hosting services. No WAF or blocking mechanisms are detected, and the site is fully accessible. Overall, the website presents a trustworthy, professional, and privacy-conscious platform for political discourse. Strategic recommendations include publishing security and incident response policies, enhancing security headers, and improving accessibility features to further strengthen trust and compliance.

D

Dieter Janecek

dieterjanecek.de

49

Dieter Janecek's website serves as the official online presence for a German Bundestag member representing Munich-West/Mitte. The site focuses on political communication, providing news, event information, and a newsletter subscription to engage constituents and supporters of the Green party. The business model centers on political representation and public outreach, targeting German citizens and political stakeholders. The website is well-branded, consistent, and offers multilingual support, enhancing accessibility for a broader audience. Technically, the site is built on WordPress using a modern tech stack including jQuery, Swiper.js, and several reputable plugins for events, forms, and multilingual content. The site demonstrates good mobile optimization and moderate performance, with a clean and professional design. SEO and accessibility are basic but adequate for the site's purpose. From a security perspective, the website enforces HTTPS and implements a GDPR-compliant cookie consent mechanism with granular user controls. No critical vulnerabilities or exposed sensitive data were detected. However, security headers are not explicitly present, and there is no dedicated security or incident response policy visible. The WHOIS data aligns with the website content, indicating a legitimate and consistent domain registration. Overall, the website presents a low-risk profile with good privacy compliance and a solid security posture for a political site. Strategic improvements could include adding security headers, incident response information, and enhanced accessibility features to further strengthen trust and compliance.

A

Arbeitskreis Humanitäre Hilfe für Asylbewerber e.V.

ak-asyl-nw.de

51

The website represents a small non-profit organization named Arbeitskreis Humanitäre Hilfe für Asylbewerber e.V., focused on providing humanitarian aid and consultation services to asylum seekers in Germany. The site content is primarily informational, offering consultation times and links to related refugee support organizations. The organization appears to operate locally with a clear humanitarian mission. Technically, the website is built on Joomla CMS using the Helix Ultimate template and Bootstrap 5.3.3, indicating a moderately modern infrastructure. The site is mobile optimized and includes a cookie consent mechanism that blocks cookies and local storage until user consent is given, reflecting good privacy awareness. However, no advanced analytics or tracking tools are detected, and security headers are not present, suggesting room for improvement in security hardening. From a security perspective, the site enforces HTTPS and implements cookie consent, but lacks explicit security policies, incident response contacts, and terms of service. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data is consistent with the website's purpose and shows no suspicious patterns, supporting the legitimacy of the domain. Overall, the website is safe, with content appropriate for a general audience. It demonstrates basic compliance with GDPR through its privacy and cookie policies but could enhance its security posture and business credibility by adding more detailed policies and contact information.

F

Fabio De Masi

fabio-de-masi.de

49

Fabio De Masi's website serves as an official political platform providing comprehensive information about his role as a member of the European Parliament. The site offers visitors access to news, media content, transparency reports, and opportunities to subscribe to newsletters. The target audience primarily consists of European citizens interested in political affairs and transparency. The business model is centered on public political representation and information dissemination, with a strong emphasis on transparency and engagement through social media and newsletters. Technically, the website is built on the KONTEXT-CMS platform, utilizing legacy jQuery and modern FontAwesome icons, hosted by warenform.de. The site demonstrates moderate performance and good mobile optimization but could benefit from updating outdated libraries and enhancing accessibility features. Security-wise, the site employs HTTPS and an opt-in cookie consent mechanism with Matomo analytics, reflecting good privacy compliance. However, the absence of security headers and the use of an outdated jQuery version present moderate risks. No explicit security or incident response policies are published, and contact information is limited to forms and social media links. Overall, the website is professional, trustworthy, and compliant with GDPR, but improvements in security posture and technical modernization are recommended.

B

Bundesregierung

gleichstellungsbericht.de

45

The website gleichstellungsbericht.de is an official German government platform dedicated to publishing gender equality reports and related information. It serves as a key resource for policymakers, administrators, and the public interested in gender equality progress and recommendations in Germany. The site provides access to current and past reports, event announcements, and downloadable documents, positioning itself as a trusted governmental information source. The business model is informational and regulatory, with a focus on transparency and public engagement in gender equality matters. Technically, the website is built on WordPress and employs common web technologies such as jQuery and Owl Carousel for interactive content. It integrates a sophisticated accessibility tool (digi·access) supporting multiple languages and accessibility needs, reflecting a high level of digital maturity and inclusiveness. Hosting is managed via domaincontrol.com (GoDaddy), a reputable provider. The site demonstrates good mobile optimization and SEO practices. From a security perspective, the site enforces HTTPS and includes essential security headers, contributing to a strong security posture. No vulnerabilities or exposed sensitive data were detected. However, the absence of a cookie consent mechanism, explicit security policies, and vulnerability disclosure pages indicates areas for improvement in compliance and transparency. No incident response contacts or data protection officer information were found, which are recommended for enhanced trust and regulatory adherence. Overall, the website is professional, trustworthy, and well-maintained, with a strong focus on accessibility and content quality. Strategic recommendations include implementing cookie consent, publishing security and incident response policies, and adding vulnerability disclosure information to further strengthen compliance and user trust.

P

Photography for work

photo-for-work.org

46

The website 'Photography for work' is a niche portfolio site showcasing photographic content related to various industrial sectors such as mining, energy, railway, steel making, and women at work. The site appears to be informational or artistic in nature rather than commercial, targeting a general audience interested in work-related photography. The technical infrastructure is based on an older CMS (KONTEXT-CMS) and uses legacy JavaScript libraries like jQuery 1.10.2, with additional gallery and photo viewing plugins. The site is mobile optimized with basic accessibility and SEO features but lacks modern enhancements and performance optimizations. Security posture is weak due to lack of visible HTTPS enforcement, absence of security headers, and no privacy or cookie policies. No contact or incident response information is provided, limiting transparency and trust. Overall, the site is functional but basic, with moderate trustworthiness and a low security maturity level.

The website schoenearbeit.de represents a small-scale design service operated by Christine Massuthe, a diploma designer based in Berlin, Germany. The site provides basic contact information and a simple presentation of the business but lacks comprehensive business or security policies. The business appears to be a freelance or consultancy service targeting local clients seeking design expertise. Technically, the website is built with basic HTML, CSS, and a small JavaScript file for image swapping. There is no evidence of a CMS or modern frameworks, and the site shows minimal mobile optimization and SEO efforts. Hosting is likely provided by the nameserver operator Warenform.de. No analytics or tracking technologies are detected, indicating a low digital maturity level. From a security perspective, the site lacks HTTPS information and security headers, which are critical for protecting user data and ensuring trust. No privacy, cookie, or incident response policies are present, which raises compliance concerns especially under GDPR. The contact information is clearly displayed, but no formal security or data protection measures are evident. Overall, the website is functional but basic, with moderate trustworthiness due to clear contact details but limited security and compliance features. Strategic improvements in security posture, privacy compliance, and technical modernization are recommended to enhance business credibility and user trust.

o.open is a small German IT service provider specializing in network design, system integration, hosting, and administration of internet and office networks. The company focuses on supporting social and left-wing projects, providing technical expertise and infrastructure services. The website content is professional and targeted at a niche audience within Germany, with references to partner organizations and detailed contact information. The business appears to have been founded in the early 2000s, with a strong community and social orientation. Technically, the website uses standard modern web technologies such as HTML5, CSS3, and vanilla JavaScript with some security-conscious practices like nonce usage in scripts. However, there is no evidence of advanced frameworks or CMS platforms. The site is moderately optimized for performance and mobile use but lacks comprehensive accessibility and SEO features. Security posture is moderate, with no visible security headers or HTTPS confirmation in the provided data, and no cookie or privacy consent mechanisms detected. From a security perspective, the site does not show signs of blocking or WAF interference, and no vulnerabilities or exposed sensitive data were found in the content. The WHOIS data is limited due to DENIC privacy policies but shows consistent nameservers under the domain's control. The domain legitimacy is high, though some WHOIS details like creation and expiry dates are not disclosed. Privacy compliance is basic, with GDPR-related documents available but no cookie consent. Overall, the website is trustworthy and professional but could improve its security posture and privacy compliance. Strategic recommendations include implementing HTTPS verification, adding security headers, introducing cookie consent mechanisms, and enhancing mobile and accessibility features to improve user experience and compliance.

5

52°Nord | Paris-Berlin

52nord.eu

49

52°Nord | Paris-Berlin is a small German media production company specializing in film and media content including interviews, thematic films, image films, fiction, and portraits. Their website is built on WordPress and showcases their services and content with a focus on the German-speaking audience. The company provides clear contact information including a physical address in Berlin, phone number, and email, enhancing their business credibility. Technically, the website uses an older WordPress version (5.3.20) with plugins such as MetaSlider and Vipers Video Quicktags, and includes jQuery 1.12.4. The site is hosted via domainfactory GmbH, a reputable registrar and hosting provider. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility and SEO features. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the website uses HTTPS but lacks important security headers such as Content-Security-Policy and X-Frame-Options. There is no visible cookie consent mechanism or privacy policy compliance banner, which is a GDPR compliance gap. No incident response or security policy information is provided. The site does not expose sensitive data or show signs of vulnerabilities but uses an outdated jQuery version which could pose risks. Overall, the website is safe with no adult or questionable content, and the domain registration is consistent with the business profile. Recommendations include implementing security headers, updating JavaScript libraries, adding cookie consent and privacy compliance mechanisms, and improving accessibility and SEO to enhance security posture and user trust.

123Comics is a small German-based creative media organization specializing in comics, graphic recording, animation, and educational workshops. Their website presents a professional and well-structured platform showcasing their projects and services, targeting educators, children, and institutions interested in political and social education through comics and animation. The technical infrastructure is based on a custom CMS (KONTEXT-CMS) with common web technologies like jQuery and Slick Carousel, and they use Matomo analytics to respect user privacy. Security posture is moderate with room for improvement, especially regarding security headers and updating legacy libraries. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and social media presence suggest a genuine operation. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, but no explicit terms of service or security policies are found. Overall, the site is safe, accessible, and professionally maintained but would benefit from enhanced security and clearer business legitimacy indicators.