Security Directory

C

CampusPress

campuspress.com

65

CampusPress is a specialized managed WordPress hosting provider focused exclusively on the education sector, serving K-12 schools, higher education institutions, faculty, and students. Established in 2001 and operating under the parent company Incsub, LLC, CampusPress holds a strong market position as the first and largest WordPress Multisite provider for education, hosting over 20 million sites globally. Their service portfolio includes hosting, custom development, systems management, user support, security, and accessibility compliance, supported by a SOC 2 Type II certification that underscores their commitment to security and trust. Technically, the website is built on WordPress with a modern tech stack including Google Fonts, jQuery, and Google Tag Manager, hosted on infrastructure linked to Amazon Registrar and AWS DNS. The site demonstrates excellent performance, mobile optimization, accessibility, and SEO practices. However, DNSSEC is not enabled, and explicit security headers are not detected, suggesting room for improvement in DNS and HTTP security hardening. From a security perspective, CampusPress shows a mature posture with enforced HTTPS, domain status locks, and SOC 2 certification. They provide managed backups, security scanning, and spam protection. However, the absence of a published security policy or incident response details and lack of a cookie consent mechanism indicate gaps in transparency and privacy compliance. No vulnerabilities or suspicious content were detected. Overall, CampusPress presents a high-trust, professional, and secure online presence with strong business credibility and technical maturity. Strategic enhancements in privacy compliance and DNS security would further strengthen their security posture and regulatory adherence.

S

Stadtbibliothek Neuss

stadtbibliothek-neuss.de

56

Stadtbibliothek Neuss is a public library serving the community of Neuss, Germany, providing a wide range of cultural and educational services including reading promotion, workshops, makerspace, and a library of things. The website is built on WordPress and uses modern web technologies such as jQuery, Slick Slider, and Google reCAPTCHA to enhance user experience and security. The site demonstrates good accessibility and mobile optimization, supported by certifications like BIK - WCAG-konform and TÜV Süd. Security posture is solid with HTTPS and bot protection, though it lacks some advanced security headers and explicit security policies. Overall, the site is trustworthy, professional, and well-suited for its public service role.

S

Stiftung Kunstsammlung Nordrhein-Westfalen

kunstsammlung.de

56

Kunstsammlung Nordrhein-Westfalen is a prominent cultural institution operating internationally recognized museums K20 and K21 in Düsseldorf, Germany. The organization focuses on classical modern and contemporary art exhibitions, educational programs, and public engagement through various services including ticket sales and an online collection. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support, targeting art enthusiasts, cultural tourists, and educational groups. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Swiper.js, hosted likely by 1&1 IONOS, and uses ExpressionEngine CMS. It demonstrates good mobile optimization, accessibility, and SEO practices. The presence of cookie consent and GDPR-compliant privacy policies indicates a strong commitment to privacy compliance. From a security perspective, the site enforces HTTPS, uses CSRF tokens, and implements cookie consent mechanisms. However, it lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or suspicious activities were detected in the content or WHOIS data, which is consistent and transparent. Overall, the website is trustworthy, professionally managed, and compliant with relevant privacy regulations, making it a reliable source for visitors and stakeholders. Strategic improvements in security headers and incident response transparency could further enhance its security posture.

B

Buchhandlung Schmetz am Dom, Aachen

buchhandlung-schmetz.de

53

Buchhandlung Schmetz am Dom is a small, independent retail bookstore located in Aachen, Germany, offering a broad selection of books, games, and related products both in-store and through an online shop operated by a partner. The business emphasizes personal customer service, community engagement through events, and specialized offerings for young readers. Their digital presence is supported by a modern CMS (ProcessWire), privacy-conscious analytics (Matomo), and a compliant cookie consent mechanism. The website is well-designed, mobile-optimized, and provides comprehensive legal and contact information, enhancing trust and professionalism. Security posture is solid with HTTPS and privacy controls, though some security headers and explicit policies could be improved. Overall, the site reflects a mature digital infrastructure suitable for a local retail business with a strong community focus.

Фонд мениджър на финансови инструменти в България ЕАД е специализирано държавно дружество, създадено от Министерски съвет за управление на финансови инструменти, финансирани от Европейските структурни и инвестиционни фондове. Компанията обслужва широк спектър от клиенти, включително частен бизнес, публичен сектор и финансови институции, като предоставя микрокредити, гаранционни схеми и инвестиции в иновации и дигитализация. Тя заема ключова позиция в българския пазар на финансови инструменти, подпомагайки устойчив икономически растеж и регионално развитие. Техническата инфраструктура на сайта е базирана на модерни уеб технологии като Bootstrap, jQuery и Google Tag Manager, осигуряващи добра производителност и мобилна оптимизация. Сайтът използва HTTPS и включва защитни механизми като Google reCAPTCHA, но липсват някои важни сигурностни заглавки и политики за поверителност и бисквитки. Въпреки това, бизнес информацията е ясна и подкрепена от официални партньорства и социални медии, което повишава доверието. Общата оценка на сайта е добра, с препоръки за подобряване на политиките за поверителност, сигурността и видимостта на контактната информация.

S

Stadtwerke Alsdorf GmbH

stadtwerke-alsdorf.de

43

Stadtwerke Alsdorf GmbH is a regional municipal energy provider based in Germany, focusing on sustainable and ecological energy solutions for the city of Alsdorf. Their business model centers on providing reliable, affordable, and environmentally friendly energy services, including electricity, gas, and decentralized renewable energy projects such as solar PV and heat supply systems. The company positions itself as a trusted local partner for citizens, municipal entities, and market partners, emphasizing green technologies and energy efficiency. Technically, the website is built on WordPress using the Elementor page builder and OceanWP theme, indicating a modern and flexible digital infrastructure. The site is mobile-optimized and includes standard SEO and accessibility features, although some accessibility aspects could be improved. Performance is moderate, with use of common JavaScript libraries and tracking tools such as Google Tag Manager. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, there is no evidence of advanced security headers or explicit security policies. No vulnerability disclosure or incident response information is provided, which could be areas for enhancement. WHOIS data is consistent and shows no privacy protection, supporting the legitimacy of the domain. Overall, the website presents a professional and trustworthy image with good content quality and business credibility. The absence of direct contact emails or phone numbers on the homepage is noted but may be available on other pages. The site is safe for general audiences with no adult or questionable content. Strategic improvements in security policies and contact transparency would further strengthen the company's digital trustworthiness.

A

AVM GmbH

avm.de

50

AVM GmbH operates the website en.fritz.com, providing a comprehensive portfolio of home networking products including routers (FRITZ!Box), mesh Wi-Fi systems, telephony devices, smart home products, and related applications. The company is positioned as a leading technology provider in the home networking and telecommunications sector, targeting consumers and small businesses seeking reliable and user-friendly Internet connectivity solutions. The website content is professionally curated, with clear navigation and detailed product information, supporting AVM's market presence and brand recognition. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries such as jQuery and Slick Slider for enhanced user experience. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive digital maturity profile. Analytics are implemented via Piwik (Matomo), reflecting a moderate level of user tracking balanced with privacy considerations. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, explicit security headers and published security policies or incident response procedures are not evident, representing areas for improvement. The absence of vulnerability disclosure mechanisms or security.txt files limits transparency in security communications. Overall, the website is trustworthy, safe, and professionally maintained, with no indications of adult or questionable content. The WHOIS data for the subdomain en.fritz.com is unavailable, which is expected as it is a subdomain; the main domain fritz.com is a well-established brand owned by AVM GmbH. Strategic recommendations include enhancing security headers, publishing security policies, and establishing vulnerability disclosure channels to strengthen security posture and stakeholder trust.

2

23grad – Netzwerk Umwelt- und Nachhaltigkeitswissenschaften e.V.

23grad.de

46

23grad – Netzwerk Umwelt- und Nachhaltigkeitswissenschaften e.V. is a German non-profit organization focused on fostering exchange and collaboration among individuals engaged in environmental and sustainability sciences. Established as a formal association in 2008 with roots dating back to 1996, it serves a community of several hundred members through workshops, regional meetings, excursions, and career support initiatives. The organization emphasizes independence from financial and political influences, promoting sustainable development knowledge and practice. Technically, the website is built on WordPress with Elementor and Astra theme, hosted by Manitu, and demonstrates moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced, though some security headers are missing and no explicit cookie consent mechanism is present. The site lacks visible contact emails or phone numbers but provides a contact form and LinkedIn profiles for board members. Overall, the website is professional, trustworthy, and content-rich, serving its niche audience effectively.

E

EHI Retail Institute GmbH

ehi.de

58

The EHI Retail Institute GmbH is a scientific research institute based in Cologne, Germany, serving the retail sector with approximately 850 members. The organization focuses on research, publications, events, and community engagement to support retail industry stakeholders. The website reflects a professional and well-structured digital presence, leveraging WordPress CMS with the Divi theme and modern JavaScript libraries such as UIkit, Splide.js, and GSAP. It integrates advanced search capabilities via Fact-Finder and employs Borlabs Cookie for privacy compliance. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, though some security headers and explicit privacy policies are missing. The WHOIS data is unavailable, which slightly impacts trust but is mitigated by the professional content and structured data. Overall, the website is trustworthy, content-rich, and well-optimized for its audience.

F

FactFinder

fact-finder.de

58

FactFinder is a well-established German company specializing in AI-driven search and product discovery solutions for eCommerce businesses. With over 20 years of experience and a client base exceeding 2,000 online shops, FactFinder offers a comprehensive SaaS platform that enhances conversion rates through personalized shopping experiences. The company holds multiple industry awards, underscoring its market leadership and innovation. Technically, the website employs modern JavaScript libraries, consent management, and analytics tools, ensuring a robust digital presence with good performance and mobile optimization. Security practices include HTTPS enforcement and input validation, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, making it a credible resource for eCommerce technology solutions.

A

AVM GmbH

myfritz.net

71

The website sso.myfritz.net serves as the secure login portal for MyFRITZ!Net, a service provided by AVM GmbH, a recognized German technology company specializing in home networking products. The platform allows users to authenticate and manage their FRITZ! devices through a centralized account. The site is professionally designed with consistent branding and provides links to comprehensive privacy and terms of service documents hosted on official AVM domains. The target audience is primarily users of FRITZ! products seeking device management and account access.

W

Welcome Hotels GHG Beteiligungsgesellschaft mbH

welcome-hotels.com

55

Welcome Hotels GHG Beteiligungsgesellschaft mbH operates a network of 14 hotels across Germany, offering accommodation, wellness, and event hosting services. The company emphasizes sustainability, demonstrated by its GreenSign certification, and targets a broad audience including tourists, business travelers, and event organizers. The website is professionally designed, mobile-optimized, and provides comprehensive information about hotel locations, amenities, and special offers. Technically, the site uses modern JavaScript libraries and integrates cookie consent mechanisms, ensuring compliance with privacy regulations. Security posture is good with HTTPS enforced, though some security headers are missing and no explicit security policy or incident response information is published. The WHOIS data is unavailable, which slightly reduces transparency but the overall business credibility remains high based on website content and trust indicators.

Regio Augsburg Tourismus GmbH operates as the regional tourism authority for Augsburg, Bavaria, Germany, providing comprehensive tourism information, guided tours, accommodation listings, and cultural event promotion. The website serves as a multilingual portal targeting tourists and visitors interested in exploring Augsburg's rich historical and cultural heritage. The business model focuses on destination marketing and visitor engagement through digital content and downloadable brochures.

V

vbw Stiftung Lebensgrundlagen Bayern

vbw-slb.de

58

The vbw Stiftung Lebensgrundlagen Bayern is a non-profit foundation focused on promoting sustainable social and ecological projects within Bavaria, Germany. It offers financial support through various funding awards ranging from 10,000 to 250,000 Euros annually, with a total funding volume of up to 600,000 Euros. The foundation targets individuals, organizations without profit motives, and educational institutions engaged in community and environmental sustainability initiatives. The website provides an online platform for registration and application, facilitating a structured and transparent funding process.

B

bayme vbm

baymevbm.de

65

bayme vbm is a prominent employer association representing the metal and electrical industries in Bavaria, Germany. With approximately 3,600 member companies, it provides advocacy, legal support, training, and networking services to its members. The organization operates under the umbrella of the Vereinigung der Bayerischen Wirtschaft e. V. (vbw), reinforcing its strong regional and industry presence. The website is professionally designed, multilingual (German and English), and offers comprehensive resources and tools tailored to its target audience of businesses in manufacturing and related sectors. Technically, the website employs modern JavaScript libraries such as Swiper.js and Vimeo Player API, integrates cookie consent mechanisms compliant with GDPR, and uses accessibility tools like eyeAble. The site is responsive and optimized for mobile devices, with good SEO and accessibility practices. Security-wise, the site enforces HTTPS, implements standard security headers, and uses secure forms for login. However, it lacks a dedicated security policy or incident response page and does not provide a vulnerability disclosure or security.txt file. Overall, the security posture is solid with no visible vulnerabilities or exposed sensitive data. The WHOIS data aligns with the business claims, showing consistency and legitimacy. The site uses etracker for analytics and tracking with user consent, maintaining good privacy compliance. Social media presence across major platforms enhances trust and outreach. The risk level is low, but improvements could be made by publishing explicit security policies and incident response contacts to enhance transparency and preparedness. The website serves its business purpose effectively with high professionalism and user experience.

P

portfolio institutionell

portfolio-institutionell.de

59

portfolio institutionell is a leading German media outlet specializing in institutional capital investment. The website offers comprehensive news, expert interviews, event information, and industry analysis targeted at institutional investors such as pension funds, insurance companies, and asset managers. The business operates primarily in the finance and media sectors, with a strong focus on the German market. The company is well-established with a founding date around 2018 and maintains a professional online presence with consistent branding and high-quality content. Technically, the website is built on WordPress using Bootstrap and jQuery, enhanced with modern plugins for cookie consent (CookieYes) and forms (Contact Form 7). The site is mobile-optimized, SEO-friendly, and uses structured data to improve search engine visibility. Performance is moderate, with room for optimization. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No blocking or WAF challenges were detected, allowing full content access. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Contact information is available, though no direct company emails were found in the HTML content. The domain WHOIS data aligns well with the website's business claims, indicating legitimacy and trustworthiness. Overall, portfolio institutionell presents a professional, secure, and compliant digital platform serving a niche but important market segment in Germany.

N

nextbike GmbH

molbubi.hu

63

MOL Bubi is a well-established public bike-sharing service operating in Budapest, Hungary, managed by nextbike GmbH in partnership with BKK and the city of Budapest. The service offers environmentally friendly urban mobility solutions with flexible rental options via a dedicated mobile app. The website reflects a professional and consistent brand image, targeting urban commuters and tourists seeking convenient transport alternatives. Technically, the site leverages modern web technologies including Bootstrap, jQuery, and integrates third-party analytics and marketing tools such as Google Analytics and Facebook Pixel, hosted on AWS and Cloudflare CDN, ensuring good performance and availability. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though the absence of a public security policy and incident response contacts suggests room for improvement. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information and social media presence, supporting user confidence.

F

Forchheim Erleben: Königsstadt Forchheim - das Tor zur Fränkischen Schweiz

forchheim-erleben.de

42

The website www.forchheim-erleben.de serves as the official tourism portal for the city of Forchheim and the surrounding Fränkische Schweiz region in Germany. It provides comprehensive information about local hotels, gastronomy, breweries, events, city tours, and brochures to assist visitors in planning their trips. The site targets tourists and visitors interested in cultural, culinary, and outdoor activities in the region. The business model focuses on regional tourism promotion and supporting local hospitality and retail sectors. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and incorporates modern web libraries such as jQuery, Slick Carousel, and FontAwesome Pro. It uses Google Analytics for visitor tracking and CookieFirst for cookie consent management, indicating a moderate level of digital maturity. The site appears to be mobile-optimized with a responsive design and provides a clear navigation structure. From a security perspective, the site uses HTTPS and anonymizes IP addresses in Google Analytics, but lacks visible security headers and published privacy or terms of service policies in the provided content. There is no evidence of a security.txt file or explicit incident response contacts. While no critical vulnerabilities or suspicious patterns were detected, the absence of some security best practices and compliance documentation suggests room for improvement. Overall, the website is a trustworthy and professional regional tourism portal with good content quality and user experience. However, enhancing privacy compliance, security headers, and providing clear contact and policy information would strengthen its security posture and user trust. Strategic recommendations include publishing comprehensive privacy and terms policies, implementing security headers, and establishing a vulnerability disclosure process.

V

Volksverpetzer

volksverpetzer.de

68

Volksverpetzer is an independent German media blog founded in 2017, dedicated to combating fake news through critical, honest, and ethical reporting. The site operates on a donation-funded business model and maintains a strong presence on multiple social media platforms. Technically, the website is built on WordPress using the Divi theme, enhanced with SEO and media embedding plugins, and is hosted with Cloudflare DNS services ensuring good performance and security. The security posture is solid with HTTPS enforced and no visible vulnerabilities, although security headers and formal policies are absent. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a visible privacy policy or terms of service. Overall, the site is professional, trustworthy, and safe for general audiences.

E

EHI Retail Institute GmbH

ehi.org

58

EHI Retail Institute GmbH is a well-established scientific research institute based in Cologne, Germany, specializing in retail industry studies and services. With approximately 850 members, it offers research, publications, events, and community engagement focused on retail and related sectors. The website demonstrates a professional and modern digital presence built on WordPress with the Divi theme and various modern JavaScript libraries, indicating a mature technical infrastructure. Security posture is strong with HTTPS and security headers implemented, though explicit security policies and incident response information are not publicly available. Privacy compliance is well addressed with comprehensive privacy and cookie policies and GDPR adherence. Overall, the site is trustworthy and professionally managed, though the lack of WHOIS data limits domain registration trust assessment.

O

OXID eSales AG

oxidforge.org

61

OXID eSales AG operates a professional knowledge base website dedicated to the OXID eShop e-commerce platform. The site targets developers, merchants, and partners by providing documentation, training, certification, modules, and community engagement channels. The company is well-established in Germany with a domain age consistent with its business history. Technically, the website uses modern front-end frameworks like Bootstrap and jQuery, hosted behind Cloudflare DNS, ensuring good performance and mobile optimization. Security posture is adequate with HTTPS and domain transfer protections, but lacks explicit security headers and privacy/cookie policies, which are areas for improvement. Overall, the site is professional, trustworthy, and content-rich, supporting a strong community and partner ecosystem.

The website bonnticket.de is an established German e-commerce platform specializing in the sale of tickets for a wide range of events including concerts, cultural performances, musicals, humor shows, sports, and leisure activities. It targets the general public in Germany seeking event tickets and related services such as ticket insurance and alerts. The platform is operated by DERTICKETSERVICE.DE GmbH & Co. KG, a legitimate company with consistent WHOIS registration data. Technically, the site employs modern JavaScript libraries like jQuery and Swiper.js, integrates Google Tag Manager for analytics, and uses a consent management platform to comply with GDPR requirements. The website design is professional, mobile-optimized, and offers clear navigation through event categories and cities. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though it lacks explicit security headers and published security policies. No vulnerabilities or suspicious content were detected. Overall, the site demonstrates a good balance of business credibility, privacy compliance, and technical implementation, suitable for its market niche.

L

Literarischer Sommer / Literaire Zomer

literarischer-sommer.eu

50

Literarischer Sommer is a cultural festival organizing literary events across the German-Dutch border region, featuring over 50 events with 30 authors in 19 cities. The website is professionally designed using WordPress and Elementor, providing detailed event information and partner acknowledgments. Technically, the site uses modern web technologies and is hosted by InterNetX GmbH with HTTPS enabled, though it lacks some security headers and cookie consent mechanisms. The security posture is moderate with room for improvement in headers and privacy compliance. Overall, the site is trustworthy, targeting literature and culture enthusiasts in the region.

A

AGD Allianz Deutscher Designer

macht.business

48

AGD Allianz Deutscher Designer is a German association focused on supporting self-employed designers through educational webinars, workshops, and regional events. Their website offers bi-weekly online sessions and exclusive member benefits such as access to webinar recordings and materials. The organization positions itself as a niche provider in the design education and professional development sector within Germany. Technically, the website is built on WordPress with common plugins like Yoast SEO and Ultimate Member, hosted likely by 1&1 IONOS. The site is well-structured, mobile-optimized, and uses HTTPS with Google reCAPTCHA for form security. However, it lacks visible privacy and cookie policies, security headers, and incident response information, which are areas for improvement. Overall, the site is professional and trustworthy, with a strong social media presence and consistent branding.

C

Cineplex

cineplex.de

67

Cineplex operates a network of cinemas in Germany, offering movie programs, ticket booking, and promotional activities. The website is professionally designed with consistent branding and targets a general audience interested in cinema entertainment. The technical infrastructure leverages modern JavaScript frameworks, Cloudflare for DNS and security, and Cookiebot for GDPR-compliant cookie management. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and Cloudflare protection, though there is room for improvement in security headers and published policies. The site integrates multiple advertising and analytics services, maintaining good privacy compliance through explicit consent mechanisms. Overall, Cineplex's website reflects a mature digital presence suitable for a large hospitality business.

S

SPORT FORUM ALSDORF

sport-forum-alsdorf.de

56

SportForum Alsdorf is a medium-sized sports and wellness center located in Germany, offering a broad range of services including fitness club access, racket sports (tennis, badminton, padel), wellness treatments, rehabilitation, and nutritional counseling. The website is professionally designed with clear navigation and content relevant to its target audience of sports enthusiasts and health-conscious individuals. The business model is membership and service-based, targeting local and regional customers seeking comprehensive sports and wellness solutions. Technically, the website is built on WordPress with modern plugins such as Gravity Forms for data collection and Iubenda for cookie consent management, indicating a mature digital infrastructure. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Hosting is via a provider associated with GoDaddy nameservers, typical for small to medium enterprises. From a security perspective, the site uses HTTPS and implements spam protection on forms, along with cookie consent mechanisms, reflecting a good security posture. However, some security headers are not explicitly detected, and there is no visible security policy or incident response contact, which could be improved. No vulnerabilities or suspicious activities were found during analysis. Overall, the website presents a trustworthy and professional front for SportForum Alsdorf, with strong privacy compliance and user engagement features such as newsletters and social media integration. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure to further strengthen trust and compliance.

E

ENERGETICON gGmbH

energeticon.de

60

ENERGETICON gGmbH operates as a non-profit educational museum and event location in Alsdorf, Germany, focusing on the energy transition from fossil and atomic sources to renewable energy. The organization targets families, children, schools, and tourists with interactive exhibitions and educational programs. The website reflects a regional cultural institution with strong local partnerships and sponsorships. Technically, the site uses a CMS common in German municipal contexts, leveraging Bootstrap, jQuery, and Nivo Slider for UI components, and integrates social media via Facebook SDK. The site is mobile optimized and provides a cookie consent mechanism aligned with GDPR requirements. Security posture is solid with HTTPS enforced, though security headers and incident response policies are absent. Overall, the site is professional, trustworthy, and compliant with privacy standards, though it could improve in security policy transparency and accessibility.

МБАЛ-СВОГЕ ЕООД operates as a multi-profile hospital providing active treatment services in the region of Svoge, Bulgaria. The website presents a professional healthcare provider with key departments including internal medicine, pediatrics, gynecology, surgery, and neurology. The target audience primarily consists of patients and visitors seeking medical services in the region. The business model is focused on healthcare delivery with a regional market position. Technically, the website is built on WordPress using the Enfold theme and Smart Slider 3 plugin, demonstrating moderate performance and good mobile optimization. Accessibility features are well implemented, enhancing usability for diverse users. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, but lacks security headers and cookie consent mechanisms, which are recommended for improvement. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and business information appear credible. Overall, the site is functional and professional but would benefit from enhanced security practices and clearer contact information.

C

CollabDays | For the community, by the community.

collabdays.org

49

CollabDays is a community-focused event platform that facilitates collaboration and engagement among its audience. The website is built on WordPress using the Divi theme and incorporates modern JavaScript libraries such as React and jQuery, indicating a moderate level of technical maturity. The site design is professional and mobile-optimized, providing a good user experience. However, the absence of privacy, cookie, and terms of service policies, as well as lack of explicit contact information, limits its compliance posture and business credibility. Security-wise, the site uses HTTPS with a good SSL configuration but lacks security headers and formal incident response details. The WHOIS data is unavailable due to malformed output, which restricts domain trust verification. Overall, the site is safe and suitable for general audiences, but improvements in privacy compliance and security best practices are recommended.

U

Unified Communications EXPO

ucxevents.io

50

Unified Communications EXPO (UCX) is a UK-based event organizer specializing in hosting the leading expo for unified communications, collaboration, and customer experience technology. The website promotes the UCX London event scheduled for 1-2 October 2025 at ExCeL London, targeting professionals and businesses interested in AI, UCaaS, and related technologies. The site uses Joomla CMS with modern JavaScript libraries and integrates multiple analytics and marketing tools to optimize user engagement and event promotion. Security posture is adequate with HTTPS and CSRF protections, but lacks visible security headers and formal privacy or cookie policies. WHOIS data is unavailable due to privacy protection or query issues, slightly reducing trust. Overall, the site is professional and functional, serving its business purpose effectively.

S

Samosprávne kraje Slovenska

samospravnekraje.sk

50

Samosprávne kraje Slovenska is a Slovak non-profit association representing all regional self-governments in Slovakia. The website serves as the official digital presence for the organization, providing information about its activities, members, projects, and events. It targets regional government officials and stakeholders in public administration. The association positions itself uniquely as the sole representative body for regional self-governments in Slovakia, offering services such as advocacy, project management, and expert consultation. Technically, the website is built on WordPress using the Oxygen Builder framework, enhanced with plugins like MapsSVG for interactive maps and OwlCarousel for content sliders. The site is mobile-optimized and includes SEO best practices, though accessibility features are basic. Security posture is good with HTTPS enforced and no exposed sensitive data, but lacks explicit security headers and a cookie consent mechanism. WHOIS data confirms the domain's legitimacy and consistency with the organization's identity. Overall, the site is professional, trustworthy, and well-suited for its governmental audience, but could improve privacy compliance and security headers.

Ú

Únia nevidiacich a slabozrakých Slovenska

unss.sk

55

Únia nevidiacich a slabozrakých Slovenska is a well-established non-profit organization dedicated to supporting blind and visually impaired individuals in Slovakia. With a domain age dating back to 2003, the organization demonstrates a long-standing presence and commitment to its mission. The website provides comprehensive information about its services, advocacy efforts, accessibility projects, and community activities, targeting visually impaired individuals, partner organizations, donors, and volunteers. The organization operates primarily through donations, grants, and public support, positioning itself as a key player in the Slovak non-profit sector for disability support. Technically, the website is built on WordPress with a modern and accessible design, leveraging popular plugins such as Contact Form 7, MetaSlider, and Cookie Law Info to enhance user experience and compliance. Hosting is provided by Websupport, and the site benefits from DNSSEC and HTTPS with strong SSL configuration. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. From a security perspective, the website enforces HTTPS, uses DNSSEC, and implements cookie consent mechanisms aligned with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, there is room for improvement in publishing explicit security policies and incident response contacts, as well as enhancing HTTP security headers. The WHOIS data aligns well with the website content, confirming legitimacy and consistent registration details. Overall, the website presents a trustworthy, professional, and user-friendly platform for its audience. Strategic recommendations include formalizing security policies, enhancing security headers, and considering a vulnerability disclosure policy to further strengthen security posture and trust.

S

SK-NIC, a.s.

sk-nic.sk

55

SK-NIC, a.s. is the official registry operator for the Slovak country code top-level domain (ccTLD) .sk and the second-level domain org.sk. As a member of the CentralNic GROUP PLC, it holds a strong market position in domain registration services within Slovakia. The website provides domain registration, auction services, and registrar account management, targeting Slovak internet users, businesses, and registrars. The content is professionally presented primarily in Slovak with English alternatives, reflecting a mature and established business. The company was founded in 2003 and maintains a medium-sized operational scale.

L

Linka detskej istoty

nezavislost.sk

55

neZavislost.sk is a Slovak non-profit project focused on preventing and addressing internet addiction. It offers a mobile application that anonymously tracks mobile usage and provides tools such as addiction tests, motivational groups, and expert help. The project is co-financed by the EU and supported by Slovak government entities, positioning it as a credible and recognized initiative in the public health and education sector. Technically, the website is built on WordPress with common libraries like jQuery and Bootstrap, hosted on Websupport with DNSSEC and HTTPS enabled, ensuring a secure baseline. However, the site lacks some advanced security headers and cookie consent mechanisms, indicating room for improvement in privacy compliance. Overall, the website is well-structured, mobile-optimized, and provides relevant content for its target audience.

M

Mať Filipa

matfilipa.sk

52

The website matfilipa.sk is an educational project dedicated to raising awareness and knowledge about intellectual property rights among students and young creators in Slovakia. It offers detailed educational content on industrial and authorial intellectual property, including downloadable materials and an option to order printed educational books. The site is positioned as a niche educational resource with a focus on Slovak and European intellectual property institutions. Technically, the website uses a standard modern stack including Bootstrap, jQuery, and Google Analytics, hosted likely by Websupport. It is secured with HTTPS and DNSSEC, but lacks some security headers and uses some HTTP resources, which could be improved. Privacy compliance is weak due to the absence of privacy and cookie policies. Contact is provided only via a detailed form without direct emails or phone numbers. Overall, the site is functional, informative, and trustworthy but could benefit from enhanced security and privacy practices.

R

Romeofilms

sidliskovysen.sk

41

The website sidliskovysen.sk serves as the official online presence for the documentary film 'RYTMUS sídliskový sen,' focusing on the life and culture surrounding Slovak hip-hop artist Rytmus. The site provides film-related content, including cast, crew, galleries, and related social projects. It targets a general audience interested in music, social issues, and documentary films. The business model revolves around media production and promotion, supported by partnerships with educational and governmental organizations in Slovakia and the EU. Technically, the site uses a traditional web stack with HTML5, CSS, JavaScript, and jQuery, supported by the Nette PHP framework and hosted on Websupport infrastructure. It integrates Google Analytics for tracking and Livechatoo for user engagement. However, the site lacks HTTPS, which is a critical security shortfall. Security posture is moderate with DNSSEC enabled but missing key security headers and policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is functional and professionally designed but requires improvements in security and compliance to enhance trust and user safety.

O

Oberfrankenstiftung

oberfrankenstiftung.de

54

The Oberfrankenstiftung is a publicly governed foundation focused on promoting welfare in the Oberfranken region of Germany. It supports projects in social, cultural, and scientific fields by allocating funds from its endowment. The website reflects a well-structured and professional digital presence with comprehensive information about its activities, funding opportunities, and recent projects. The foundation positions itself as a key regional non-profit entity with strong ties to local government and cultural institutions. Technically, the website employs standard web technologies such as Bootstrap and jQuery, ensuring responsive design and good user experience. While the site is well-structured and content-rich, it lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance and overall security posture. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable scripts. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in security maturity. The WHOIS data aligns well with the website content, showing a consistent and legitimate domain registration. Overall, the website is trustworthy, professionally maintained, and serves its target audience effectively. Strategic enhancements in security headers, privacy compliance, and incident response transparency would further strengthen its security posture and user trust.

O

Oberfranken Offensiv

kommnachoberfranken.de

58

The website www.kommnachoberfranken.de serves as a regional promotional platform for Oberfranken, Germany, focusing on attracting residents and professionals by highlighting the region's quality of life, innovation, family friendliness, and job opportunities. It is operated under the brand Oberfranken Offensiv, supported by regional government and partner institutions. The site uses TYPO3 CMS and integrates modern frontend technologies and Matomo analytics for user tracking with GDPR-compliant cookie consent mechanisms. The content is comprehensive, professionally designed, and well-structured, targeting individuals considering relocation or engagement with the region. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Contact information is primarily via a contact form, with no direct emails or phone numbers exposed. Overall, the site is trustworthy and aligns with its government-backed mission.

C

Christoffel-Blindenmission Deutschland e.V. (CBM)

cbm.de

51

Christoffel-Blindenmission Deutschland e.V. (CBM) is a well-established German non-profit organization dedicated to aiding visually impaired, blind, deaf, and physically disabled people in developing countries. The website clearly communicates its mission, projects, and donation opportunities, targeting donors, churches, and supporters interested in humanitarian and inclusive development work. The organization holds recognized certifications and trust seals, enhancing its credibility. Technically, the website employs modern web technologies including JavaScript, jQuery, and a consent management platform (Usercentrics) to ensure GDPR compliance. Hosting is managed via Ecotel, and analytics are performed using privacy-conscious Matomo. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the site lacks explicit security policies, incident response contacts, and security headers, which could be improved to enhance trust and resilience. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a professional, trustworthy, and user-friendly platform for the CBM's charitable activities, with minor recommendations to bolster security transparency and incident readiness.

O

OZ eSlovensko

zodpovedne.sk

59

www.zodpovedne.sk is a Slovak non-profit website operated by OZ eSlovensko, focusing on internet safety, digital responsibility, and prevention of online threats such as cyberbullying and internet addiction. The platform hosts multiple projects and initiatives aimed at educating schools, children, parents, and the general public. It is co-financed by the EU Connecting Europe Facility and partners with Slovak government ministries and child safety organizations. Technically, the site is built on Joomla CMS with Bootstrap and Helix Framework, integrating common web technologies and social media widgets. While HTTPS is enabled and Google Analytics is used, the site lacks explicit privacy and cookie policies, as well as security headers, which are compliance and security gaps. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Overall, the site is professionally designed with good content relevance and navigation, but improvements in privacy compliance and security posture are recommended.

Nagykovácsi Nagyközség Önkormányzat operates an official municipal website serving the local community of Nagykovácsi, Hungary. The site provides comprehensive information including news, events, municipal documents, and public service details, targeting residents and visitors. The business model is that of a local government authority, focusing on transparency and community engagement. The website is well-branded with consistent use of official logos and clear contact information. Technically, the website is built on the Yii Framework with modern front-end technologies such as Bootstrap and jQuery. It integrates Google Analytics and Facebook SDK for tracking and social media engagement. The site is mobile-optimized and features an event calendar and newsletter subscription with CAPTCHA protection, indicating a moderate level of digital maturity. From a security perspective, the website enforces HTTPS and uses CSRF tokens and CAPTCHA on forms, which are positive security practices. However, it lacks important security headers and does not publish an incident response or vulnerability disclosure policy. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website is trustworthy and professional, with a good security posture for a municipal site but with room for improvement in privacy compliance and security hardening. Strategic recommendations include implementing security headers, adding cookie consent, and publishing security policies to enhance trust and compliance.

M

Město Ivančice

ivancice.cz

62

The website ivancice.cz serves as the official municipal portal for the city of Ivančice in the Czech Republic. It provides comprehensive information about the city administration, local government bodies, public services, events, and community resources. The site targets residents, local businesses, and visitors seeking official information and services. The business model is that of a government entity providing public information and services. The domain age and WHOIS data confirm a long-standing presence consistent with a municipal authority. Technically, the site is built on WordPress with a modern theme and plugins, including SEO and GDPR compliance tools. Performance and mobile optimization are adequate, with good SEO metadata and structured data enhancing discoverability. Security posture is solid with HTTPS and cookie consent, though explicit security policies and vulnerability disclosures are absent. Overall, the site is professional, trustworthy, and safe for general audiences.

O

Ott Landmaschinen AG

falc.ch

47

Ott Landmaschinen AG is a Swiss-based market leader specializing in tractor attachments and agricultural machinery. The company operates through three main business areas: Ott, Agriott, and Rauchcenter, targeting agricultural machinery buyers and dealers primarily within Switzerland. The website reflects a professional business presence with clear branding, consistent messaging, and comprehensive contact information. Technically, the site is built on the ProcessWire CMS platform and leverages modern JavaScript libraries and UI frameworks, ensuring a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though the absence of security headers and published security policies indicates room for improvement. Privacy compliance is lacking due to missing privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, the website is trustworthy and professional, supporting the company's strong market position.

C

Conversion Expert GmbH

conversion.expert

63

Conversion Expert GmbH is a specialized technology service provider focused on A/B-Testing development, consulting, and platform solutions. With over 10 years of experience and hundreds of implemented experiments, they serve companies and agencies of all sizes primarily in Germany. Their business model combines bespoke A/B-Testing implementation services with their proprietary platform ABlyft, targeting expert users seeking high performance and flexibility. The website reflects a professional and consistent brand image with clear service offerings and client testimonials, positioning them as a trusted expert in the conversion optimization space. Technically, the website employs modern web technologies including Bootstrap, jQuery, and lazy loading for performance optimization. It integrates New Relic for monitoring and analytics, indicating a mature approach to performance and error tracking. The site is mobile optimized and SEO friendly, though accessibility features are basic. Hosting and domain registration are consistent with the business claims, enhancing credibility. From a security perspective, the site uses HTTPS with a valid SSL configuration and has domain transfer protections enabled. However, DNSSEC is not enabled and no explicit security headers were detected in the provided data. There is no visible security or incident response policy, and cookie consent mechanisms are absent despite GDPR relevance. These gaps suggest room for improvement in compliance and security posture. Overall, the website is trustworthy, professionally maintained, and business-focused with moderate privacy compliance and good technical implementation. Strategic enhancements in security headers, cookie consent, and explicit security policies would further strengthen their security posture and regulatory compliance.

E

estos GmbH

estos.de

52

estos GmbH is a German-based company specializing in professional communication software and innovative components for Unified Communication and Collaboration (UCC). Founded in 1997, the company offers products such as ProCall NEX, ProCall 8, and MetaDirectory, targeting businesses of all sizes and industries that require efficient business telephony, telephone systems, and contact data management. The company positions itself as a provider of easy-to-use, efficient, and supportive UCC solutions with a strong focus on customer experience and business process improvement. The website reflects a mature digital presence with modern design and clear messaging tailored to its target audience. Technically, the site is built on WordPress with Elementor, hosted on AWS infrastructure, and uses Google Tag Manager for analytics. Security posture is good with HTTPS enabled and no visible vulnerabilities, but lacks explicit security policies and vulnerability disclosure information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, estos GmbH presents a credible and professional business with a solid market position in the UCC software sector.

A

AudioCodes

audiocodes.com

71

AudioCodes is a global enterprise technology company specializing in advanced voice networking and media processing solutions tailored for the digital workplace. Their offerings include Microsoft Teams integration, contact center innovations, meeting room solutions, and Voice.AI products, positioning them as a leading vendor in the telecommunications and technology sectors. The company targets enterprises and service providers, delivering both hardware and SaaS platforms to support unified communications and cloud migration strategies. Technically, the website demonstrates a mature digital infrastructure utilizing modern JavaScript libraries and analytics tools such as Google Tag Manager and ZoomInfo. The site is well-optimized for mobile and accessibility, with comprehensive SEO and structured navigation. Security best practices are observed with HTTPS enforcement and multiple security headers, although there is room for improvement in public vulnerability disclosure and incident response transparency. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms and GDPR adherence. The absence of WHOIS data reduces some trust but is mitigated by the professional presentation and external validation through partner portals and investor relations. Overall, AudioCodes presents a credible and professional online presence with a robust business model and technical foundation. Strategic recommendations include enhancing transparency around security incident response and vulnerability disclosures to further strengthen trust and compliance.

Meyer Konzerte is a small, regionally focused event management company based in Germany, specializing in organizing concerts, comedy shows, and open-air events. Their website provides comprehensive event calendars, ticket sales, and tour management services, targeting a general audience interested in live entertainment. The company maintains an active social media presence and complies with GDPR and cookie consent regulations, reflecting a mature digital presence. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Borlabs Cookie for privacy compliance. It uses Facebook Pixel for marketing and tracking, integrates Google Maps, and employs standard web technologies like jQuery. Hosting appears to be with a reputable provider, and the site is mobile-optimized with good SEO practices. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks some advanced security headers. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website content, indicating legitimacy and no privacy protection masking registrant details. Overall, Meyer Konzerte's website demonstrates a good balance of business functionality, technical implementation, and privacy compliance, with room for improvement in security hardening and accessibility features.

A

AGD Allianz Deutscher Designer

agd.de

52

AGD Allianz Deutscher Designer is a prominent European association dedicated to supporting design professionals through a comprehensive membership network. The organization offers a broad range of services including legal and tax consulting, educational webinars, and practical tools for pricing and project management. Their market position as a leading design association is reinforced by a professional website, active social media presence, and a strong focus on member benefits. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Ultimate Member, ensuring good SEO, accessibility, and user management capabilities. Hosting appears to be provided by 1&1 IONOS, with a solid SSL configuration and security headers in place. The site is mobile optimized and performs moderately well. From a security perspective, the site enforces HTTPS, uses reCAPTCHA for form protection, and includes standard security headers. However, explicit security policies and incident response contacts are not publicly detailed, representing an area for improvement. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security transparency, adding vulnerability disclosure information, and continuous monitoring to maintain security posture.

U

Uplink Security Solutions

uplink.com

74

Uplink Security Solutions is a well-established company specializing in wireless cellular fire and alarm communicators for residential and commercial security applications. The company offers a range of products including LTE-M based alarm communicators, mobile apps for installers and clients, and a dealer portal for device management. Their market position is that of a trusted source within the security industry, supported by a long domain history dating back to 1997. The business model focuses on B2B and B2C services, targeting security dealers and end customers alike. Technically, the website is built on WordPress using popular plugins and themes such as Divi and Slider Revolution. The site is moderately performant, mobile-optimized, and SEO-friendly with structured data and Open Graph metadata. Hosting and domain registration are consistent with the business claims, using GoDaddy as registrar and DNS provider. Analytics tools are present but not fully configured. From a security perspective, the site uses HTTPS and has domain-level protections like clientDeleteProhibited status. However, it lacks DNSSEC, security headers, and published security policies or incident response contacts. No cookie consent mechanism is implemented, which may affect privacy compliance. No vulnerabilities or suspicious content were detected. Overall, the website presents a professional and trustworthy front for Uplink Security Solutions, with room for improvement in privacy compliance and security hardening. Strategic recommendations include enabling DNSSEC, adding security headers, implementing cookie consent, and publishing security policies to enhance trust and compliance.