Security Directory

The website kpmg.de currently returns a 502 Bad Gateway error served by Microsoft Azure Application Gateway, indicating backend service issues or blocking. Due to this, no actual website content, metadata, or interactive elements are accessible for analysis. KPMG is a well-known global professional services firm operating in the finance sector, with a strong enterprise presence in Germany. The domain WHOIS data is consistent and legitimate, showing proper domain status and authoritative name servers. However, the lack of accessible content prevents evaluation of the website's technical maturity, security posture, and compliance with privacy regulations. The hosting on Microsoft Azure suggests enterprise-grade infrastructure, but the current unavailability is a critical operational issue.

N

NXTGN

join-nxtgn.com

56

NXTGN is a regional innovation platform based in Baden-Württemberg, Germany, focused on connecting startups, academia, and industry to foster deep tech innovation and ecosystem collaboration. Founded in 2023, it operates as a startup factory with services including incubation, acceleration, innovation and transformation consulting, and ecosystem connectivity. The platform targets entrepreneurial talents, startups seeking growth and funding, established companies looking for innovation, and ecosystem hubs. Technically, the website is built on WordPress with a modern tech stack including Gutenberg blocks, Gravity Forms, and SEO tools, delivering a professional and mobile-optimized user experience. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing explicit privacy and cookie policies. Overall, the site is credible and professionally presented, but could improve transparency and security practices.

H

High-Tech Gründerfonds (HTGF)

htgf.de

73

High-Tech Gründerfonds (HTGF) is a prominent German pre-seed and seed investor focused on technology startups. The company supports tech founders with early-stage investments, leveraging a strong network in industry and academia, and deep technical expertise. Their mission is to strengthen Germany's technological backbone and foster international market leaders. The website reflects a mature digital presence built on WordPress, optimized for SEO and mobile devices, with professional design and clear navigation. However, explicit privacy and terms of service pages are not found, and contact information is limited on the public site. Security posture is adequate with HTTPS and cookie consent but lacks visible security headers and detailed security policies. WHOIS data is minimal, lacking registrant details, which slightly reduces trustworthiness but does not contradict the professional business presentation.

A

Alpas

alpas.ai

59

Alpas is a technology startup founded in 2020 that offers an AI-powered sourcing automation platform targeting manufacturing companies and procurement professionals. Their solution enables faster supplier discovery, procurement spend reduction, and enhanced supplier transparency through a 360° supplier view. The website is built on WordPress, uses modern technologies including Cloudflare DNS and Google APIs, and implements a cookie consent mechanism via Termly. Security posture is good with HTTPS and domain transfer protection, though DNSSEC is not enabled and no explicit security or privacy policies are published. The domain registration is privacy protected but consistent with the company's startup profile. Overall, the website presents a professional and trustworthy image with strong business credibility and good technical implementation.

K

Kurt Tucholsky Literaturmuseum

tucholsky-museum.de

45

The Kurt Tucholsky Literaturmuseum website represents a small, non-profit cultural institution dedicated to preserving and promoting the legacy of Kurt Tucholsky. The museum offers exhibitions, events, and educational projects, positioning itself as a recognized cultural memory site in Germany. The website is built on TYPO3 CMS, uses modern web technologies, and provides a good user experience with clear navigation and mobile optimization. Security posture is solid with HTTPS enforced, though it lacks some advanced security headers and cookie consent mechanisms. Contact information is clearly presented, and the museum maintains an active social media presence. Overall, the site is trustworthy and professionally maintained, reflecting the museum's cultural mission.

S

Stiftung Preußische Schlösser und Gärten Berlin-Brandenburg (SPSG)

spsg.de

59

The Stiftung Preußische Schlösser und Gärten Berlin-Brandenburg (SPSG) operates as a government-affiliated non-profit foundation managing over 30 museum palaces and park sites in the Berlin-Brandenburg region, including notable landmarks such as Schloss Sanssouci and Schloss Charlottenburg. The website serves as an official portal providing comprehensive information about cultural heritage sites, exhibitions, events, educational programs, and visitor services. It targets a broad audience including tourists, families, schools, and cultural enthusiasts. The business model focuses on cultural preservation, public engagement, and educational outreach, supported by government funding and partnerships. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries such as Leaflet for mapping and Swiper for interactive carousels. It employs Matomo analytics configured for privacy-conscious, cookie-less tracking. The site demonstrates good mobile optimization, accessibility features, and SEO practices, reflecting a mature digital infrastructure. Performance is moderate with a professional and consistent design. From a security perspective, the site enforces HTTPS and provides a cookie consent mechanism aligned with GDPR requirements. However, it lacks explicit security policy documentation, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is minimal but consistent with the official nature of the site, with no privacy protection or suspicious patterns. Overall, the website presents a high level of professionalism, trustworthiness, and compliance with privacy standards. Strategic improvements could include publishing detailed security policies and incident response information to enhance transparency and trust further.

N

NEB - Die Niederbarnimer Eisenbahn

neb.de

54

NEB - Die Niederbarnimer Eisenbahn operates as a regional railway service provider in the Brandenburg and Berlin area, offering passenger transport, ticketing, and travel information services. The website is well-structured, professionally designed, and targets regional commuters and travelers. It provides detailed information about train lines, tickets, excursions, and service updates. The digital infrastructure is based on TYPO3 CMS, enhanced with modern web technologies and accessibility features, ensuring a good user experience across devices. The website employs Cookiebot for cookie consent management and integrates Google Analytics for traffic analysis, reflecting a mature approach to privacy compliance. Security posture is solid with HTTPS enforced and Cloudflare DNS usage, although some security headers could be improved. Overall, the website is trustworthy, professional, and compliant with relevant privacy regulations, though explicit privacy policy and terms of service pages were not detected in the provided content.

M

Musikkultur Rheinsberg gGmbH

osterfestspiele-schloss-rheinsberg.de

46

Osterfestspiele Schloss Rheinsberg is a well-established cultural festival and music education organization based in Germany, operating under the parent company Musikkultur Rheinsberg gGmbH. The website showcases a professional and consistent brand presence, offering detailed information about festival programs, visitor info, and related cultural divisions. The technical infrastructure is modern, leveraging WordPress CMS with popular JavaScript libraries and plugins, ensuring good performance and mobile optimization. Privacy compliance is robust, featuring a comprehensive privacy policy, cookie consent mechanism, and GDPR adherence. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site reflects a trustworthy and credible cultural institution with clear contact information and active social media engagement.

M

Musikkultur Rheinsberg gGmbH

kammeroper-schloss-rheinsberg.de

45

Kammeroper Schloss Rheinsberg is a well-established international festival and music education organization based in Germany, focusing on young opera singers. It offers a rich program of operas, concerts, and an international singing competition, attracting a culturally engaged audience. The organization operates as a non-profit and maintains a professional online presence with detailed event and visitor information. Technically, the website is built on WordPress with modern libraries and plugins, providing good mobile optimization and SEO. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit privacy and security policy pages. Overall, the site is trustworthy and professionally managed, serving its cultural mission effectively.

M

Musikkultur Rheinsberg gGmbH

musikakademie-rheinsberg.de

45

Musikakademie Rheinsberg is a well-established cultural and educational institution based in Brandenburg, Germany, focused on music education, music theater, and amateur music. The organization offers a wide range of courses, workshops, and event hosting services targeting musicians, educators, and music enthusiasts. The website reflects a medium-sized non-profit entity with a clear mission to serve musicians of all generations and promote cultural engagement through music. The business model is centered on educational and cultural services with a strong regional presence. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap Grid, and various plugins such as Yoast SEO and Borlabs Cookie for privacy compliance. The site demonstrates good mobile optimization, SEO practices, and moderate performance. The use of structured data enhances search engine visibility. However, hosting provider details are not explicitly identified. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security policies, incident response contacts, and vulnerability disclosure information. Security headers are not explicitly detected, suggesting room for improvement. No vulnerabilities or exposed sensitive data were found in the content. Overall, the security posture is good but could be enhanced with additional policies and technical controls. The overall risk assessment is low with no signs of malicious activity or unsafe content. Strategic recommendations include publishing security and privacy policies, implementing security headers, and establishing incident response contacts to improve trust and compliance. The website is professional, trustworthy, and suitable for its target audience.

T

Not Found | Shlink

tiv.li

33

The website tiv.li currently serves only a 404 error page with no accessible business or service content. The page is minimal, containing only a basic Bootstrap-styled error message indicating the requested page was not found. There are no privacy policies, cookie notices, terms of service, or contact information available, which severely limits the ability to assess the business or compliance posture. Technically, the site uses Bootstrap 4.3.1 CSS from a CDN but lacks any scripts, analytics, or security headers. The domain WHOIS data is privacy protected, providing no registrant details to verify legitimacy or business claims. Overall, the site appears inactive or under development, with no meaningful content or trust signals.

C

Coolify

tivtools.de

45

Coolify is an open-source and self-hostable alternative to popular deployment platforms such as Heroku, Netlify, and Vercel. The website serves primarily as a login portal for users of the Coolify platform, targeting developers and technology users seeking deployment solutions. The business model revolves around providing an open-source platform that users can self-host, positioning itself as a niche alternative in the deployment ecosystem. The website branding is moderately consistent, with a clear focus on the Coolify product name and logo. Technically, the website employs modern frontend technologies including Alpine.js and Laravel Livewire, with DOMPurify used for sanitizing HTML content to prevent XSS attacks. Hosting is provided via Hetzner, a reputable German hosting provider, as indicated by the nameservers. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. The login form includes CSRF protection, and password fields have visibility toggling features enhancing usability. From a security perspective, the site shows some best practices such as CSRF tokens and input sanitization but lacks visible security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is weak, with no privacy or cookie policies found, and no GDPR compliance indicators. Business credibility is moderate due to the lack of contact information and trust indicators. Overall, the website is functional and technically sound for its purpose but would benefit from enhanced privacy compliance, security transparency, and contact information to improve trust and regulatory adherence.

E

Ecologi

ecologi.com

70

Ecologi is a UK-based climate action platform founded in 2019, offering services to calculate carbon footprints, reduce emissions, and fund high-impact climate solutions. Positioned as the UK's most trusted climate action platform, it serves over 24,000 businesses and 40,000 members, emphasizing sustainability and environmental restoration. The company holds a Certified B Corp status, reinforcing its commitment to social and environmental performance. Technically, the website is built using Framer CMS, hosted on AWS infrastructure, and integrates Google Tag Manager and Visual Website Optimizer for analytics and optimization. The site demonstrates good design quality, mobile responsiveness, and SEO practices, though accessibility is basic. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of visible privacy and cookie policies. Overall, Ecologi presents a credible and professional online presence with room for improvement in privacy and security transparency.

L

Living Wage Foundation

livingwage.org.uk

59

The Living Wage Foundation is a UK-based non-profit organization dedicated to promoting fair wages through the real Living Wage accreditation. It operates under Citizens UK and has a strong market presence with over 16,000 accredited employers including major corporations. The website is professionally designed using Drupal 10 and Bootstrap, featuring good mobile optimization and accessibility. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. WHOIS data is unavailable due to domain naming rules error, but the website's legitimacy is supported by its content and affiliations. Overall, the site demonstrates a mature digital presence with a focus on social responsibility and employer engagement.

A

abcPremium GmbH

shop-mbs.de

65

The website shop-mbs.de is an e-commerce platform operated by abcPremium GmbH, based in Heidelberg, Germany. It offers a range of products primarily targeting German-speaking customers. The site is built on the Magento platform, utilizing various extensions such as Amasty modules and Stripe payment integration, indicating a moderately mature technical infrastructure. The presence of Cookiebot for cookie consent demonstrates attention to privacy compliance, although no explicit privacy policy or terms of service pages were found. Security posture is adequate with HTTPS enforced and Cloudflare DNS usage, but lacks visible security headers and incident response information. Overall, the site is functional and professional but could improve transparency and compliance documentation.

H

HDG

hangar.it

48

Hangar Design Group (HDG) is an established integrated creative agency and design consultancy based in Italy, with a strong market presence and a portfolio of notable clients and projects. The company focuses on branding, storytelling, and digital presence to help businesses evolve and succeed. The website reflects a professional and consistent brand image, supported by ISO 9001:2015 certification and a multilingual WordPress platform. The technical infrastructure includes modern web technologies such as jQuery, Swiper.js, and privacy-focused analytics tools like Matomo alongside Google Analytics. Privacy compliance is robust, featuring Iubenda cookie management and GDPR adherence. Security posture is strong with HTTPS, DNSSEC, and cookie consent mechanisms, though additional security headers could enhance protection. Overall, the site is well-designed, user-friendly, and trustworthy, with no critical vulnerabilities detected.

L

Local Business View - Marco Bonatta

local-business-view.it

54

Local Business View, operated by Marco Bonatta, specializes in creating immersive Google Street View virtual tours for local businesses in Italy, primarily targeting sectors such as hospitality, retail, and real estate. The company leverages its expertise and Google certification to enhance local businesses' online visibility and customer engagement through interactive digital experiences. The website reflects a focused business model with a strong niche market position supported by a portfolio of over 600 tours and significant user engagement metrics. Technically, the site is built on Incomedia WebSite X5 Pro with standard web technologies, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and secure form handling, though improvements are needed in security headers and privacy compliance. Overall, the site is professional, trustworthy, and provides clear contact channels, but lacks advanced privacy and security policy disclosures.

T

Technische Universität Braunschweig

tu-bs.de

64

Technische Universität Braunschweig is a well-established German technical university offering a wide range of educational and research services primarily in engineering and natural sciences. The website serves students, researchers, and academic staff with comprehensive information about study programs, research projects, and international cooperation. The university maintains a professional online presence with consistent branding and a clear navigation structure. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and uses Matomo analytics configured to disable cookies, reflecting a privacy-conscious approach. Security posture is moderate with HTTPS enforced but lacks visible security headers and formal vulnerability disclosure mechanisms. Privacy compliance is limited due to absence of explicit privacy and cookie policies in the accessible content. Overall, the site is trustworthy and professionally maintained but could improve transparency and security practices.

R

Radio Chablais

radiochablais.ch

58

Radio Chablais is a well-established regional media company based in Switzerland, providing radio broadcasting services, regional news, sports coverage, and thematic web radios. The website reflects a mature digital presence with a clear focus on serving the French-speaking audience in the Chablais, Riviera, and Pays-d'Enhaut regions. Their business model revolves around media broadcasting and advertising, supported by a medium-sized operation with a strong local market position and over 40 years of history. Technically, the website is built on Joomla CMS using the Helix Ultimate framework and Bootstrap 5, incorporating modern JavaScript libraries and analytics tools such as Matomo and Google Analytics. The site is mobile-optimized, has good SEO practices, and includes user-friendly features like search autocomplete and a cookie consent mechanism, indicating a good level of digital maturity. From a security perspective, the site enforces HTTPS and implements cookie consent, but lacks some advanced security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is strong with clear policies and GDPR adherence. The business credibility is supported by certifications, transparent contact information, and consistent branding. Overall, Radio Chablais presents a trustworthy and professional online presence with moderate to good security posture and privacy compliance. Strategic improvements in security headers and incident response transparency would further enhance their security maturity and trustworthiness.

D

Duke University

goduke.com

59

Duke University's official athletics website serves as a comprehensive platform for sports fans, students, and alumni to access news, schedules, rosters, and ticketing information for a wide range of men's and women's sports. The site leverages modern web technologies including Vue.js and the Sidearm Sports platform, hosted on AWS infrastructure, ensuring a fast and responsive user experience optimized for both desktop and mobile devices. The website maintains a strong security posture with HTTPS enforcement, appropriate security headers, and domain registration protections, although DNSSEC is not enabled. Privacy and cookie policies are clearly presented and managed via Transcend Consent Management, reflecting good compliance with GDPR and other privacy regulations. However, explicit contact information and security incident response details are not prominently available, and no vulnerability disclosure policy or security.txt file is published.

C

Canada Media Fund

made-nous.ca

56

MADE | NOUS is a Canadian media campaign focused on celebrating and promoting Canadian creators in film, television, and digital media. The initiative is supported by key industry players such as the Canada Media Fund and Telefilm Canada, positioning it as a collaborative and credible effort within the Canadian entertainment sector. The website serves as a promotional platform with multimedia content and social media integration to engage its target audience of creators and media consumers. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses video streaming via Vimeo. It incorporates analytics and marketing tools such as Google Analytics and Facebook Pixel, indicating a moderate level of digital maturity. The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. From a security perspective, the site uses HTTPS and has domain protections in place, but lacks DNSSEC and security headers, which are recommended for enhanced security. Privacy compliance is partial, with a privacy policy and terms of service present but no cookie consent mechanism or explicit GDPR compliance indicators. No incident response or security policy information is publicly available. Overall, the website is professional and trustworthy with a good business credibility score. Strategic improvements in security headers, DNSSEC, and privacy compliance would enhance its security posture and user trust.

A

AFLAMUNA

aflamuna.org

41

AFLAMUNA is a Beirut-based cultural nonprofit organization dedicated to supporting independent Arab cinema and elevating social, political, and cultural movements through film. With roots dating back to 1999 as Beirut DC and formal nonprofit status since 2006, AFLAMUNA offers a variety of programs including impact labs, fellowships, and community cinema networks. The organization targets independent filmmakers, cultural organizers, and audiences interested in Arab cinema. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and Google Tag Manager for analytics. The site is well-designed, mobile-optimized, and content-rich, reflecting a mature digital presence. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers, representing areas for improvement. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration is consistent and legitimate, supporting the organization's credibility.

A

Amnesty International

amnesty.nl

71

Amnesty International Netherlands operates as a leading non-profit organization dedicated to human rights advocacy, education, and campaigning. The website reflects a mature digital presence with comprehensive content, strong branding, and multiple engagement channels including memberships, donations, and volunteer opportunities. The organization maintains a high market position within the human rights sector in the Netherlands, supported by recognized certifications and partnerships. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Analytics, and Google Tag Manager. It employs CDN services for optimized image delivery and demonstrates excellent mobile responsiveness and accessibility. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policies and incident response information are not publicly detailed. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR and cookie regulations. The absence of critical vulnerabilities and the presence of trust signals contribute to a high security and privacy compliance score. Strategic recommendations include publishing explicit security and incident response policies and enhancing transparency around data protection officer contacts and vulnerability disclosures.

F

Federazione per l’Economia del Bene Comune in Italia Associazione di Promozione Sociale

economia-del-bene-comune.it

36

The website represents the Federazione per l’Economia del Bene Comune in Italia, a non-profit association promoting an ethical and sustainable economic model centered on the well-being of people and the planet. It offers tools such as the Matrice del Bene Comune and Bilancio del Bene Comune, alongside training, certification, and events to support organizations, municipalities, families, and individuals in adopting sustainable practices. The organization holds a recognized position within the Italian and international sustainability movement, targeting a diverse audience interested in ethical economy. Technically, the website is built on WordPress using the Divi theme and several plugins for social media integration, cookie compliance, and event management. The site is well-structured, mobile-optimized, and uses HTTPS with appropriate security headers, though some security enhancements could be implemented. Analytics tools are present but not fully configured, indicating room for improvement in data collection and marketing. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent mechanisms, with no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies or incident response information, which could be beneficial for transparency and trust. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, serving as a credible platform for the organization's mission. Strategic recommendations include enhancing security headers, properly configuring analytics, and publishing clear security and incident response policies to further strengthen trust and compliance.

The website mpulse.net is currently a domain parking page operated via Sedo, offering the domain for sale at a price of 3799 USD. There is no active business or service provided on the site. The content is minimal, primarily consisting of advertising and related search links. The site uses standard HTML, CSS, and JavaScript technologies along with Google Adsense and Sedo's domain parking scripts. The technical infrastructure is basic and hosted through Sedo's parking platform. Security posture is weak with no visible security headers or explicit SSL confirmation, and no security or incident response policies are present. Privacy compliance is minimal, with a basic privacy policy linked externally from Sedo. Overall, the site lacks business credibility and trust signals, reflecting its status as a parked domain rather than an operational business website.

The HFD EdTech-Kompass website serves as a specialized platform showcasing educational technology products from various companies, primarily targeting educational institutions and stakeholders in Germany. It provides categorized listings for different education sectors such as school education, vocational training, higher education, and lifelong learning. The platform encourages EdTech companies to participate and offers contact channels for feedback and inquiries. Technically, the site is built on WordPress 6.8.3, employs modern JavaScript libraries like jQuery 3.7.1, and integrates a robust cookie consent mechanism via Borlabs Cookie, ensuring GDPR compliance. Hosting is managed through netcup, a reputable provider, and the site uses HTTPS with a good SSL configuration. Security posture is solid with no evident vulnerabilities or exposed sensitive data, although some security headers could be enhanced. Analytics are implemented using Google Analytics and Matomo, with transparent cookie management. Overall, the website is professional, well-structured, and trustworthy, with a clear focus on the EdTech sector in Germany.

Hochschulforum Digitalisierung is a well-established German non-profit initiative focused on supporting and shaping the digital transformation of higher education institutions. It operates as a think-and-do tank, providing networking, consulting, innovation, qualification, and publishing services to universities and related stakeholders. The organization is affiliated with reputable entities such as the Stifterverband, CHE, and HRK, reinforcing its credibility and market position within the education sector in Germany. The website content is rich, professionally designed, and regularly updated with news, events, and publications relevant to its target audience of higher education professionals and students. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, WPBakery Page Builder, and multilingual support via WPML. It demonstrates good performance, mobile optimization, and SEO best practices. Cookie consent is managed via Borlabs Cookie, indicating attention to privacy compliance, although explicit privacy and terms of service documents are not detected. Security posture is solid with HTTPS enforced and some security plugins in use, but lacks published security policies or vulnerability disclosure information. Overall, the security posture is good but could be improved by adding explicit privacy, security, and incident response policies. No critical vulnerabilities or suspicious content were detected. The domain registration data is consistent with the website's claims, supporting legitimacy. The site is safe for general audiences and does not contain any adult or questionable content. Strategic recommendations include publishing comprehensive privacy and terms of service policies, establishing a security incident response framework, and enhancing security headers to further strengthen the security posture and trustworthiness of the website.

M

markt.de GmbH & Co. KG

markt.de

54

Markt.de GmbH & Co. KG operates a well-established online classified ads platform targeting private and commercial users in Germany. Founded in 2005 and headquartered in Munich, the company offers a broad range of classified categories including vehicles, real estate, jobs, services, pets, and electronics. The platform supports free and paid listings, serving as a marketplace for millions of users. Markt.de maintains a consistent brand presence with comprehensive privacy and terms policies, and active social media engagement. The website is optimized as a Progressive Web App (PWA) with modern frontend technologies such as Kotlin/JS and RequireJS, ensuring good mobile responsiveness and accessibility.

T

Tenhil GmbH & Co. KG

tenhil.de

61

Tenhil GmbH & Co. KG is a well-established German HR technology company specializing in recruiting solutions. The company operates multiple well-known online job portals and career fairs, leveraging advanced AI technology recognized by the German Federal Ministry of Research. Their business model focuses on connecting candidates with suitable employers through a broad network of online platforms and SaaS solutions. The company holds a strong market position with over 30 years of expertise and multiple subsidiary brands. Technically, the website is built on WordPress with Elementor, uses Cloudflare for DNS and CDN, and integrates modern SEO and analytics tools. Security posture is good with HTTPS and consent management in place, though explicit security headers and incident response policies are absent. Overall, the website is professional, GDPR compliant, and trustworthy, with no signs of blocking or suspicious activity.

Karrieretag is a German regional job fair organizer operating in multiple cities across Germany, targeting professionals, students, and career changers. The website is built on WordPress using modern themes and plugins, with a focus on SEO and user experience. The technical infrastructure includes popular event and job management plugins, and the site is mobile optimized with consent management for GDPR compliance. Security posture is good with HTTPS and some security best practices, though explicit security headers and policies could be improved. The lack of WHOIS data limits domain trust verification but the professional presentation and social media presence support legitimacy. Overall, the site is a credible platform for career events in Germany.

I

Idaris

idaris.de

51

Idaris is a German technology company specializing in job board software solutions, enabling clients to operate regional job portals with modular products, white-label portals, and online marketing services. With over 25 years of market presence, Idaris holds a strong position as a leading provider in the recruitment technology sector in Germany. Their website reflects a professional and modern digital presence built on WordPress with Elementor and Yoast SEO, indicating a mature digital infrastructure. The site is well-optimized for SEO and mobile users, providing a good user experience and clear navigation. Security-wise, the website enforces HTTPS and uses Cloudflare DNS, but lacks explicit security headers and published security policies, which could be improved. Privacy compliance is partially addressed through a consent management platform, though no explicit privacy or terms of service pages were found in the provided content. Overall, the website is trustworthy, business-focused, and safe for general audiences.

L

LocalPerformance

localperformance.com

56

LocalPerformance is a German-based full-service performance marketing agency specializing in digital marketing solutions such as performance marketing, data analytics, social media marketing, SEO strategy, and strategic consulting. The company targets a broad range of clients including SMEs, large enterprises, startups, educational institutions, and media houses. Their market position is that of a professional and sustainable digital marketing partner focused on measurable results. Technically, the website is built on WordPress using the Avada theme, integrating Google Tag Manager and Google Analytics with a GDPR-compliant cookie consent mechanism. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. No hosting provider details were identified. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks visible security headers and a public vulnerability disclosure policy. No critical vulnerabilities were detected in the content. The absence of WHOIS data for the domain is a notable concern, potentially indicating recent registration or privacy protection, which impacts domain trustworthiness. Overall, the website presents a professional and trustworthy front for its business, but domain registration transparency and enhanced security headers would improve its security posture and credibility.

I

IT Jobs & Stellenangebote - IT-Jobs.de

it-jobs.de

63

IT-Jobs.de is a German-focused IT job listing and matching platform targeting IT professionals seeking employment opportunities. The website offers a matching machine to help users find suitable IT jobs and facilitates applications to current job offers. The platform positions itself as a niche player in the German IT job market, providing specialized services for IT professionals. Technically, the website employs AngularJS for frontend rendering, uses Cloudflare for DNS and hosting, and integrates Google Tag Manager and Consent Manager for tracking and GDPR compliance. The site is moderately optimized for performance and mobile devices, with good SEO practices. Security-wise, HTTPS is enforced, and consent management is implemented, but there is a lack of published privacy policies, terms of service, and explicit contact information for security incidents. The WHOIS data shows consistent domain registration with Cloudflare nameservers, supporting legitimacy. Overall, the website is professional and functional but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

kalaydo.de is a well-established German job portal offering a broad spectrum of job listings across multiple sectors, targeting job seekers ranging from students to experienced professionals. The platform provides user-friendly search features, email alerts, and localized job offers, positioning itself as a reliable resource in the German employment market. Technically, the website leverages modern frameworks such as Next.js and React, hosted on Azure CDN with Cloudflare DNS, ensuring good performance and scalability. Security measures including HTTPS, security headers, and consent management are properly implemented, reflecting a mature security posture. However, explicit security policies and incident response information are not publicly available, representing an area for improvement. Overall, kalaydo.de presents a professional, trustworthy, and user-centric service with moderate tracking and marketing integrations managed under GDPR compliance.

J

jobblitz

jobblitz.de

53

Jobblitz.de is a German online job portal offering a wide range of job listings targeting professionals, helpers, career starters, and career changers. The platform provides specialized job categories such as Greenjobs and Quereinsteiger, along with employer services and job alert features. The website is well-branded and consistent, with a clear focus on the German job market. Technically, the site uses modern web technologies including JavaScript, CSS, Google Tag Manager, and a consent management platform to ensure GDPR compliance. Hosting is managed via Amazon AWS DNS services, indicating a professional infrastructure. Security posture is solid with HTTPS enforced and consent management implemented, though some security headers and explicit security policies are missing. No vulnerabilities or exposed sensitive data were detected. Overall, the site is safe, professional, and trustworthy with good privacy compliance and user experience.

R

Regio-Jobanzeiger GmbH & Co. KG

regio-jobanzeiger.de

71

Regio-Jobanzeiger GmbH & Co. KG operates Germany's largest network of regional online job markets, providing employers with efficient access to local applicants. The website is professionally designed using WordPress and Elementor, optimized for SEO with Yoast, and includes modern tracking and consent management tools. The company demonstrates strong compliance with GDPR through a comprehensive privacy policy and cookie consent mechanism. Security posture is solid with HTTPS and consent management, though explicit security headers could be improved. Overall, the site reflects a mature digital presence with good user experience and trust indicators such as certifications and client testimonials.

Y

Yourfirm GmbH & Co. KG

yourfirm.de

70

Yourfirm GmbH & Co. KG operates a leading German online job board specializing in employment opportunities within the Mittelstand sector. The platform targets skilled professionals and medium-sized companies, offering job listings, employer services, and career advice. With over one million monthly job seekers and strong user recommendations, Yourfirm holds a prominent market position in its niche. Technically, the website leverages modern frameworks such as React and Next.js, hosted behind Cloudflare DNS, ensuring fast performance and mobile optimization. Security measures include HTTPS enforcement, comprehensive security headers, and GDPR-compliant consent management. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the site demonstrates a mature digital presence with strong branding and trust signals, supporting its credibility and user engagement.

S

stellenanzeigen.de GmbH & Co. KG

stellenanzeigen.de

70

stellenanzeigen.de GmbH & Co. KG operates a leading German job board platform established in 1995, offering a wide range of job listings, career advice, salary comparison tools, and employer profiles. The website targets job seekers and employers primarily in Germany, positioning itself as a trusted and award-winning recruitment service provider. The platform's business model centers on online job advertisements and value-added career services. Technically, the site leverages modern web technologies including React and Next.js, hosted on Azure with Cloudflare DNS, ensuring fast performance and mobile optimization. Security is robust with HTTPS and standard security headers, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is strong, featuring comprehensive privacy and cookie policies with consent mechanisms. Overall, the site is professional, trustworthy, and safe for general audiences, with extensive social media engagement and recognized industry certifications.

S

Stadt St. Ingbert

st-ingbert.de

68

The website www.st-ingbert.de serves as the official digital presence of the city of St. Ingbert, Germany. It provides residents, visitors, and businesses with access to municipal services, news, event information, and contact details. The site is well-structured, featuring a comprehensive navigation menu covering city administration, culture, tourism, economy, and social services. The digital maturity is evident through the use of WordPress CMS, modern JavaScript libraries like Swiper.js, and cookie consent management via Borlabs Cookie plugin. SEO and accessibility are well addressed with proper metadata and responsive design. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although security headers could be improved. Privacy compliance is moderate, with cookie consent implemented but no explicit privacy or terms of service pages detected in the analyzed content. Overall, the site reflects a professional municipal government portal with high trustworthiness and good user experience.

S

Saarpfalz-Kreis

saarpfalz-kreis.de

67

The Saarpfalz-Kreis website serves as the official digital portal for the regional government district in Germany, providing residents and visitors with access to a wide range of public services, news, events, and administrative information. The site targets local citizens and stakeholders, offering key services such as vehicle registration, consultation centers, career opportunities, and public announcements. The business model is that of a governmental public service provider with a medium-sized operational scope within the German government sector. Technically, the website is built on the ionas4 CMS platform, leveraging modern JavaScript frameworks and libraries including SystemJS and jQuery. It employs Cloudflare for DNS and CDN services, ensuring good performance and security. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate loading speed and comprehensive metadata including Open Graph and JSON-LD structured data. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms compliant with GDPR, and integrates Matomo analytics with privacy considerations. While security headers and best practices are generally observed, explicit security policies and vulnerability disclosure mechanisms are absent, representing areas for improvement. No vulnerabilities or suspicious patterns were detected, and the WHOIS data aligns well with the site's governmental nature. Overall, the website presents a professional, trustworthy, and user-friendly interface with strong privacy compliance and a solid security posture. Strategic recommendations include publishing explicit security and incident response policies, implementing a vulnerability disclosure program, and enhancing security headers to further strengthen the site's defense and transparency.

R

Rheinland-Pfälzische Technische Universität Kaiserslautern-Landau

rptu.de

61

Rheinland-Pfälzische Technische Universität Kaiserslautern-Landau (RPTU) is a leading technical university in Germany's Rheinland-Pfalz region, offering over 160 study programs across engineering, natural sciences, social sciences, and teacher education. The university emphasizes research excellence, innovation transfer, and international collaboration. The website reflects a mature digital presence with a modern TYPO3 CMS infrastructure, responsive design, and comprehensive content tailored to diverse audiences including prospective students, researchers, and partners. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. Security posture is strong with HTTPS and no visible vulnerabilities, though some HTTP security headers could be improved. Overall, the domain and website present a trustworthy and professional academic institution.

The University of Luxembourg is an international research university with a multilingual and interdisciplinary character, serving students and researchers primarily in Luxembourg. The website reflects a professional academic institution with a focus on education and research services. The digital infrastructure is built on WordPress with advanced SEO and privacy tools such as Yoast SEO Premium, Matomo analytics, and Cookiebot for cookie consent management. The site demonstrates good mobile optimization, accessibility, and user experience. Security posture is solid with HTTPS and privacy-aware analytics, though explicit security headers and incident response information are lacking. WHOIS data is unavailable, limiting domain trust assessment, but the website content and branding strongly support legitimacy. Overall, the site is well-maintained, privacy-conscious, and professionally presented.

A

ASW gGmbH

asw-ggmbh.de

45

ASW gGmbH is a well-established educational institution in Saarland, Germany, specializing in dual study programs and continuing education with accredited bachelor degrees. The institution emphasizes practical and scientific education, small group teaching, and personal contact, supported by modern facilities. The website reflects a professional and trustworthy presence with clear contact information and accreditation badges. Technically, the site is built on TYPO3 CMS with modern frontend technologies and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security policies and incident response details. Overall, the site is low risk and credible, serving students and professionals seeking dual study and advanced training.

The Deutsch-Französisches Hochschulinstitut (DFHI) is a well-established educational cooperation between the Hochschule für Technik und Wirtschaft des Saarlandes (htw saar) and the Université de Lorraine (UL), offering bilingual German-French degree programs primarily in management, engineering, and informatics. Founded in 1978, it serves approximately 450 students and has a strong alumni network exceeding 3400 graduates. The website reflects a mature digital presence with comprehensive content, clear navigation, and multilingual support, targeting prospective students, current students, alumni, and partner organizations. Technically, the website is built on WordPress with modern plugins for SEO, cookie consent, and responsive design. It uses HTTPS with good SSL configuration and includes structured data for enhanced search engine visibility. The site demonstrates good mobile optimization and accessibility features, although some additional security headers could improve its security posture. From a security perspective, the site employs HTTPS and cookie consent mechanisms aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is privacy protected as per EURid policy, which is typical for .eu domains, and does not raise suspicion. The domain's legitimacy is supported by consistent branding, partner links, and professional content. Overall, the DFHI website presents a trustworthy, professional, and secure platform for its educational mission. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and potentially publishing a dedicated security policy or incident response information to further strengthen trust and compliance.

H

Hauptstadtregion Berlin-Brandenburg

berlin-brandenburg.de

48

The website berlin-brandenburg.de serves as the official regional cooperation portal for the German federal states of Berlin and Brandenburg. It provides information on joint political initiatives, projects, and public services aimed at citizens, government officials, and businesses within the metropolitan region. The site is positioned as a trusted government platform facilitating collaboration and communication between the two states. Technically, the site is built on WordPress, leveraging popular plugins such as Yoast SEO for search optimization and Borlabs Cookie for GDPR-compliant cookie management. Hosting is provided via Amazon AWS infrastructure, ensuring reliable availability. The website demonstrates good mobile responsiveness, accessibility, and SEO practices, although some improvements in security headers and legal disclosures could be made. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism with user control over external media cookies. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security headers and incident response contacts suggests room for enhancement in security posture and transparency. Overall, berlin-brandenburg.de is a professionally maintained government website with strong compliance and trust indicators. Strategic improvements in security policies and legal documentation would further strengthen its risk profile and user confidence.

I

Investitionsbank des Landes Brandenburg (ILB)

ilb.de

61

The Investitionsbank des Landes Brandenburg (ILB) is a regional development bank focused on promoting and financing public and private investment projects within Brandenburg, Germany. The institution offers a broad portfolio of funding programs across sectors such as economy, infrastructure, labor, and housing. The website reflects a well-established public entity with a clear mission to support regional development through financial products and advisory services. The target audience includes private companies, public clients, individuals, associations, universities, and chambers, indicating a comprehensive service scope. Technically, the website employs a modern technology stack including Bootstrap, jQuery, and various JavaScript libraries to deliver a responsive and accessible user experience. The presence of a consent management platform (Klaro) and integration with Google Analytics demonstrates a mature digital infrastructure with privacy compliance in mind. The site is mobile-optimized and features clear navigation and professional design, supporting excellent user experience. From a security perspective, the site enforces HTTPS and uses bot protection (Friendly Captcha) and session management via Apache Tomcat. While no explicit security headers were detected in the HTML content, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant. However, the site could improve by publishing a security.txt file and providing explicit incident response contacts. Overall, the ILB website is a trustworthy, professional platform representing a government-affiliated financial institution. It balances user experience, privacy, and security effectively, supporting its role as a key regional development bank. Strategic recommendations include enhancing HTTP security headers, formalizing vulnerability disclosure processes, and increasing transparency on data retention policies to further strengthen security and compliance.

L

Landesregierung Brandenburg

digitalesbb.de

44

Digitales Brandenburg is an official digital transformation initiative by the Landesregierung Brandenburg (State Government of Brandenburg, Germany). The website serves as a comprehensive information portal providing updates on digital policies, strategies, and projects within the state. It targets citizens, municipalities, and businesses interested in digital development and government services in Brandenburg. The platform offers news, event information, newsletters, and resources related to digital infrastructure and society. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses SEO best practices and analytics tools such as Google Analytics and WP Statistics. The hosting is managed via kasserver.com, consistent with the domain's WHOIS data. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit policies are missing. Privacy compliance is partial, with a comprehensive privacy policy present but lacking a cookie consent mechanism. Overall, the website is professional, trustworthy, and well-positioned as a government digital resource.

L

Lagfa Brandenburg

mitjemacht-brandenburg.de

44

The website 'Landesarbeitsgemeinschaft Freiwilligenagenturen Brandenburg - Lagfa Brandenburg' represents a small non-profit organization focused on coordinating volunteer agencies within the Brandenburg region of Germany. It serves as a regional leader in promoting volunteer work and supporting volunteer agencies. The site provides information and resources targeted at volunteers and organizations involved in volunteer activities. Technically, the website is built on WordPress, utilizing popular plugins such as Yoast SEO and MonsterInsights for SEO and analytics respectively. It employs Google reCAPTCHA for bot protection and has implemented cookie consent mechanisms, indicating a basic level of privacy compliance. Security posture is moderate with HTTPS enforced and some best practices observed, but lacks explicit security headers and formal security policies. Overall, the site is professional and trustworthy but could improve in privacy transparency and security documentation.

E

Ehrenamt in Brandenburg

ehrenamt-in-brandenburg.de

42

Ehrenamt in Brandenburg is a government-supported platform dedicated to promoting and supporting voluntary civic engagement within the Brandenburg region of Germany. The website serves as an informational hub providing resources, recognition programs such as the Ehrenamtskarte, event announcements, and support for volunteer networks. It targets volunteers, civic organizations, and government bodies, positioning itself as a key regional player in fostering community involvement. Technically, the site is built on WordPress using the Avada theme and several reputable plugins, indicating a modern and maintainable infrastructure. The hosting appears to be managed by kasserver.com, a known hosting provider. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but could improve by adding explicit security headers and publishing a security policy. No critical vulnerabilities or suspicious activities were detected. Overall, the site demonstrates good content quality, technical implementation, and business credibility, making it a trustworthy resource for its audience.

I

IServ GmbH

iserv.de

61

IServ GmbH operates a leading digital school platform in Germany, offering a comprehensive suite of over 55 modules designed to facilitate school communication, organization, teaching, and IT management. The platform is GDPR-compliant and certified under ISO 27001, emphasizing data protection and security. IServ targets schools, administrators, teachers, students, and parents, providing flexible cloud deployment options tailored to various infrastructure needs. The company holds a strong market position with thousands of schools and millions of managed devices, supported by a professional and well-structured website with clear calls to action and extensive resources. Technically, the website employs modern JavaScript frameworks, integrates trusted analytics and marketing tools with user consent, and demonstrates excellent performance and mobile optimization. Security posture is robust, with HTTPS enforced, multiple certifications, and no visible vulnerabilities. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, IServ presents a credible, professional, and secure digital education solution.