Security Directory

M

mg: mannheimer gründungszentren gmbh

next-mannheim.de

46

NEXT MANNHEIM is a professionally managed startup ecosystem platform focused on supporting entrepreneurs and startups in Mannheim, Germany. It operates as a 100% subsidiary of Innovationsstadt Mannheim, providing infrastructure, consulting, networking, and event spaces tailored to various startup communities including female entrepreneurs and international founders. The website reflects a strong regional market position with comprehensive services and active community engagement. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and some security headers, though improvements are recommended in CSP and incident response transparency. Overall, the site is trustworthy and well-maintained, with minor gaps in privacy compliance and security policy disclosures.

G

Global Certification and Consulting Centre (GCCC)

gccc-exist.de

40

The Global Certification and Consulting Centre (GCCC) is a government-affiliated organization established in 2024 under the German Federal Ministry for Economic Affairs and Energy (BMWE). It serves as a central hub to support international start-up teams by providing certification, consultancy, and visa facilitation services, particularly related to the EXIST Business Start-up Grant and other similar funding programs. The GCCC acts as a liaison between German Missions Abroad, immigration authorities, universities, and research institutions to streamline start-up visa issuance and support innovative entrepreneurship in Germany. The website is professionally designed, multilingual, and provides comprehensive information tailored to entrepreneurs, official institutions, and start-up networks.

R

RH-Webdesign

rh-webdesign.com

59

RH-Webdesign is a specialized freelance business led by Robin Humpert, focusing on Shopware 6 e-commerce development. With over 10 years of experience, the company offers custom themes, modules, and online shop setup services targeting entrepreneurs and businesses seeking professional e-commerce solutions. The website is well-branded, professional, and clearly communicates its services and expertise, supported by strong trust indicators such as a Shopware Extension Partner badge and excellent customer reviews. Technically, the site uses modern frameworks like Bootstrap and jQuery, with Matomo analytics configured to disable cookies, reflecting a privacy-conscious approach. However, the absence of a cookie consent mechanism and explicit security policies are areas for improvement. Security posture is solid with HTTPS and domain transfer protections, but could benefit from enhanced security headers and published incident response information. Overall, the site is trustworthy, technically sound, and well-positioned in its niche, with moderate room for compliance and security enhancements.

K

Kreuzberger Lebensbrücke gGmbH

kreuzberger-lebensbruecke.de

46

The website www.wald-bruecke.de represents Kreuzberger Lebensbrücke gGmbH, a German non-profit organization focused on social integration by providing employment and training opportunities for youth, disabled, and disadvantaged individuals. The business model relies on sales of office and hygiene products, as well as specialized blind products, to fund its social projects. The site is well-structured, professionally designed, and targets a German-speaking audience interested in social welfare and integration services. Technically, the site runs on WordPress with standard plugins like Yoast SEO and CookieYes for cookie consent management. Hosting is provided by Cloudpit, as indicated by the nameservers. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security headers and incident response contact details. The site contains some suspicious hidden content related to online casinos, which may be SEO spam or misplaced text, slightly impacting trust. Overall, the site is functional, compliant with GDPR, and trustworthy for its intended audience.

Digitalcourage is a well-established German non-profit organization founded in 1987, dedicated to promoting digital rights, privacy, and democracy in the digital age. The organization operates with a strong community focus, relying on donations and volunteer work, and is known for organizing the annual BigBrotherAwards since 2000. Their website reflects a professional and privacy-respecting approach, with no tracking or cookie consent mechanisms, emphasizing transparency and user respect. Technically, the website is built on Drupal 11, using modern web technologies and is hosted via Schlundtech. It demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS enforced and no evident vulnerabilities, though some security headers could be improved. The WHOIS data aligns well with the organization's history and legitimacy. Overall, Digitalcourage's website is a trustworthy, content-rich platform serving activists and the general public interested in digital rights. It maintains high standards of privacy and security, with clear calls to action for membership, donations, and participation. The site integrates several related services and partner domains, enhancing its ecosystem and outreach.

G

Gesellschaft für Freiheitsrechte e.V.

freiheitsrechte.org

62

Gesellschaft für Freiheitsrechte e.V. (GFF) is a German non-profit organization dedicated to defending fundamental and human rights through legal means. Established in 2015, it has built a reputable position in the human rights advocacy sector, focusing on strategic litigation, public education, and policy influence. The website reflects a professional and consistent brand image, targeting activists, legal professionals, and supporters of civil liberties. Technically, the site employs modern web technologies with good mobile optimization and accessibility, though some security enhancements like DNSSEC and security headers could be improved. The security posture is solid with HTTPS and domain transfer protections, but lacks explicit incident response or security policy disclosures. Overall, the site is trustworthy, transparent, and well-aligned with its mission.

A

Antifaschistisches Bildungszentrum und Archiv Göttingen e.V.

antifaschistisches-archiv.org

69

The Antifaschistisches Bildungszentrum und Archiv Göttingen e.V. is a small non-profit organization based in Germany focused on antifascist education, archiving, and activism. The website serves as a platform for educational content, event announcements, archival access, and publications related to right-wing extremism and antifascist efforts. It targets researchers, activists, and the general public interested in these topics. The organization maintains a consistent brand presence and provides encrypted contact forms to enhance privacy and security. Technically, the website is built on WordPress 6.8.3 with a modern tech stack including Matomo for analytics and several plugins for GDPR compliance and media management. Hosting is provided by InterNetX GmbH, and the site uses HTTPS with good SSL configuration. The site is moderately performant, mobile-optimized, and has good SEO and accessibility basics. From a security perspective, the site employs HTTPS, encrypted contact forms, and a cookie consent mechanism, but lacks explicit security headers and a published security policy or vulnerability disclosure. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with clear privacy and cookie policies in German, aligned with GDPR requirements. Overall, the website is trustworthy, professionally maintained, and serves its non-profit educational mission effectively. Strategic recommendations include enhancing security headers, publishing a security.txt file, and expanding incident response documentation to further improve security posture and trust.

I

Institut für Lehrerfort- und -weiterbildung (ILF Mainz)

ilf-mainz.de

58

The Institut für Lehrerfort- und -weiterbildung (ILF Mainz) is a well-established non-profit educational institute focused on providing professional development and certification programs for teachers and pedagogical staff in the Rheinland-Pfalz and Saarland regions of Germany. The institute operates under the umbrella of a charitable company supported by multiple (Erz-)Diözesen, reflecting its strong regional and religious affiliations. The website clearly targets educators and school leadership personnel, offering a broad range of training services including in-house and online courses. Technically, the website is built on a modern WordPress platform with up-to-date plugins and libraries, ensuring a stable and maintainable infrastructure. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some accessibility features could be enhanced. The use of HTTPS and cookie consent mechanisms indicates a commitment to user privacy and security. From a security perspective, the site employs HTTPS with a good SSL configuration but lacks some advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent, aligning with GDPR requirements. Overall, the ILF Mainz website presents a trustworthy, professional, and secure online presence appropriate for its educational mission. Strategic improvements in security headers, incident response transparency, and accessibility would further strengthen its posture.

E

Erziehungswissenschaftliches Fort- und Weiterbildungsinstitut der Evangelischen Kirchen in Rheinland-Pfalz

efwi.de

47

The Erziehungswissenschaftliches Fort- und Weiterbildungsinstitut der Evangelischen Kirchen in Rheinland-Pfalz (EFWI) is a small, regionally focused non-profit educational institute dedicated to supporting teachers and pedagogical professionals through training, consulting, and specialized seminars. The website clearly targets educators in Rheinland-Pfalz, Germany, offering a variety of professional development opportunities aligned with current educational challenges and research. The business model is service-oriented, focusing on educational enrichment and church-affiliated community support. The website is well-branded and consistent with the organization's mission and regional focus. Technically, the website is built on the TYPO3 CMS platform, leveraging modern frontend technologies such as Bootstrap 4, jQuery, and FontAwesome. The site demonstrates good mobile optimization and SEO practices, with a moderate performance profile. Hosting is managed via DomainControl, consistent with the domain's WHOIS data. The technical infrastructure supports a professional and accessible user experience. From a security perspective, the site uses HTTPS with an excellent SSL configuration, but lacks visible security headers and a cookie consent mechanism, which are recommended for compliance and enhanced security posture. No vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contact limits transparency in security management. Overall, the security posture is good but could be improved with additional best practices. The overall risk assessment is low, with no blocking or WAF detected, no suspicious content, and a trustworthy domain registration. Strategic recommendations include implementing a cookie consent banner, adding security headers, publishing a security policy, and considering a vulnerability disclosure mechanism to enhance compliance and trust.

S

ScaDS.AI Dresden/Leipzig

scads.de

50

ScaDS.AI Dresden/Leipzig is a German government-funded research center specializing in scalable data analytics, artificial intelligence, and big data. It operates as a permanent research facility with strong ties to TU Dresden and Leipzig University, positioning itself as a key player among Germany's AI competence centers. The website reflects a mature digital presence with comprehensive content targeting researchers, students, professionals, and the general public interested in AI and data science. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses several plugins for enhanced functionality, including Contact Form 7 and Yoast SEO. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enforced and no obvious vulnerabilities, but lacks DNSSEC and some security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, supporting its academic and research mission.

S

ScaDS.AI

scads.ai

45

ScaDS.AI Dresden/Leipzig is a government-funded German research center specializing in scalable data analytics, artificial intelligence, and big data. It operates as a permanent research facility with strong academic partnerships with TU Dresden and Leipzig University. The center offers interdisciplinary research, graduate education, consulting, and public engagement through its Living Lab. The website reflects a mature digital presence with professional design and comprehensive content tailored to researchers, students, and professionals in AI and data science. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses common plugins for forms and media display. Security posture is solid with HTTPS and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is good with a clear privacy policy but lacks cookie consent mechanisms. Overall, the site is trustworthy, well-maintained, and aligned with its academic and governmental mission.

H

HEARTFELT_

apx.network

62

HEARTFELT_ is a community and portfolio networking platform associated with APX, focusing on showcasing members and portfolio additions. The website is built on the Bubble.io platform, indicating a modern but basic technical infrastructure. The site uses common web technologies such as JavaScript, Google Fonts, and Preact, but lacks advanced SEO and accessibility features. Security posture is minimal with no detected security headers or advanced protections, and privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is limited to a single email address, and no phone numbers or physical addresses are provided, which may impact business credibility. Overall, the website is accessible and functional but lacks depth in content, security, and compliance features.

E

eworx Network & Internet GmbH

eworx.at

74

eworx Network & Internet GmbH is a medium-sized Austrian technology company specializing in IT services, digital marketing communication, and datacenter solutions. The company offers a comprehensive marketing suite for email, WhatsApp, and event marketing, alongside IT infrastructure management and cloud hosting services. Their market position is supported by a strong client portfolio including reputable regional and national companies. The website is professionally designed, mobile-optimized, and uses TYPO3 CMS with SEO enhancements, reflecting a mature digital presence. Security posture is good with HTTPS and cookie consent mechanisms implemented, though explicit security policies and incident response contacts are not publicly available. WHOIS data is unavailable due to quota restrictions, limiting domain trust verification. Overall, the company presents a credible and professional front with room for improvement in transparency and security disclosures.

Ს

საქართველოს ენერგეტიკისა და წყალმომარაგების მარეგულირებელი ეროვნული კომისია

gnerc.org

63

The Georgian National Energy and Water Supply Regulatory Commission (GNERC) operates as a government regulatory authority overseeing the electricity, natural gas, water supply, and irrigation sectors in Georgia. Established in 2001, it maintains a significant national presence with a focus on balancing consumer and enterprise interests, setting tariffs, monitoring markets, and ensuring compliance with regulatory frameworks. The website reflects an active organization with frequent news updates, public communications, and certifications such as ISO 9001:2015, reinforcing its credibility and operational maturity. Technically, the website employs a modern yet standard technology stack including Bootstrap, jQuery, FontAwesome, Owl Carousel, and integrates analytics tools like Google Analytics and Facebook Pixel. The site is mobile optimized and accessible, with good SEO practices evident in meta tags and structured navigation. However, it lacks explicit privacy and cookie policies, which is a notable gap in compliance and user transparency. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but it does not implement advanced security headers or provide a vulnerability disclosure policy. The domain registration data is consistent with the organization's profile, showing a long-standing and legitimate presence without privacy protection, appropriate for a government entity. Overall, the website is professional, trustworthy, and serves its regulatory function effectively, but improvements in privacy compliance and security best practices are recommended to enhance user trust and regulatory adherence.

Energy Community is a government organization dedicated to uniting and coordinating energy policies and market integration across Europe, with a focus on the Western Balkans and Eastern Europe. The organization provides legal frameworks, event coordination, and support for energy transition and climate governance. Their website reflects a professional and well-structured digital presence, targeting government entities, energy sector stakeholders, and policy makers. The site offers extensive event information, news updates, and resources related to energy policy and market developments. Technically, the website employs modern web technologies including jQuery, Foundation framework, and Google Tag Manager for analytics, hosted on a CMS platform identified as Magnolia. The site is mobile-optimized, accessible, and SEO-friendly, with a fast to moderate performance profile. Security posture is good with HTTPS enforced and CSRF protection on forms, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of visible privacy and cookie policies. WHOIS data is unavailable due to query failure, but the website content and structured data strongly indicate legitimacy as a government entity. Overall, the site is trustworthy and professional but could improve transparency on privacy and security policies.

F

Familie & Beruf Management GmbH

familieundberuf.at

59

Familie & Beruf Management GmbH is an Austrian organization dedicated to promoting family-friendly work and living environments through state certification programs and initiatives. They serve companies, municipalities, universities, and individuals with family care obligations, positioning themselves as a leading entity in Austria for family and career compatibility. The website is professionally designed, content-rich, and well-structured, targeting a German-speaking Austrian audience. Technically, the site runs on Drupal 7 with modern JavaScript libraries and analytics tools, though the CMS version is outdated and poses potential security risks. Security posture is generally good with HTTPS and cookie consent mechanisms, but lacks some advanced security headers. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the site is trustworthy and authoritative in its domain.

E

Eventbrite

eventbrite.at

73

Eventbrite is a leading global technology company specializing in online event discovery, creation, and ticketing services. The website targets event organizers and attendees primarily in Austria and German-speaking regions, offering a comprehensive platform for managing and marketing events. The company holds a strong market position with a mature digital presence and localized content tailored for Austria. The platform provides key services including event discovery, ticket sales, event marketing, and payment processing, supported by a robust technical infrastructure. Technically, the website leverages modern web technologies such as React, integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, TikTok Pixel, and Branch.io, and employs a consent management system via Transcend. The site is hosted on reliable CDN infrastructure, optimized for performance, mobile responsiveness, and accessibility, ensuring a high-quality user experience. From a security perspective, Eventbrite enforces HTTPS with strong SSL configurations, implements essential security headers, and manages user consent effectively. No critical vulnerabilities or exposed sensitive data were detected. However, explicit incident response contact information and a vulnerability disclosure policy could enhance their security posture further. Overall, Eventbrite's website demonstrates a high level of professionalism, security, and privacy compliance, making it a trustworthy platform for event management and ticketing. Strategic recommendations include publishing clear incident response contacts, adding a security.txt file, and continuous monitoring of third-party scripts to maintain security integrity.

C

chiliSCHARF GmbH

chilischarf.at

63

chiliSCHARF GmbH is a professional internet agency based in Austria with offices in Linz and Vienna, specializing in digital communication, online marketing, and e-commerce solutions. Their services include TYPO3 website development, Shopware and Magento online shops, email marketing, video production, and photography. The company targets businesses seeking comprehensive digital presence and marketing support in German-speaking markets. The website demonstrates a mature technical infrastructure leveraging TYPO3 CMS, modern JavaScript libraries, and GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS enforced and no exposed sensitive data, though some security headers could be improved. Overall, the site is professional, well-branded, and trustworthy, with clear contact information and a good user experience.

U

Uzin Utz Nederland bv

floorconfigurator.com

55

Floorconfigurator.com is an online tool designed to allow users to customize self-smoothing floor colors and flakes, primarily supporting Arturo Flooring systems. The website serves a niche market of flooring professionals and customers seeking tailored flooring solutions. The business is linked to Uzin Utz Nederland bv, a medium-sized manufacturing company based in the Netherlands, founded in 2015. The site provides a user-friendly interface with options to select colors, flakes, and download or send requests for product information. Technically, the site uses JavaScript and jQuery Mobile frameworks, with analytics powered by Google Analytics and Matomo. The site is mobile optimized and presents a professional design with clear navigation. Security-wise, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers, which are recommended for enhanced security. Privacy policies are comprehensive and GDPR compliant, though no explicit cookie consent mechanism is implemented. Overall, the site is trustworthy and functional but could improve security and privacy compliance aspects.

T

timum GmbH

timum.de

47

timum GmbH operates a specialized SaaS platform focused on automated appointment coordination and online booking solutions tailored for the real estate sector, including real estate agents, property managers, and facility management professionals. The company positions itself as a PropTech innovator with integrations into major real estate platforms and CRM systems, offering scalable solutions from basic to professional tiers. The website content is professionally presented, targeting German-speaking markets with localized versions for Switzerland and English-speaking users. Technically, the site is built on WordPress with modern frameworks and hosted on AWS infrastructure, ensuring reliable performance and good mobile optimization. Security posture is solid with HTTPS enforced and privacy compliance evident through GDPR-aligned policies and cookie consent mechanisms. However, explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates a mature digital presence with strong business credibility and trust indicators, suitable for its niche market.

H

Hüttig & Rompf GmbH

huettig-rompf.de

58

Hüttig & Rompf GmbH is a well-established German company specializing in personalized real estate financing advisory services. Founded in 1988 and part of the Bilthouse Gruppe, the company offers customers access to financing offers from over 500 banks and extensive partnership networks with real estate distributors. Their website demonstrates a mature digital presence with modern technologies such as Nuxt.js and TYPO3 CMS, and integrates consent management and analytics tools to ensure privacy compliance. Security posture is solid with HTTPS and Cloudflare DNS, though explicit security policies and incident response contacts are not published. Overall, the company presents a professional and trustworthy image with comprehensive content and user-friendly navigation.

J

Justhome

justhome.co

65

Justhome is a German-based online platform specializing in home financing and construction loan advisory services. Founded in 2015, the company targets individuals seeking to finance their new homes, offering guidance even for those with limited savings. The website is professionally designed, mobile-optimized, and provides clear information about its services, positioning itself as a niche player in the real estate financing sector in Germany. Technically, the site leverages modern web technologies including Next.js and React, hosted on Azure CDN, ensuring good performance and user experience. It integrates multiple analytics and marketing tools such as Google Analytics, HubSpot, Hotjar, and Taboola, with a comprehensive cookie consent mechanism that aligns with GDPR requirements. Security-wise, the site enforces HTTPS, has domain transfer locks, and uses cookie consent for privacy compliance, though it lacks DNSSEC and some advanced security headers. Overall, the website is safe, trustworthy, and compliant with privacy regulations, but could enhance its security posture by adding a security.txt file and incident response contacts.

W

Website-Check

website-check.de

56

Website-Check is a German legal-tech company specializing in automated compliance solutions for websites and online shops, including legally compliant texts, cybersecurity checks, and cookie consent tools. The company positions itself as a trusted partner for businesses seeking to maintain GDPR compliance and cybersecurity hygiene with minimal effort, leveraging AI technology and expert legal support. The website is professionally designed using WordPress and Elementor, optimized for SEO and mobile devices, and features clear navigation and strong branding consistency. Technically, the site uses modern plugins and frameworks, hosted via DomainDiscount24, with HTTPS enabled and a good security posture. However, explicit privacy and cookie policies are not clearly found in the provided content, and no direct contact information is visible, which slightly impacts privacy compliance and user trust. Overall, the domain registration data aligns well with the website's claims, indicating legitimacy and trustworthiness.

C

CASAFARI

casafari.com

66

CASAFARI is a leading European real estate data intelligence company offering a comprehensive AI-powered platform that aggregates and analyzes property data from over 20 countries. Their services include property sourcing, valuation, market analytics, CRM, and APIs, targeting real estate professionals and agencies. The website demonstrates a mature digital presence with modern technologies, multilingual support, and strong branding. Security posture is solid with HTTPS and performance optimizations, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. The absence of WHOIS data slightly impacts trust but is mitigated by strong business signals and social proof.

O

Ogulo GmbH

ogulo.com

72

Ogulo GmbH operates a specialized real estate technology business focused on providing floor plan cameras and 3D virtual tours to real estate professionals. The company, founded in 2012 and based in Germany, offers innovative visualization tools that simplify the creation of up-to-date floor plans and immersive 3D tours with minimal effort. Their market position is that of a niche provider catering to real estate marketing needs, leveraging modern web technologies and integrations with marketing platforms like HubSpot. Technically, the website is built on WordPress using the Divi theme, hosted on Amazon AWS infrastructure. The site employs several HubSpot scripts for marketing automation and analytics, along with Facebook Ads Pixel for retargeting. The site is mobile optimized with good SEO practices and structured data implementation, though accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS with a valid SSL certificate and domain status locks to prevent unauthorized changes. However, DNSSEC is not enabled, and no security headers were detected in the provided data. There is no visible privacy policy, cookie consent mechanism, or incident response information, which are important for GDPR compliance and user trust. The absence of vulnerability disclosure or security.txt files suggests limited transparency in security practices. Overall, the website is professional and trustworthy with a solid business foundation and technical setup. The main risks relate to privacy compliance gaps and security best practices that could be improved to enhance user trust and regulatory adherence. Strategic recommendations include enabling DNSSEC, publishing privacy and cookie policies, adding security headers, and establishing clear incident response and vulnerability disclosure channels.

M

MaklerWerft - Webseiten für Immobilienmakler

maklerwerft.de

74

MaklerWerft Beratungsgesellschaft mbH operates a professional website offering specialized digital marketing and web solutions for real estate agents in Germany. Their services include website systems, CRM automation, SEO, SEA strategies, and content marketing tailored to the real estate sector. The company positions itself as an expert niche provider with a strong focus on client success and digital transformation in real estate marketing. Technically, the website is built on WordPress using the Enfold theme, integrates privacy-compliant analytics via Matomo, and employs Cloudflare DNS services, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and consent management, though explicit privacy and security policy pages are missing. Overall, the site is professional, well-structured, and optimized for SEO and mobile use, targeting real estate professionals and property owners. The domain registration data aligns with the business claims, indicating legitimacy and consistency.

E

easyname

easyname.eu

67

easyname is a medium-sized Austrian technology company specializing in web hosting, domain registration, and website building services. The company targets individuals and businesses seeking reliable and easy-to-use online presence solutions. Their market position is that of an established regional player with a multilingual website offering a broad portfolio of services including VPS hosting, SSL certificates, and marketing tools. The website content is professional, well-structured, and designed to facilitate user engagement and conversion. Technically, the website leverages modern web technologies such as React and Chakra UI, with integrations for Google Tag Manager and a consent management platform to ensure privacy compliance. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured data. Performance is moderate, with deferred scripts and optimized assets. From a security perspective, the site enforces HTTPS and uses consent management for cookies, but lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent with the business claims, supporting legitimacy. Overall, easyname presents a trustworthy and professional online presence with good privacy compliance and a solid technical foundation. Strategic improvements in security headers and transparency around security policies would further enhance their security posture and trustworthiness.

H

Helvetas

helvetasusa.org

69

Helvetas USA is an independent non-profit development organization affiliated with a global network headquartered in Switzerland, operating in 29 countries. The organization focuses on humanitarian aid, emergency response, water, agriculture, climate, democracy, peace, and vocational training among other development sectors. The website reflects a professional and consistent brand presence with good content quality and relevant information for its target audience of general public and stakeholders interested in international development. Technically, the website employs modern frontend technologies including Bootstrap 4 and Google Tag Manager for analytics and tracking. It implements cookie consent mechanisms via OneTrust, indicating awareness of privacy compliance requirements. The site is mobile optimized and SEO friendly, though accessibility features are basic. Hosting and CMS details are not explicitly identified. Security posture is moderate with HTTPS implied and cookie consent in place, but lacks visible security headers, explicit security policies, or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. WHOIS data is unavailable due to privacy protection or query failure, which is common for organizations seeking privacy but reduces transparency. Overall, the website is trustworthy and professional but would benefit from publishing explicit privacy policies, terms of service, contact information, and security disclosures to enhance compliance and user trust.

G

German Customer Awards

germancustomerawards.com

57

German Customer Awards is a German-based award program recognizing the top 500 companies annually for excellence in customer satisfaction, quality, and service. Founded in 2023, it positions itself as a reputable and transparent awards entity with a clear evaluation methodology based on 7 main criteria and 131 subcriteria. The website is professionally designed using Webflow, with good mobile optimization and clear navigation. It integrates modern tracking and consent management tools, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and explicit security policies. Contact information is provided, though no physical address or security incident contacts are found. Overall, the site is trustworthy and business credible with room for security and compliance enhancements.

U

Uzin Utz Tools GmbH & Co.KG

pajarito-tools.com

63

Pajarito is a German manufacturer specializing in high-quality professional tools for painters, drywall installers, and plasterers, with a history dating back to 1923. The company emphasizes precision, durability, and reliability, offering a comprehensive product range made entirely in Germany. Their market position is strong within the professional trades sector, supported by a well-structured website and active social media presence. Technically, the website is built on TYPO3 CMS, leveraging modern frontend technologies and analytics tools such as Google Analytics and Matomo, ensuring good performance and user experience across devices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not found. The absence of WHOIS data for the domain raises some concerns but may be explained by the use of a subdomain or privacy measures. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

S

Servicestelle der Initiative Klischeefrei

klischee-frei.de

57

The website www.klischee-frei.de represents the Servicestelle der Initiative Klischeefrei, a German non-profit initiative dedicated to promoting gender-neutral career and study choices. It serves a broad audience including youth, parents, educators, and career counselors by providing educational resources, events, and a network of partner organizations. The initiative is supported by government entities and well-established partners, positioning it as a credible and trusted source in the education sector. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. Hosting details are not explicit, but the domain uses stable nameservers consistent with a legitimate German educational initiative. From a security perspective, the site enforces HTTPS and uses secure form submissions. However, it lacks visible security headers and explicit incident response or security policy disclosures. Privacy compliance is strong with a comprehensive privacy policy and cookie policy, though no explicit cookie consent mechanism is present. No contact emails or phone numbers are directly listed, relying instead on contact forms. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance suitable for its educational and governmental audience. Strategic improvements in security headers, incident response transparency, and cookie consent would further enhance its security posture and privacy compliance.

The website servg1.net currently presents an empty HTML structure with no visible content, metadata, or interactive elements. The domain is registered with Amazon Registrar, Inc. since September 2021 and is active with no DNSSEC enabled. Due to the lack of content, no business description, contact information, or service details are available, indicating the site may be under development or inactive. The technical infrastructure appears minimal with no detectable technologies or frameworks in use. Security posture is limited to basic domain registration without advanced protections such as DNSSEC or security headers. No privacy or cookie policies are present, and no compliance indicators are found. Overall, the site lacks essential elements for trustworthiness and user engagement, resulting in a low AI score and limited risk exposure due to absence of content.

S

Schule ohne Rassismus – Schule mit Courage

schule-ohne-rassismus.org

59

Schule ohne Rassismus – Schule mit Courage is Germany's largest school network dedicated to promoting human dignity, anti-racism, and democratic culture among students and educators. With over 4,800 member schools and more than 1.5 million students involved, the organization provides networking, educational materials, and events to foster inclusive school environments. The website is professionally designed, mobile-optimized, and rich in relevant content, targeting schools and educational stakeholders primarily in Germany. Technically, the site is built on WordPress with WooCommerce for e-commerce functionalities, uses modern JavaScript libraries, and implements strong SEO and accessibility practices. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies could be improved. The WHOIS data is unavailable or malformed, which slightly reduces domain trustworthiness, but the organization's transparency, social media presence, and compliance with GDPR indicate legitimacy. Overall, the site presents a trustworthy, well-maintained digital presence for a non-profit educational network.

D

Deutsches Rotes Kreuz e.V. - Jugendrotkreuz

humanitaereschule.de

56

The website humanitaereschule.de represents the Jugendrotkreuz (Youth Red Cross) campaign under the Deutsches Rotes Kreuz e.V., focused on certifying schools as "Humanitäre Schule" to promote humanitarian values among students aged 16 and above. The campaign has been active since 2004 and offers structured educational programs including the "h.e.l.p." simulation and humanitarian projects culminating in certification and awards. The site is well-branded, professionally designed, and targets educational institutions in Germany. Technically, it is built on TYPO3 CMS, uses modern JavaScript libraries, and is hosted behind Cloudflare, ensuring good performance and security. Privacy compliance is addressed with visible cookie consent and a privacy policy, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, secure, and serves its educational mission effectively.

TaskCards is an online platform developed and operated by the German company dSign Systems GmbH, providing teachers and educational institutions a GDPR-compliant tool to share tasks and information with students. The platform supports creation and publication of digital pinboards (Pinnwände) containing text, images, links, and attachments, accessible privately or publicly. The service targets educational institutions, companies, clubs, and private users, emphasizing data privacy and German server hosting. Technically, the website is built using modern JavaScript frameworks including Vue.js and Quasar, hosted likely on German infrastructure (keymachine.de). The site is moderately performant, mobile-optimized, and structured with clear navigation. However, some SEO and accessibility features could be improved. No CMS or third-party analytics/tracking services were detected. Security posture is moderate with GDPR compliance and minimal personal data collection as key strengths. However, no explicit security headers or cookie consent mechanisms were found, and no published security or incident response policies exist. The domain WHOIS data aligns well with the business claims, showing consistent German hosting and no privacy protection, supporting legitimacy. Overall, TaskCards presents a trustworthy, well-structured educational platform with good privacy focus but could enhance security practices and transparency to improve trust and compliance further.

B

BBS-Betriebe

bbs-betriebe.de

43

The website bbs-betriebe.de serves as a login portal primarily for businesses and external users associated with a school scheduling system. It provides access to schedules, class books, and trainee information, targeting a niche educational audience in Germany. The platform is built using RapidWeaver CMS with Bootstrap and jQuery, offering basic mobile responsiveness and user navigation. While the site includes essential privacy and cookie consent mechanisms, it lacks comprehensive contact information, terms of service, and advanced security policies. Security posture is moderate with HTTPS enabled but missing critical security headers and using an outdated jQuery version, which could expose vulnerabilities. Overall, the site is functional for its intended educational business use but would benefit from enhanced security and clearer business transparency.

C

CPS-Datensysteme GmbH

virtueller-stundenplan.org

49

Virtueller Stundenplan is a German educational platform focused on providing students and school staff with digital timetable management, class plans, and administrative tools such as sick leave reporting. The platform supports login via email/password and integrates with Microsoft Office365 for authentication, targeting primarily German-speaking students and educational institutions. The website is built using RapidWeaver CMS with Bootstrap and jQuery, offering a responsive and user-friendly interface. While the technical infrastructure is adequate for its purpose, there is room for improvement in security practices, such as enabling DNSSEC and implementing security headers. The domain registration is consistent and transparent, registered under CPS-Datensysteme GmbH since 2020, which aligns with the business age and purpose. Overall, the website demonstrates moderate technical maturity and business credibility but lacks comprehensive privacy and security policies.

B

Berufsbildende Schulen Cuxhaven

bbs-cux.eu

50

The website bbs-cux.eu serves as the login portal for the Berufsbildende Schulen Cuxhaven, a vocational educational institution in Germany. It utilizes the IServ platform to provide authenticated access to school-related digital services for students, teachers, and staff. The site is professionally designed with consistent branding and clear navigation, targeting its educational audience effectively. The business model centers on providing secure digital access to educational resources and administrative tools. Technically, the site employs standard web technologies including HTML5, CSS, and JavaScript, integrated within the IServ platform. The infrastructure appears stable with moderate performance and good mobile optimization. Hosting and domain registration are managed through reputable providers, ensuring reliable availability. However, some modern security headers and cookie consent mechanisms are absent, indicating room for technical and compliance improvements. From a security perspective, the site enforces HTTPS and uses secure login forms with password visibility toggles, reflecting basic security hygiene. No critical vulnerabilities or exposed sensitive data were detected. Nonetheless, the absence of explicit security headers and vulnerability disclosure policies suggests a moderate security posture. Privacy compliance is partially met with a privacy policy present but lacking cookie consent and detailed data protection officer information. Overall, the website is trustworthy and professionally maintained, suitable for its educational purpose. Strategic enhancements in security headers, privacy compliance, and incident response transparency would further strengthen its security and regulatory posture.

B

BNL BNP Paribas

bnl.it

70

BNL BNP Paribas is a major Italian banking institution offering a wide range of financial services including current accounts, loans, mortgages, private banking, and digital banking portals for individuals, families, professionals, and enterprises. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistent with its parent company BNP Paribas. Technically, the site uses modern frameworks such as Uikit and Adobe Experience Manager CMS, integrates Google Tag Manager and OneTrust for analytics and cookie consent, and is optimized for mobile devices. Security posture is strong with HTTPS enforced, DNSSEC enabled, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the site is professional, trustworthy, and well-aligned with the business's market position.

C

Con i Bambini

percorsiconibambini.it

39

Percorsi con i bambini is a non-profit network platform managed by Con i Bambini, focused on coordinating and sharing projects aimed at combating educational poverty among minors in Italy. The website serves as a collaborative space for project leaders and partners to publish updates, articles, and event information. It is affiliated with Fondazione CON IL SUD, indicating a strong institutional backing. The platform targets organizations involved in social and educational initiatives, providing a niche but important service in the non-profit sector. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and the Yoast SEO plugin, ensuring good SEO and mobile responsiveness. It uses Matomo for analytics, emphasizing privacy. The site is well-structured with comprehensive metadata and structured data for SEO. However, the domain is currently expired, posing a risk to availability. Security headers are not explicitly detected, and there is no visible security policy or incident response information, which are areas for improvement. From a security perspective, the site uses HTTPS and DNSSEC, which are positive indicators. The lack of explicit security headers and vulnerability disclosure mechanisms suggests moderate security maturity. Privacy compliance is good, with clear privacy and cookie policies and a consent mechanism. Contact information is clearly provided, enhancing trust. Overall, the website is professional, trustworthy, and serves a clear social mission. The main risk is operational due to domain expiration and some missing security best practices. Addressing these will improve resilience and trustworthiness.

W

whistlebox.pro

whistlebox.pro

52

The website whistlebox.pro currently serves as a parked domain with minimal content and no active business presence. It primarily displays placeholder text and advertisements served via Google Adsense and Bodis, indicating monetization through domain parking rather than offering any substantive services or information. The lack of meaningful content, contact details, or company information suggests it is not an operational business site. Technically, the site uses basic HTML, CSS, and JavaScript with no detected CMS or advanced frameworks. There is no HTTPS detected, and no security headers are present, which significantly lowers the security posture. Privacy and legal pages exist but are basic and lack GDPR compliance indicators or cookie consent mechanisms. Overall, the site has a low trustworthiness score and is not suitable for professional or business use in its current state.

B

basemap.de

basiskarte.com

46

basemap.de is a German-focused official cartographic service provider offering a range of modern map products including vector and raster services, 3D geodata visualization, and flexible cartographic solutions. The website is professionally designed using WordPress and modern plugins, targeting government agencies, GIS professionals, and businesses requiring authoritative geospatial data. The technical infrastructure is solid, leveraging a reputable hosting provider and modern web technologies, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in security headers and incident response transparency. Privacy compliance is adequate with a privacy policy present but lacks cookie consent mechanisms. Overall, the site is trustworthy and well-positioned in its niche.

O

openfellas GmbH

openfellas.de

74

openfellas GmbH is a well-established German company specializing in Odoo ERP consulting and implementation services. With over 15 years of experience and more than 250 successful projects, they position themselves as a trusted Odoo Gold Partner in the German-speaking market. Their services span ERP consulting, Odoo system implementation, financial consulting, and digital transformation solutions. The website targets businesses seeking tailored ERP solutions, emphasizing professionalism and customer success stories. Technically, the site is built on the Odoo CMS platform, leveraging Cloudflare for DNS and CDN services, and integrates Google Tag Manager for analytics and marketing. The site is mobile-optimized with good SEO and accessibility practices. Security-wise, the site enforces HTTPS and uses domain transfer protection but lacks some advanced security headers and a published security policy. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

H

Häussler GmbH

haeussler.de

44

Häussler GmbH is a well-established German company specializing in the rental of high-quality gastronomy and event equipment, including cutlery, glasses, tableware, linens, furniture, buffet and banquet supplies, and coffee culture products. Founded in 1991, the company serves both business and private clients, focusing on large-scale events such as trade fairs, weddings, and corporate anniversaries. Their market position is strong with a reputation for quality and reliability, supported by two related brands: Häussler Leihservice and dishcounter, which extend their service offerings in the event rental space. Technically, the website employs a modern but basic tech stack including jQuery, Bootstrap, AOS for animations, and Google Maps API. The site is mobile-optimized and well-structured, though some external resources are loaded over HTTP, which could cause mixed content issues. No CMS was detected, and hosting is provided by a German hosting provider consistent with the company’s location. From a security perspective, the site lacks visible security headers and a cookie consent mechanism, which impacts privacy compliance. No forms or sensitive data collection points were found, reducing immediate risk exposure. The WHOIS data aligns with the company’s claimed history and location, supporting legitimacy. Overall, the security posture is moderate but could be improved by enforcing HTTPS on all resources and adding security headers. The overall risk assessment is low, with recommendations focusing on improving security best practices, privacy compliance, and technical modernization to enhance trust and user experience.

B

Bossard Group

provenproductivity.com

63

Proven Productivity is a content-driven platform operated under the Bossard Group, focusing on business and supply chain improvement with an emphasis on fastening technology. The website serves manufacturers and supply chain professionals by providing educational blog content, case studies, and service information. The site is well-branded, consistent with the parent company, and targets a medium-sized manufacturing audience primarily in the USA and North America. Technically, the site is built on WordPress with a modern plugin ecosystem including SEO, analytics, and multilingual support. Performance and mobile optimization are good, though accessibility is basic. Security posture is adequate with HTTPS and anonymized analytics, but lacks advanced headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism despite extensive tracking. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

V

Verband Deutscher Mineralbrunnen e.V. (VDM)

vdm-bonn.de

51

The Verband Deutscher Mineralbrunnen e.V. (VDM) is a German industry association representing the economic and political interests of the mineral water sector. It serves approximately 150 small and medium-sized mineral water bottling companies, producing over 500 mineral water varieties and numerous medicinal waters. The association acts as a key employer advocate and provides political communication, public relations, and member services. The website is professionally designed using WordPress with modern plugins and SEO optimization, providing a rich user experience and mobile responsiveness. Privacy and cookie compliance are well implemented with Borlabs Cookie and a comprehensive privacy policy. Security posture is solid with HTTPS and secure form handling, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. Overall, the site reflects a trustworthy, professional organization with a strong digital presence.

G

Genossenschaft Deutscher Brunnen eG

gdb.de

54

The Genossenschaft Deutscher Brunnen eG (GDB) is a German cooperative serving the mineral water industry by providing pool management, consulting, and a broad product portfolio including reusable bottles and packaging. The website reflects a mature, professional organization with a clear focus on sustainability and member services. Technically, the site is built on TYPO3 CMS, hosted likely by NetCologne, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site is trustworthy, well-branded, and provides comprehensive contact and legal information.

D

Dialog Natürliches Mineralwasser

dialog-mineralwasser.de

54

Dialog Natürliches Mineralwasser operates an informational website focused on natural mineral water, its quality, sustainability, and related environmental topics. The site targets consumers interested in water quality and sustainability, providing educational content, industry news, and a newsletter subscription service. The business model centers on advocacy and information dissemination within the mineral water sector in Germany. Technically, the website is built on WordPress, leveraging common plugins such as Yoast SEO, Contact Form 7, and Google Analytics integrations. Hosting is provided by 1&1 IONOS as inferred from nameservers. The site demonstrates good mobile optimization, moderate performance, and solid SEO practices. Security posture is adequate with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies are absent. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. Recommendations include enhancing security headers, publishing a security policy, and providing incident response contacts to improve trust and security maturity.