Security Directory

S

Stadt Graz

graz.at

68

Stadt Graz operates the official city portal for the capital of Styria, Austria, providing comprehensive information and services related to municipal administration, citizen services, tourism, and local news. The website serves as a central hub for residents and visitors, offering access to city plans, webcams, political news, and community programs. It maintains a strong market position as the authoritative source for city-related information and services. Technically, the website is built on the ico-cms platform, leveraging modern web technologies including PHP, JavaScript libraries such as PDF.js, Three.js, and Bootstrap for responsive design. The site demonstrates good digital maturity with mobile optimization, accessibility features, and SEO best practices. Analytics tools like Matomo/Piwik and Google Analytics are used with a clear cookie consent mechanism, reflecting compliance with privacy regulations. From a security perspective, the site enforces HTTPS and uses session management cookies appropriately. However, explicit security headers are not clearly detected, and there is no publicly available security policy or incident response contact information. No vulnerabilities or suspicious content were identified, indicating a generally secure posture suitable for a government website. Overall, Stadt Graz's website is a professional, trustworthy, and well-maintained digital presence that effectively supports its public service mission. Strategic improvements in security header implementation and transparency around security policies would further enhance its security posture and user trust.

R

Region Graz - Steiermark Tourismus

regiongraz.at

67

The website www.steiermark.com serves as the official tourism portal for the Graz region and the broader Styrian area in Austria. It provides comprehensive information about local attractions, events, and travel opportunities, targeting tourists and visitors interested in exploring the region. The site is professionally designed with a clear focus on user experience, multilingual support (German and English), and regional branding consistent with the official tourism authority. The business model centers on destination marketing and promoting regional tourism services, positioning itself as a key player in Austria's hospitality sector. Technically, the website employs a modern technology stack including Matomo for analytics, Google Tag Manager, and Cookiebot for consent management, indicating a mature digital infrastructure. The use of Pimcore CMS suggests a robust content management system tailored for complex content needs. The site is mobile-optimized, accessible, and SEO-friendly, ensuring broad reach and usability. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and integrates cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not fully confirmed, no critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of a published security policy or incident response contacts is noted as an area for improvement. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is common for tourism entities. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic recommendations include enhancing security header implementation, publishing security and incident response policies, and maintaining transparency in domain registration details to further boost trust and security assurance.

D

designverign GmbH

designverign.de

61

designverign GmbH is a well-established marketing and design agency based in Düsseldorf, Germany, operating since 1996. The company specializes in strategy, corporate design, e-commerce solutions including Onlineshop development, and performance marketing services targeting B2B clients and manufacturers. Their market position is solid within the German E-commerce and marketing sectors, offering comprehensive digital and offline branding solutions. The website reflects a professional and consistent brand image with clear service offerings and client references.

T

topi

topi.eu

68

topi is a technology company specializing in providing a B2B subscription platform for hardware-as-a-service. Their platform enables retailers and manufacturers to offer hardware products on a monthly subscription basis, targeting business customers and retail partners. The website demonstrates a strong market position with partnerships with leading IT retailers and a clear focus on simplifying hardware acquisition through subscription models. Technically, the website is built on modern web technologies including Webflow CMS, Google Analytics, Microsoft Clarity, and Segment Analytics, indicating a mature digital infrastructure with good performance and mobile optimization. Security posture is solid with HTTPS enforced and secure forms, though explicit security headers and incident response information are not publicly disclosed. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-structured, supporting the company's business credibility and market presence.

F

FORTYEIGHT

fortyeight.agency

70

FORTYEIGHT is a professional marketing agency based in Münster, Germany, specializing in brand identity, web design, and performance marketing tailored for medium-sized businesses in the Münsterland region. The company positions itself as a trusted partner with over 150 clients served in the past decade, emphasizing authentic communication and transparent collaboration. Their service offerings include brand development, website creation, and targeted online campaigns, focusing on delivering measurable results for their clients. Technically, the website is built on the Webflow platform, leveraging modern technologies such as Matomo for analytics and CookieFirst for consent management, ensuring a privacy-conscious and performant user experience. The site is well-optimized for mobile devices and demonstrates excellent design and navigation clarity. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms but lacks some recommended security headers and does not publicly disclose incident response or security policies. The WHOIS data is malformed and unavailable, which slightly reduces domain trustworthiness, but the professional presentation and certifications mitigate this concern. Overall, the website reflects a mature digital presence with room for improvement in security transparency and domain registration clarity.

D

Digital Hub münsterLAND e.V.

muensterland.digital

53

Digital Hub münsterLAND e.V. is a regional digital innovation community based in Münster, Germany, focused on fostering collaboration between SMEs, startups, and tech professionals. The organization offers a variety of services including startup matching, accelerator programs, coworking spaces, and events to support digital business model development and innovation in the Münsterland region. The website reflects a well-established community hub with active engagement through events, stories, and newsletters. Technically, the website employs modern web technologies such as Bootstrap, Font Awesome, and Matomo analytics, ensuring a responsive and user-friendly experience. Security posture is moderate with cookie consent and CSRF tokens implemented, but lacks explicit security headers and public incident response policies. WHOIS data is unavailable, which slightly impacts domain trustworthiness, but the professional presentation and active social presence support legitimacy. Overall, the site is well-designed, content-rich, and serves its target audience effectively.

The Oskar-Patzelt-Stiftung operates the website mittelstandspreis.com, which promotes and manages the "Großer Preis des Mittelstandes," Germany's premier economic award for medium-sized enterprises. The foundation focuses on recognizing outstanding achievements of the Mittelstand, fostering regional marketing, and building a strong network of nominated and awarded companies. The website is well-structured, content-rich, and targets medium-sized businesses and economic stakeholders in Germany. The business model is non-profit, emphasizing economic development and recognition rather than commercial sales. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies including jQuery, Bootstrap, and Google Analytics with privacy-conscious configurations such as IP anonymization. The site is mobile-optimized and includes GDPR-compliant cookie consent mechanisms. However, some security best practices like security headers and published incident response policies are missing, which could be improved. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent, but lacks visible security headers and formal security policies. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional and consistent website content. Overall, the site presents a moderate security posture with room for improvement. Strategically, the foundation should address the WHOIS inconsistency, enhance security headers, and publish clear security and incident response policies to improve trust and compliance. The website is a credible and professional platform for its purpose but would benefit from technical and security enhancements to align with best practices.

Z

Zeppelin Rental

zeppelin-rental.de

65

Zeppelin Rental is a large German company specializing in the rental of machinery, equipment, and temporary infrastructure solutions primarily for business customers in the construction and transportation sectors. The website presents a professional and well-structured digital presence, offering detailed product categories and rental assistance tools. The technical infrastructure is based on Drupal CMS with modern JavaScript libraries and includes compliance with GDPR through cookie consent mechanisms. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not published. Overall, the website is trustworthy and well-positioned in its market segment.

V

Viega

viega.de

72

Viega Deutschland operates a professional and comprehensive website focused on plumbing, heating, and building technology products and services. The company positions itself as an established leader in energy-efficient and hygienic building solutions, targeting professionals and businesses in the construction and building services sector. The website is built on a mature technical infrastructure leveraging Adobe Experience Manager and Adobe Analytics, with GDPR-compliant consent management via Usercentrics. Security posture is good with HTTPS and tracking controls, though explicit security policies and contact information for incidents are not publicly visible. Overall, the site is well-designed, user-friendly, and trustworthy, supporting Viega's market position as a quality manufacturer and service provider in the energy and manufacturing sectors.

BRUGG Pipes is a globally recognized specialist in flexible and rigid pipe systems, serving sectors such as energy, industrial manufacturing, and transportation. The company offers a comprehensive portfolio of pipe solutions for applications including district heating, cooling, industrial plants, tank stations, and cryogenic uses. As part of the BRUGG Group, it holds a strong market position with a focus on safety, quality, and environmental protection. The website reflects a mature digital presence with multilingual support and detailed product and service information. Technically, the website is built on TYPO3 CMS, integrating modern analytics and marketing tools such as Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and eTracker. It employs a cookie consent mechanism compliant with GDPR, ensuring user privacy and transparency. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some security headers could be enhanced. Security posture is solid with HTTPS enforced and no evident vulnerabilities or exposed sensitive data. However, the absence of a security.txt file and incident response contacts suggests room for improvement in transparency and readiness. The WHOIS data is unavailable, possibly due to privacy protection or recent domain registration, which slightly reduces trust but is mitigated by the professional website content and branding. Overall, BRUGG Pipes presents a professional and trustworthy online presence aligned with its industry leadership. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and improving incident response visibility to further strengthen trust and compliance.

F

Finow Automotive Eberswalde GmbH

finowautomotive.de

47

Finow Automotive Eberswalde GmbH is a medium-sized German manufacturing company specializing in the production of chassis and structural components for the automotive and supplier industry. Founded in 1999 and based in Eberswalde near Berlin, the company operates as a Tier I and Tier II supplier, offering advanced manufacturing technologies such as laser cutting, hydroforming, and various welding techniques. The website reflects a professional and consistent brand image targeting automotive industry clients. Technically, the site uses modern frameworks like Foundation and integrates privacy-conscious analytics via Matomo alongside a Usercentrics consent manager, indicating a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent but lacks advanced security headers and explicit incident response information. Overall, the site is trustworthy, well-structured, and compliant with GDPR, though it could improve transparency around security policies and vulnerability disclosures.

E

egeplast international GmbH

egeplast.de

50

egeplast international GmbH is a medium-sized German manufacturer specializing in innovative plastic piping systems for the transport of water, gases, data, and electricity. With a presence in over 30 countries, the company serves industrial and infrastructure clients, positioning itself as a reliable and innovative player in the energy and transportation sectors. The website reflects a professional and well-branded digital presence, supporting multiple languages and optimized for SEO and mobile devices. Technically, the site is built on WordPress with modern plugins and frameworks, hosted by a reputable provider, and implements HTTPS with good security practices including reCAPTCHA and cookie consent mechanisms. However, it lacks a dedicated security policy or vulnerability disclosure page, which could improve transparency and incident response readiness. Overall, the domain registration and WHOIS data align well with the company's profile, indicating legitimacy and trustworthiness.

The website bischoff-elektronik.de is currently inaccessible due to a 500 Internal Server Error, indicating server misconfiguration or application failure. No business or marketing content is available to assess the company's market position, services, or target audience. The technical infrastructure appears to be hosted by Schlund Technologies based on the nameservers, but no further technology stack or CMS information is available. Security posture is weak as no security headers or policies are present, and the site lacks privacy and cookie policies, which are critical for compliance. Overall, the site is non-functional, limiting any meaningful security or business analysis.

E

ETAPART AG

etapart.com

63

ETAPART AG is a specialized company focused on providing innovative and energy-efficient hall heating solutions primarily for industrial, sports, and workshop halls. With over 30 years of experience, the company offers services including planning, installation, renovation, and maintenance of decentralized heating systems. The website is professionally designed, content-rich, and targets B2B customers in the energy sector within Germany. Technically, the site is built on TYPO3 CMS and integrates modern tools such as Google Tag Manager and reCAPTCHA for analytics and bot protection. Security posture is good with HTTPS enabled, but lacks some security headers and explicit privacy and cookie policies. WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy despite the professional online presence. Overall, the site is trustworthy and well-positioned in its niche but should address privacy compliance and domain registration transparency to enhance trust.

F

FMF-WWF Werkzeug- und Prototypenbau GmbH

fmf-wwf.de

40

FMF-WWF Werkzeug- und Prototypenbau GmbH is a medium-sized German manufacturing company specializing in automotive prototyping, tooling, and mechanical processing. The company serves automotive manufacturers with a range of services including development, construction, prototype and tool building, model and fixture construction, and quality assurance. Their market position is that of an established partner in the automotive supply chain, emphasizing precision and quality. Technically, the website is built on WordPress with Bootstrap and jQuery, featuring responsive design and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy with clear contact information and partner references.

K

komptech.com

komptech.com

53

Komptech.com is a professional website representing a company specializing in environmental technology, particularly in waste management and biomass processing machinery. The company targets business clients in the transportation and energy sectors, offering industrial equipment and technology solutions. The website demonstrates a good level of digital maturity with a modern WordPress CMS, optimized performance, and SEO best practices. However, the absence of explicit privacy and cookie policies and lack of visible contact information limit its privacy compliance and user trust. Security posture is generally good with HTTPS and some security headers, but could be enhanced by adding more explicit security policies and incident response contacts. The WHOIS data is missing or protected, which reduces domain trustworthiness and suggests a need for further verification of domain registration details. Overall, the website is professional and safe, but improvements in privacy compliance and transparency are recommended.

D

Delfi Group

delfigroup.de

41

Delfi Group is a medium-sized manufacturing and technology company specializing in Electronics Manufacturing Services (EMS) and product development. They operate production and development sites across Europe and Asia, focusing on high-quality system development, mechanical and electronic manufacturing, and after-sales services. The company emphasizes ecological footprint and local production strategies, serving primarily small and medium enterprises. The website is built on WordPress with Elementor, featuring a professional design and good user experience, though lacking visible contact details and cookie consent mechanisms. Security posture is adequate with HTTPS enabled but could be improved with additional security headers and incident response information. Overall, the site reflects a credible and established business with strong quality certifications but has room for enhanced privacy compliance and security transparency.

B

Bernd Münstermann GmbH & Co. KG

muenstermann.com

50

Bernd Münstermann GmbH & Co. KG is a well-established German manufacturer specializing in custom machinery and solutions for thermoprocess technology, material handling, air purification, automation, and robotics. The company serves industrial clients across various sectors including insulation materials, catalysts, steel processing, and cable manufacturing. With a domain age dating back to 1997 and a subsidiary in the USA, Münstermann holds a strong market position as a leading German special machinery provider. The website reflects a professional and consistent brand image with comprehensive business information and reference projects. Technically, the site is built on Joomla CMS, uses modern JavaScript libraries like GLightbox, and integrates Matomo analytics for privacy-conscious user tracking. However, it lacks some security headers and a cookie consent mechanism, which are areas for improvement. The security posture is solid with HTTPS and domain transfer protection, but DNSSEC is not enabled. Overall, the site is accessible, well-structured, and trustworthy, supporting the company's credibility and business operations.

O

Olsberg GmbH

olsberg.com

57

Olsberg GmbH is a historic German family-owned manufacturing company with over 440 years of history, specializing in three main business units: casting technology, heating technology, and fine sheet metal technology. The company offers customized, high-precision products and solutions serving various industrial sectors. The website reflects a professional and consistent brand image, supported by multiple subsidiary domains and active social media presence. Technically, the site is built on WordPress with modern libraries and frameworks, providing a good user experience and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. The lack of WHOIS transparency slightly reduces trust but does not outweigh the strong business signals and compliance with GDPR. Overall, the site is well-maintained and credible.

P

PRÄZI GROUP

praeziflachstahl.de

54

PRÄZI GROUP is a well-established manufacturing company specializing in precision flat steel products since 1904. The website reflects a professional B2B industrial focus with multilingual support and modern digital infrastructure. The company maintains a consistent brand presence and targets industrial clients primarily in Germany and possibly broader European markets. Technically, the site is built on WordPress with contemporary plugins such as Cookiebot for consent management and Weglot for translations, indicating a mature digital presence. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published security policies. Privacy compliance is partially met with cookie consent but no visible privacy policy or terms of service on the homepage. Overall, the website is trustworthy and professional but could improve transparency and security documentation.

Q

Q-railing

q-railing.com

66

Q-railing is a manufacturing company specializing in railing systems, targeting architects, builders, and contractors. The company has an established market presence with a domain registered since 2004, indicating a mature business. Their website is built using modern technologies such as React and is hosted on Netlify, reflecting a contemporary digital infrastructure. The site includes GDPR-compliant cookie consent mechanisms and a comprehensive privacy policy, demonstrating attention to privacy regulations. However, no terms of service or explicit security policies are publicly available. Security posture is generally good with HTTPS enforced, but lacks some security headers that could enhance protection. Overall, the website is professional, trustworthy, and safe for general audiences.

V

Viessmann

viessmann.de

51

Viessmann is a well-established German company specializing in energy-efficient heating, cooling, and ventilation systems with a strong emphasis on renewable energy and sustainability. The website demonstrates a mature digital presence with comprehensive product and service information targeting both private customers and professional clients. Technically, the site uses modern web technologies including Adobe Experience Manager CMS, Google Tag Manager, and Usercentrics for consent management, indicating a high level of digital maturity. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security policies and vulnerability disclosures are absent. Overall, the site is professional, trustworthy, and aligned with industry best practices, supporting Viessmann's market position as a leader in climate and energy solutions.

V

VMZINC

vmzinc.com

67

VMZINC is a leading manufacturer and supplier of zinc building materials, specializing in roofing, facades, rainwater systems, and architectural ornaments. The company targets architects, roofers, and construction professionals globally, offering innovative and sustainable zinc solutions. Their website reflects a strong market position with comprehensive product information, technical support, and an international network. Technically, the website is built on the Kentico CMS platform and employs modern web technologies including Google Tag Manager, Microsoft Clarity, Facebook Pixel, and ReCaptcha V3 for security and analytics. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. From a security perspective, the site enforces HTTPS and uses ReCaptcha for form protection, but lacks visible security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data is a notable anomaly, suggesting possible privacy protection or registration inconsistencies. Overall, the website is professional, secure, and compliant with privacy regulations, though improvements in security headers and transparency around domain registration would enhance trust. The risk level is moderate with no critical issues detected.

A

Ambros Schmelzer & Sohn GmbH

a-schmelzer.com

51

Ambros Schmelzer & Sohn GmbH is a medium-sized German manufacturing company specializing in metal processing and the production of modular pipe systems, agricultural technology, plant construction, assembly, and related services. The company targets industrial clients and operates a professional e-commerce platform to support its business-to-business model. The website reflects a well-established business with consistent branding and comprehensive service offerings. Technically, the website is built on WordPress with WooCommerce, enhanced by modern performance and privacy tools such as WP Rocket and Usercentrics CMP. Analytics are implemented via Google Analytics and Matomo, indicating a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although there is room for improvement in public security policy disclosures and incident response information. The WHOIS data is missing or inaccessible, which slightly reduces trust but does not negate the professional presentation and business legitimacy. Overall, the website is secure, compliant with GDPR, and professionally maintained.

T

Terrascope

terra-scope.de

41

Terrascope is a German-based company specializing in national infrastructure expansion, particularly in broadband and telecommunications sectors. The company offers comprehensive project management services including turn-key solutions, vendor management, B2B agency services, IT solutions, and fleet management. Their website reflects a professional and consistent brand image, targeting businesses and municipalities involved in infrastructure projects. Technically, the website is built on WordPress using Elementor and Yoast SEO, hosted likely on netcup servers, and employs HTTPS with a valid SSL certificate. The site is mobile-optimized and has good SEO practices but lacks some accessibility features. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but no privacy or terms of service pages found. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

V

VWH GmbH

vwh.de

44

VWH GmbH is a German-based medium-sized manufacturing company specializing in automation technology, custom special machines, assembly systems, and mold and tool making. The company positions itself as a global player from the Westerwald region, offering comprehensive engineering and production services to industrial clients both nationally and internationally. Their website is built on TYPO3 CMS and employs modern web technologies including jQuery and Bootstrap, with a focus on responsive design and user-friendly navigation. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism via Cookiebot. Security posture is moderate with HTTPS enabled and some best practices observed, but lacks explicit security headers and incident response information. Overall, the website is professional, trustworthy, and business-focused with no signs of malicious or suspicious activity.

K

KBB – Kulturveranstaltungen des Bundes in Berlin GmbH

kbb.eu

71

KBB – Kulturveranstaltungen des Bundes in Berlin GmbH is a prominent German cultural organization that manages and organizes major cultural events and festivals including the Berlinale, Berliner Festspiele with the Gropius Bau, and the Haus der Kulturen der Welt. The organization serves as a key cultural facilitator and partner, promoting arts and culture with a strong government affiliation. The website reflects a mature digital presence with a modern tech stack based on Next.js and Magnolia CMS, providing a rich user experience with detailed event information and multimedia content. Security posture is strong with HTTPS and cookie consent mechanisms in place, though some security headers could be enhanced. Privacy compliance is well addressed with comprehensive policies and GDPR adherence. Overall, the site is professional, trustworthy, and well-positioned in the cultural sector.

T

TOP-IX Consortium

top-ix.org

64

TOP-IX Consortium is a well-established Italian technology consortium operating since 2002, specializing in managing an Internet Exchange for traffic exchange in the Northwest Italy region. The organization supports technological innovation projects, streaming platforms, and services related to Cloud, Open Data, Big Data, and Social Innovation. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive service offerings targeting network providers, enterprises, public administrations, and academic institutions. Technically, the site is built on WordPress with modern libraries and includes privacy compliance tools such as iubenda and Matomo analytics, indicating a commitment to user privacy and data protection. Security posture is strong, evidenced by ISO 27001 certification and HTTPS enforcement, though DNSSEC is not enabled, representing a minor security gap. Overall, the site is trustworthy, professional, and compliant with GDPR, with room for improvement in incident response transparency and DNS security.

B

Berlinale Talents

berlinale-talents.de

63

Berlinale Talents is a well-established annual summit and networking platform affiliated with the Berlin International Film Festival, targeting creatives in film and drama series. The website effectively communicates its mission, upcoming events, and partner collaborations, positioning itself as a key player in the international film talent development space. The technical infrastructure leverages modern JavaScript libraries and Cloudflare DNS, ensuring reliable delivery and moderate performance. Security posture is solid with HTTPS and Cloudflare usage, though improvements in security headers and explicit privacy mechanisms are recommended. Overall, the site presents a professional and trustworthy digital presence with room for enhanced privacy compliance and security transparency.

I

Internationale Filmfestspiele Berlin

efm-berlinale.de

68

The European Film Market (EFM) is a premier international film and media industry event closely affiliated with the Berlinale film festival. It serves as a major marketplace and networking hub for film professionals, exhibitors, producers, startups, and industry stakeholders. The website reflects a mature digital presence with comprehensive content about market screenings, industry sessions, exhibitor services, and related programs. The site is well-branded, professionally designed, and offers clear navigation and mobile optimization. Technically, it employs modern JavaScript libraries and asynchronous loading to enhance performance and user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Privacy compliance is robust with a clear privacy policy hosted on a related domain and a detailed cookie consent banner. No critical vulnerabilities or suspicious content were detected, and the WHOIS data supports the legitimacy of the domain. Overall, the EFM website is a trustworthy, professional platform serving the media industry effectively.

L

L'OREAL

armanibeauty.com

73

ArmaniBeauty.com is an e-commerce platform representing the luxury beauty brand Armani Beauty, under the parent company L'OREAL. The website offers a wide range of beauty products including makeup, fragrances, skincare, and beauty services, targeting consumers interested in premium luxury cosmetics. The site is well-structured with clear navigation and rich content, supporting multiple regions and languages. Technically, it leverages Salesforce Commerce Cloud, modern JavaScript libraries, and includes cookie consent mechanisms, indicating a mature digital infrastructure. Security posture is generally good with HTTPS and service worker support, but lacks explicit security headers and a visible privacy policy, which are areas for improvement. The absence of WHOIS registration data for the domain is a concern, though the branding and structured data strongly suggest legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security practices.

S

Sally & Friends AG

hisally.ch

59

Sally & Friends AG is a Swiss-based company specializing in branding, digital marketing, development, design, and event management services. The company positions itself as a strategic partner for startups, SMEs, and large enterprises aiming to elevate their events and digital presence. Their key services include customer experience design, product engineering, digital growth and marketing, and event management. The website showcases a strong client portfolio, indicating a reputable market position within the media and technology sectors in Switzerland. Technically, the website is built using modern technologies such as Next.js and React, with Contentful as the CMS and Vimeo for video hosting. The site is well-optimized for performance and mobile devices, featuring professional design and clear navigation. However, there is room for improvement in security practices, particularly the implementation of security headers and publishing security policies. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, the absence of privacy and cookie policies, as well as incident response information, indicates compliance gaps. No WAF or blocking mechanisms were detected, allowing full content accessibility. Overall, the website presents a professional and trustworthy business front with excellent content quality and business credibility. Strategic recommendations include enhancing privacy compliance, implementing security headers, and publishing incident response and security policies to strengthen trust and regulatory adherence.

Mercedes-Benz Schweiz AG operates the official Mercedes-Benz website for Switzerland, offering a comprehensive range of luxury vehicles including sedans, SUVs, coupes, and electric models. The company provides extensive services such as new and used car sales, leasing, financial services, vehicle configurators, and after-sales support. The website reflects a strong market position as a premium automotive brand with a clear focus on customer experience and digital engagement. Technically, the site leverages modern frameworks like Vue.js and is built on Adobe Experience Manager, ensuring a performant, mobile-optimized, and accessible platform. Security posture is robust with HTTPS, consent management, and data protection officer contacts clearly provided, although explicit security policy and vulnerability disclosure pages are absent. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and Swiss data protection laws.

The International Music Score Library Project - Europe (IMSLP-EU) is a regional portal dedicated to providing free access to music scores stored on servers physically located in Europe. It operates independently from the main IMSLP project but shares similar objectives, focusing on compliance with European copyright regulations. The website offers access to scores, a music blog (IMSLP Journal), and forums for community engagement. The hosting is provided by Project Leonardo Limited, an Italian-based service provider, aligning with the European focus of the project. Technically, the website is built with basic HTML and CSS without modern frameworks or CMS detected. The site lacks mobile optimization and advanced accessibility features, and no analytics or tracking technologies are present. Security measures such as HTTPS and security headers are not confirmed in the provided data, indicating room for improvement in security posture. Privacy compliance is minimal, with a privacy policy linked externally but no cookie policy or consent mechanism. From a security perspective, no WAF or blocking mechanisms are detected, and the content is fully accessible. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosures suggests a low maturity level in security governance. The domain registration is consistent with the business purpose and geographic focus, enhancing trustworthiness. Overall, IMSLP-EU serves a niche audience interested in European-hosted music scores with a straightforward, functional website. Strategic improvements in security, privacy compliance, and technical modernization would enhance trust and user experience.

E

Ellisphere

ellisphere.com

67

Ellisphere is a leading French company specializing in business information services, focusing on data marketing, risk management, and compliance solutions. The company targets business professionals and enterprises seeking to optimize their data-driven marketing strategies and manage financial and regulatory risks effectively. Their market position is strong within the French finance sector, supported by a professional and content-rich website that reflects their expertise and leadership. Technically, the website is built on WordPress with a modern technology stack including jQuery, Google Tag Manager, Matomo, Hotjar, and Cookiebot for analytics and privacy compliance. The site is well-optimized for SEO and mobile devices, with good performance and accessibility standards, although some accessibility features could be enhanced. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms, but lacks explicit published security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency, which slightly impacts overall trust. Overall, Ellisphere presents a professional and trustworthy online presence with strong business credibility and technical maturity. The main risk lies in the opaque domain registration details, which should be addressed to improve trust and compliance posture.

J

Johner Institut

johner-institut.de

67

Johner Institut is a specialized consulting and software provider focused on medical technology manufacturers, helping them navigate complex regulatory environments to bring products to market efficiently. Their offerings include consulting, training, product testing, outsourcing services, and RegTech software solutions. The website is professionally designed, well-structured, and optimized for both desktop and mobile users, reflecting a mature digital presence. Technically, the site uses TYPO3 CMS with modern libraries like Bootstrap and jQuery, and is hosted behind Cloudflare for performance and security. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the domain and website content are consistent and trustworthy, with no blocking or suspicious elements detected.

C

Communicraft Ltd.

communicraft.com

57

Communicraft Ltd. is a well-established digital agency based in Dublin, Ireland, founded in 2001. The company specializes in web design, development, management, and strategic consultancy, with a strong focus on human-centered digital experiences. Their ISO 27001 certification underscores a commitment to information security, positioning them as a trusted partner for clients requiring secure and reliable digital solutions. The website reflects a professional and modern digital presence, showcasing client testimonials and case studies that reinforce their market position. Technically, the website employs modern frameworks such as Bootstrap and integrates multiple analytics platforms including Matomo, Hotjar, Google Tag Manager, and Simple Analytics, all managed with a cookie consent mechanism to ensure privacy compliance. The site is mobile-optimized, fast-loading, and accessible, with good SEO practices evident in metadata and structured data. However, explicit security headers are not detected, suggesting room for improvement in HTTP security configurations. From a security perspective, the company demonstrates strong practices through ISO 27001 certification and secure web application maintenance. The presence of cookie consent and privacy policies indicates GDPR awareness and compliance. The absence of a published vulnerability disclosure policy or incident response contact is a minor gap. The WHOIS data is missing or unavailable, which raises questions about domain registration transparency but does not directly impact the website's operational security. Overall, Communicraft presents a low-risk profile with a mature digital infrastructure and strong business credibility. Strategic recommendations include enhancing HTTP security headers, publishing a vulnerability disclosure policy, and clarifying domain registration details to improve trustworthiness further.

F

Furet du Nord

furet.com

64

Furet du Nord operates a professional and comprehensive French online bookstore offering a wide range of books, ebooks, and cultural products. The website is well-structured, targeting French-speaking consumers interested in literature and related cultural goods. The business model combines e-commerce with physical stores, supported by a professional digital infrastructure based on Magento. The site integrates modern analytics and consent management tools, reflecting a mature digital presence. However, the absence of WHOIS registration data raises concerns about domain legitimacy that should be further investigated. Security posture is generally good with HTTPS and privacy compliance, but could be improved by implementing additional security headers and publishing explicit security policies. Overall, the website presents a trustworthy and professional front for a large retail business in France.

A

Association Môm’Art

mom-art.org

43

The website mom-art.org represents Association Môm’Art, a French non-profit organization dedicated to promoting family visits to museums through educational resources, charters, and participative content. The site is well-structured, primarily in French, targeting families and cultural institutions. Technically, it is built on WordPress with the Astra theme, hosted by OVH sas, and uses common web technologies including Google Analytics and reCAPTCHA for security on forms. The security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR explicit indicators. Contact is mainly via forms and social media, with no direct phone or email contacts clearly provided. Overall, the site is trustworthy and professionally maintained but could improve privacy and security practices.

M

Musée Matisse de Nice

musee-matisse-nice.org

53

The Musée Matisse de Nice is a government-affiliated cultural institution dedicated to the life and works of Henri Matisse. The website serves as the official digital presence, providing comprehensive information about exhibitions, collections, visitor information, and educational activities. It targets art enthusiasts, tourists, families, and researchers, positioning itself as a key cultural museum within the Ville de Nice museum network. The business model is primarily non-profit and government-supported, focusing on cultural preservation and public engagement. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and jQuery, integrating Matomo for analytics and Complianz for GDPR-compliant cookie management. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. The use of trusted third-party services for ticketing and online shop enhances user experience. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and a public security policy or vulnerability disclosure page. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain trust assessment, but the presence of official certifications and government logos supports legitimacy. Overall, the website is professional, secure, and compliant with privacy regulations, offering a trustworthy platform for visitors and stakeholders. Strategic improvements in security headers and incident response transparency could further enhance its security posture.

O

Office de Tourisme de l'Avesnois

tourisme-avesnois.com

52

The Office de Tourisme de l'Avesnois operates a professional and comprehensive tourism website focused on promoting the Avesnois region in France. The site offers rich content including event agendas, accommodation, dining, cultural and natural attractions, targeting tourists and visitors interested in regional experiences. The website is well-branded, mobile-optimized, and uses modern technologies such as WordPress, Yoast SEO, and Matomo analytics, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS enforced and secure forms, though improvements could be made by adding security headers and a cookie consent mechanism to enhance GDPR compliance. The absence of public WHOIS data reduces domain transparency but does not detract from the professional appearance and trustworthiness of the site content. Overall, the website is a reliable and effective platform for regional tourism promotion.

C

Communauté d'Agglomération de Cambrai

agglo-cambrai.fr

59

The Communauté d'Agglomération de Cambrai is a local government entity serving the Cambrai region in France. The website provides comprehensive information about its public services including economic development, transport, environmental management, cultural activities, and administrative resources. It targets residents and stakeholders within the agglomeration area, offering accessible and structured content to support community engagement and service delivery. Technically, the website is built on TYPO3 CMS with modern web technologies such as Bootstrap and jQuery, ensuring a responsive and user-friendly experience. The site includes cookie consent mechanisms and complies with GDPR requirements, reflecting a mature approach to privacy and data protection. However, some accessibility features are basic and could be enhanced. From a security perspective, the site uses HTTPS and implements cookie consent but lacks explicit security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces the trust score slightly, but the presence of official partner logos and consistent branding supports legitimacy. Overall, the website is professional, trustworthy, and well-suited for its public sector role. Strategic improvements in security transparency, accessibility, and WHOIS data availability would further strengthen its posture.

The Office de tourisme du Cambrésis operates a comprehensive regional tourism website aimed at promoting the Cambrésis area in France. The site targets tourists, local visitors, and professionals interested in the region, offering services such as event promotion, accommodation and restaurant listings, group catalogues, brochures, and ticketing. The business model is focused on tourism promotion and visitor information, positioning itself as a key regional authority in hospitality and cultural tourism. Technically, the website employs modern web technologies including Bootstrap 5, jQuery, Owl Carousel, Matomo analytics, and Google Tag Manager, combined with a cookie consent manager (tarteaucitron) to ensure privacy compliance. The site is mobile-optimized with good SEO and accessibility basics, though some improvements in security headers could be made. From a security perspective, the site enforces HTTPS and uses privacy-conscious analytics configurations. However, no explicit security headers were detected, and no incident response or security policy information is publicly available. The WHOIS data is missing, which limits domain trust analysis, but the professional content and official contact information support legitimacy. Overall, the website presents a solid digital presence with good content quality and privacy compliance, though it would benefit from enhanced security headers and transparency around security policies. The lack of WHOIS data is a concern but does not outweigh the positive trust signals from the site content and contact details.

Les Rues des Vignes is the official website of the commune Les Rues des Vignes located in France. It serves as a local government portal providing residents and visitors with municipal news, administrative procedures, community events, and information about local heritage. The site targets the local population and those interested in the commune's activities and services. The business model is that of a public service information platform, with a focus on transparency and community engagement. Technically, the website is built on TYPO3 CMS, leveraging modern frontend technologies such as Bootstrap, jQuery, and FontAwesome. It integrates open-source tools like Leaflet for maps and Tarteaucitron.js for cookie consent management, reflecting a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the website uses HTTPS and includes a cookie consent mechanism, indicating compliance with privacy regulations such as GDPR. However, explicit security headers are not clearly detected, and there is no dedicated security policy or incident response information available. The absence of WHOIS data from the AFNIC server limits the ability to fully verify domain legitimacy, though the official nature of the site and consistent branding support trustworthiness. Overall, the website presents a solid, trustworthy platform for local government communication, with room for improvement in security header implementation and accessibility compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility standards to further strengthen the site's security posture and user inclusivity.

T

Terre de Provence Tourisme

myterredeprovence.fr

54

Terre de Provence Tourisme operates as the official regional tourism office for the Provence area in France, providing comprehensive information on local villages, accommodations, cultural sites, events, gastronomy, and leisure activities. The website serves as a central hub for tourists seeking to explore the region, offering downloadable guides and interactive content. Technically, the site is built on the SPIP CMS platform, leveraging Bootstrap for responsive design and jQuery for interactivity. It integrates Google Tag Manager and Google Analytics for visitor tracking and uses Tarteaucitron for cookie consent management. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but could improve by adding more security headers and enhancing incident response visibility. The WHOIS data is privacy protected, which is typical for such public-facing tourism sites. Overall, the website is professional, accessible, and trustworthy, with no signs of blocking or adult content.

W

WIKA Alexander Wiegand SE & Co. KG

wika.com

79

WIKA Alexander Wiegand SE & Co. KG is a well-established German company specializing in industrial measurement technology, offering a wide range of products including pressure gauges, temperature sensors, level and flow measurement devices, and calibration services. The company targets industrial sectors such as energy and manufacturing, providing both products and comprehensive services including IIoT solutions. The website reflects a mature digital presence with professional design, clear navigation, and extensive product and service information. Technically, the site uses modern frameworks like Bulma CSS, FontAwesome icons, and integrates Google Tag Manager and Consentmanager for analytics and privacy compliance. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security policy or incident response page is found. WHOIS data is unavailable, which slightly reduces transparency but the overall trustworthiness remains high based on website content and branding. Strategic recommendations include enhancing security headers, publishing a security policy, and verifying domain registration details for full trust assurance.