Security Directory

B

Baufragen Software GmbH

baufragen-software.com

51

Baufragen Software GmbH is a specialized software provider focused on the construction industry, offering platforms such as Baufragen.de and Bauspot.de that serve as expert knowledge bases and social media platforms for construction professionals. The company targets a broad audience including architects, planners, craftsmen, real estate professionals, and building authorities, positioning itself as a key player in digital transformation within the construction sector. Founded in 2016 and based in Germany, the company maintains a professional online presence with over 270,000 users engaged in its digital community. Technically, the website employs modern web technologies including jQuery, Cookiebot for GDPR-compliant cookie consent, and Google Tag Manager for analytics and marketing. The site is hosted by Cronon GmbH and uses HTTPS, ensuring secure communications. While the site demonstrates good mobile optimization and SEO practices, there is room for improvement in accessibility and security headers implementation. From a security perspective, the site benefits from HTTPS and a robust cookie consent mechanism but lacks visible security policies or incident response information. No critical vulnerabilities or suspicious activities were detected. The WHOIS data aligns well with the business claims, indicating a legitimate and consistent domain registration. Overall, Baufragen Software GmbH presents a trustworthy and professional digital footprint with good compliance to privacy regulations and a solid technical foundation. Strategic improvements in security headers, incident response transparency, and contact information visibility could further enhance trust and security posture.

A

ASKÖ Sport GmbH

abc-ooe.at

45

ASKÖ Sport GmbH operates the ABC Bewegungscenter Oberösterreich, a regional sports and event center located in Linz, Austria. The company provides a range of services including sports activities, seminar facilities, accommodation, and restaurant services, targeting a general audience interested in sports and events. The website reflects a medium-sized regional business with consistent branding and clear contact information, supporting its market position as a trusted local service provider. Technically, the website is built on the Internetkonzepte.at CMS platform and utilizes modern JavaScript libraries such as jQuery, Owl Carousel, and integrates Google Analytics and Facebook SDK for tracking and marketing purposes. The site is mobile optimized with good navigation and SEO practices, although some accessibility features are basic. Performance is moderate, with room for improvement in loading speed and technical modernization. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, indicating basic privacy compliance. However, it lacks explicit security policies, incident response information, and security headers, which are recommended to enhance its security posture. No vulnerabilities or exposed sensitive data were detected, and the WHOIS data confirms the legitimacy of the domain and company. Overall, the website presents a professional and trustworthy digital presence with moderate technical and security maturity. Strategic improvements in security policies, technical modernization, and enhanced privacy compliance would further strengthen the site's reliability and user trust.

I

Internetkonzepte.at GmbH

internetkonzepte.at

46

Internetkonzepte.at GmbH is a small Austrian technology company specializing in custom web and software development, content management systems, hosting, and related IT services. With over 20 years of experience and numerous client references, the company holds a solid market position in the Austrian and German-speaking business sectors. Their website reflects a professional and consistent brand image, targeting businesses seeking tailored internet solutions. The company emphasizes security and support, with a 24/7 support offering and a strong partnership with their hosting provider myNET.at. Technically, the website employs a modern tech stack including jQuery, Font Awesome, and Matomo analytics, running on a proprietary CMS developed by the company. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is strong with HTTPS and no visible vulnerabilities, but lacks some advanced security headers and formal policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the security posture is good, with no detected vulnerabilities or blocking mechanisms. The WHOIS data confirms the legitimacy and consistency of the business registration. Strategic improvements include implementing cookie consent, publishing security and incident response policies, and adding security headers to enhance protection and compliance.

Ö

ÖFT - Österr. Fachverband für Turnen

oeft.at

49

Turnsport Austria is the official Austrian federation representing approximately 450 gymnastics clubs with over 90,000 members across various disciplines including artistic gymnastics, rhythmic gymnastics, trampoline, sport aerobics, and more. The organization serves both grassroots and elite sports communities, providing event organization, training, and certification services. The website reflects a well-maintained digital presence with comprehensive event calendars, news updates, and social media integration, targeting athletes, coaches, clubs, and sports enthusiasts in Austria. Technically, the site uses a custom CMS by Internetkonzepte.at, leveraging modern JavaScript libraries such as jQuery and Owl Carousel, and is mobile responsive with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, indicating stable and accessible infrastructure. Overall, the site demonstrates a mature digital footprint appropriate for a national sports federation.

A

ASKÖ Tirol

askoe-tirol.at

40

ASKÖ Tirol is a well-established regional sports association based in Innsbruck, Austria, dedicated to promoting diverse sports activities, health, and fitness programs within the Tirol region. The organization supports local sports clubs, organizes championships, and offers educational courses and community events. The website reflects a professional and community-focused business model with a strong regional presence and partnership ecosystem anchored by the ASKÖ Bundesorganisation. Technically, the website uses a traditional CMS platform with modern JavaScript libraries and is mobile-optimized, though there is room for improvement in security headers and incident response transparency. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks advanced security policies or vulnerability disclosure mechanisms. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information and social media engagement, making it a reliable resource for its target audience.

A

ASKÖ Steiermark

askoe-steiermark.at

10

ASKÖ Steiermark is a regional non-profit sports association based in Graz, Austria, focused on promoting diverse sports activities, memberships, training, and community engagement within the Styria region. The organization operates under the umbrella of the ASKÖ Bundesorganisation, providing services such as sports center facilities, educational programs, and project funding. The website reflects a well-structured and professional digital presence, targeting sports clubs, athletes, and the general public interested in sports in Styria. Technically, the site uses a moderate tech stack including jQuery, FontAwesome, and a proprietary CMS by Internetkonzepte.at, with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is strong with clear cookie consent and a comprehensive privacy policy. Overall, the site is trustworthy and professionally maintained, with clear contact information and partner relationships.

A

ASKÖ Salzburg

askoe-salzburg.at

47

ASKÖ Salzburg is a well-established regional non-profit sports association based in Salzburg, Austria, focused on promoting diverse sports activities, supporting local sports clubs, and providing training and community programs. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to sports enthusiasts and community members in the region. Technically, the site uses a modern JavaScript stack including jQuery and FontAwesome, built on the Internetkonzepte.at CMS platform, and is mobile-optimized with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response disclosures. Overall, the site is trustworthy, GDPR compliant, and provides comprehensive contact information and partner links.

A

ASKÖ Oberösterreich

askoe-ooe.at

52

ASKÖ Oberösterreich is a regional non-profit sports association dedicated to promoting diverse sports activities and supporting sports clubs in Upper Austria. The organization provides a wide range of services including club support, sports education, fitness and health programs, and competitive sports event organization. It serves sports clubs, athletes, and community members, positioning itself as a key regional player in sports promotion. The website reflects a professional and consistent brand image aligned with its mission. Technically, the website uses a moderate technology stack including jQuery, FontAwesome, Owl Carousel, and a proprietary CMS by Internetkonzepte.at. The site is mobile optimized and performs moderately well, with basic SEO and accessibility features. Privacy and cookie policies are present and GDPR compliant, though explicit security policies and incident response contacts are not found. From a security perspective, the site enforces HTTPS and uses secure external scripts but lacks advanced security headers and a vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website's claims, indicating a legitimate and established organization. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic improvements in security headers, incident response transparency, and accessibility could enhance its security posture and user trust.

A

ASKÖ Niederösterreich

askoenoe.at

48

ASKÖ Niederösterreich is a well-established regional non-profit sports association dedicated to promoting diverse sports activities and supporting sports clubs in Lower Austria. The organization offers a variety of projects, training programs, and community services aimed at athletes, sports clubs, and enthusiasts. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its target audience. Technically, the website employs a modern technology stack including jQuery, Font Awesome, and several UI libraries, running on a custom CMS by Internetkonzepte.at. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Privacy and cookie policies are implemented with GDPR compliance, and social media integration is active, primarily via Facebook. From a security perspective, the site uses HTTPS and has basic security best practices in place, though it lacks advanced security headers and explicit incident response or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data confirms the legitimacy and consistency of the domain registration with the business entity. Overall, the website presents a low-risk profile with a solid foundation for business credibility and user trust. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure could further enhance the security posture and compliance maturity.

A

ASKÖ Kärnten

askoe-kaernten.at

47

ASKÖ Kärnten is a well-established regional sports association based in Kärnten, Austria, focused on promoting diverse sports activities, fitness programs, and supporting local sports clubs. The organization targets sports enthusiasts and community members, providing events, courses, and youth development initiatives. The website reflects a professional and consistent brand presence with clear navigation and relevant content in German. Technically, the site uses a custom CMS (Internetkonzepte.at CMS) with common JavaScript libraries and social media integration, delivering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and incident response disclosures. Overall, the domain registration aligns with the business claims, indicating legitimacy and trustworthiness.

A

ASKÖ Burgenland

askoe-burgenland.at

50

ASKÖ Burgenland is a regional non-profit sports association based in Austria, focused on promoting diverse sports activities, supporting local sports clubs, and organizing events and training programs. The organization serves athletes, trainers, and the general public within the Burgenland region, positioning itself as a key regional player in sports promotion and community engagement. The website reflects this mission with comprehensive content about services, events, and funding opportunities. Technically, the site uses a custom CMS (Internetkonzepte.at CMS) and incorporates modern JavaScript libraries such as jQuery, Owl Carousel, and Fancybox, indicating a moderate level of digital maturity. The site is mobile optimized and provides clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses trusted external libraries but lacks explicit security headers and published security policies. Privacy compliance is strong with clear GDPR-aligned privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-maintained, with room for improvement in security policy transparency and technical enhancements.

A

ASKÖ Bundesorganisation

askoe.at

50

ASKÖ Bundesorganisation is the largest Austrian sports umbrella organization dedicated to promoting sports and physical culture across Austria. It serves a broad audience including sports clubs, athletes, and community members, offering services such as sports promotion, health-oriented activities, youth sports, education, and events. The organization maintains a strong network of regional subsidiaries and partners, reinforcing its market position in the non-profit sports sector. Technically, the website is built on the Internetkonzepte.at CMS and employs modern web technologies including jQuery, Font Awesome, and various UI and carousel libraries. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features are basic. Performance is moderate, with asynchronous loading of scripts enhancing user experience. From a security perspective, the website enforces HTTPS and uses some best practices such as async script loading and no visible sensitive data exposure. However, it lacks explicit security headers and a published incident response policy. Privacy compliance is strong, with clear GDPR-aligned privacy and cookie policies and consent mechanisms. Overall, the website presents a professional, trustworthy, and well-maintained digital presence for a large non-profit organization. It is safe for general audiences and demonstrates good privacy and security hygiene, though there is room for improvement in security headers and incident response transparency.

Ö

ÖFT - Österr. Fachverband für Turnen

turnsport.at

49

Turnsport Austria is the official Austrian gymnastics federation representing approximately 450 clubs and over 90,000 members across multiple gymnastics disciplines. The organization serves both grassroots and elite sports communities, providing event organization, trainer licensing, and promoting safe sport and anti-doping initiatives. The website is well-structured, professionally designed, and provides comprehensive information and news relevant to its audience. Technically, the site uses a modern tech stack including jQuery, Font Awesome, and Owl Carousel, and is built on the Internetkonzepte.at CMS platform. It is mobile optimized and SEO friendly. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are lacking. Privacy compliance is strong with a clear privacy and cookie policy and consent mechanism. Overall, the site is trustworthy and credible, reflecting a mature non-profit sports federation.

W

WestLotto

westlotto.de

70

WestLotto.de is the official state lottery operator for North Rhine-Westphalia (NRW), Germany, providing a range of lottery and gaming services including LOTTO, Eurojackpot, KENO, TOTO, and GlücksSpirale. The website targets adult residents of NRW and positions itself as a secure and reliable state-run gaming platform. The business model is focused on regulated lottery services under government oversight, with a strong regional market presence.

S

Stiftung Deutsche Sporthilfe

sporthilfe.de

54

Stiftung Deutsche Sporthilfe is a well-established non-profit organization dedicated to supporting young and elite athletes in Germany. With a history dating back to 1967, it plays a pivotal role in private sports funding, contributing significantly to Germany's international sports successes. The website reflects a professional and comprehensive presentation of their services, partnerships, and events, targeting donors, sponsors, and sports enthusiasts. Technically, the site is built on TYPO3 CMS with modern integrations such as Google Tag Manager, reCAPTCHA, and consent management, ensuring a good digital maturity level. Security posture is strong with HTTPS, secure forms, and privacy compliance, though explicit security policies and vulnerability disclosures are absent. Overall, the site is trustworthy, well-branded, and provides a positive user experience with clear navigation and rich content.

L

Ludwig & Co

ludwig-holz.de

52

Ludwig & Co is a well-established German company specializing in the import and trade of wood products, particularly for construction and packaging. With over 100 years of experience, the company positions itself as a leading expert in the wood industry, offering a range of products including Sperrholz/LUCOply, Nadelschnittholz, and Sibirische Lärche. The website reflects a professional and consistent brand image, emphasizing sustainability certifications such as FSC® and PEFC. Technically, the site is built on Joomla CMS with modern UIkit framework and includes GDPR-compliant cookie consent mechanisms. Security practices include HTTPS enforcement and email obfuscation, though some HTTP security headers are not explicitly detected. Contact information is comprehensive, listing multiple experts with direct phone and email contacts. No social media or analytics tracking is evident, indicating a privacy-conscious approach.

Gewerbeverein Turbenthal und Umgebung is a local business association representing approximately 130 members from the municipalities of Turbenthal, Wila, Wildberg, and Zell in Switzerland. The association focuses on supporting local businesses across various sectors including retail, manufacturing, hospitality, and services. Their activities include organizing events such as the Gewerbeausstellung GEWA trade exhibition, providing networking platforms, and contributing to the local economy by fostering employment and training young professionals. The website is well-structured, primarily in German, and targets local businesses and residents in the Tösstal region. It uses the ClubDesk CMS platform and integrates modern web technologies such as jQuery, FontAwesome, and Owl Carousel.

M

Ministerium für Ernährung, Ländlichen Raum und Verbraucherschutz Baden-Württemberg

efre-bw.de

62

The EFRE Baden-Württemberg website serves as the official regional government portal for the European Regional Development Fund (EFRE) in the German state of Baden-Württemberg. It provides comprehensive information on funding programs, project examples, current news, and guidance for applicants. The site targets a broad audience including citizens, businesses, and public institutions interested in regional development funding. The portal is well-positioned as a trusted government resource, supported by official branding and EU co-funding acknowledgments. Technically, the website employs a modern technology stack including jQuery, Matomo analytics, and custom CMS solutions tailored for Baden-Württemberg's government portals. It demonstrates good mobile optimization, accessibility compliance, and moderate performance. The hosting and DNS infrastructure aligns with regional academic and government networks, enhancing trustworthiness. From a security perspective, the site enforces HTTPS, uses captcha mechanisms to prevent automated abuse, and implements cookie consent in line with GDPR requirements. While no explicit security policy or incident response contacts are published, the site shows good baseline security hygiene with no visible vulnerabilities or exposed sensitive data. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic recommendations include publishing a dedicated security policy, enhancing security headers, and providing incident response contacts to further strengthen trust and security maturity.

The website klosterkilbi.ch represents the traditional Swiss festival 'Klosterkilbi' organized by the Musikgesellschaft St. Urban. It serves as an informational platform for visitors and participants, providing event dates, program details, and links to social media. The site is built on the ClubDesk Vereinssoftware platform, utilizing modern JavaScript libraries such as jQuery, Featherlight, and Owl Carousel to enhance user experience. The design is consistent and mobile-optimized, offering clear navigation and relevant content for its regional audience. Security posture is adequate with HTTPS usage and no visible vulnerabilities, though security headers and explicit policies are absent. Privacy compliance is basic with a privacy policy and cookie consent implemented, but GDPR compliance is not explicitly confirmed. Overall, the site is trustworthy and professionally maintained, reflecting a small community organization with a long-standing tradition.

The website represents the official online presence of the municipality of Fischbach in the canton of Luzern, Switzerland. It serves as an informational portal providing residents and visitors with access to community news, political information, administrative services, and local events. The site is clearly targeted at local citizens and stakeholders, offering relevant municipal content in German. The business model is that of a government service provider, focusing on transparency and community engagement. Technically, the website employs modern front-end technologies including Bootstrap 5 for responsive design, jQuery, and Swiper.js for interactive elements. It uses Matomo for analytics, reflecting a privacy-conscious approach. The site is mobile-optimized and shows good navigation clarity and content relevance. However, no CMS or hosting provider details were detected, and accessibility features are basic. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, indicating GDPR compliance. No critical vulnerabilities or exposed sensitive data were found. However, security headers are missing, and there is no explicit security or incident response policy published. The WHOIS data confirms the domain's legitimacy as an official municipal site with consistent registration details. Overall, the website is professional, trustworthy, and well-suited for its purpose. Strategic improvements could include adding security headers, publishing terms of service and incident response contacts, and enhancing accessibility compliance to further strengthen security posture and user trust.

G

Gemeinde Ermatingen

ermatingen.ch

48

Gemeinde Ermatingen operates as the official municipal government website for the community of Ermatingen in Switzerland. It provides residents and visitors with comprehensive information about local government services, community events, public notices, and administrative contacts. The website targets local citizens and stakeholders, serving as a central hub for municipal communication and service delivery. The business model is typical of a government entity, focusing on transparency, accessibility, and community engagement. From a technical perspective, the website employs a modern technology stack including jQuery, Bootstrap, Isotope, Fancybox, and Matomo analytics, indicating a moderate level of digital maturity. The site is mobile optimized and features interactive elements such as digital tours and event calendars. The CMS appears to be a custom or specialized system (Simpli CMS), supporting structured content management. Security posture is adequate with HTTPS enforced and no visible exposure of sensitive data. However, the absence of security headers and cookie consent mechanisms suggests room for improvement in compliance and defense-in-depth strategies. The use of Matomo analytics reflects a privacy-conscious approach to user tracking, though GDPR compliance could be enhanced by adding explicit cookie consent and privacy notices. Overall, the website is trustworthy and professional, with clear contact information and consistent branding. The risk level is low, but strategic enhancements in security policies, privacy compliance, and technical hardening are recommended to maintain and improve trust and regulatory adherence.

S

Stiftung Mercator

aufruhr-magazin.de

56

AufRuhr Magazin is a non-profit media publication operated under the Stiftung Mercator umbrella, focusing on social, cultural, and environmental topics such as European integration, climate protection, and cultural education. The website serves a general audience interested in these areas, providing articles, videos, and newsletters to disseminate educational content. The business model is centered on non-commercial media outreach supported by a reputable foundation, positioning itself as a niche but trusted source in its domain. Technically, the website is built on WordPress using the Nucleus theme and incorporates modern web technologies including jQuery, Yoast SEO, and Borlabs Cookie for GDPR-compliant cookie management. It employs push notifications via OneSignal and uses Matomo and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good SEO practices and moderate performance. From a security perspective, the site enforces HTTPS and implements JavaScript error logging and cookie consent mechanisms. However, explicit security headers like CSP or X-Frame-Options are not evident, and no formal security policy or incident response contacts are published. No vulnerabilities or exposed sensitive data were detected, indicating a solid security posture for a non-profit media site. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with a strong affiliation to Stiftung Mercator enhancing its credibility. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility compliance to further strengthen its security and user trust.

א

אוריין בע״מ

orian.com

62

Orian Ltd. is a publicly traded Israeli logistics company offering comprehensive supply chain management solutions. The company operates as part of an international group, providing sea and air freight, domestic transportation, customs brokerage, e-commerce logistics, and specialized services such as cargo insurance and clinical trials logistics. The website is professionally designed, primarily in Hebrew, targeting business clients and investors. Technical infrastructure includes modern JavaScript libraries, Google Analytics, and Tag Manager, indicating a mature digital presence. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks explicit security headers and detailed privacy compliance mechanisms. The absence of WHOIS data raises concerns about domain registration legitimacy, though the business content and investor relations links support its authenticity. Strategic improvements in privacy policies, security headers, and incident response disclosures are recommended to enhance trust and compliance.

The Deutsche Stiftung für Engagement und Ehrenamt operates the DSEE Lernportal, a dedicated educational platform aimed at supporting volunteers and engaged individuals in non-profit organizations. The portal offers a variety of learning resources including courses, webinars, and video content focused on topics such as digitalization, financing, member recruitment, and organizational management. The platform is positioned as a trusted resource within the German volunteer sector, providing free access to educational materials and fostering community growth. Technically, the website is built on the Totara LMS platform, which is based on Moodle, utilizing modern JavaScript libraries such as YUI and jQuery, and includes accessibility and mobile optimization features. The infrastructure supports a good user experience with moderate performance and solid SEO practices. The site enforces HTTPS and employs secure session management, though it lacks some advanced security headers and a formal security policy page. From a security perspective, the site demonstrates a good posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. However, there is no explicit incident response or vulnerability disclosure information available. The domain registration aligns well with the organization's identity, enhancing trustworthiness. Overall, the DSEE Lernportal is a professionally maintained, secure, and privacy-conscious platform serving the non-profit volunteer community in Germany. Strategic improvements in security policy transparency and incident response readiness could further strengthen its security posture and user trust.

株

株式会社カビネット

kabinett.com

58

株式会社カビネット is a Japanese IT company specializing in cloud services, software system development, and design content production. Established in 1998, it serves primarily business clients in Japan with a focus on delivering customer value through IT and communication. The company maintains a professional web presence with clear service descriptions, case studies, and recruitment information, positioning itself as a reliable mid-sized IT service provider. Technically, the website uses modern JavaScript libraries such as jQuery and Slick Carousel, and integrates Google Analytics for visitor tracking. The site is mobile-optimized and well-structured with good SEO practices. However, there is no visible cookie consent mechanism, which is a compliance gap given the use of tracking scripts. From a security perspective, the website uses HTTPS and displays trust certifications like the Privacy Mark and Secom Trust Systems badge, indicating a commitment to privacy and security. Nonetheless, the absence of DNSSEC, security headers, and explicit security or incident response policies suggests room for improvement in security posture. Overall, the website is professional, trustworthy, and functional with moderate technical sophistication. Strategic improvements in privacy compliance and security practices would enhance its risk profile and user trust.

T

Thurgau Golf

thurgaugolf.ch

51

Thurgau Golf is a regional sports organization dedicated to promoting golf in the Thurgau canton of Switzerland. The organization primarily focuses on organizing annual golf championships including the Thurgauer Golf Meisterschaft and Senioren Meisterschaft, fostering youth development, and supporting senior players. The website serves as an information hub for tournament details, results, and organizational information, targeting golf enthusiasts and players in the region. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site is mobile optimized and includes SEO best practices such as structured data and meta tags. Security posture is solid with HTTPS enforced and a GDPR-compliant cookie consent mechanism, though it lacks advanced security headers and explicit incident response policies. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

H

Haus der Flüsse - Natura 2000-Informationszentrum des Biosphärenreservates Mittelelbe

haus-der-fluesse.de

58

Haus der Flüsse is a regional informational and educational center dedicated to the Biosphärenreservat Mittelelbe in Germany. It provides visitors with educational exhibits, accessibility services, and organizes events related to nature conservation. The website is well-structured, professionally designed, and targets a broad audience including families, educational groups, and people with disabilities. The business operates as a non-profit or government-affiliated entity with a strong emphasis on accessibility and environmental awareness. Technically, the site is built on TYPO3 CMS with modern frameworks like Bootstrap and jQuery, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information.

G

Gartenreich - Biosphärenreservat Mittelelbe

gartenreich.net

58

The website www.gartenreich.net represents the Gartenreich Dessau-Wörlitz, a UNESCO World Heritage site located within the Biosphärenreservat Mittelelbe in Germany. It serves as an informational and cultural heritage platform promoting the historical and environmental significance of the region. The site targets general audiences interested in cultural tourism, environmental education, and heritage preservation. The business model is primarily informational and non-commercial, focusing on education and tourism promotion. Technically, the website is built on TYPO3 CMS with modern frontend libraries such as Bootstrap 4.6, jQuery 3.6, Slick Carousel, and Fancybox. The site is mobile-optimized and includes accessibility features like contrast mode and font size adjustments. Performance is moderate with good SEO and accessibility practices. However, no explicit security headers were detected, and no analytics or tracking scripts were found in the provided content. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. No incident response or vulnerability disclosure policies are publicly available. The site shows no signs of malware or phishing but would benefit from enhanced security headers and transparency regarding security policies. Overall, the website is professionally designed and trustworthy in content but has gaps in domain registration transparency and security policy disclosures. Strategic improvements in security headers, WHOIS registration clarity, and incident response documentation are recommended to enhance trust and compliance.

B

Biosphärenreservat Mittelelbe

mittelelbe.com

58

The website www.mittelelbe.com represents the Biosphärenreservat Mittelelbe, a well-established and significant biosphere reserve in Germany, focusing on nature conservation, education, and tourism. It is part of a larger UNESCO Biosphärenreservat Flusslandschaft Elbe partnership and provides rich content about its projects, visitor information, and events. The site targets nature enthusiasts, tourists, and educational groups, operating primarily as a non-profit or government-affiliated entity. Technically, the website is built on TYPO3 CMS with modern web technologies including Bootstrap and jQuery. It is mobile-optimized, accessible, and includes a cookie consent mechanism compliant with GDPR. The site loads moderately fast and has good SEO and accessibility features. However, no explicit security headers were detected, and no contact emails or phone numbers are directly visible, which could be improved. Security-wise, the site uses HTTPS and has a cookie consent banner, indicating a good baseline security posture. The absence of WHOIS data for the domain is a notable anomaly that reduces trustworthiness and should be investigated further. No signs of malware, phishing, or adult content were found, and the site appears safe for general audiences. Overall, the website is professional and trustworthy in content and presentation but would benefit from enhanced transparency in domain registration and improved security headers. Strategic recommendations include verifying domain registration details, publishing a vulnerability disclosure policy, and adding explicit contact information to improve business credibility and user trust.

H

Hopkins Architects

hopkins.co.uk

48

Hopkins Architects is an established architectural practice with over 40 years of experience, focusing on clear and logical design, material honesty, and contextual respect. The website showcases a broad portfolio of architectural projects across various sectors including education, healthcare, hospitality, and civic culture. The technical infrastructure employs modern JavaScript libraries such as jQuery, HeadJS, and lazy loading techniques, indicating a moderate level of digital maturity. However, the site lacks visible privacy and cookie policies, and no contact emails or phone numbers are explicitly provided on the homepage, which may impact user trust and compliance. Security posture is moderate with no detected security headers and incomplete WHOIS data due to domain naming rules, though the site is accessible without WAF or blocking mechanisms. Overall, the site is professional and content-rich but would benefit from enhanced privacy compliance and security best practices.

L

LPO Arkitekter

lpo.no

60

LPO Arkitekter is Norway's largest independent architectural firm specializing in architecture for cities, places, buildings, and spaces with a strong focus on innovation, sustainability, and inclusive design processes. The company positions itself as a leader in the Norwegian architectural market, serving a broad audience including municipalities, developers, and the general public interested in urban development. Their business model centers on delivering comprehensive architectural and urban planning services with an emphasis on human-centric solutions. Technically, the website employs modern web technologies such as jQuery, Google Analytics, Google Tag Manager, and Plausible Analytics for tracking, alongside lazy loading for performance optimization. The site is mobile-optimized and features good SEO practices, although some accessibility features could be enhanced. The infrastructure appears stable and professionally maintained, with no signs of outdated or vulnerable libraries. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several security headers and does not provide a visible cookie consent mechanism or detailed privacy and security policies, which are important for GDPR compliance. The WHOIS data is not publicly available due to Norid's policies, but the domain and website content align with a legitimate and professional business entity. Overall, the website presents a strong business credibility and technical foundation but would benefit from improved privacy compliance and security best practices to enhance trust and regulatory adherence.

B

Boussole21

boussole21.ch

52

Boussole21 is a Swiss government-supported online tool designed to assist project managers and organizations in evaluating the sustainability of their projects using a comprehensive set of 20 criteria. The platform offers a user-friendly interface with collaborative and modular features, enabling users to generate understandable and detailed sustainability reports. The website is professionally designed, mobile-optimized, and consistent with its branding, reflecting a niche but important role in sustainable development assessment within Switzerland. Technically, the site employs modern frontend technologies including jQuery, Bootstrap, and TinyMCE, built on a custom CMS likely using Laravel Blade templates. Performance is moderate with good mobile responsiveness, though accessibility and SEO optimizations are basic. Security practices include HTTPS usage but lack visible security headers and cookie consent mechanisms, indicating room for improvement in compliance and protection. From a security perspective, the website shows no signs of blocking or WAF interference, no exposed sensitive data, and no detected vulnerabilities. However, the absence of cookie policies, security headers, and incident response information suggests a moderate security posture. WHOIS data aligns well with the website's Swiss government affiliation, supporting legitimacy and trustworthiness. Overall, Boussole21 presents a trustworthy and professional online presence with a clear business focus but would benefit from enhanced privacy compliance, security hardening, and more transparent contact and incident response information to strengthen user trust and regulatory adherence.

K

Kompass21

kompass21.ch

50

Kompass21 is a Swiss-based sustainability project evaluation tool supported by regional government entities. It provides a structured approach to assess projects against 20 sustainability criteria, offering clear results and team collaboration features. The website is professionally designed with a focus on usability and accessibility, leveraging modern web technologies such as Bootstrap and jQuery. Security posture is moderate with HTTPS enforced but lacks advanced security headers and published policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and legitimate with no blocking or suspicious indicators.

M

MētisPresses

metispresses.ch

59

MētisPresses is a Swiss-based publishing company specializing in academic and cultural publications, offering both printed and digital books. The website targets French-speaking academics, researchers, and cultural enthusiasts, positioning itself as a niche publisher with a focus on sociological and historical content. The business model revolves around online sales of books and collections, supported by a professional and consistent brand presence. Technically, the website employs modern web technologies including Bootstrap, jQuery, and integrates payment solutions like Stripe and PayPal, indicating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and some basic security headers but lacks comprehensive policies such as privacy and cookie policies, and does not provide a vulnerability disclosure or security contact. Analytics usage is moderate with Google Analytics and Tag Manager implemented, but privacy compliance is weak due to missing policies. Overall, the website is trustworthy and professional but could improve its compliance and security posture.

S

Stiftung Mercator

stiftung-mercator.de

53

Stiftung Mercator is a private, independent non-profit foundation based in Germany, dedicated to promoting an open, solidaric society with equal opportunities. The foundation focuses on democratic values, social cohesion, climate protection, and supports various projects and fellowship programs. The website is professionally designed, multilingual, and optimized for SEO and accessibility, reflecting a mature digital presence. Technically, it leverages WordPress CMS with modern libraries such as jQuery and uses Borlabs Cookie for privacy compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though formal security policies and incident response contacts are not published. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

H

Hostpoint AG

code-zh.com

40

The website code-zh.com is currently displaying a minimal placeholder page indicating that the PHP version used is no longer supported. The domain is registered since 2012 and is hosted by Hostpoint AG, the largest Swiss web hosting provider managing over a million domain names. The business focus is on web hosting and domain management services targeted primarily at Swiss customers. The website content is minimal and lacks essential elements such as privacy policies, cookie consent mechanisms, terms of service, and contact information, which negatively impacts user trust and compliance with regulations such as GDPR. Technically, the site uses outdated PHP, jQuery 3.6.0, and standard web fonts but lacks modern security headers and SEO optimizations. Security posture is weak due to the unsupported PHP version and absence of security best practices. Overall, the site is accessible without WAF or security blocks but requires significant improvements in content, security, and compliance to meet professional standards.

Jugendmusik Glattal is a small, community-focused youth music organization based in Switzerland's Glattal region. The website serves as an informational and engagement platform for youth musical education, orchestras, and community concerts. It is supported by local sponsors and maintains an active presence on social media platforms such as Facebook and Instagram. The technical infrastructure is built on a modern stack including jQuery, Owl Carousel, and Clubdesk CMS, providing a responsive and user-friendly experience. Security measures include HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not evident. Overall, the website is well-structured and trustworthy, with no signs of malicious content or vulnerabilities. Strategic improvements could focus on enhancing security headers, publishing clear security and incident response policies, and providing more direct contact information to improve user trust and compliance.

A

ASKO - NÁBYTEK

asko-nabytek.cz

59

ASKO - NÁBYTEK is a prominent Czech furniture retailer offering a wide range of furniture and home accessories through its e-commerce platform. The website presents a comprehensive catalog of products including beds, chairs, tables, wardrobes, sofas, and various home textiles and decorations, targeting general consumers seeking quality home furnishings. The company appears to have a large market presence in the Czech Republic with a well-structured online shopping experience. Technically, the website employs modern JavaScript libraries such as jQuery, Splide, and Slick for UI components and galleries, alongside Google Tag Manager for analytics and marketing. The site is mobile-optimized and includes cookie consent mechanisms, indicating a moderate level of digital maturity. However, the absence of detailed WHOIS data limits the ability to fully verify domain legitimacy and ownership. From a security perspective, the site enforces HTTPS and includes basic security headers, but lacks advanced headers like Content-Security-Policy and HSTS. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is basic, with cookie consent present but no explicit privacy policy or terms of service found in the analyzed content. Overall, the website is professionally designed and functional, with a good user experience and clear navigation. The lack of WHOIS transparency and limited privacy documentation are areas for improvement. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and terms policies, and improving accessibility features to strengthen compliance and trust.

B

Bider & Tanner

biderundtanner.ch

45

Bider & Tanner is a prominent bookstore and music house based in Basel, Switzerland, operating both a physical store and an online shop. The website showcases a wide range of books, music CDs, vinyl records, and cultural event tickets, positioning itself as a key cultural hub in the region. The business targets general consumers interested in literature, music, and cultural products, leveraging a retail e-commerce model complemented by physical store presence. The company enjoys a strong market position as the largest bookstore in Basel's Bankenplatz area.

U

Università degli Studi di Roma Tor Vergata

uniroma2.it

53

Università degli Studi di Roma Tor Vergata is a major Italian public university offering a wide range of academic programs and research activities across disciplines such as economics, law, engineering, humanities, medicine, and sciences. The website serves students, faculty, researchers, and prospective students by providing comprehensive information on courses, events, news, and administrative services. The institution positions itself as a key player in higher education within Italy, supported by a large-scale infrastructure and diverse academic offerings. Technically, the website employs modern web technologies including Bootstrap, jQuery, DataTables, and integrates Google Tag Manager and Usercentrics for analytics and cookie consent management. The site is mobile-optimized with good SEO and accessibility basics, though there is room for improvement in accessibility and security headers. Performance is moderate, reflecting a balance between rich content and resource loading. From a security perspective, the site enforces HTTPS and uses a consent management platform, indicating compliance with GDPR and privacy best practices. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests areas for enhancement in security transparency and readiness. Overall, the website is professional, trustworthy, and well-aligned with the university's mission. The risk profile is low, with recommendations focusing on strengthening security headers, publishing security policies, and enhancing accessibility to further improve user trust and compliance.

D

Datascroll Eventsupport GmbH

eventjet.at

10

Datascroll Eventsupport GmbH operates events.eventjet.at, a professional online ticketing platform focused on popular events in Austria including theater, concerts, family events, parties, sports, and festivals. The website offers a rich event calendar with faceted search capabilities and is optimized for SEO and user experience. The platform targets event attendees primarily in Austria and nearby regions, providing an accessible and well-structured service for event discovery and ticket purchase. The business model centers on online ticket sales and event promotion, positioning itself as a regional leader in event ticketing services.

A

Arbeitsmarktservice Österreich (AMS)

gehaltskompass.at

66

The website www.gehaltskompass.at is an official Austrian government-related platform operated by the Arbeitsmarktservice Österreich (AMS). It provides comprehensive salary comparison data for nearly 1,800 professions based on collective agreements, targeting job seekers and career entrants in Austria. The site offers additional career resources such as career videos, salary calculators, and links to AMS career information centers (BIZ). Technically, the site uses a modern tech stack including jQuery, Bootstrap, DataTables, and Matomo analytics, hosted on braintrust.at infrastructure. It is well optimized for mobile and accessibility, with clear navigation and professional design. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and explicit security policies are not published. Privacy compliance is strong with a detailed privacy policy and cookie consent banner. No contact emails or phone numbers are directly listed, consistent with a government information portal. Overall, the site is trustworthy, professional, and safe for general audiences.

I

Initiative Therme Plus

thermeplus.at

48

Initiative Therme Plus is a promotional platform representing 38 popular thermal spas across Austria, focusing on wellness, spa, family activities, and relaxation. The website serves as an information hub and marketing channel, offering a loyalty program to encourage repeat visits. Technically, the site is built on WordPress with modern libraries and frameworks, including jQuery and Usercentrics for consent management. The security posture is solid with HTTPS and privacy compliance, though some security headers could be improved. Overall, the site is professional, user-friendly, and trustworthy, targeting a broad audience interested in Austrian thermal spa experiences.

L

LEAP

leapmade.com

10

LEAP is a small technology company specializing in SaaS product development and marketing automation solutions. Their website promotes multiple SaaS products such as Parsey, Graphly, Evidence, and Maven RSS To Email, targeting businesses seeking to grow rapidly through automation and marketing tools. The company positions itself as award-winning and customer-oriented with a strong focus on core values and customer care. The website is built on WordPress with a moderate technical infrastructure including Google Analytics and Tag Manager for tracking. The site is mobile optimized and presents a professional design with consistent branding. Security posture is adequate with HTTPS enabled and IP anonymization in analytics, but lacks security headers and explicit privacy or cookie policies. No contact information or security incident response details are provided, which limits transparency. The domain registration is consistent and legitimate, with no privacy protection and appropriate domain age. Overall, the website is functional and professional but could improve in privacy compliance and security best practices.

I

Institut Solidarische Moderne

solidarische-moderne.de

50

Institut Solidarische Moderne is a German non-profit think tank and platform focused on developing progressive political concepts through dialogue among parties, movements, trade unions, civil society, and academia. The organization offers analysis, publications, podcasts, events, and forums to promote social-ecological transformation and solidarity politics. Their business model relies on memberships and donations, emphasizing independence and community engagement. The website is professionally designed, content-rich, and well-structured, targeting progressive political actors and the general public interested in leftist political discourse. Technically, the website is built on the KONTEXT-CMS platform, uses modern frontend technologies like Tailwind CSS and jQuery, and is hosted via Warenform DNS servers. It features responsive design and good SEO practices. Analytics are implemented via Matomo with a GDPR-compliant opt-in cookie consent mechanism, reflecting a mature approach to privacy and data protection. However, some security best practices such as explicit security headers and published security policies are missing. From a security perspective, the site enforces HTTPS, uses cookie consent with opt-in for tracking, and does not expose sensitive data or vulnerable libraries. There is no evidence of incident response or vulnerability disclosure policies, which could be improved. The WHOIS data is limited but consistent with a small non-profit organization using CMS hosting services. No WAF or blocking mechanisms are detected, and the site is fully accessible. Overall, the website presents a trustworthy, professional, and privacy-conscious platform for political discourse. Strategic recommendations include publishing security and incident response policies, enhancing security headers, and improving accessibility features to further strengthen trust and compliance.

A

AMS (Arbeitsmarktservice Österreich)

ausbildungskompass.at

66

The AMS Ausbildungskompass website is an official Austrian government platform providing comprehensive information on vocational training, education pathways, and career guidance. It serves a broad audience including students, job seekers, and those interested in continuing education within Austria. The site is well-branded with AMS logos and offers detailed educational content, search functionality, and links to related government and educational resources. Technically, the site employs a modern and mature technology stack including jQuery, Bootstrap, FontAwesome, and Matomo for analytics. It is mobile-optimized, accessible, and performs moderately well. The presence of a cookie consent mechanism and detailed privacy policy indicates good privacy compliance aligned with GDPR requirements. From a security perspective, the site uses HTTPS with strong SSL configuration and implements secure form practices. However, it lacks explicit security headers and a published security or incident response policy, which could be improved. No vulnerabilities or suspicious content were detected. Overall, the site is trustworthy, professional, and well-maintained, with a high legitimacy score despite the absence of WHOIS data due to privacy protection. Strategic recommendations include enhancing security headers, publishing a security policy, and providing explicit incident response contacts to further strengthen trust and compliance.

A

AMS (Arbeitsmarktservice Österreich)

berufslexikon.at

64

The AMS Berufslexikon website is an official Austrian government career information portal operated by the Arbeitsmarktservice Österreich (AMS). It provides comprehensive information on over 1,800 professions, including job descriptions, educational requirements, career prospects, and salary data. The platform targets job seekers, students, and career advisors within Austria, offering advanced search and filtering capabilities to facilitate career exploration. The site is well-branded with AMS logos and consistent government styling, reinforcing its authoritative position in the Austrian labor market information ecosystem. Technically, the website employs a modern and mature technology stack including jQuery, Bootstrap, FontAwesome, and Matomo analytics. It is mobile-optimized, accessible, and features a cookie consent mechanism compliant with GDPR standards. Performance is moderate with good SEO and accessibility practices. The site uses HTTPS exclusively, ensuring secure data transmission. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent management. However, it lacks explicit security headers and a published security policy or incident response contact information. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS data is likely due to privacy protection, which is justified for a government-related domain. Overall, the AMS Berufslexikon website is a trustworthy, professional, and secure platform providing valuable career information to the Austrian public. Strategic recommendations include enhancing security headers, publishing a security policy, and providing explicit incident response contacts to further strengthen trust and compliance.

E

edition taberna kritika

etkbooks.com

56

edition taberna kritika is a specialized publisher focusing on experimental, conceptual, and visual literatures, offering a curated selection of print books, digital editions, and artist publications. The company operates a niche business model targeting readers and collectors interested in avant-garde literary and artistic works. The website is professionally designed using WordPress CMS with a moderate level of technical sophistication, including portfolio galleries and contact forms secured by Google reCAPTCHA. The domain is well-established since 2007, supporting the legitimacy and maturity of the business. Security posture is adequate with HTTPS and domain registrar locks, but improvements are recommended in DNSSEC and security headers. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Contact information is limited to email and forms, with no phone or physical address provided.

S

swips.ch

swips.ch

41

swips.ch is a Swiss-based media platform dedicated to promoting independent publishers in Switzerland. The website provides book previews, publisher directories, event announcements, and downloadable brochures, targeting publishers and literary enthusiasts. The platform occupies a niche market within the Swiss publishing industry, offering curated content and fostering community engagement among independent publishers. Technically, the website is built on WordPress 5.9.2, utilizing plugins such as Document Gallery and WP Statistics for content presentation and analytics. The site is mobile-optimized with a good user experience and clear navigation. Security-wise, HTTPS is enforced, and Wordfence security scripts are present, but there is a lack of explicit security headers and formal privacy or cookie policies, indicating room for compliance improvement. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.