Security Directory

Takeaway.com operates as a leading online food delivery marketplace connecting consumers and restaurants across 14 European countries and Israel. The website content reflects a professional and consistent brand presence with clear links to regional partner sites. The business model focuses on facilitating food ordering and delivery services through an online platform, positioning itself as a market leader in Continental Europe. Technically, the website employs standard web technologies including Bootstrap and Google Analytics, with moderate performance and good mobile optimization. However, the absence of visible privacy, cookie, and terms of service policies on the main page indicates gaps in compliance and transparency. Security posture is moderate with no detected WAF or blocking mechanisms, but lacks security headers and visible SSL configuration details. WHOIS data is unavailable or protected, reducing domain registration transparency but not necessarily indicating illegitimacy. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.

М

Медиумска информативна агенција

mia.mk

60

The website mia.mk represents the Media Information Agency (Медиумска информативна агенција), a Macedonian news media organization established in 2008. It provides comprehensive news coverage across various sectors including politics, economy, society, culture, sports, and international affairs. The site features multimedia content such as live video streams, photo galleries, and investigative journalism, targeting the general Macedonian-speaking public. The business model appears to be based on advertising revenue and possibly subscription or login-based access for certain content. Technically, the website employs modern web technologies including Bootstrap for responsive design, Font Awesome for icons, jQuery, Slick Slider for carousels, and Google Analytics for user tracking. The site is hosted under a domain registered with NEOTEL-REG since 2008, indicating a stable and consistent digital presence. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, the site uses HTTPS and includes some security best practices, but lacks explicit security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is limited; while a cookie consent mechanism is present, no explicit privacy or terms of service policies were found. Contact information such as emails or phone numbers is not explicitly provided, which may impact user trust. Overall, mia.mk is a professional and trustworthy media website with good content quality and technical implementation. However, improvements in privacy policy transparency, security headers, and contact information disclosure are recommended to enhance compliance and user trust.

H

HINA

hina.hr

60

HINA is the Croatian national news agency established in 1990, serving as the primary source of reliable and comprehensive news and multimedia content in Croatia. It offers a wide range of services including general news, economic and financial news, photo, video, audio services, and specialized portals focused on EU affairs, environment, and health. The agency caters to media outlets, institutions, companies, embassies, and the general public with over 250 subscribers. The website reflects a professional and consistent brand image with a modern technical infrastructure based on Blazor and Bootstrap frameworks, ensuring good mobile optimization and user experience. Security posture is solid with HTTPS and secure login mechanisms, though some security headers are not explicitly detected and cookie consent mechanisms are absent. The domain WHOIS data is consistent with the agency's identity, registered with CARNET since 1996, supporting legitimacy and trustworthiness.

Б

Българска телеграфна агенция

bta.bg

60

The website www.bta.bg represents the Bulgarian Telegraph Agency (Българска телеграфна агенция), a national news agency providing comprehensive news coverage across Bulgaria and internationally. The site targets a broad audience including the general public, media professionals, and government entities. It offers categorized news sections such as Bulgaria, World, Balkans, Economy, Culture, and Sports. The business model is centered on news dissemination and information services, positioning it as a leading media entity in Bulgaria. Technically, the website employs modern web technologies including Bootstrap for responsive design, Video.js for media playback, and integrates Google Analytics and Google Tag Manager for analytics and marketing. The site demonstrates good mobile optimization and accessibility features, though SEO optimization appears basic. Performance is moderate with standard external dependencies. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit security or privacy policies in the provided content. No vulnerability disclosure or incident response information is present. Advertising and tracking are implemented via Google Adsense and Analytics, indicating extensive user tracking without clear privacy compliance indicators. Overall, the website is legitimate and professionally presented, but improvements in privacy compliance, security headers, and transparency about data protection and incident response would enhance trust and security posture.

A

Agerpres – Agenția Națională de Presă

agerpres.ro

58

Agerpres is the Romanian National News Agency providing up-to-date national and international news, multimedia content including photos and videos, and press monitoring services. It operates a subscription-based news feed service and maintains a strong presence in Romanian media. The website is professionally designed with consistent branding and multilingual support, targeting a broad audience interested in reliable news. Technically, the site uses modern web technologies such as Bootstrap and Cloudflare CDN, ensuring good performance and security. The security posture is solid with HTTPS and Cloudflare protection, though DNSSEC is not enabled and explicit security policies are not published. Privacy and cookie policies are present and GDPR compliant. Overall, the site is trustworthy, well-maintained, and serves as a key media resource in Romania.

G

Global Summit Digital Marketing & Ecommerce

gedsummit.it

61

Global Summit Digital Marketing & Ecommerce is a well-established B2B event organizer based in Italy, specializing in digital marketing and ecommerce solutions. The company hosts an annual national event that brings together business communities, suppliers, and professionals for workshops, networking, and business matching. The website reflects a mature digital presence with comprehensive event information, speaker profiles, and exhibitor details, targeting managers, CEOs, and marketing professionals. Technically, the site is built on WordPress with modern plugins and frameworks, optimized for SEO and mobile devices. Security posture is good with HTTPS and GDPR-compliant cookie consent, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Overall, the domain registration is consistent with the business claims, and the site maintains a professional and trustworthy image.

G

Global Summit Human Resources

ghrsummit.it

61

Global Summit Human Resources is a specialized B2B event organizer focused on the HR and People Management sector in Italy. The company, operating under Concordia Events, hosts annual summits featuring workshops, networking, and business matching to foster professional relationships within the HR industry. The website reflects a well-established brand with consistent messaging and a clear target audience of managers and executives in marketing, finance, and HR. The business model centers on event management and community building within the HR sector, positioning itself as a key national player with multiple related event sites under its umbrella. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for SEO, analytics, and cookie consent management. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Integration with Google Analytics, LinkedIn, and other marketing tools indicates a mature digital marketing approach. Security measures include HTTPS, Cloudflare Turnstile for bot protection, and GDPR-compliant cookie consent, though improvements are recommended in DNSSEC and security headers. From a security perspective, the site maintains a solid posture with no critical vulnerabilities detected. However, the absence of DNSSEC and certain security headers slightly reduces the security score. The cookie consent mechanism is comprehensive and GDPR compliant, reflecting a strong privacy compliance culture. No incident response or explicit security policies are publicly available, which could be enhanced to improve trust. Overall, the website is professional, trustworthy, and well-aligned with its business objectives. Strategic recommendations include enabling DNSSEC, implementing additional security headers, fixing minor UX issues with lazy loading images, and publishing explicit security and incident response policies to further strengthen the security posture and user trust.

G

Global Summit Logistics & Supply Chain

glsummit.it

61

Global Summit Logistics & Supply Chain is a well-established B2B event organizer focused on the logistics and supply chain industry in Italy. Founded in 2014, the company operates under Concordia Events and hosts annual national events featuring workshops, networking, and business matching. The website reflects a professional presence with consistent branding and clear communication of event details and services. The target audience includes managers, marketing professionals, CEOs, and CFOs within the logistics sector. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, WP Rocket, and Google Tag Manager integration, ensuring good performance, SEO optimization, and mobile responsiveness. The site employs Google reCAPTCHA v3 for spam protection and complies with GDPR cookie consent regulations, indicating a mature digital infrastructure. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms and spam protection. However, DNSSEC is not enabled, and security headers are not explicitly detected, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were found. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company's history. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic recommendations include enabling DNSSEC, adding security headers, and publishing a formal security policy to enhance trust and security posture.

G

Global Summit Marketing & Digital

gmsummit.it

63

Global Summit Marketing & Digital is a well-established B2B event organizer based in Italy, specializing in marketing and digital communication. Founded in 2014, the company organizes annual national events featuring workshops, networking, and business matching opportunities for marketing professionals and executives. The website reflects a professional and consistent brand image, targeting managers, CEOs, CFOs, and marketing professionals. The business model revolves around event management and community building within the marketing sector. Concordia Events is the parent organization, and the domain registration aligns well with the company's history and operations. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, Yoast SEO, and WP Rocket for performance optimization. It integrates multiple third-party marketing and analytics tools such as Google Analytics, LinkedIn Insight, and ShinyStat, alongside advertising networks like Google DoubleClick and The Trade Desk. The site is mobile-optimized and SEO-friendly, providing a good user experience with clear navigation and professional design. From a security perspective, the site uses HTTPS with a good SSL configuration and employs Google reCAPTCHA to protect forms. However, it lacks DNSSEC and explicit security headers, and no published security or incident response policies were found. The cookie consent mechanism is GDPR compliant with detailed user controls. No critical vulnerabilities or suspicious patterns were detected, and the WHOIS data supports the legitimacy of the domain and business. Overall, the website presents a low-risk profile with good business credibility and technical maturity. Strategic improvements include enabling DNSSEC, adding security headers, publishing security policies, and considering a vulnerability disclosure program to enhance trust and security posture.

L

Lindenhaeghe

lindenhaeghe.nl

70

Lindenhaeghe is a well-established Dutch education provider specializing in financial professional training, including Wft and PE certifications, exams, and continuous professional updates. The company holds a strong market position, evidenced by 12 consecutive years as the 'Beste Opleider van Nederland' and a high Springest rating of 9.2. Their business model focuses on delivering comprehensive educational content both online and via physical exam centers, targeting financial professionals and organizations in the Netherlands. Technically, the website is built on Drupal 10, uses modern web technologies, and integrates analytics and marketing tools responsibly with cookie consent mechanisms. Security posture is solid with HTTPS, DNSSEC, and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable platform for its audience.

T

Tahaluf

tahaluf.com

69

Tahaluf is a strategic joint venture focused on bringing world-class events to Saudi Arabia, supporting the Kingdom's Vision 2030 goals of economic diversification and global positioning as an events hub. The company is backed by Informa PLC, the Saudi Federation for Cyber Security, Programming and Drones, and the Events Investment Fund. Their portfolio spans technology, real estate, food, and more, targeting global industries and investors. The website reflects a mature digital presence built on Drupal 10 with modern UI libraries and integrated consent management, indicating a commitment to privacy and user experience. Security posture is solid with HTTPS and domain locking, though DNSSEC is not enabled and no explicit security policies are published. Overall, the site is professional, trustworthy, and well-branded, with room for improvement in contact transparency and SEO.

L

LexisNexis

lexisnexis.nl

73

LexisNexis Benelux is a well-established enterprise providing advanced business intelligence, media monitoring, compliance, and risk management solutions primarily targeting business professionals and researchers. The website is professionally designed, localized in Dutch, and offers a comprehensive suite of products such as Nexis Newsdesk, Nexis+ AI, and Nexis Diligence+. The technical infrastructure leverages modern frameworks like AngularJS and Bootstrap, with integrated analytics and marketing tools including Matomo, Google Tag Manager, and OneTrust for cookie consent. Security posture is strong with HTTPS enforced and privacy compliance mechanisms in place, although explicit security headers and incident response information are not publicly disclosed. The WHOIS data for the domain is unavailable, which is unusual but likely due to privacy or registry data restrictions rather than suspicious activity. Overall, the website demonstrates a mature digital presence with good content quality, technical implementation, and business credibility.

E

EBBEN Partners

ebbenpartners.nl

51

EBBEN Partners is an independent integrity bureau based in the Netherlands, specializing in investigation, advisory, and dispute resolution services. Established in 2015, the company serves business executives, board members, and organizations in both public and private sectors. Their multidisciplinary team includes accountants, jurists, valuators, data analysts, and advisors, positioning them as a trusted partner for complex integrity and risk management issues. The website reflects a professional and consistent brand image with comprehensive service descriptions and a clear target audience. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for SEO, multilingual support, and forms. The site is mobile-optimized, SEO-friendly, and uses HTTPS with DNSSEC enabled, indicating a secure and mature infrastructure. Google Analytics and Tag Manager are used for user tracking with IP anonymization enabled, reflecting moderate digital maturity. From a security perspective, the site employs HTTPS and DNSSEC but lacks visible security headers and a published security or incident response policy. Cookie consent is implemented, supporting GDPR compliance to some extent. No critical vulnerabilities or WAF blocking were detected, suggesting a stable security posture, though improvements in security policy transparency and header implementation are recommended. Overall, the website demonstrates a high level of professionalism, trustworthiness, and business credibility. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving privacy compliance documentation to further strengthen trust and compliance.

G

Global Summit Logistics & Manufacturing

glmsummit.it

56

Global Summit Logistics & Manufacturing is a well-established B2B event organizer focused on the logistics, manufacturing, and industry 4.0 sectors in Italy. Founded in 2014, it hosts annual events featuring workshops, networking, and business matching to connect industry professionals such as managers, CEOs, and CFOs. The website reflects a mature digital presence with structured data, SEO optimization, and a professional design tailored for its target audience. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and mobile responsiveness. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though improvements in security headers and explicit privacy policies are recommended. The domain registration data aligns well with the business claims, indicating legitimacy and stability. Overall, the site is a credible and professional platform for industry events, with moderate tracking and advertising integrations.

P

PONT | Governance

governance-web.nl

61

PONT | Governance is a specialized Dutch media platform focused on governance, compliance, ESG, and public sector topics. It serves professionals and academics by providing news, legal summaries, dossiers, and educational content. The platform uses a modern WordPress infrastructure with WooCommerce for e-commerce capabilities, indicating a mature digital presence. Security posture is solid with HTTPS, cookie consent, and privacy policies in place, though some advanced security headers and incident response details are absent. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

H

Haufe Akademie GmbH & Co. KG

haufe-akademie.de

63

Haufe Akademie GmbH & Co. KG is a well-established German company specializing in professional development and continuing education. The website offers a broad portfolio of over 3,500 topics including seminars, online trainings, inhouse trainings, and e-learning solutions, targeting a wide audience seeking career advancement and corporate training. The company holds a strong market position in the German education sector with a large-scale operation and consistent branding.

Risk & Compliance Platform Europe is a specialized content and educational platform focused on risk management, compliance, and regulatory affairs within the European context. It offers news, whitepapers, books, and educational events targeting compliance professionals, risk managers, and legal experts. The platform maintains a multilingual presence with a strong focus on French content on this domain. Technically, the website is built on WordPress using modern technologies such as jQuery, Bootstrap, Google Analytics, and Facebook SDK. It employs SEO best practices via Yoast SEO and includes Google reCAPTCHA for form security. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers are missing and no explicit incident response or security policies are published. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional, trustworthy, and well-maintained, serving a niche market in finance and compliance education.

Risk & Compliance Platform Europe is a specialized content and educational platform focused on risk management, compliance, and regulatory topics primarily within the European financial and regulatory sectors. The website offers a range of services including news articles, whitepapers, educational courses, job listings, books, and a knowledge base, targeting professionals in risk, compliance, NGOs, and regulatory bodies. The platform maintains a multilingual presence, enhancing its reach across European markets. Technically, the website is built on WordPress CMS and leverages common web technologies such as jQuery, Bootstrap, Google Analytics, Facebook SDK, and Google reCAPTCHA for security and user interaction. The site demonstrates good mobile optimization and SEO practices, though some accessibility features could be improved. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks explicit security headers and a visible cookie consent mechanism, which are important for compliance with EU regulations. The absence of WHOIS data limits full trust verification, but the professional content and consistent branding support legitimacy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy platform for its niche audience, though improvements in privacy compliance and security best practices are recommended to enhance trust and regulatory adherence.

itarget media is a small Dutch digital agency specializing in web design, user interface design, branding, and online marketing. The company emphasizes creating websites that go beyond simple business cards by focusing on visitor needs and user experience. Their market position is that of a creative agency offering integrated digital services to businesses seeking professional online presence and marketing support. Technically, the website is built on WordPress with Bootstrap and jQuery, featuring responsive design and Google reCAPTCHA for form security. However, some technical aspects such as security headers and proper analytics configuration are lacking. Security posture is moderate with HTTPS enforced and no visible vulnerabilities, but missing security headers and incomplete privacy compliance reduce the overall security score. The website is accessible without WAF or blocking mechanisms, and WHOIS data aligns well with the business claims, indicating legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening.

R

Risk & Compliance Platform Europe

riskcompliance.it

49

Risk & Compliance Platform Europe is a professional content and networking platform focused on risk management, compliance, audit, and governance topics primarily targeting the European and Italian markets. The platform offers news, whitepapers, events, training, and partnership opportunities, supported by a network of expert authors and contributors. It maintains a multilingual presence with sister sites in multiple European countries, enhancing its regional reach and relevance. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and SEO plugins. It employs Google Analytics and Microsoft Clarity for user behavior tracking and analytics. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Security is well-implemented with HTTPS and standard security headers, but lacks a visible cookie consent mechanism and explicit security or incident response policies. The security posture is solid with no detected vulnerabilities or suspicious domains. Privacy compliance is adequate with a comprehensive privacy policy and terms of service, but could be improved with cookie consent and vulnerability disclosure information. The domain registration is consistent with the business claims, indicating legitimacy and trustworthiness. Overall, the platform is a credible and professional resource for compliance professionals, with recommendations to enhance privacy compliance and security transparency to further strengthen trust and regulatory adherence.

D

DICO e.V.

dico-ev.de

47

DICO e.V. is a well-established German non-profit organization dedicated to promoting compliance across various industries in Germany. Founded in 2012, it serves as a central forum and network for compliance professionals, offering publications, events, digital tools, and a job board. The website reflects a mature digital presence with strong SEO, structured data, and professional design. Technically, it is built on WordPress with modern plugins and hosted on a reputable provider. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security policies and vulnerability disclosures are absent. Overall, the site is trustworthy and professionally managed, targeting compliance experts and organizations in Germany.

C

NetFed LimeSurvey

corporate-survey.de

53

The website www.corporate-survey.de is a LimeSurvey-based platform primarily designed for hosting online surveys with multilingual support. It targets survey participants and administrators, offering a basic service model centered on survey distribution and data collection. The site is modest in content and design, reflecting a small-scale operation likely focused on internal or niche survey needs within Germany. Technically, the site employs common web technologies including jQuery, Bootstrap, Font Awesome, and Moment.js, all integrated within the LimeSurvey CMS framework. While the platform is functional and moderately optimized for mobile devices, it lacks advanced SEO and accessibility features. Performance is moderate, with no evident critical technical issues but also no advanced optimizations. From a security perspective, the site lacks visible security headers and does not provide HTTPS status information in the provided data, indicating potential gaps in secure configuration. There are no privacy or cookie policies, and no incident response or security contact information is available, which limits compliance with GDPR and best security practices. The domain WHOIS data shows standard European name servers consistent with the German domain but lacks detailed registrant information, resulting in a moderate legitimacy score. Overall, the site is safe and suitable for general audiences but requires significant improvements in privacy, security, and compliance to enhance trustworthiness and professional standing. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, improving security headers, and providing clear contact and incident response information.

D

Derrick Byron

derrickcbyron.com

56

Derrick Byron operates an official artist website focused on multimedia content including music, ambient sounds, and video posts primarily hosted on YouTube and supported by active social media channels. The site targets fans and followers interested in relaxation, creativity, and lifestyle content. The business model revolves around content creation, audience engagement, merchandise sales, and sponsorship opportunities. Technically, the website employs modern frontend technologies such as Bootstrap, Flickity carousel, and integrates with platforms like YouTube, TikTok, and Facebook, hosted via AWS Cloudfront CDN. The site is mobile optimized and provides a good user experience with consistent branding. Security posture is adequate with HTTPS enforced and CSRF tokens present, but lacks advanced security headers and formal privacy or cookie policies, indicating compliance gaps. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency. Overall, the website is functional and professional but would benefit from enhanced security practices and compliance documentation.

U

Ulisses Spiele

ulisses-spiele.de

55

Ulisses Spiele is a German media company specializing in publishing tabletop role-playing games and related content. The website serves as a digital storefront and information hub for their products, targeting gaming enthusiasts primarily in Germany. The site is built on WordPress with a modern tech stack including Bootstrap and uses Cookiebot for GDPR-compliant cookie management and Matomo for analytics, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and consent-based analytics tracking, though explicit security headers and incident response information are absent. Overall, the site is professional, trustworthy, and compliant with privacy norms, but could improve transparency by publishing privacy policies and contact information.

D

Daniel Krause

brettspiel-news.de

55

Brettspiel-News.de is a German-language online magazine focused on board games, card games, analog and digital games. It offers news, reviews, podcasts, videos, and premium subscription content targeting board game enthusiasts and families. The site is built on Joomla CMS and uses common web technologies such as Bootstrap, Uikit, and jQuery. Hosting and DNS are managed via Cloudflare, providing performance and security benefits. Advertising is integrated primarily through Google Adsense and affiliate links. Privacy and terms of service pages are present, but cookie consent mechanisms are not implemented. Social media presence is strong across multiple platforms. Security posture is moderate with HTTPS enabled but lacking security headers and explicit incident response information.

U

Universiteit Gent

ugent.be

70

Universiteit Gent (UGent) is a major educational institution in Belgium, recognized as one of the largest universities in the Dutch-speaking region. It offers a wide range of bachelor and master programs, lifelong learning opportunities, and extensive research services. The university targets students, researchers, alumni, companies, and employees, positioning itself as an open, socially engaged, and pluralistic institution. The website reflects a professional and consistent brand image with comprehensive content relevant to its audience. Technically, the UGent website is built on the Plone CMS platform, utilizing modern JavaScript libraries such as jQuery UI, Bootstrap, and Moment.js. It integrates Piwik PRO analytics with a robust cookie consent mechanism, demonstrating a mature approach to privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly, although some security headers could be improved. From a security perspective, the site enforces HTTPS and employs cookie consent management, but lacks explicit security policies and incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is restricted by the .be registry, limiting domain ownership transparency, but the overall trustworthiness remains high given the institutional nature and strong trust signals. Overall, UGent's website is a well-maintained, secure, and privacy-conscious platform that effectively serves its educational mission. Strategic improvements could include publishing security policies and enhancing HTTP security headers to further strengthen its security posture.

G

GeoCat BV

geocat.net

58

GeoCat BV is a specialized technology company focused on providing innovative solutions for geographic data management and open data publishing. Their product suite includes GeoCat Live, Find, Map, and Bridge, targeting governments, businesses, and NGOs worldwide. The company emphasizes open source software and sustainable development in the geospatial domain. The website is professionally designed, mobile-optimized, and provides clear navigation and contact options, reflecting a mature digital presence. Technically, the site is built on the Odoo CMS platform with modern libraries and includes privacy consent mechanisms and analytics via Plausible. Security posture is generally good with HTTPS and CSRF protections, but lacks published security policies and vulnerability disclosures. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional business presentation. Overall, the site is trustworthy but would benefit from improved transparency on privacy and security policies.

3

3E Company

3eiq.com

69

3E Company operates a professional B2B software platform specializing in chemical management, regulatory compliance, and supply chain sustainability solutions. The website hosts multiple client portals for different specialized tools, indicating a mature product suite targeting businesses needing compliance and safety management. The site is well-branded and linked closely to its parent domain 3eco.com, reinforcing its market presence. Technically, the site uses modern JavaScript libraries and analytics tools, with moderate performance and good mobile optimization. Security posture is adequate but could be improved by adding security headers and explicit cookie consent mechanisms. The absence of WHOIS data for the domain is a notable concern, suggesting possible privacy protection or domain registration issues that warrant further verification. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security best practices.

R

rad-ab.com

rad-ab.com

52

rad-ab.com is a German-language automotive blog managed by Jens Stratmann, focusing on car reviews, news, videos, and personal automotive stories. The site targets automotive enthusiasts primarily in Germany and offers regularly updated content with a professional presentation. Technically, the site runs on WordPress with popular plugins such as Yoast SEO and Bootstrap for responsive design, ensuring good mobile optimization and SEO practices. Security posture is moderate; HTTPS is implied but lacks explicit security headers and documented security policies. Privacy and cookie policies are present and appear GDPR compliant, with a contact form available for user communication. However, the WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy despite the active and professional website presence.

E

ENLIGHT

enlight-eu.org

64

ENLIGHT is a European university alliance comprising ten member universities, focused on transforming higher education and empowering learners as globally engaged citizens. The alliance offers joint courses, doctoral networks, student networks, and collaborative research and innovation initiatives. The website reflects a well-structured, content-rich platform targeting students, educators, and researchers within the European higher education ecosystem. The business model is non-profit and collaborative, emphasizing education, research, and community engagement.

I

intersoft consulting services AG

intersoft-consulting.de

48

intersoft consulting services AG is a specialized consulting firm focused on data protection, IT security, and IT forensics. Positioned as one of the leading providers of external data protection officers in Germany, the company offers a broad range of services including GDPR compliance, IT security consulting, incident response, and certification support such as ISO 27001 and ISO 27701. Their target audience primarily consists of businesses seeking expert guidance in data protection and IT security. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to their market segment. Technically, the site is built on WordPress with modern frameworks and optimization tools, ensuring fast performance and mobile responsiveness. Security posture is strong with HTTPS, inferred security headers, and a cookie consent mechanism, though explicit vulnerability disclosure policies are absent. Overall, the domain registration and WHOIS data support the legitimacy and trustworthiness of the business. Strategic recommendations include publishing a vulnerability disclosure policy and enhancing incident response contact visibility to further strengthen security transparency.

S

Schindler Aufzüge AG

schindlerplus.ch

60

Schindler Aufzüge AG operates a regional contact website (schindlerplus.ch) focused on providing localized customer support and fault reporting services for elevators and escalators in Switzerland and Liechtenstein. The site offers a postal code and location-based search to connect users with their nearest contact person. The business is positioned as a medium-sized service provider in the transportation sector with a clear focus on customer service and operational support. Technically, the website uses a traditional tech stack including jQuery, jQuery UI, Bootstrap, and Fresco for UI components. The site is moderately optimized for mobile devices and provides basic accessibility features. However, there is no evidence of advanced CMS or modern frameworks, and SEO optimization is minimal. Performance is moderate with no major errors detected. From a security perspective, the site lacks visible HTTPS enforcement details and security headers, which lowers its security posture. Input validation is implemented on the search form to prevent illegal characters, but no published security policies, incident response contacts, or vulnerability disclosure mechanisms are found. Privacy and cookie policies are absent, indicating potential compliance gaps with GDPR and related regulations. Overall, the website is functional and serves its business purpose but requires improvements in security, privacy compliance, and transparency to enhance trust and meet modern standards. Strategic recommendations include implementing HTTPS, publishing privacy and cookie policies, adding security headers, and establishing a vulnerability disclosure process.

G

GIS Consult GmbH

gis-consult.de

63

GIS Consult GmbH is a medium-sized German company specializing in Geoinformation Systems (GIS) solutions, serving industries such as energy, public sector, and telecommunications. Founded in 1996, the company operates multiple locations including subsidiaries in Kiel and Benelux, offering product development, maintenance, consulting, and training services. Their market position is strengthened by certifications and sponsorships, reflecting a solid reputation in the GIS domain. Technically, the website is built on WordPress with modern plugins and frameworks, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking explicit security policies and advanced headers. Overall, the site is professional, trustworthy, and compliant with GDPR, with room for improvement in security transparency and incident response readiness.

C

Camptocamp

camptocamp.com

56

Camptocamp is a well-established Open Source IT company founded in 2001, specializing in providing innovative solutions in GIS, ERP (Odoo), and IT infrastructure. The company operates internationally with offices in Switzerland, France, and Germany, targeting enterprises seeking flexible and collaborative Open Source technologies. Their business model includes consulting, implementation, subscription management, training, and hosting services, positioning them as a trusted partner in the Open Source ecosystem. Technically, the website is built on modern web technologies including Pimcore CMS, Bootstrap, and integrates multiple analytics and marketing tools such as Google Analytics, Matomo, Facebook SDK, and LinkedIn Insight. Hosting is inferred to be on Amazon AWS, ensuring reliable infrastructure. The website demonstrates excellent design quality, mobile optimization, and accessibility, with a comprehensive cookie consent mechanism supporting GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though DNSSEC is not enabled and security headers are not explicitly detected. The absence of a published privacy policy and terms of service in the provided content is a gap in compliance documentation. Overall, the domain registration is consistent with the business history and location, supporting legitimacy. The website is safe for general audiences with no adult or questionable content detected.

E

eRecht24

e-recht24.de

56

eRecht24 is a well-established German legal portal specializing in internet law, offering a wide range of legal tools, templates, and consulting services primarily targeting website operators, online shops, agencies, and startups. The platform provides comprehensive legal content, including GDPR compliance, AGB generation, and legal advice, supported by a membership model and affiliate program. Technically, the site is built on Joomla CMS with modern frameworks like Bootstrap and jQuery, enhanced by privacy-conscious analytics (Matomo) and user engagement tools (EngageBox). The website demonstrates good performance, mobile optimization, and accessibility, with consistent branding and professional design. From a security perspective, the site enforces HTTPS and employs security best practices, though explicit security policies and incident response information are not publicly detailed. No critical vulnerabilities or suspicious WHOIS data were detected, and the domain registration aligns well with the business claims. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, the site maintains a high level of trustworthiness and professionalism. Recommendations include publishing a dedicated security policy, adding a vulnerability disclosure mechanism (security.txt), enhancing security header visibility, and improving transparency regarding the data protection officer. These steps would further strengthen the site's security posture and user trust.

I

intersoft consulting services AG

dr-datenschutz.de

58

Dr. Datenschutz is a German-language expert platform operated by intersoft consulting services AG, focusing on data protection, IT security, and IT forensics. The website offers a rich mix of news, expert articles, legal judgments, podcasts, and webinars aimed at professionals and organizations interested in GDPR compliance and IT security best practices. The business model combines content dissemination with consulting services, including external data protection officer offerings and educational webinars. The site enjoys a strong market position in the German-speaking data protection community, supported by a consistent brand and high user ratings. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and uses privacy-conscious analytics via Matomo with cookies disabled. The site is mobile-optimized, accessible, and SEO-friendly, leveraging Yoast SEO and structured data for enhanced search visibility. The technical infrastructure is mature, though hosting provider details are not explicitly disclosed. From a security perspective, the site enforces HTTPS and employs best practices like disabling cookies in analytics. However, it lacks explicit security headers, a vulnerability disclosure policy, and a cookie consent mechanism, which are recommended for full compliance and enhanced security posture. No critical vulnerabilities or exposed sensitive data were detected. Overall, Dr. Datenschutz presents a professional, trustworthy, and content-rich platform with a solid security baseline. Strategic improvements in security headers, incident response transparency, and cookie consent would further strengthen its compliance and trustworthiness.

T

Trustindex Ltd.

trustindex.io

64

Trustindex Ltd. operates a SaaS platform focused on helping businesses collect, manage, and display customer reviews to increase trust, SEO rankings, and sales. The company serves over 700,000 businesses worldwide and offers a wide range of review widgets, social feed integrations, and AI-powered review management tools. Their market position is strong with a high customer satisfaction rating and a comprehensive suite of features tailored for businesses seeking to enhance their online reputation. Technically, the website is built on WordPress with modern frameworks and libraries such as Bootstrap, jQuery, and Owl Carousel. It leverages Cloudflare for hosting and CDN services, integrates Google Analytics and Tag Manager for tracking, and uses Zoho SalesIQ for customer support chat. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS, uses Google reCAPTCHA to prevent spam, and implements cookie consent mechanisms compliant with GDPR. While explicit security headers are not fully visible, the overall posture is strong with no evident vulnerabilities or exposed sensitive data. However, the absence of a public security policy or incident response page suggests room for improvement in transparency and readiness. Overall, Trustindex.io presents a professional, trustworthy, and technically sound online presence with strong privacy compliance and business credibility. Strategic recommendations include enhancing security header implementation, publishing a security policy, and improving incident response visibility to further strengthen trust and compliance.

K

Kleinwagenblog – Alles über Kleinwagen, Tests & Innovationen

kleinwagenblog.de

50

Kleinwagenblog is a German niche automotive blog specializing in small cars (Kleinwagen) and electromobility, providing news, tests, and videos targeted at automotive enthusiasts and consumers interested in compact vehicles. The website operates on a WordPress CMS platform with WooCommerce integration for e-commerce capabilities, leveraging modern web technologies such as Bootstrap, jQuery, and FontAwesome. The site demonstrates good digital maturity with responsive design, accessibility features, and SEO optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response information are absent. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR regulations, making it a reliable source for its target audience.

G

GALORE

galore.de

44

GALORE is a German interview magazine focused on cultural, societal, and lifestyle topics, offering authentic and insightful interviews with notable personalities. The website serves as a platform for magazine subscription, cultural articles, and newsletters, targeting a general audience interested in culture and society. The business operates in the media sector with a niche market position and a small company size. Technically, the website uses modern web technologies including Bootstrap and Owl Carousel, with Google Analytics for user tracking. The site is mobile optimized and has good SEO practices, though no CMS is explicitly identified. Security posture is solid with HTTPS enabled and no visible vulnerabilities, but lacks some security headers and a cookie consent mechanism, which impacts privacy compliance. No explicit contact information or security policies are published, which could be improved to enhance trust and compliance. Overall, the website is professional, trustworthy, and safe for general audiences.

3

3E Company

3eonline.com

69

3E Company operates a suite of specialized software platforms focused on chemical management, product notification, compliance, and supply chain sustainability. The company targets businesses requiring regulatory compliance and chemical safety management solutions, positioning itself as an established provider in this niche market. The website serves as a portal hub linking to various client login areas and informational resources hosted primarily on the parent domain 3eco.com. Technically, the site employs modern web technologies including Bootstrap, jQuery, and analytics tools such as Heap and ContentSquare, indicating a moderate level of digital maturity. However, the absence of structured data and limited SEO optimization suggest room for improvement. Security posture is adequate with HTTPS implied and monitoring scripts in place, but lacks visible security headers and cookie consent mechanisms, which are important for compliance and protection. The WHOIS data is unavailable, raising some concerns about domain registration legitimacy, though the business presence and external links support authenticity. Overall, the site is professional and functional but would benefit from enhanced security and privacy compliance measures.

P

Petzoldt's OHG

petzoldts.de

61

Petzoldts OHG operates a specialized e-commerce platform focused on automotive care products, including polishes, waxes, cleaning clays, and microfiber cloths. With over 30 years of market presence, the company targets both automotive enthusiasts and professional users such as vehicle detailers and painters. The website is well-structured, professionally designed, and provides clear product information and contact details, supporting a trustworthy retail experience. Technically, the website employs standard web technologies including jQuery and Bootstrap, ensuring responsive design and moderate performance. The absence of a known CMS suggests a custom or proprietary platform. Security posture is solid with HTTPS enforced and cookie consent implemented, though the lack of explicit security headers and incident response information indicates room for improvement. Overall, the site is accessible without WAF or blocking mechanisms, contains no adult or questionable content, and complies with GDPR through clear privacy and cookie policies. Contact information is transparent and consistent with WHOIS data, reinforcing legitimacy. The security score is good but could be enhanced by adding security headers and incident response details. Strategic recommendations include implementing security headers, publishing a security policy, and enhancing analytics transparency to further improve compliance and trustworthiness.

B

BUZIL-WERK Wagner GmbH & Co KG

buzil.com

51

BUZIL-WERK Wagner GmbH & Co KG is a German manufacturer specializing in sustainable cleaning products, including the Planta brand which holds Cradle to Cradle certification. The company targets professional cleaning services and industrial clients, emphasizing environmental responsibility and quality. Their website reflects a medium-sized enterprise with a consistent brand presence and a focus on sustainability and training services. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes GDPR-compliant consent management via Usercentrics. Analytics are handled through Matomo, ensuring privacy-conscious tracking. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The absence of WHOIS data reduces domain trust slightly but is mitigated by transparent contact information and certifications. Overall, the website is professional, trustworthy, and well-structured, supporting the company's market position as a reputable cleaning product manufacturer.

M

Messe Friedrichshafen GmbH

cleanpro-expo.de

64

The CLEAN PRO EXPO website represents a professional trade fair platform organized by Messe Friedrichshafen GmbH, focusing on cleaning technologies and facility management for the DACH region and neighboring markets. The site effectively communicates the event's purpose, target audience, and key services, positioning itself as an innovative marketplace launching in 2026. Technically, the website employs modern web technologies including Bootstrap, Algolia Autocomplete, and Usercentrics for consent management, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is trustworthy, professional, and compliant with privacy standards, though explicit privacy and terms of service pages were not found in the provided content.

Studio 49 Vechta is a small local tattoo and piercing studio based in Schneiderkrug, Germany. The business offers tattoo and piercing services with a focus on appointment-based scheduling, including online booking for piercings. Their website is built on WordPress using common plugins such as Contact Form 7 and Bookly for appointment management. The site is professionally designed with consistent branding and provides clear information about services, pricing, and team members. Social media presence on Facebook and Instagram supports customer engagement. Technically, the website uses a modern WordPress stack with jQuery and Bootstrap, hosted on servers associated with kasserver.com. The site is mobile-optimized and performs moderately well. Security is adequate with HTTPS enforced and CSRF tokens in forms, but lacks advanced security headers and explicit security policies. Privacy compliance is strong with GDPR-aligned privacy and cookie policies and a consent mechanism. The security posture is solid for a small business, with no detected vulnerabilities or exposed sensitive data. However, improvements can be made by adding security headers and incident response contacts. The domain WHOIS data is consistent with the website content and business location, indicating legitimacy. No WAF or blocking mechanisms interfere with content access. Overall, Studio 49 Vechta presents a trustworthy and professional online presence suitable for its local service business. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining plugin updates to ensure ongoing security and compliance.

I

INNOPERFORM GmbH

innoperform.de

52

INNOPERFORM GmbH is a German-based company specializing in the development, manufacturing, and marketing of innovative products with unique selling propositions. The company collaborates closely with inventors and creative individuals to transform product ideas into market-ready innovations. Recognized by the Saxon Innovation Award in 2019, INNOPERFORM has established itself as a trusted partner in product innovation and manufacturing, focusing on metal and plastic products. Their business model includes product development, manufacturing, and sales, targeting inventors and businesses seeking innovative solutions. Technically, the website is built on a modern stack including Bootstrap and Shopware CMS, hosted by Schlund Technologies. It employs multiple advertising and analytics platforms such as Google Analytics 4, Google Ads, Meta Ads, and others, indicating a mature digital marketing approach. The site is mobile-optimized with good SEO and accessibility basics, though some improvements in accessibility and security headers could be made. From a security perspective, the site enforces HTTPS and uses secure forms with validation. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is limited due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the website is professional, trustworthy, and business-focused with good content quality and technical implementation. Strategic improvements in privacy compliance and security policy transparency would enhance its security posture and regulatory adherence.

K

KALORIMETA GmbH

kalo.de

67

KALORIMETA GmbH operates a professional website focused on providing smart energy solutions and heating cost accounting services primarily for residential properties in Germany. The company positions itself as a partner for the smart energy transition in residential real estate, offering services such as heating cost accounting, smart thermostat control, and smoke detector services. The website is well-structured, content-rich, and targets landlords, residents, and corporate clients. The presence of a parent company, Noventic, is clearly indicated, enhancing business credibility. Technically, the website is built on TYPO3 CMS with modern frontend frameworks like Bootstrap and uses Cloudflare for DNS and CDN services. It integrates advanced consent management via Usercentrics and analytics through eTracker and Google Tag Manager, reflecting a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly. From a security perspective, the site enforces HTTPS, employs security headers, and integrates cookie consent mechanisms. However, it lacks a dedicated security policy or incident response contact information, which could be improved. No vulnerabilities or suspicious patterns were detected in the content or WHOIS data, indicating a strong security posture. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It effectively communicates its business offerings and maintains a good balance between user experience and security. Strategic recommendations include publishing explicit security policies and incident response contacts to further enhance trust and compliance.

S

Stiftung Automobile Welt Eisenach

awe-museum.de

46

The Stiftung Automobile Welt Eisenach operates the Museum Automobile Welt Eisenach, a non-profit institution dedicated to preserving and presenting the automotive heritage of Eisenach, Germany. The museum showcases the history of automobile manufacturing in the region, offering exhibitions, archives, guided tours, and event spaces. The foundation was established in 2009 and took over museum operations in 2014, emphasizing cultural preservation and public education. The website serves as an information portal for visitors, donors, and enthusiasts, providing detailed contact information, event updates, and access to museum resources. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and several plugins for events and contact forms. It is mobile-optimized and includes a cookie consent mechanism, reflecting a moderate level of digital maturity. Performance is moderate with good SEO and accessibility basics in place. The site uses HTTPS exclusively, ensuring secure communications. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent but lacks advanced security headers and a published security policy or incident response contacts. No vulnerabilities or suspicious content were detected. Privacy compliance is strong with a clear privacy policy and GDPR adherence. Overall, the site is trustworthy and professionally maintained, suitable for its cultural and educational mission. The risk profile is low, with recommendations focusing on enhancing security headers, publishing a security.txt file, and improving accessibility features to further strengthen the site's security posture and user experience.

Automuseum Dr. Carl Benz is a specialized museum located in Ladenburg, Germany, dedicated to the history of mobility and automotive heritage. It operates in a niche cultural sector, offering exhibitions, special events, and educational programs focused on automotive history. The museum targets a broad audience including local visitors, tourists, automotive enthusiasts, and school groups. It maintains a strong regional presence and is an official partner of the Mercedes-Benz Museum Stuttgart, enhancing its credibility and market position. Technically, the website is built using a classic web stack with jQuery and Bootstrap, providing a responsive and user-friendly experience. The site is moderately optimized for performance and mobile devices, with clear navigation and professional design. Hosting appears to be via a common provider (likely GoDaddy), and no CMS is detected, indicating a custom or static site approach. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks advanced security headers and explicit security or incident response policies. Privacy compliance is basic but present, with a privacy policy page and cookie consent managed via a popup. No analytics or tracking scripts were detected, suggesting a privacy-conscious approach. Overall, the security posture is moderate but could be improved with additional headers and policies. The overall risk assessment is low, with no critical vulnerabilities or suspicious content detected. Strategic recommendations include enhancing security headers, formalizing incident response contacts, and improving privacy transparency. The website demonstrates good business credibility and technical implementation for a small cultural institution.

M

Musée National de l'Automobile

musee-automobile.fr

49

The Musée National de l'Automobile is a prominent automobile museum located in Mulhouse, France, housing one of the world's most significant car collections with over 450 exceptional vehicles. The museum offers a variety of services including exhibitions, event hosting, ticketing, and dining options, targeting a general audience interested in automotive history and culture. The website is professionally designed, mobile-optimized, and provides a rich user experience with clear navigation and engaging content. Technically, the site is built on WordPress using modern frameworks like Bootstrap and includes security features such as HTTPS and Google reCAPTCHA to protect user interactions. However, the absence of explicit privacy and cookie policies and the lack of WHOIS domain registration data present gaps in compliance and trust verification. Overall, the site demonstrates a strong digital presence but would benefit from enhanced transparency and compliance documentation.