Security Directory

B

Belledonne Communications SARL

linphone.org

52

Belledonne Communications SARL operates the Linphone website, providing open source and proprietary VoIP and real-time communication software solutions. The company targets developers, enterprises, and individual users with a modular suite including softphones, SDKs, and SIP servers. The website is professionally designed, well-structured, and offers comprehensive resources and community engagement. Technically, it leverages WordPress with modern plugins and analytics tools, ensuring good performance and SEO. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent, though explicit security headers and a public security policy could enhance trust. WHOIS data is unavailable, slightly reducing domain trust but the site content and references support legitimacy.

A

Adnet Communications Inc.

adnetinc.com

9

Adnet Communications Inc. is a Vancouver-based full-service web agency with over 20 years of experience specializing in website design and development for public companies and investor relations. The company offers a range of services including custom websites, template-based sites, single page and landing pages, coding partnership, and website rescue services. Their business model focuses on tailored web solutions with hosting, SSL certificates, analytics, and SEO as part of their packages. The website targets busy public and private companies seeking professional web presence solutions. Technically, the site uses modern web technologies including Uikit framework, Google Analytics, Matomo, Hotjar, and is hosted on AWS infrastructure. The site is mobile optimized with good navigation and content quality. Security posture is moderate with HTTPS enabled and daily backups, but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to absence of privacy and cookie policies and consent mechanisms. Overall, the domain registration data supports the legitimacy and long-standing presence of the business. Strategic recommendations include enhancing privacy compliance, enabling DNSSEC, publishing security policies, and improving security headers to strengthen trust and compliance.

Țuca Zbârcea & Asociații is a prominent Romanian law firm specializing in financial, corporate, tax, and litigation legal services. The firm has a strong market position, evidenced by recent awards and recognitions, and serves a diverse clientele including corporate and international clients. Their website reflects a professional and well-structured digital presence with comprehensive content and clear navigation. The firm collaborates with Andersen Global, enhancing its international reach. Technically, the website employs modern JavaScript libraries and privacy-focused analytics (Matomo), along with Google reCAPTCHA for form security. Cookie consent mechanisms are implemented, supporting GDPR compliance. However, some security headers are missing, and no explicit security or incident response policies are published, which could be improved. The security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Privacy compliance is good, with clear policies and consent banners. The absence of WHOIS data is due to ROTLD privacy policies, which is typical for Romanian domains and justified for a law firm. Overall, the site is trustworthy and professionally maintained. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, adding vulnerability disclosure mechanisms, and improving accessibility features to further strengthen the website's security and compliance posture.

M

MIA „Rossiya Segodnya“

sputnik-ossetia.com

53

Sputnik Хуссар Ирыстон is a regional news media outlet focused on providing news, radio broadcasts, videos, and infographics in the Ossetian language. It operates under the parent company MIA „Rossiya Segodnya“ and targets Ossetian-speaking audiences interested in regional and international news. The website offers a variety of content types including articles, radio schedules, and multimedia, positioning itself as a key regional information source. Technically, the site uses modern web technologies including responsive images, SVG icons, and asynchronous JavaScript loading. It integrates Matomo analytics and Yandex advertising services, reflecting a moderate level of digital maturity. Security-wise, the site enforces HTTPS and uses domain transfer protection but lacks DNSSEC and explicit security policies. Privacy compliance is basic, with privacy and cookie policies present but no active consent mechanism. Overall, the site is professional and trustworthy with room for improvement in security and privacy practices.

O

Odtebezavisi

odtebezavisi.mk

55

Odtebezavisi.mk is a Macedonian-language online casino information portal focused on providing expert reviews, guides, and recommendations for online gambling platforms targeting Macedonian players. The site positions itself as an independent and trustworthy source promoting responsible gambling and offering detailed insights into casino bonuses, games, payment methods, and legal licensing in North Macedonia. Technically, the website uses modern web standards with HTML5, CSS3, JavaScript, and integrates Matomo analytics for user tracking. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS but lacks explicit security headers and cookie consent mechanisms, which are areas for improvement. The absence of WHOIS data reduces transparency but is common in affiliate marketing sites. Overall, the site presents a moderate risk profile with good content quality and business credibility.

T

Toyota Suomi

toyota.fi

74

Toyota Suomi operates as the Finnish branch of the global Toyota Motor Corporation, providing a comprehensive range of automotive products and services including new and used car sales, financing, and additional automotive services. The website targets Finnish consumers and maintains a strong market position as a leading automotive brand in Finland. The digital infrastructure leverages advanced technologies such as Adobe Experience Manager, Matomo analytics, Datadog RUM, and integrates with multiple marketing and tracking tools, reflecting a mature and modern digital presence. Security posture is robust with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly available. Overall, the website is professional, trustworthy, and well-optimized for its audience.

R

redtie Digital

redtie.digital

43

Redtie Digital is a Greek digital agency specializing in the development of Joomla CMS websites and e-commerce solutions, complemented by services in SEO, web hosting, and visual communication. The company targets businesses and individuals seeking modern, dynamic web presence and branding solutions. Their market position is that of a specialized Joomla-focused agency with a small but professional footprint, founded in 2025. Technically, the website is built on Joomla CMS using SP Page Builder and integrates Matomo for analytics, hosted on cloud infrastructure with nameservers indicating host5.fastpath.gr. The site is mobile-optimized and SEO-friendly but lacks some advanced accessibility features. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in compliance and security best practices.

A

Arhiepiscopia Bucureștilor

arhiepiscopiabucurestilor.ro

53

The website arhiepiscopiabucurestilor.ro is the official online presence of the Archdiocese of Bucharest, part of the Romanian Orthodox Church. It serves as a central hub for religious news, events, organizational information, and cultural heritage related to the church's activities. The site targets Romanian Orthodox faithful and the general public interested in religious and cultural matters. The business model is non-profit, focusing on spiritual, educational, and social services. The domain is well-established since 2010 and uses modern web technologies including Drupal 11 and privacy-conscious Matomo analytics.

E

E&E News by POLITICO

eenews.net

53

E&E News by POLITICO is a well-established digital news platform specializing in energy and environmental journalism. It offers five daily publications targeting professionals, policymakers, and stakeholders in government, business, NGOs, and academia. The site is subscription-based with options for free trials and emphasizes timely, objective, and in-depth reporting. The association with POLITICO enhances its market credibility and reach. Technically, the website is built on WordPress using modern frameworks and plugins such as Yoast SEO Premium, Bootstrap, and Google Tag Manager. It demonstrates good mobile optimization, accessibility, and SEO practices. The site integrates multiple analytics and marketing tools, including Matomo, Marketo, and LinkedIn Insight, indicating a mature digital marketing strategy. From a security perspective, the site enforces HTTPS and includes standard security headers, reflecting a solid baseline security posture. However, it lacks publicly available security policies, incident response information, and vulnerability disclosure mechanisms, which are areas for improvement. The absence of WHOIS data for the domain raises some concerns but is likely due to privacy protection or query issues. Overall, E&E News presents a professional, trustworthy, and content-rich platform with strong business credibility and technical maturity. Strategic enhancements in transparency around security and contact information would further strengthen its trust and compliance posture.

J

Jewella Privacy LLC

bazanekretnina.me

68

Bazanekretnina.me is a regional real estate listing platform focused on Montenegro and the surrounding Balkan region. It provides a comprehensive catalog of properties including apartments, houses, commercial spaces, and land for sale and rent. The platform also features real estate news and agency partnerships, positioning itself as a key player in the regional real estate market. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience for property seekers and sellers. Technically, it employs modern web technologies and integrates Matomo analytics for user tracking, although privacy and cookie policies are not explicitly presented. Security posture is adequate with HTTPS and domain registration protections, but lacks DNSSEC and security headers. The domain is privacy protected by Jewella Privacy LLC, a common practice for such businesses, and the domain age aligns with the site's recent launch. Overall, Bazanekretnina.me is a credible and functional real estate platform with room for improvement in privacy compliance and security best practices.

R

Republika Slovenija Državna volilna komisija

dvk-rs.si

59

The website www.dvk-rs.si is the official online presence of the State Election Commission of the Republic of Slovenia, a government agency responsible for managing and communicating election and referendum information. It provides authoritative content including election results, voting procedures, contact information, and accessibility features tailored for Slovenian voters and election officials. The site is well-branded, consistent, and professionally maintained, reflecting its official status. Technically, the site is built on the TYPO3 CMS platform with modern responsive design elements such as Bootstrap components and accessibility tools. It employs Matomo for analytics, ensuring moderate user tracking with privacy compliance. The site is served over HTTPS with a good SSL configuration, though some security headers are not explicitly detected. Accessibility is well addressed with keyboard navigation and contrast options. From a security perspective, the site demonstrates good practices including encrypted connections and cookie consent mechanisms. However, it lacks publicly visible security policies or incident response contacts, which could be improved to enhance transparency and trust. No vulnerabilities or suspicious content were detected. Overall, the website is a trustworthy, professional government resource with solid technical infrastructure and compliance with privacy regulations. Strategic improvements in security policy disclosure and security headers would further strengthen its posture.

V

Verkehrsverbund Oberelbe GmbH (VVO)

vvo-mobil.de

53

VVO Mobil is a regional public transportation platform serving the Oberelbe region in Germany. It offers trip planning, real-time departure information, ticket purchasing, and network maps. The website is built on a modern Angular framework and integrates trusted third-party services such as Google Maps and PayPal for enhanced user experience and payment processing. The platform targets public transport users in the region, providing essential mobility services with a focus on usability and accessibility. The business operates in the transportation sector with a medium-sized footprint and maintains a consistent brand presence online. Technically, the website demonstrates a mature digital infrastructure with a strict Content-Security-Policy, HTTPS enforcement, and integration of analytics via Matomo. The site is mobile-optimized and provides a good user experience, though some accessibility features could be improved. The absence of a cookie consent mechanism and terms of service pages indicates room for enhancement in privacy compliance. Security posture is strong with no evident vulnerabilities or exposed sensitive data. From a security perspective, the site employs best practices such as HTTPS and CSP headers, but lacks explicit security policies and incident response contacts. No vulnerability disclosure or security.txt files were found, which could be added to improve transparency and trust. The WHOIS data aligns well with the website's claims, showing consistent domain registration and authoritative name servers. Overall, VVO Mobil presents a trustworthy and professional online presence for a regional transportation service. Strategic improvements in privacy compliance, security transparency, and accessibility would further strengthen its position and user trust.

A

Arctur d.o.o.

arctur.si

63

Arctur d.o.o. is a well-established Slovenian technology company specializing in high performance computing, cloud computing, project management, and digital design services. With over 30 years of experience, the company positions itself as an innovator merging research, science, art, and business to deliver advanced technological solutions primarily targeting industries such as healthcare, tourism, government, and NGOs. Their website reflects a professional and modern digital presence with clear service offerings and a strong emphasis on interdisciplinary innovation. Technically, the website is built using modern web standards including HTML5, CSS3, and JavaScript, with integration of analytics tools like Matomo and Google Analytics. The site is mobile-optimized, fast-loading, and accessible, with a cookie consent mechanism in place ensuring compliance with privacy regulations. The absence of a CMS or third-party hosting providers suggests a controlled hosting environment, likely self-managed. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms from spam. However, it lacks explicit security policy documentation and incident response contacts, which are recommended for enhanced trust and compliance. No vulnerabilities or exposed sensitive data were detected in the analysis. Privacy compliance is strong with clear policies and consent mechanisms. Overall, Arctur.si demonstrates a high level of professionalism, technical maturity, and business credibility. The domain registration data aligns well with the company’s stated history and location, reinforcing legitimacy. Strategic recommendations include publishing formal security policies, incident response information, and enhancing security headers to further strengthen the security posture.

T

teilAuto

teilauto.net

58

teilAuto is a well-established carsharing provider operating primarily in the German states of Sachsen, Sachsen-Anhalt, and Thüringen. Founded in 1998, the company offers a range of vehicle classes with a pay-per-use model that includes fuel costs, accessible via a dedicated mobile app and web platform. The website reflects a professional and consistent brand image, emphasizing sustainability and community values, including a notable Gemeinwohl certification. Technically, the site is built on the Contao CMS with modern JavaScript libraries and integrates privacy-conscious analytics via Matomo. Security posture is solid with HTTPS enforced and domain transfer protections, though some enhancements like DNSSEC and security headers could improve resilience. Privacy compliance is strong, featuring a comprehensive privacy policy and cookie consent mechanism. Overall, the site is user-friendly, mobile-optimized, and trustworthy, with no signs of malicious content or vulnerabilities.

A

Austria Wirtschaftsservice

aws.at

73

Austria Wirtschaftsservice (aws) is a key Austrian government funding agency dedicated to supporting innovation, business growth, and internationalization. The website provides comprehensive information on federal funding programs, special initiatives related to energy costs and the Ukraine crisis, and digital tools to facilitate funding applications. The site is well-positioned as a trusted government resource with a professional design and clear navigation tailored to Austrian entrepreneurs and companies. Technically, the site is built on TYPO3 CMS, uses Matomo for analytics, and implements modern web standards with good mobile optimization and accessibility. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security and incident response policies are not publicly detailed. WHOIS data confirms the domain's legitimacy and consistent registration with Austrian government entities. Overall, the site is a reliable, secure, and professional platform for business funding services in Austria.

G

GIT SECURITY

git-sicherheit.de

49

GIT SECURITY is a specialized media portal focused on security-related topics including management, IT security, fire protection, and safety. It serves security professionals and decision-makers by providing news, articles, product information, events, webinars, whitepapers, and videos. The portal is affiliated with Wiley-VCH, a reputable publishing company, enhancing its credibility and market position within the security media niche. The website is professionally designed with consistent branding and good content quality, targeting a medium-sized audience primarily in Germany.

F

fi-compass

fi-compass.eu

69

fi-compass is a specialized advisory platform focused on financial instruments under EU shared management, operated in partnership with the European Commission and the European Investment Bank. It provides comprehensive practical guidance, learning tools, and events to support managing authorities and stakeholders in deploying EU funds effectively. The website is built on a modern Drupal 10 CMS with integrated Matomo analytics, ensuring good technical maturity and user experience. Security posture is strong with HTTPS and privacy-compliant cookie consent mechanisms, though some advanced security headers and incident response disclosures could be improved. Overall, the platform demonstrates high professionalism, trustworthiness, and alignment with EU institutional standards.

K

Kabi d.o.o.

agent1.si

56

Agent1.si is a professional website operated by Kabi d.o.o., offering a specialized CRM software solution tailored for real estate agencies and agents primarily in Slovenia and Southeast Europe. The platform focuses on digitalizing real estate agency operations, integrating portfolio management, project management, document handling, marketing, and AI features. The company positions itself as a leading provider in its niche with a mature domain and consistent branding. Technically, the website employs modern web technologies including Google Fonts, FontAwesome, Slick Carousel, and analytics tools such as Matomo and Google Analytics. The site is mobile-optimized with good SEO practices and a clear navigation structure. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks published privacy policies, terms of service, and incident response information, which are recommended for compliance and trust. Overall, the website is professional, trustworthy, and well-maintained, serving a clear business purpose in the real estate technology sector.

K

Kabi d.o.o.

novogradnje.com

66

Novogradnje.com is a well-established real estate portal operated by Kabi d.o.o., specializing in listings of new buildings such as houses, apartments, and business premises across several Balkan countries including Slovenia, Croatia, Serbia, Montenegro, Bosnia and Herzegovina, and Kosovo. The platform offers a comprehensive service for buyers and investors, featuring over 89,000 listings, real estate news, and partnerships with numerous agencies. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Technically, it employs modern web technologies including Matomo analytics for privacy-conscious tracking and uses CAPTCHA on forms to mitigate spam. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks explicit security policies and incident response contacts. The domain is long-standing and registered with a reputable registrar, supporting the site's legitimacy. Overall, Novogradnje.com presents a credible and professional real estate service with room for improvement in security transparency and privacy documentation.

P

Patientensicherheit

cirrnet.ch

50

Patientensicherheit operates CIRRNET, a critical incident reporting and reacting network serving as a central institution for local incident reporting systems across Switzerland's healthcare sector. The organization focuses on enhancing patient safety by enabling healthcare facilities to anonymously contribute incident reports to a centralized database, thereby supporting nationwide risk assessment and prevention efforts. CIRRNET's market position is that of a key non-profit healthcare network institution with a medium-sized operational scale and a clear focus on Swiss healthcare providers and medical societies. Technically, the website is built on a modern WordPress platform using Elementor for content management and design, supported by LiteSpeed caching and Matomo analytics for performance and user tracking. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. The infrastructure supports multilingual content in German, French, and Italian, reflecting the Swiss market. From a security perspective, the site employs HTTPS with good SSL configuration and standard security headers, indicating a solid baseline security posture. However, there is no explicit security policy or incident response contact information published, and the cookie policy lacks an active consent mechanism, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission. Strategic recommendations include implementing a cookie consent mechanism, publishing a formal security policy and incident response contacts, and enhancing accessibility compliance to further strengthen trust and regulatory adherence.

J

Junta de Extremadura

juntaex.es

63

Juntaex.es is the official digital portal for the Junta de Extremadura, a regional government entity in Spain. The website provides citizens with streamlined access to public information, administrative procedures, transparency data, and current news relevant to the Extremadura region. It serves as a comprehensive gateway for residents and interested parties to engage with government services and information efficiently. The site is well-structured with thematic navigation and highlights key public services and data. Technically, the website leverages modern web technologies including Liferay CMS, Bootstrap, Swiper.js, and Matomo analytics, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and employs standard web performance practices. Security is implemented with HTTPS and cookie consent mechanisms, though explicit security headers and policies could be enhanced. From a security posture perspective, the site shows good practices such as encrypted connections and no visible sensitive data exposure. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for transparency and trust. Privacy compliance is supported by cookie policies and GDPR-aligned consent, but contact information for privacy or security concerns is not evident. Overall, Juntaex.es is a credible and professional government website with a solid technical foundation and good user experience. Strategic improvements in security transparency and contact availability would further strengthen trust and compliance.

W

Webhosting Franken

webhosting-franken.de

60

Webhosting Franken is a German-based web hosting provider specializing in high-performance NGINX hosting solutions, managed root and virtual servers, and classic PHP hosting. The company targets startups, small to medium businesses, and enterprises seeking reliable, secure, and eco-friendly hosting services. Their offerings emphasize speed, security, and customer service, supported by ISO 27001 certified data centers and 100% renewable energy usage. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, the site leverages modern technologies including NGINX, PHP versions 5.2 through 8.4, Apache2, NodeJS, and Matomo for analytics. The use of UKit framework ensures responsive design and good accessibility. Security best practices are evident with free SSL certificates, DDoS protection, app firewalls, and daily backups. However, some security headers could be explicitly implemented and documented. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. The security posture is robust with no visible vulnerabilities or exposed sensitive data. The domain WHOIS data is partially obscured due to DENIC privacy policies but shows consistent branding and active maintenance. No WAF or blocking mechanisms interfere with content access. Overall, the site scores high on content quality, technical implementation, security, privacy, and business credibility, making it a trustworthy and professional hosting provider. Strategic recommendations include enhancing security header implementation, publishing an incident response contact or security.txt file, and continuing to maintain transparency in privacy and security policies to further strengthen trust and compliance.

Z

Zentrum KlimaAnpassung

zentrum-klimaanpassung.de

55

Zentrum KlimaAnpassung is a German government-affiliated non-profit organization focused on facilitating climate adaptation for municipalities and social institutions. The website provides advisory, educational, funding guidance, and networking services to its target audience. Technically, the site is built on Drupal 10, uses modern web technologies, and implements a cookie consent mechanism via Klaro. Security posture is good with HTTPS enabled and partial security headers present, though some improvements are recommended. The site is professional, well-branded, and trustworthy with active social media presence. However, explicit privacy policy and terms of service pages are not found, which slightly impacts privacy compliance scores.

M

MBajk

mbajk.si

54

The website www.mbajk.si represents a business entity with an established domain since 2013, indicating a stable presence. The site is built using modern web technologies including Angular 18.2.10, Bootstrap, and integrates Matomo for analytics and Google Maps API for location services. A cookie consent mechanism is implemented via Didomi, reflecting some level of privacy compliance. However, the site lacks visible privacy policy, terms of service, and contact information, which limits transparency and user trust. The technical infrastructure appears moderately optimized with good mobile responsiveness but basic SEO and accessibility features. Security posture is moderate with HTTPS implied but no explicit security headers detected in the HTML content. No forms or direct data collection points are visible, reducing immediate risk but also limiting user engagement. Overall, the site is functional but would benefit from enhanced compliance documentation and security hardening.

D

Dresdner Verkehrsbetriebe AG

dvb.de

58

Dresdner Verkehrsbetriebe AG operates as the primary public transportation provider in Dresden, Germany, offering a comprehensive range of services including tram, bus, ferry, and shared mobility options. The website serves residents and visitors by providing route planning, ticketing, and real-time service updates. The company maintains a strong market position as the main transit operator in the region. Technically, the website employs modern JavaScript libraries, integrates Matomo analytics for privacy-conscious tracking, and uses OpenStreetMap for geographic data. The site is accessible, well-structured, and provides a good user experience with basic mobile optimization and accessibility features. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and a published security policy or incident response contact. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though it could improve its security posture by adding missing headers and vulnerability disclosure information.

Raision seurakunta is a Finnish Evangelical Lutheran Church parish serving the Raisio community in Southwest Finland. The website provides information about religious services, community activities, youth programs, music, and international mission work. It targets local residents and church members, operating as a non-profit religious organization. The site is built on the Liferay CMS platform, utilizing modern web technologies including React, Bootstrap, and Matomo analytics for minimal user tracking. The design is professional, mobile-optimized, and accessible, with clear navigation and relevant content. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. WHOIS data confirms domain legitimacy and consistency with the organization's identity. Overall, the website is trustworthy, compliant with GDPR, and serves its community effectively.

F

FreiwilligenServer Niedersachsen

freiwilligenserver.de

61

FreiwilligenServer Niedersachsen is the official volunteering and civic engagement portal operated under the auspices of the Niedersachsen state government in Germany. It provides comprehensive information, services, and resources related to volunteering, including the Ehrenamtskarte volunteer card, engagement atlases, training programs, and funding databases. The portal targets a broad audience including volunteers, organizations, and government entities, positioning itself as a trusted government resource in the non-profit and civic sector. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and integrates modern web technologies such as jQuery, Cookiebot for cookie consent management, and Matomo for privacy-conscious analytics. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Hosting appears to be managed by Niedersachsen state infrastructure, enhancing trust and reliability. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms compliant with GDPR, and employs Matomo analytics to minimize privacy risks. While explicit security headers are not fully visible in the HTML, the overall posture is strong with no evident vulnerabilities or exposed sensitive data. However, the site lacks a publicly visible security policy or incident response contact, and no security.txt file was found. Overall, FreiwilligenServer Niedersachsen presents a professional, trustworthy, and well-maintained digital presence aligned with government standards. It effectively balances user privacy, accessibility, and content quality, making it a reliable resource for its target audience.

P

punkt.de GmbH

punkt.de

67

punkt.de GmbH is a well-established German digital agency specializing in open source web solutions, including TYPO3, Neos, Sylius, and related technologies. With over 28 years of experience and a medium-sized team, they offer comprehensive services ranging from custom web development to hosting and consulting. Their market position is strengthened by multiple technology partner certifications and a strong focus on sustainable, flexible open source solutions. Technically, the website is built on modern PHP frameworks (Neos CMS and Flow), integrates privacy-conscious analytics (Matomo), and is hosted on their own infrastructure, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of published security policies and security headers suggests room for improvement. Overall, the site is professional, trustworthy, and compliant with GDPR, though cookie consent mechanisms could be enhanced. Strategic recommendations include publishing security and incident response policies, implementing security headers, and adding vulnerability disclosure information to further strengthen trust and compliance.

D

DER DEUTSCHE LICHTDESIGN-PREIS powered by HIGHLIGHT

lichtdesign-preis.de

58

The website www.lichtdesign-preis.de represents the official online presence of the Deutscher Lichtdesign-Preis, a well-established German lighting design award powered by the media company HIGHLIGHT. It serves as an information hub for nominations, winners, jury work, and event details, targeting professionals in architecture and lighting design. The site is professionally designed with good navigation and content relevance, supporting a positive user experience. Technically, it employs modern web technologies including Bootstrap and Matomo analytics, with a robust consent management system ensuring GDPR compliance. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers could be improved. Overall, the site demonstrates a mature digital infrastructure suitable for its business model and audience.

H

Hüthig GmbH

de-normentagung.de

57

DE Normentagung is a specialized event organizer focusing on standards in electrical installation, hosting hybrid conferences in Munich and Hamburg. The website targets professionals such as electrical engineers, planners, safety experts, and technical managers in the energy sector. The business operates under Hüthig GmbH, a recognized entity in the industry, and maintains a professional online presence with clear event information and contact details. Technically, the site uses modern frameworks like Bootstrap and privacy-focused analytics (Matomo), combined with a robust consent management system (Sourcepoint) ensuring GDPR compliance. Security posture is strong with HTTPS and no visible vulnerabilities, though explicit security headers and incident response information are absent. Overall, the site is trustworthy, well-structured, and compliant with privacy regulations.

H

Hüthig GmbH

de-trendforum.de

55

DE Trendforum is a digital event platform operated by Hüthig GmbH, focusing on the electrical installation, smart home, smart security, and lighting technology sectors. It offers live lectures and expert insights moderated by professional editorial teams from industry magazines. The platform targets professionals such as electricians, planners, safety experts, and technical managers, providing them with current industry trends and knowledge. The website is well-structured, professionally designed, and provides clear navigation and contact information. Technically, it employs modern web technologies including Bootstrap and Matomo analytics, with a strong emphasis on GDPR compliance through integrated consent management. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and policies could be enhanced. Overall, the site presents a trustworthy and professional image suitable for its niche audience.

H

Hüthig GmbH

lighting-jobs.de

55

HIGHLIGHT is a specialized media and job portal platform serving the lighting industry in Germany. The website offers job listings tailored to professionals and decision-makers in the lighting sector and has been active since 2008 under the Hüthig GmbH brand. The business model focuses on media publishing and providing a niche job market service, supported by advertising and subscription offerings. The site targets industry professionals seeking employment or recruitment opportunities within the lighting field. Technically, the website employs a modern technology stack including Bootstrap for responsive design, Matomo and Google Tag Manager for analytics, and Sourcepoint for GDPR-compliant consent management. The site is hosted with a reputable DNS provider (DomainControl) and uses HTTPS with strong SSL configuration. The site demonstrates good SEO practices with structured data and meta tags, and it is mobile optimized with basic accessibility features. From a security perspective, the site enforces HTTPS and uses consent management for cookies and tracking. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The site uses multiple third-party advertising and tracking services but manages user consent appropriately. Overall, the website presents a professional and trustworthy front for its niche market. It is well-structured and compliant with GDPR requirements. Strategic improvements could include publishing a formal security policy, adding incident response contacts, and implementing security headers to enhance protection. The risk profile is low, with no signs of malicious activity or content safety concerns.

C

CE-Markt

ce-markt.de

54

CE-Markt is a German business magazine focused on the consumer electronics and home appliances sectors, providing news, commentary, and industry insights. The website serves professionals and businesses in this niche, offering subscription-based magazine issues, newsletters, and event coverage such as IFA. The site demonstrates a solid market position within its industry segment, supported by consistent branding and quality content. Technically, the website employs modern JavaScript technologies, privacy-conscious analytics (Matomo), and a consent management platform (Sourcepoint) to comply with GDPR requirements. The site is mobile-optimized with good navigation and SEO practices, although the CMS is not explicitly identified. Hosting appears stable with dedicated nameservers. From a security perspective, the site enforces HTTPS and uses consent mechanisms but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is minimal but consistent with the business profile, and no WAF or blocking mechanisms interfere with access. Overall, CE-Markt presents a professional and trustworthy online presence with room for improvement in privacy policy transparency, security header implementation, and direct contact information availability.

H

Hüthig GmbH

highlight-web.de

55

HIGHLIGHT-WEB is a specialized German media portal operated by Hüthig GmbH, serving the lighting and illumination industry with news, technical articles, company directories, events, job listings, and magazine subscriptions. The website targets professionals and companies within the lighting sector, positioning itself as an established and trusted industry resource. The business model centers on media publishing, advertising, and event promotion, supported by subscription services. The content quality is excellent, with consistent branding and strong trust indicators such as IVW certification and GDPR compliance.

S

Spade

spade.be

51

Spade is a small Belgian digital agency specializing in responsible and accessible digital solutions. They offer a comprehensive suite of services including digital strategy, branding, web development, content production, and design. The agency emphasizes sustainable and inclusive digital practices, positioning itself as a trusted partner for businesses, associations, and startups seeking impactful digital transformation. Their market position is strengthened by certifications such as the AnySurfer accessibility label and a clear commitment to digital responsibility. Technically, the website is built on WordPress with modern libraries and analytics tools like Matomo and Google Tag Manager, ensuring a solid digital infrastructure. The site is mobile-optimized, accessible, and professionally designed, reflecting a mature digital presence. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and a public security policy, indicating room for improvement. WHOIS data is privacy-protected, which is typical for such businesses, and no suspicious patterns were detected. Overall, Spade presents a credible, professional, and trustworthy digital agency profile.

B

BHE Bundesverband Sicherheitstechnik e.V.

sicheres-zuhause.info

66

The website www.sicheres-zuhause.info is a professionally maintained portal operated by the BHE Bundesverband Sicherheitstechnik e.V., a German security association. It provides comprehensive information and resources related to home security, including burglary protection, fire safety, alarm systems, and emergency call systems, targeting private customers in Germany. The site also offers a specialist company search feature to connect users with qualified security service providers. Technically, the site is built on the Neos CMS platform using PHP and the Flow framework, with modern front-end libraries such as Select2 and Slick Carousel. It employs Matomo analytics configured to disable cookies, reflecting a privacy-conscious approach. Security-wise, the site uses HTTPS with good SSL configuration but lacks explicit security headers and cookie consent mechanisms. WHOIS data is privacy-protected, which is common for association domains, but limits transparency. Overall, the site is trustworthy, well-branded, and serves as a valuable resource for home security information in Germany.

B

BHE Bundesverband Sicherheitstechnik e.V.

bhe-qm.de

63

The website www.bhe-qm.de serves as a specialized portal for quality management certification and support tailored to security providers in Germany. Operated by the BHE Bundesverband Sicherheitstechnik e.V., it offers a range of services including QM system certification assistance, norm and guideline management, webinars, calibration services, and dedicated QM software. The site targets security companies seeking to establish or maintain certified quality management systems, positioning itself as a long-standing and trusted resource with over a decade of experience. Technically, the site is built on the Neos CMS platform leveraging the Flow PHP framework, hosted by punkt.de GmbH. It employs Matomo analytics configured to disable cookies, reflecting a privacy-conscious approach. The site is mobile-optimized with good SEO practices and moderate performance. However, some security best practices such as security headers and cookie consent mechanisms are not fully implemented. From a security perspective, the site enforces HTTPS and uses privacy-friendly analytics, but lacks visible security headers and formal incident response or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the hosting provider and business claims, indicating legitimacy and consistency. Overall, the website presents a professional, trustworthy, and business-focused presence with room for improvement in security headers and privacy compliance mechanisms. The risk profile is low with no indications of malicious activity or content safety concerns.

B

BHE Bundesverband Sicherheitstechnik e.V.

bhe-videoueberwachung.de

63

The website www.bhe-videoueberwachung.de serves as a specialized portal for video surveillance technology under the auspices of the BHE Bundesverband Sicherheitstechnik e.V., a recognized German industry association. It provides comprehensive resources including news, legal guidance, certification information, and a directory for specialist companies. The site targets professionals such as installers, planners, manufacturers, and users of video security systems, positioning itself as a trusted industry knowledge hub. Technically, the site is built on the Neos CMS platform with the Flow PHP framework, hosted by punkt.de GmbH, and employs modern web technologies including Matomo for privacy-conscious analytics. The site is well-structured, mobile-optimized, and SEO-friendly, though it lacks a cookie consent mechanism despite using tracking scripts.

B

BHE Bundesverband Sicherheitstechnik e.V.

din-14675.info

66

The website www.din-14675.info serves as an information portal dedicated to the DIN 14675 standard concerning fire alarm systems, operated by the BHE Bundesverband Sicherheitstechnik e.V., a German industry association. It provides comprehensive resources including certification information, specialist company searches, technical knowledge, and event announcements, targeting professionals and companies in the fire protection and security technology sectors. The site positions itself as a trusted industry resource within Germany's energy and government-related safety sectors. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, with modern JavaScript libraries such as Select2 and Matomo analytics for user tracking, configured to disable cookies for privacy. The site is hosted by punkt.de GmbH and demonstrates good mobile optimization, clear navigation, and professional design. Performance is moderate with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses privacy-conscious analytics but lacks certain security headers and a cookie consent mechanism, which are recommended for enhanced GDPR compliance and security posture. No vulnerabilities or exposed sensitive data were found in the content. WHOIS data is unavailable due to privacy protection, but the domain's content and association with BHE indicate legitimacy. Overall, the website is a professional, secure, and trustworthy resource for fire protection standards in Germany, with room for improvement in privacy compliance and security header implementation.

N

NIEDERSÄCHSISCHER LANDKREISTAG

nlt.de

49

The Niedersächsischer Landkreistag (NLT) is a government association representing the interests of the 36 counties of Lower Saxony and the Hannover region. It functions as a municipal peak association, providing advocacy, information dissemination, and coordination services to its members. The website reflects a professional and consistent brand image, targeting local government officials and stakeholders in the region. The business model is non-profit and focused on public sector collaboration and representation. Technically, the website is built on WordPress 6.8.2 with the Enfold theme and uses modern plugins such as Yoast SEO for optimization, Matomo for privacy-conscious analytics, and Borlabs Cookie for GDPR-compliant cookie management. The site is mobile-optimized, accessible, and performs moderately well. Hosting appears to be managed via your-server.de, a known hosting provider. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms. However, explicit security headers are not detected, and there is no public security policy or incident response information. No vulnerabilities or sensitive data exposures are evident. The domain WHOIS data is consistent with the website's claims, indicating legitimacy and trustworthiness. Overall, the site presents a low-risk profile with good privacy compliance and business credibility. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and adding a vulnerability disclosure mechanism to further improve trust and security posture.

H

Hüthig GmbH

huethig.de

56

Hüthig GmbH is a well-established German publishing company specializing in technical and industrial media, particularly in electrical engineering and electronics. Founded in 1925, the company offers a diverse portfolio including professional journals, online portals, events, and awards, targeting industry professionals. The website reflects a professional and consistent brand image with clear navigation and relevant content for its audience. Technically, the site employs modern web technologies such as Bootstrap, Matomo analytics, and a robust consent management system, indicating a mature digital infrastructure. Security-wise, the site uses HTTPS and consent mechanisms but lacks explicit security policies and incident response information, suggesting room for improvement in transparency and security governance. Overall, the website is trustworthy, compliant with GDPR, and provides a good user experience with moderate performance and accessibility.

H

Hüthig GmbH

elektro.net

61

elektro.net is a professional German-language media portal operated by Hüthig GmbH, focusing on electrical installation, building technology, and renewable energy sectors. It provides industry news, product reports, subscription magazines, newsletters, event information, job listings, and an online shop for technical publications. The website targets professionals and companies within the electrical and building technology industries, positioning itself as a trusted and established information source in Germany. The technical infrastructure employs modern web technologies including Google Tag Manager, Matomo analytics, and Sourcepoint for consent management, ensuring GDPR compliance. The site is mobile-optimized, accessible, and features a well-structured navigation system. Performance is moderate with good SEO and accessibility practices. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security headers and policies are not evident. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a concern but does not detract significantly from the site's legitimacy given the professional content and branding. Overall, elektro.net presents a low-risk profile with strong business credibility and compliance. Strategic recommendations include enhancing security headers, publishing explicit security policies, and improving transparency around domain registration details.

T

TECE SE

tece.com

72

TECE SE is a German-based manufacturer specializing in sanitary installation products including sanitary systems, plumbing frameworks, drainage, and pipe systems. The company targets architects, planners, craftsmen, customers, and commercial operators with a broad portfolio of products and supporting services such as software tools and product databases. The website reflects an international presence with strategic acquisitions and a strong market position in the manufacturing sector. Technically, the website is built on Drupal 10, employs modern analytics tools like Matomo and Google Tag Manager, and implements GDPR-compliant cookie consent mechanisms. The site is well-optimized for mobile and accessibility, with professional design and clear navigation. Security posture is moderate with HTTPS usage and cookie consent but lacks visible security headers and published security policies. WHOIS data is unavailable or indicates the domain may not be registered, which raises concerns about domain legitimacy despite the professional website content. Overall, the website is trustworthy and business credible but would benefit from improved transparency on domain registration and enhanced security disclosures.

D

DokuMe

dokume.net

48

DokuMe is a German-based service provider specializing in digital transformation and business strategy consulting for companies and sports organizations such as federations, trainers, and clubs. The website presents two main service areas targeting corporate clients and sports entities, emphasizing digitalization strategies. The business appears to be a small-sized entity founded in 2013, with a focused niche market and consistent branding. Technically, the website uses modern frontend technologies including Bootstrap and FontAwesome, and employs Matomo for analytics, indicating some attention to privacy. Hosting is provided by Cronon GmbH, a reputable German hosting provider. Security posture is basic with HTTPS enabled but lacking advanced security headers and DNSSEC. Privacy and cookie policies are absent, which impacts compliance. Contact information is minimal, limited to a single email address, with no phone or physical address details. Overall, the website is professional and safe, but could improve in privacy compliance and security best practices.

O

Olimpijski komite Slovenije – Združenje športnih zvez

olympic.si

44

The Olimpijski komite Slovenije – Združenje športnih zvez is the official national Olympic committee of Slovenia, established in 2003. It serves as the umbrella organization for Slovenian sports federations, promoting Olympic sports, athlete development, and sports education. The website provides comprehensive information about sports events, athlete achievements, and organizational activities, targeting athletes, sports professionals, and the general public interested in sports in Slovenia. The organization operates as a non-profit entity with a strong national presence and official recognition. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Swiper.js, and integrates multiple analytics and marketing tools such as Google Analytics, Matomo, Facebook Pixel, and Mailchimp. The site is mobile-optimized with good navigation and content structure, although it lacks explicit CMS identification. Performance is moderate with asynchronous script loading enhancing user experience. From a security perspective, the site uses HTTPS with good SSL configuration and no visible exposed sensitive data. However, it lacks visible security headers and does not provide explicit security policies or incident response contacts. Privacy and cookie policies are not clearly linked, which is a compliance gap. The WHOIS data is consistent and indicates a legitimate, long-standing domain registration aligned with the organization's profile. Overall, the website is professional, trustworthy, and content-rich, but improvements in privacy compliance and security best practices are recommended to enhance user trust and regulatory adherence.

N

NanodiagBW

nanodiag.de

60

NanodiagBW is a German innovation cluster focused on advancing nanopore technology for epigenetic analysis related to major diseases such as cancer and Alzheimer's. Supported by government funding through the Clusters4Future initiative, it unites universities, research institutions, and companies to accelerate technology transfer and commercialization. The website reflects a mature digital presence with professional design, multilingual support, and comprehensive content about their mission, projects, and network. Technically, the site is built on WordPress with Elementor and uses privacy-respecting analytics (Matomo). Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site is trustworthy, well-branded, and compliant with GDPR requirements.

Linksnet.de is a German-language digital platform operated by the Rosa-Luxemburg-Stiftung, serving as a hub for over 50 left-wing political and scientific magazines. It provides curated access to articles on politics, society, culture, and related themes, targeting politically engaged readers and academics interested in leftist discourse. The platform is built on Drupal 9 and integrates Matomo analytics with privacy-conscious settings. The website demonstrates good content quality, clear navigation, and mobile optimization, reflecting a mature digital presence for a non-profit media entity. Security posture is adequate with HTTPS and privacy-aware analytics, though improvements in security headers and explicit cookie consent are recommended. The absence of direct contact information and formal security policies suggests areas for enhancement in transparency and compliance. Overall, the domain and website appear legitimate and consistent with the stated organizational affiliation.

W

WERMA

werma.com

65

WERMA is a medium-sized manufacturing company specializing in industrial signaling products such as signal towers, stack lights, and integrated signaling solutions. The company targets industrial and manufacturing sectors with a B2B business model. The website is professionally designed, multilingual, and built on the Shopware 6 platform, indicating a moderate level of digital maturity. Technical infrastructure includes modern analytics tools like Matomo and Google Tag Manager, and a cookie consent mechanism via Cookiebot, reflecting awareness of privacy compliance requirements. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though explicit security headers are missing and privacy policy pages are not found in the provided content. The domain WHOIS data is unavailable, which limits the ability to fully verify domain legitimacy. Overall, the website presents a trustworthy and professional front for the business but would benefit from enhanced transparency in privacy and security policies.

H

Hommel + Keller

hommel-keller.de

54

Hommel + Keller is a well-established German manufacturer specializing in precision tools, particularly knurling tools, marking solutions, and modular precision technology. Founded in 1926, the company positions itself as a market leader in the manufacturing sector, targeting industrial clients and technical buyers. Their website reflects a professional and consistent brand image, offering detailed product categories and emphasizing quality and customer satisfaction. Technically, the site is built on WordPress with the Avada theme, incorporating modern technologies and privacy-conscious analytics via Matomo. Security posture is good with HTTPS and cookie consent mechanisms, though additional security headers and incident response information could enhance trust. Overall, the website is well-structured, GDPR compliant, and provides clear contact channels via phone and a contact form.

G

Gemeinde Dunningen

dunningen.de

52

Gemeinde Dunningen operates as the official municipal government website for the town of Dunningen, Germany, serving approximately 6,330 residents across three districts. The website provides comprehensive local information including news, events, public announcements, and municipal services. It targets local citizens and visitors, offering online services and community engagement resources. The business model is focused on public service and community information dissemination, positioning itself as a trusted local government authority. Technically, the website is built on the cEasy CMS platform, leveraging JavaScript libraries such as jQuery and Swiper.js for UI components, and Matomo for privacy-conscious analytics. The site is hosted with domaincontrol.com DNS services and employs HTTPS with a good SSL configuration. The site demonstrates good mobile optimization, accessibility, and SEO practices, though there is room for improvement in security headers and explicit security policy documentation. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of security headers and incident response contact information suggests opportunities to enhance the security posture. The WHOIS data is consistent and legitimate, supporting the trustworthiness of the domain. Overall, the website presents a professional, secure, and privacy-conscious platform for municipal services. Strategic recommendations include implementing security headers, publishing security policies, and providing incident response contacts to further strengthen trust and compliance.