High-risk security reports
36,503 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
4,701–4,750 of 36,503
Other · Germany
49High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website www.saturn.de currently presents a Cloudflare Turnstile captcha challenge page blocking direct access to its content. This indicates a security mechanism to prevent automated access or abuse. Due to this, no substantive business content, policies, or contact information is accessible for analysis. The domain uses Akamai nameservers, suggesting professional hosting and a legitimate commercial presence. However, the lack of accessible content limits the ability to assess the company's business model, services, or compliance posture. Technically, the site employs modern WAF technology but does not expose further technical or security details on this page. Security posture is difficult to evaluate fully due to content blocking, but the presence of a WAF is a positive indicator. Overall, the site is currently inaccessible for full analysis, resulting in a low AI score and unknown compliance or business credibility status.
Connect Centerconnectcenter.hu
Technology · Hungary
36High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Connect Center is a Hungarian technology company specializing in e-commerce integration solutions, providing a platform that bridges ERP, inventory, invoicing, wholesale price lists, and webshop systems. The company targets e-commerce businesses seeking seamless synchronization between backend systems and online stores. The website is built on WordPress using the Divi theme and incorporates modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and reCAPTCHA for security. While the technical infrastructure is solid with HTTPS and standard plugins, the site lacks published privacy and cookie policies, which impacts GDPR compliance. No explicit contact information or security policies are visible, which may affect user trust and compliance transparency. Overall, the site presents a professional business presence with moderate digital maturity but requires improvements in privacy and security disclosures.
Fogyasztó Barátfogyasztobarat.hu
E-commerce · Hungary
49High
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Fogyasztó Barát is a Hungarian e-commerce trust and legal compliance platform established in 2012, serving over 10,000 webshops. It offers key services such as legally compliant terms and conditions (ÁSZF) generation, certification, customer review systems, and informational widgets to enhance webshop credibility and customer trust. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress, Elementor, Bootstrap, and Cookiebot for GDPR compliance. The platform integrates Google Analytics and Google Ads for marketing and analytics purposes. Security posture is good with HTTPS and cookie consent mechanisms, though security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration data aligns well with the business claims, indicating a trustworthy and mature online presence.
Dr. Heike Kreymborg & Kristian Grimm GbR32reasons.de
Healthcare · Germany
44High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
32 Reasons is a specialized dental practice located in Hamburg, Germany, offering a comprehensive range of dental services including aesthetic dentistry, implantology, endodontology, and orthodontics such as Invisalign. The practice emphasizes modern technology and patient-centered care, supported by an inhouse dental laboratory for customized prosthetics. The website is professionally designed, content-rich, and targets local patients seeking high-quality dental care. Technically, the site uses modern web standards with embedded video and SVG graphics, and includes a browser update notification script to encourage security hygiene. Security posture is good with HTTPS enforced, but lacks advanced security headers and cookie consent mechanisms. Contact information is clearly presented, enhancing business credibility. No blocking or WAF mechanisms were detected, allowing full content access. Overall, the website reflects a trustworthy, professional healthcare provider with room for improvement in privacy compliance and security best practices.
WorkSafe Saskatchewanworksafesask.ca
Government · Canada
46High
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
WorkSafe Saskatchewan is a government agency dedicated to promoting workplace health and safety within the province of Saskatchewan, Canada. The organization provides regulatory oversight, educational resources, and support services to employers and workers to foster safe working environments. The website serves as a comprehensive portal for information, incident reporting, and access to safety programs, positioning WorkSafe Saskatchewan as the authoritative body in its sector. Technically, the website is built on WordPress using the Avada theme and incorporates modern web technologies including jQuery, Google Analytics, Facebook Pixel, and LinkedIn Insight Tag for analytics and marketing. The site demonstrates good mobile optimization and accessibility features, though there is room for improvement in accessibility compliance. Performance is moderate, with a well-structured layout and clear navigation enhancing user experience. From a security perspective, the site enforces HTTPS, employs multiple security headers, and avoids exposing sensitive data. However, it lacks a publicly available security policy and vulnerability disclosure mechanism, which are recommended for transparency and incident management. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place, reflecting adherence to GDPR principles. Overall, the website is professional, trustworthy, and well-maintained, serving its government mandate effectively. The absence of WHOIS data is noted but likely due to registry policies rather than malicious intent. Strategic recommendations include publishing a formal security policy, implementing a vulnerability disclosure program, and enhancing accessibility to further strengthen the site's security posture and user inclusivity.
Solar Sistersolarsister.org
Energy · United States
43High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Solar Sister is a non-profit organization dedicated to empowering local women entrepreneurs in Africa to create and sustain clean energy businesses. The organization leverages a social enterprise model to address energy poverty and gender inequality by supporting women as clean energy distributors in last-mile communities. Their market position is strong within the niche of women-led clean energy initiatives, supported by a clear mission and donor engagement. The website reflects a professional and consistent brand with good content quality and clear calls to action for donations and involvement. Technically, the website is built on WordPress with modern plugins such as Gravity Forms and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile optimized and SEO friendly, though accessibility features are basic. Performance is moderate with lazy loading implemented for images. Hosting and domain registration are consistent with the organization's history and legitimacy. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and explicit security headers, which are recommended for enhanced security. No privacy or cookie consent mechanisms were detected, which may pose compliance risks under GDPR or similar regulations. Contact information is clearly provided, but no dedicated security or incident response policies are published. Overall, Solar Sister's website is trustworthy and professional, supporting its mission effectively. Strategic improvements in security headers, privacy compliance, and explicit policy disclosures would enhance its security posture and regulatory compliance.
- Government of Canada
canada.ca
Government · Canada
47High
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Canada.ca is the official Government of Canada website serving as a centralized portal for all federal programs, services, departments, ministries, and organizations. It targets Canadian residents and citizens seeking government information and services. The site is authoritative, enterprise-scale, and bilingual, reflecting Canada's official languages. The business model is a government service portal, providing comprehensive access to public resources and information. The website is well-branded with consistent government identity and offers excellent content quality and user experience.
Aerial Sports South Africapoleart.capetown
Other · South Africa
47High
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website poleart.capetown serves as the official platform for the World Pole Art Championship 2025, a prestigious international event in pole dance and aerial arts hosted in Cape Town, South Africa. It targets athletes, enthusiasts, and spectators globally, providing event information, gallery content, sponsorship opportunities, and upcoming ticket sales. The business model is event-driven, relying on sponsorship and donations to fund the championship. Technically, the site is built on WordPress with a standard theme and uses Cloudflare DNS services. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, representing compliance gaps. Contact information is limited to email addresses, with no phone or physical address provided. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening.
- Wyldata, Ltd.
wyldata.com
Technology
49High
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Wyldata, Ltd. operates a specialized action sports data platform focused on providing accurate, relevant, and actionable sports data to federations, athletes, fans, and brands. The company offers core services including database management, ranking algorithms, and custom data products, positioning itself as a trusted technology partner within the action sports ecosystem. Their partnerships with recognized federations such as World Skate and FIS underscore their market credibility and industry integration. Technically, the website is built on modern frameworks like Nuxt.js and Vue.js, hosted on AWS infrastructure, and employs best practices in design, responsiveness, and performance. Security posture is solid with HTTPS enabled and error monitoring via Sentry; however, there is room for improvement in security headers and published security policies. Privacy compliance is basic with presence of privacy and cookie policies and consent mechanisms, though GDPR compliance is not explicitly confirmed. Overall, the website demonstrates a high level of professionalism and trustworthiness, with minor gaps in direct contact information and advanced security disclosures.
Other
49High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website at esefunds.com is currently inaccessible to the public, returning a 403 Forbidden error page. This indicates that access is restricted or blocked, preventing any meaningful content or business information from being displayed. The domain is registered with GoDaddy.com, LLC since January 2022 and is active until 2026, but no registrant details or privacy protection are provided. The lack of accessible content, contact information, or policies severely limits the ability to assess the business or its services. Technically, the site lacks DNSSEC and security headers, and no analytics or tracking technologies are detected. Overall, the website's digital maturity and security posture are poor due to the access restriction and minimal technical safeguards.
- Verlag Freies Geistesleben
geistesleben.de
Retail · Germany
49High
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Verlag Freies Geistesleben operates as a specialized publishing house and online retailer focusing on books and eBooks related to Waldorf pedagogy, anthroposophy, and related educational and cultural topics. The website serves a niche audience interested in these areas, offering a curated selection of literature and educational materials. The business model centers on direct online sales complemented by a partner bookstore network and digital content offerings. Market positioning is that of a trusted medium-sized publisher within its specialized domain in Germany. Technically, the website is built on the OXID eShop Enterprise Edition platform, utilizing common web technologies such as jQuery, Font Awesome, and Cookiebot for cookie consent management. The site is mobile-optimized with a responsive design and includes standard ecommerce features like user login and shopping cart functionality. SEO and accessibility are implemented at a basic to good level, with room for improvement in accessibility. From a security perspective, the site enforces HTTPS and employs a comprehensive cookie consent mechanism with granular user controls, reflecting good privacy practices. However, there is a lack of explicit security headers and no publicly available security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected in the analysis. The absence of a privacy policy page and terms of service is a notable gap in compliance documentation. Overall, the website presents a professional and trustworthy front for its business, with moderate technical maturity and a solid privacy posture. Strategic improvements in security headers, compliance documentation, and accessibility would enhance its security and user trust further.
- GGrindstone s.r.o.
gamedays.sk
Technology · Slovakia
44High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Game Days is a specialized gaming conference based in Košice, Slovakia, organized by Grindstone s.r.o. The event focuses on connecting industry experts, indie developers, and creatives in a collaborative environment. The website reflects a professional and consistent brand image, targeting gaming professionals and enthusiasts in the region. The business model centers on event organization supported by sponsorships and partnerships with notable industry players and local organizations. Technically, the website is built using modern frameworks such as Nuxt.js and Vue.js, hosted likely by Websupport, with good mobile optimization and moderate performance. The site uses Google Tag Manager for analytics and tracking but lacks a cookie consent mechanism and some security headers. The SSL configuration is excellent, and DNSSEC is enabled, indicating good domain security practices. From a security perspective, the site enforces HTTPS and DNSSEC but could improve by adding security headers, a cookie consent banner, and publishing security and incident response policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy present but no cookie policy or GDPR explicit indicators. Overall, the website is trustworthy and professional with a good security posture but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.
Bee Web Identitybeestudio.net
Other · Italy
48High
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Bee Web Identity is a small Italian digital agency specializing in web design, SEO, and corporate identity services. Founded in 2011, it targets businesses seeking modern, elegant websites and coordinated branding solutions. The company showcases a portfolio of projects and maintains a professional online presence with multilingual support. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery, with Google Fonts for typography. The site is mobile optimized and demonstrates good SEO practices, though accessibility features are basic. Security posture is moderate; HTTPS is used, but DNSSEC is not enabled and security headers are absent. Privacy compliance is basic with a cookie consent banner and a privacy policy present, though GDPR compliance is not explicitly confirmed. Contact information is clearly provided, including email, phone, and physical address. Overall, the website is professional and trustworthy with room for security and compliance improvements.
- TTSE CB
tse-nastrojarna.cz
Manufacturing · Czech Republic
48High
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
TSE CB is a Czech manufacturing company specializing in precision tooling and engineering products, continuing the legacy of the TESLA Karlín brand since 2015. The company operates a professional website built on WordPress with WooCommerce, targeting industrial clients in the manufacturing sector. The site provides clear information about their services, including stamping and die tools and pressure casting molds. Technically, the website uses a moderately modern tech stack with SEO and GDPR compliance implemented, though some improvements in security headers and mobile optimization are recommended. The security posture is adequate with HTTPS and cookie consent but lacks explicit security policies or incident response contacts. Overall, the website is trustworthy and professional, but the absence of WHOIS data for the domain reduces domain trustworthiness and should be investigated further.
- TTSE MOBILIÁŘ
tse-mobiliar.cz
Manufacturing · Czech Republic
45High
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
TSE MOBILIÁŘ is a Czech-based manufacturer specializing in urban furniture and industrial applications, including bus shelters, stop markers, advertising vitrines, and outdoor benches. The company targets municipalities and industrial clients, offering custom production and a range of specialized products. The website is built on WordPress with WooCommerce, indicating a moderate level of digital maturity and e-commerce capability. The presence of GDPR compliance and cookie consent mechanisms reflects awareness of privacy regulations. Security posture is generally good with HTTPS enforced, but lacks some advanced security headers. The absence of WHOIS data is a concern for domain legitimacy, though the website content and business information appear professional and trustworthy. Overall, the site is functional, well-structured, and serves its business purpose effectively.
Digitalist d.o.o. & Digitalist consulting d.o.o.digitalist.si
Technology · Slovenia
36High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Digitalist d.o.o. & Digitalist consulting d.o.o. is a Slovenian digital agency specializing in web development, digital marketing, and subsidy consulting services. Founded in 2020, the company positions itself as a comprehensive partner for businesses seeking to enhance their online presence and sales performance. The website showcases strong client testimonials and certifications, indicating a reputable market position within the regional digital services sector. Technically, the website is built on WordPress using the Flatsome theme, integrates modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel, and employs Cloudflare DNS services. Security posture is solid with HTTPS and reCAPTCHA implemented, though the absence of security headers and explicit privacy and cookie policies represent areas for improvement. Overall, the site is professional, well-branded, and user-friendly, targeting business clients in Slovenia and neighboring regions.
Other
49High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website at bizequity.com is currently inaccessible to the public, returning a 403 Forbidden error page that blocks access to any meaningful content. This prevents any direct analysis of business offerings, contact information, or compliance documentation. The domain is well-established, created in 2003, and registered through a reputable registrar, indicating legitimacy at the domain registration level. Hosting appears to be on Amazon AWS infrastructure, but DNSSEC is not enabled, which is a security enhancement opportunity. No privacy, cookie, or terms of service policies are present, and no contact information or interactive elements are available on the landing page. Overall, the site lacks visible content and business transparency, resulting in a low content quality and trustworthiness score.
- ZZUMA Press
zuma.press
Media
45High
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
ZUMA Press is a photography agency specializing in assignment, editorial, and archive photography services. Founded in 2016 by Scott Mc Kiernan, it serves media professionals and editorial clients with a broad network of photographers. The website presents a basic but functional interface with search capabilities and a large photographer directory, indicating a medium-sized operation in the media industry. Technically, the site uses standard web technologies including HTML, CSS, JavaScript, and integrates Google Analytics and Google Tag Manager for user tracking. Hosting is provided by DreamHost, a reputable provider. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy and cookie policies are absent, indicating compliance gaps. No contact information or incident response channels are visible, which may impact user trust and regulatory compliance. Overall, the domain registration is consistent and legitimate, supporting the business credibility. Strategic improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and compliance.
WEB-STAR spol. s.r.o.web-star.sk
Technology · Slovakia
42High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
WEB-STAR spol. s.r.o. is a Slovak-based small technology company specializing in custom web development, e-commerce solutions, branding, and digital marketing services. With over 13 years of market presence and more than 900 clients, the company holds a strong local market position focused on SMEs and entrepreneurs. Their website demonstrates a professional and modern design, leveraging WordPress CMS with Elementor and Yoast SEO plugins, ensuring good SEO and mobile responsiveness. Security posture is solid with HTTPS and Google reCAPTCHA v3 implemented, though improvements in security headers and incident response transparency are recommended. Overall, the website is trustworthy, content-rich, and business credible, supporting a positive user experience and client engagement.
- FKA Brands
fkabrands.com
Retail
49High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
FKA Brands operates as a multi-brand consumer products company representing well-known brands such as Homedics, Ellia, Obusforme, The House of Marley, JAM, HMDX, and Revamp. The website serves primarily as a portal linking visitors to the individual brand websites, providing brand logos and URLs. The business model focuses on brand management and consumer product distribution across multiple markets. The company appears to be medium-sized with a founding date consistent with the domain registration in 2017. Technically, the website uses a minimal technology stack with jQuery 1.12.4 and is hosted via GoDaddy.com, LLC. The site has basic mobile optimization and SEO practices but lacks advanced frameworks or CMS detection. Performance is moderate, and accessibility features are basic. The website lacks cookie consent mechanisms and uses an outdated JavaScript library, which could pose security risks. From a security perspective, the site does not show evidence of security headers or advanced security policies. The domain registration is transparent and consistent with the business claims, with no privacy protection or suspicious patterns. The absence of contact information and incident response details limits the security posture. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is professional and trustworthy but could improve in security best practices and privacy compliance. Strategic recommendations include enabling DNSSEC, updating JavaScript libraries, implementing security headers, adding cookie consent, and providing clear contact and incident response information to enhance trust and compliance.
Slovak-American Foundationslovakamericanfoundation.org
Technology · Slovakia
45High
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The Slovak-American Foundation was a US 501(c)(3) non-profit organization dedicated to fostering and strengthening relationships between the United States and Slovakia, with a focus on supporting the Slovak startup ecosystem and innovation. Founded in 2010 as the legacy successor to the Slovak American Enterprise Fund, the Foundation ceased operations in 2023 after fulfilling its mission. The website provides detailed information about the Foundation's history, programs, and impact, including a downloadable closing report. Technically, the website uses modern frontend technologies such as Alpine.js and Google Fonts, with a clean, professional design optimized for mobile devices. Security posture is moderate, with HTTPS implied but lacking explicit security headers and policies. No forms or data collection mechanisms are present, reducing attack surface but also limiting user interaction. The absence of WHOIS data reduces domain trustworthiness, but the professional content and contact information support legitimacy. Overall, the site is safe, professional, and informative, though improvements in privacy compliance and security best practices are recommended.
ALPHA Consultalphacons.eu
Transportation · Italy
49High
NIS2 — · GDPR —
NIS2 — · GDPR —
ALPHA Consult is a European boutique consultancy specializing in strategic management and technology consulting focused on space applications, GNSS, Earth Observation, Intelligent Transport Systems, and UAVs. The company targets businesses, regulators, and European institutions, positioning itself as a leading independent expert in these sectors. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site uses modern web technologies including jQuery and Google Analytics, hosted by Aruba S.p.A., with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit incident response or security policies. Overall, the site is trustworthy and professionally maintained, with moderate user tracking and basic privacy compliance.
- UUNIS, a.s.
unis-testlab.cz
Technology · Czech Republic
39High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
UNIS, a.s. operates the VTP TESTLAB, an accredited testing laboratory in the Czech Republic specializing in electromagnetic compatibility (EMC), mechanical resistance, climatic, and combined vibration/climate testing. The company holds ISO/IEC 17025:2018 accreditation, ensuring high standards in testing services. The website targets manufacturers and businesses requiring certified testing services, positioning itself as a reliable and professional service provider in the technology and manufacturing sectors. The business model focuses on providing specialized laboratory testing services with a medium-sized operational scale and a consistent brand presence. Technically, the website employs modern JavaScript libraries such as jQuery, Google Analytics for traffic analysis, and Google reCAPTCHA v3 for bot mitigation. The site is served over HTTPS, ensuring secure communications, and includes a GDPR-compliant privacy policy. However, some technical improvements are recommended, including the addition of security headers and cookie consent mechanisms to enhance compliance and security posture. Security-wise, the site demonstrates good practices with secure forms and no visible vulnerabilities, but lacks explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and well-structured, though the absence of WHOIS data limits full domain trust assessment. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing vulnerability disclosure policies to strengthen security and compliance further.
- CCIBERPYME BARCELONA, S.L.
barcelonactiva.mobi
Government · Spain
42High
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Barcelona Activa's mobile website (barcelonactiva.mobi) is currently non-operational, serving only as a redirect notice to the main Barcelona Activa website. The business behind the domain is CIBERPYME BARCELONA, S.L., a local government or non-profit entity focused on supporting entrepreneurship and business development in Barcelona. The domain is aged since 2014 but has been expired for over 8 months, which poses a risk to trust and continuity. The website itself is minimalistic, with no interactive elements, forms, or contact information, indicating a low level of digital maturity and technical sophistication. Hosting is provided by SiteGround, a reputable provider, but no advanced security or privacy features are implemented.
Anthroposophische Gesellschaft in Deutschland e.V.anthroposophische-gesellschaft.de
Non-profit · Germany
43High
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The Anthroposophische Gesellschaft in Deutschland e.V. is a well-established non-profit organization dedicated to promoting the spiritual and cultural movement of Anthroposophy founded by Rudolf Steiner. The organization operates primarily in Germany and serves a broad audience interested in spiritual science, cultural reform, and social initiatives. Their business model revolves around memberships, events, publications, and fostering community engagement. The website reflects a mature digital presence with a comprehensive content offering, including news, events, and educational resources. Technically, the site is built on TYPO3 CMS, hosted by Infomaniak, and employs modern web technologies to ensure a good user experience across devices.
- Radio LOTTE Weimar
radiolotte.de
Media · Germany
45High
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Radio LOTTE Weimar is a community radio station serving the city of Weimar, Germany, providing local news, event information, and broadcasting services. The website is primarily in German and targets local residents interested in community radio content. The business operates in the media sector with a small organizational size, focusing on community engagement and information dissemination. Technically, the website uses common web technologies such as jQuery, Bootstrap, and Font Awesome, and is likely powered by TYPO3 CMS hosted by Cloudpit. The site includes a cookie consent mechanism via Usercentrics, indicating some level of privacy compliance, though no explicit privacy policy or terms of service pages were found. Security posture is moderate with HTTPS enabled but lacking visible security headers and detailed security policies. Overall, the website is functional and professional but could improve in privacy transparency and security documentation.
- idee[x] digitale dienste
idee-x.de
Technology · Germany
46High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
idee[x] digitale dienste is a small regional digital service provider specializing in custom web development and digital consulting, primarily serving clients in Baden-Baden and Karlsruhe, Germany. Their offerings include modern web technologies such as Typo3, WordPress, React, and React Native, focusing on responsive, user-friendly, and SEO-optimized websites. The company positions itself as a reliable project partner delivering up-to-date technical solutions. The website is built on WordPress with a custom theme and uses standard web technologies including jQuery and SVG graphics. Hosting is managed via UI-DNS nameservers, indicating a professional hosting environment. The site is mobile optimized and provides a good user experience with clear navigation and relevant content.
Transportation · Germany
48High
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Hamburgische Schiffbau-Versuchsanstalt GmbH (HSVA) is a well-established private and independent maritime service and consulting company based in Hamburg, Germany. Founded in 1913, HSVA specializes in maritime hydrodynamics, aerodynamics, and arctic technology, providing innovative solutions and world-class experimental testing facilities to clients worldwide. The company is recognized for its contributions to greener shipping and sustainable marine environments, holding a strong market position supported by national and international research collaborations. Technically, the HSVA website employs modern frontend technologies including Bootstrap and AOS for animations, alongside a robust cookie consent management system (ConsentFriend/Klaro!). The site is mobile-optimized with good SEO practices and moderate performance. While HTTPS is enforced, security headers are not explicitly detected, suggesting room for improvement in security hardening. From a security perspective, HSVA demonstrates a solid baseline with HTTPS and cookie consent mechanisms. However, the absence of explicit security policies, incident response contacts, and security.txt files indicates potential gaps in transparency and vulnerability management. No critical vulnerabilities or blocking mechanisms were detected, and the domain WHOIS data aligns well with the company’s identity and location, supporting legitimacy. Overall, HSVA presents a professional, trustworthy online presence with strong business credibility and compliance with privacy regulations. Strategic enhancements in security headers, incident response disclosures, and accessibility could further strengthen their security posture and user trust.
NSB Groupnsb-group.com
Transportation · Germany
49High
NIS2 25 · GDPR 73
NIS2 25 · GDPR 73
NSB Group is a medium-sized German maritime service provider specializing in integrated ship management services including technical management, crew management, crew training, and newbuilding supervision. The company positions itself as a reliable and innovative partner with a global reach, emphasizing sustainability and quality. The website is built on WordPress with modern technologies and plugins ensuring good performance, SEO, and accessibility. Security posture is strong with HTTPS, clientTransferProhibited domain status, and cookie consent mechanisms, though lacks explicit security policy and incident response information. Overall, the site reflects a professional and trustworthy maritime business with solid digital maturity.
- SSDC Ship Design & Consult GmbH
shipdesign.de
Transportation · Germany
33High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
SDC Ship Design & Consult GmbH is a specialized consultancy firm focused on the maritime shipping industry, offering ship design, engineering, and consultancy services. Their expertise spans various ship types including tankers, container ships, yachts, and research vessels, with services covering feasibility studies, steel design, mechanical engineering, and consultancy on alternative fuels and efficiency optimization. The company targets shipping industry professionals and ship owners, positioning itself as a niche player in maritime consultancy. Technically, the website is built with basic HTML, CSS, and JavaScript without modern frameworks or CMS. The hosting is provided by kasserver.com, a professional hosting provider. The site lacks mobile optimization and accessibility features, and no analytics or tracking technologies are detected. Performance is moderate with a fixed-width layout and minimal dynamic content. From a security perspective, the site does not show evidence of HTTPS enforcement or security headers, which are critical for protecting user data and ensuring trust. There is no visible privacy or cookie consent mechanism, and no incident response or security policy information is provided. The WHOIS data is consistent and indicates a legitimate domain registration with no privacy protection, appropriate for the business type. Overall, the website is functional but basic, with room for improvement in security posture, privacy compliance, and technical modernization. Strategic enhancements in HTTPS implementation, security headers, mobile responsiveness, and privacy mechanisms would significantly improve trust and compliance.
- SSchiffbautechnische Gesellschaft e.V.
ship-efficiency.org
Transportation · Germany
41High
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The Schiffbautechnische Gesellschaft e.V. (STG) is a professional maritime society based in Germany, focused on advancing shipbuilding technology and efficiency. The website serves as a portal for information on their flagship event, the International Conference on Ship Efficiency, along with other maritime industry events, membership services, and technical committees. The organization targets maritime professionals, engineers, and researchers, providing a platform for knowledge exchange and networking. Technically, the site is built on the onTEAM CMS platform with standard web technologies and includes a secure login area for members. Security posture is moderate with HTTPS usage and session management, but lacks visible advanced security headers and anti-CSRF protections. Privacy compliance is basic with a privacy policy present but no explicit cookie consent mechanism detected. The WHOIS data is incomplete and malformed, limiting domain trust verification, but the professional content and consistent branding support legitimacy. Overall, the site is functional, professional, and trustworthy for its audience, though improvements in security and privacy transparency are recommended.
- PPROMISE Technology, Inc
promise.com
Technology
49High
NIS2 25 · GDPR 70
NIS2 25 · GDPR 70
PROMISE Technology, Inc operates a professional website focused on high-performance storage solutions tailored for IT, cloud, surveillance, and rich media markets. The company positions itself as a leading developer offering scalable SAN, Thunderbolt, NAS, and cloud storage products. The website demonstrates a mature digital presence with comprehensive product catalogs, success stories, and promotional content targeting IT professionals and media production companies. Technically, the site employs modern web technologies including jQuery, Foundation CSS, and Google Analytics, delivering a responsive and user-friendly experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not evident. WHOIS data for the domain is unavailable, which introduces some uncertainty about domain registration legitimacy, but the overall branding and content quality support a credible business. Strategic recommendations include enhancing security headers, publishing detailed security and privacy policies, and providing clear contact information for security incidents.
- RRema Trade
rematrade.net
Hospitality · Bosnia and Herzegovina
48High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Rema Trade is a small hospitality equipment company based in Bosnia and Herzegovina, established in 2005. The company specializes in professional equipment for the hospitality industry, offering a wide range of products including kitchen equipment, small inventory, butcher equipment, and laundry equipment. They provide comprehensive services such as consulting, project design, transport, installation, servicing, and staff training. The website reflects a regional leader position with a professional and consistent brand presence. Technically, the site is built on WordPress with modern plugins and frameworks, offering good mobile optimization and SEO. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers. Privacy and cookie policies are missing, indicating compliance gaps. Contact information is clearly provided, enhancing business credibility.
Landesarbeitsgemeinschaft Puppenspiel e.V. Thüringenpuppe-thueringen.de
Non-profit · Germany
49High
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Landesarbeitsgemeinschaft Puppenspiel e.V. Thüringen is a small non-profit cultural association dedicated to puppetry arts in the Thüringen region of Germany. The organization provides puppetry events, educational projects, and supports a community of puppetry artists and enthusiasts. Their website serves as an informational portal with event details, member information, and contact resources. Technically, the site is built on Joomla CMS using Yootheme templates and UIkit framework, delivering a moderately performant and mobile-optimized experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking advanced security headers and incident response information. Overall, the site is trustworthy and professionally presented, targeting cultural audiences and puppetry communities.
LAG Spiel und Theater in Thüringen e.V.lag-thueringen.de
Education · Germany
38High
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
LAG Spiel und Theater in Thüringen e.V. is a regional non-profit organization founded in 1992, dedicated to youth culture and theater education in Thüringen, Germany. It coordinates member theater groups, supports educational initiatives, organizes theater events for students, and provides resources such as a specialized library. The website reflects a focused mission with clear content targeting theater professionals, educators, and youth cultural initiatives in the region. Technically, the site is built on the Contao CMS platform, uses jQuery and SVG graphics, and demonstrates moderate performance with good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, though additional security headers and policies could enhance protection. Privacy compliance is evident with a GDPR-aligned privacy policy and cookie banner. No contact emails or phone numbers are explicitly provided on the homepage, which may limit direct communication. Overall, the website is professional, trustworthy, and well-aligned with its mission, though it could benefit from enhanced security practices and more visible contact information.
- Bbrand ENGINEERING SOLUTIONS GmbH
bes-global.com
Transportation · Germany
49High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
brand ENGINEERING SOLUTIONS GmbH (bES) is a specialized consultancy focused on naval architecture, marine and offshore engineering, and salvage engineering services. The company leverages up-to-date tools and industry experience to deliver reliable reports and simulations, serving clients primarily in the shipping industry. As part of the bMC GROUP, bES benefits from a broader ecosystem of complementary maritime services, positioning itself as a niche expert within the transportation and energy sectors. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to industry professionals. Technically, the website is built on the Contao Open Source CMS platform, utilizing modern web technologies such as Bootstrap 5, jQuery, and FontAwesome. The site is mobile-optimized with good SEO practices and includes a cookie consent mechanism compliant with GDPR. Hosting and domain registration are stable and consistent with the company's German origin, though DNSSEC is not enabled. Analytics are handled via Matomo, indicating a preference for privacy-conscious tracking. From a security perspective, the site enforces HTTPS and uses CSRF tokens to protect forms. However, it lacks advanced security headers and does not publish a formal security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the security posture is solid but could be enhanced with additional headers and transparency. The overall risk assessment is low, with no critical issues identified. Strategic recommendations include enabling DNSSEC, publishing security and incident response policies, and enhancing security headers. These improvements would further strengthen trust and compliance, supporting the company's professional image and operational resilience.
brand MARINE CONSULTANTS GmbHthe-bmc-group.com
Transportation · Germany
49High
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The bMC GROUP is a medium-sized, Germany-based marine consultancy group established in 2014, offering a broad range of specialized services to the shipping industry including marine consultancy, claims management, vessel design, and behavioral science tools. The group operates globally with multiple international offices and subsidiaries, serving shipowners, law firms, P&I clubs, offshore contractors, and insurance companies. Technically, the website is built on the Contao CMS platform, uses jQuery, Google Maps API, and Matomo analytics, and demonstrates good mobile optimization and user experience. Security posture is solid with HTTPS enforcement and CSRF protections, though DNSSEC is not enabled and security headers could be improved. Privacy compliance is well addressed with a cookie consent mechanism and a privacy policy page. Overall, the website is professional, trustworthy, and business-focused with no signs of malicious or adult content.
Institut für Auslandsbeziehungen (ifa)kulturaustausch.de
Media · Germany
48High
NIS2 25 · GDPR 28
NIS2 25 · GDPR 28
Kulturaustausch is a cultural magazine operated under the Institut für Auslandsbeziehungen (ifa), focusing on international relations, culture, and society with contributions from global authors. The website serves as a platform for in-depth dossiers, articles, and print issues, targeting readers interested in diverse international perspectives. Technically, the site is built on TYPO3 CMS, employs Matomo for analytics, and uses modern web technologies ensuring good performance, accessibility, and SEO. Security posture is solid with HTTPS and some security best practices, though additional headers could enhance protection. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant, reflecting a mature privacy stance. Contact is primarily via a web form, with no direct emails or phone numbers publicly listed. Overall, the site is professional, trustworthy, and well-positioned in the media and non-profit cultural sector.
- Hhasznosholmik.hu — Coming Soon
hasznosholmik.hu
Other
44High
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website hasznosholmik.hu currently hosts only a default placeholder page indicating a 'Coming Soon' status. There is no business information, contact details, or content describing the nature of the business or services. The only external link points to vestacp.com, suggesting the site is hosted or managed via the VESTA control panel. The domain was registered in 2016, but the lack of content suggests the site is inactive or under development. From a technical perspective, the site is minimal with no detected CMS, scripts, or analytics. There is no evidence of HTTPS or security headers, which indicates a poor security posture. No privacy or cookie policies are present, and no contact or incident response information is available. Security evaluation reveals critical gaps including absence of HTTPS, lack of security headers, and no visible security or privacy compliance measures. The site does not collect user data or have forms, reducing immediate risk but also indicating no active business operations. Overall, the site presents a low trust profile with minimal content and poor security and privacy practices. It is recommended to implement HTTPS, add privacy and cookie policies, provide contact information, and develop actual business content to improve credibility and security posture.
- Pfarrei Hl. Edith Stein
heiligeedithstein.de
Government · Germany
46High
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
The website represents the Catholic parish 'Hl. Edith Stein' located in Berlin, Germany, serving the local community with religious services, events, and pastoral care. It operates under the Erzbistum Berlin and targets parishioners and interested individuals in the region. The site provides comprehensive information about services, events, and community life, reflecting a small but active religious organization. Technically, the site is built on TYPO3 CMS, utilizing legacy jQuery libraries and Shadowbox.js for media display. The site is moderately optimized for performance and mobile devices, with good accessibility and SEO practices. Cookie consent is implemented with granular user choices, reflecting good privacy compliance. Security posture is moderate; while HTTPS is implied, no explicit security headers were detected, and no published security or incident response policies are available. The site does not expose sensitive data and uses consent-based activation for tracking and media embeds. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website is trustworthy and professional, with good content quality and privacy compliance. Recommendations include enhancing security headers, publishing security policies, and considering vulnerability disclosure mechanisms to improve security maturity and trust further.
Tech-Access Canadatech-access.ca
Technology · Canada
46High
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Tech-Access Canada operates as a national network of 70 Technology Access Centres (TACs) across Canada, providing critical support to entrepreneurs and businesses by facilitating access to emerging technologies and applied research. The organization plays a pivotal role in driving innovation and business growth nationwide, positioning itself as a key enabler in the Canadian technology ecosystem. Their services include technology access, industry collaboration, and innovation facilitation, targeting primarily Canadian businesses and industry stakeholders. The website reflects a medium-sized, well-established non-profit entity founded in 2016, with a clear focus on supporting technology-driven economic development. From a technical perspective, the website is built on WordPress CMS with a modern but somewhat dated technology stack including jQuery 1.11.3 and several popular plugins such as RevSlider and Modern Events Calendar Lite. The site is mobile optimized, accessible, and incorporates SEO best practices. Analytics and tracking are implemented via Google Analytics, Google Tag Manager, and Clicky Analytics, with basic privacy compliance mechanisms including cookie consent and privacy policies. Security posture is generally good with HTTPS enforced and domain transfer protections in place. However, there are areas for improvement such as enabling DNSSEC, upgrading outdated JavaScript libraries, and implementing additional security headers like Content Security Policy. No explicit security policy or incident response information is published, which could be enhanced to improve trust and compliance. Overall, the website presents a professional and trustworthy digital presence aligned with its mission. The risk profile is low with no signs of malicious activity or content safety concerns. Strategic recommendations include technical security enhancements, improved transparency on security policies, and continued adherence to privacy regulations to maintain and strengthen stakeholder trust.
- YouCan.cz
youcan.cz
Technology · Czech Republic
27High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
YouCan.cz is a Czech-based professional web development team specializing in creating websites, e-commerce platforms, and custom web applications tailored to client needs. Their portfolio includes diverse clients such as municipalities, internet providers, schools, and e-commerce businesses, positioning them as a regional technology service provider. The website content is well-structured and professional, targeting businesses seeking reliable web solutions. Technically, the site uses legacy JavaScript libraries like jQuery 1.4.2 and Coin Slider, alongside Google Analytics and Mouseflow for user behavior tracking. While the site is accessible and well-organized, it lacks modern security headers and visible HTTPS confirmation, and the outdated libraries pose potential security risks. Mobile optimization is basic, and no CMS or hosting provider details are evident. From a security perspective, the absence of privacy, cookie, and terms policies, combined with missing WHOIS registration data, reduces trustworthiness. The site does not exhibit signs of WAF or blocking mechanisms, but the lack of updated security practices and policies indicates room for improvement. Tracking scripts are present without visible consent mechanisms, raising privacy compliance concerns. Overall, the website is functional and professional but requires updates in security, privacy compliance, and technical modernization to enhance trust and resilience. The missing WHOIS data is a notable risk factor, and implementing HTTPS and security headers is strongly recommended.
ABCedu, a.s.abcguru.sk
Education · Slovakia
37High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
ABCguru is an educational platform operated by ABCedu, a.s., focused on providing autokorektívne kartičky (self-correcting cards) for mathematics learning targeted at primary school children in Slovakia. The business model combines physical product sales with an online application, catering to students, parents, and schools. The website is professionally designed with clear navigation and relevant content, including instructional videos and contact information. Technically, the site uses modern web technologies such as Bootstrap and Google Analytics, with responsive design suitable for mobile devices. However, there is a lack of publicly available privacy and cookie policies, and no visible security headers, which are areas for improvement. The security posture is moderate with HTTPS implied but no explicit security policy or incident response information. Overall, the website is safe, trustworthy, and focused on educational content without any adult or questionable material.
Campuscampus-cowork.com
Other · Slovakia
45High
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Campus is a small business focused on providing tailored corporate innovation services such as hackathons, ideathons, and B2B partnerships primarily targeting businesses seeking innovation solutions. The website is built on WordPress using Elementor and integrates common analytics and marketing tools like Google Analytics, Facebook Pixel, Hotjar, and Google Tag Manager. The technical infrastructure is modern and mobile-optimized, offering a good user experience and professional design. However, the security posture is moderate due to the absence of visible security headers and lack of explicit privacy and cookie policies. The domain WHOIS data is missing or unavailable, which raises concerns about domain legitimacy and trustworthiness. Overall, the site is safe for general audiences and presents a professional business front but requires improvements in security and compliance documentation.
Allgemeine Anthroposophische Gesellschaftsektion-landwirtschaft.org
Non-profit · Switzerland
48High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The Sektion für Landwirtschaft is a non-profit organization affiliated with the Allgemeine Anthroposophische Gesellschaft and based at the Goetheanum in Switzerland. It focuses on promoting biodynamic agriculture through education, research, publications, and events. The website is professionally designed using TYPO3 CMS and integrates modern technologies such as Matomo for analytics and Tiny Slider for UI components. Contact information and social media presence are clearly provided, enhancing trust and accessibility. Privacy and cookie policies are implemented with GDPR compliance, although explicit terms of service and security policies are absent. The WHOIS data is unavailable due to query failure, but the website content and affiliations strongly indicate legitimacy and a mature organizational presence.
Jazzklub Altenburgjazzklub-altenburg.de
Other · Germany
45High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Jazzklub Altenburg is a small, non-profit cultural organization based in Germany dedicated to promoting jazz music through concerts and community events. The website serves as an information hub for event schedules, membership, and gallery content, targeting jazz enthusiasts and local community members. The organization operates primarily as a cultural club with a focus on live music and membership engagement. Technically, the website is built on WordPress using the Avada theme and Fusion Builder, with common plugins such as Contact Form 7. Hosting is provided by RZone, as indicated by the nameservers. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. The technical infrastructure is standard for small cultural organizations but could benefit from modernization and enhanced security measures. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers and explicit privacy or security policies. No cookie consent mechanism is present, indicating partial GDPR compliance. The absence of contact emails and phone numbers reduces direct communication options, relying instead on a contact form. Social media integration is present via Facebook and Instagram links. Overall, the security posture is moderate but could be improved with better headers, policies, and compliance mechanisms. The overall risk is low given the non-commercial nature and limited sensitive data handling. Strategic recommendations include implementing security headers, adding cookie consent and privacy compliance features, and enhancing contact information transparency to improve trust and compliance.
- IIG Jazz Arnstadt e.V.
ig-jazz-arnstadt.de
Other · Germany
49High
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
IG Jazz Arnstadt e.V. is a small non-profit cultural association based in Germany focused on organizing and promoting jazz music events in Arnstadt. The website serves as an information hub for upcoming concerts, ticket sales, and archival content related to jazz. The target audience primarily consists of jazz enthusiasts and the local community interested in cultural events. The organization maintains an active presence on social media platforms such as Facebook and Instagram and offers a newsletter subscription to engage its audience. Technically, the website is built on WordPress using a modern tech stack including Bootstrap, jQuery, and several plugins for SEO, booking, and GDPR compliance. The site is hosted on servers associated with avidesign.eu and employs HTTPS with a valid SSL certificate. Performance and mobile optimization are good, with SEO best practices implemented via Yoast SEO. The site includes a cookie consent mechanism compliant with GDPR regulations and uses Matomo for analytics and Mailchimp for marketing. From a security perspective, the site has HTTPS enabled and uses cookie consent tools to manage user privacy. However, no advanced security headers were detected, and there is room for improvement by implementing CSP, HSTS, and other HTTP security headers. No vulnerabilities or exposed sensitive data were found in the provided content. Incident response and security policies are not explicitly documented on the site. Overall, the website presents a professional and trustworthy front for a local cultural organization with good privacy compliance and moderate security posture. Recommendations include enhancing security headers, maintaining up-to-date software, and possibly publishing explicit security and incident response policies to improve trust and compliance.
- JJazzclub Ilmenau e.V.
jazzclub-ilmenau.de
Other · Germany
44High
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Jazzclub Ilmenau e.V. is a small non-profit cultural organization based in Ilmenau, Germany, dedicated to promoting jazz music through event organization and community engagement. The website serves as an information hub for upcoming jazz events, membership opportunities, and sponsorship acknowledgments. The organization targets jazz musicians and enthusiasts within the local community, positioning itself as a key cultural institution in the region. Technically, the website is built using the Jekyll static site generator, hosted by manitu.net, and employs modern web standards with responsive design and good SEO practices. However, the site lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance and overall security posture. The security posture is moderate with HTTPS enabled but missing several best practices such as security policies and incident response contacts. Overall, the website is trustworthy and professional but could benefit from enhanced privacy and security features to improve compliance and user trust.
- SSonneberger Jazzfreunde e.V.
son-jazz.de
Non-profit · Germany
49High
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Sonneberger Jazzfreunde e.V. is a non-profit cultural organization dedicated to promoting jazz music and small arts in the Thüringisch-Fränkischer region of Germany. The website serves as the official portal for the International Sonneberger Jazztage, a well-established jazz festival entering its 39th year. The organization relies on ticket sales, sponsorships, and partnerships with local businesses and cultural institutions to operate. The website provides detailed event information, partner acknowledgments, and ticket purchasing links, targeting jazz enthusiasts and regional visitors. Technically, the website is built on the Contao CMS platform and employs modern web technologies such as jQuery, Tiny Slider, and Usercentrics for consent management. The site is mobile-optimized and presents a professional design with clear navigation. Hosting is provided by a German hosting provider, consistent with the regional focus of the organization. Performance is moderate with room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS and implements GDPR-compliant consent management. However, no explicit security headers or incident response policies are published, and no vulnerability disclosures or security certifications are evident. The absence of a terms of service page and limited security documentation suggests areas for enhancement. No critical vulnerabilities or suspicious activities were detected. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic improvements in security headers, incident response transparency, and SEO could further strengthen its posture and user trust.
- Jazzclub Nordhausen e.V.
jazzclub-nordhausen.de
Other · Germany
39High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Jazzclub Nordhausen e.V. is a small non-profit cultural association based in Germany focused on organizing jazz music events and concerts. The website provides event listings, membership information, and historical background about the club. It targets jazz enthusiasts and the local community. The site is built on the Contao CMS platform and hosted by Cloudpit, using common JavaScript libraries for UI enhancements. The technical infrastructure is moderately mature with basic mobile optimization and SEO. Security posture is average with cookie consent implemented but lacking advanced security headers and explicit incident response policies. No blocking or WAF mechanisms interfere with content access. Overall, the website is trustworthy and professionally maintained but could improve in security and compliance transparency.