Security Directory

A

ABR-IT

abr-it.de

61

ABR-IT is a small German IT service provider specializing in comprehensive IT solutions including web design, consulting, cloud services, telephony, and security technology. The company targets small to medium businesses and private clients, positioning itself as a trusted regional IT partner with certifications from Microsoft, Ionos, Hetzner, and Easybell. The website is built on WordPress with Elementor and integrates modern technologies such as Google Tag Manager and Complianz for GDPR compliance. Security posture is good with HTTPS and cookie consent mechanisms, though improvements in security headers and incident response transparency are recommended. Overall, the website is professional, user-friendly, and compliant with privacy regulations, reflecting a mature digital presence.

A

AGFW

fw703.de

46

AGFW is a German association dedicated to promoting energy efficiency in heating, cooling, and combined heat and power systems, with a strong focus on district heating and climate protection goals. The website provides technical guidelines, calculation tools, and supports climate-relevant projects, targeting municipalities and energy sector stakeholders. The organization is positioned as a reputable industry association with established standards and collaborations with academic and funding institutions. Technically, the website is built on TYPO3 CMS, leveraging Bootstrap and jQuery for frontend responsiveness and Google Tag Manager for analytics. The site is moderately performant, mobile-optimized, and implements a cookie consent mechanism aligned with GDPR requirements. However, some security headers and explicit security policies are not evident. From a security perspective, the site uses HTTPS and has implemented cookie consent with opt-in/out capabilities, but lacks visible incident response contacts and vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious content were detected. The WHOIS data is minimal but does not raise immediate concerns, though more registrant transparency would improve trust. Overall, the website is professional, trustworthy, and compliant with basic privacy and security standards. Strategic improvements in security headers, incident response transparency, and contact information would enhance its security posture and user trust.

A

AGFW - Der Energieeffizienzverband für Wärme, Kälte und KWK e.V.

fw704.de

48

AGFW is a German energy efficiency association specializing in heating, cooling, and combined heat and power systems. The website provides regulatory guidance, technical standards, and calculation tools to support subsidy applications under the KWKG legislation. The organization collaborates with regulatory bodies such as BAFA and expert committees to maintain up-to-date and practical resources for industry stakeholders. The website targets energy professionals and project developers seeking compliance and funding support. Technically, the site is built on TYPO3 CMS with Bootstrap and jQuery, integrating Google Tag Manager and Google Maps with user consent. The site is mobile-optimized and structured for good user experience, though some accessibility features are basic. Performance is moderate, and SEO is basic but functional. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks visible HTTP security headers and explicit incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR. Overall, the website is professional, trustworthy, and well-suited to its niche audience. Strategic improvements in security headers and incident response transparency would enhance its security maturity and trustworthiness.

A

AGFW - Der Energieeffizienzverband für Wärme, Kälte und KWK e.V.

agfw-regelwerk.de

61

AGFW is a German industry association specializing in standardizing minimum requirements across the heat and cold supply sector. The website serves as a professional portal providing access to technical rulebooks and regulatory documents primarily for members and subscribers. The organization positions itself as a key standard-setter in the energy sector, supporting operational companies with up-to-date technical guidelines. Technically, the site employs modern web technologies including Bootstrap, jQuery, and FontAwesome, with Google Analytics and Tag Manager integrated for analytics and marketing purposes. The site is hosted on servers associated with giordano-online.net and uses HTTPS with privacy-conscious configurations such as IP anonymization. Security posture is moderate with good practices like CSRF tokens and cookie consent, though lacking explicit security policies or incident response contacts. Overall, the website is professional, well-structured, and compliant with GDPR, targeting industry professionals and members. No blocking or WAF mechanisms were detected, and no adult or questionable content is present.

A

Agentur2020

2020.de

59

Agentur2020 is a small German agency specializing in sustainability and sustainability communication services. The website presents a professional and well-structured digital presence built on WordPress with the Divi theme and enhanced by Yoast SEO for search optimization. The technical infrastructure includes Cloudflare for DNS and CDN services, and integration with HubSpot and Google Tag Manager for marketing and analytics purposes. Security posture is adequate with HTTPS enabled and Cloudflare usage, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the website is functional and professional but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

S

sweet & salty

sweet-and-salty.de

55

sweet & salty is a specialized German agency focused on content marketing and corporate journalism, delivering high-quality, data-driven storytelling services to businesses with a strong value orientation. The company positions itself as a premium provider emphasizing handcrafted content and deep research, targeting clients who seek meaningful and sustainable content strategies. Technically, the website is built on Drupal 10, employs Google Tag Manager for analytics, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and anti-bot measures, though lacks explicit security headers and incident response information. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the site presents a professional and trustworthy digital presence with moderate technical and security maturity.

I

Immunefi

immunefi.com

70

Immunefi is a leading Web3 security platform established in 2020, specializing in onchain security operations including bug bounty programs, audits, and AI-powered threat detection. The company serves blockchain projects and security researchers, positioning itself as a trusted intermediary to prevent hacks and secure digital asset treasuries. Their platform integrates multiple security tools and partners, providing a unified command center for security operations. Technically, the website is built on modern frameworks like Next.js and React, hosted with Cloudflare DNS, and employs Google Tag Manager and Sentry for analytics and error tracking. The site is well-optimized for performance, mobile responsiveness, and SEO. Security posture is strong with HTTPS, domain protection statuses, and SOC 2 Type II certification, though DNSSEC is not enabled and no security.txt file is published. Overall, Immunefi demonstrates a mature security and compliance stance with room for minor improvements in incident response transparency and DNS security.

T

thermondo

thermondo.de

63

thermondo.de is a German website offering heating installation and replacement services, positioning itself as a convenient local heating contractor with fixed pricing and comprehensive consulting including subsidy support. The website targets homeowners and property owners in Germany seeking heating system upgrades. Technically, the site employs modern marketing and analytics tools such as Visual Website Optimizer, Google Tag Manager, Usercentrics CMP for consent management, and Facebook and Microsoft advertising pixels, indicating a mature digital marketing infrastructure. The website is accessible, uses HTTPS, and implements cookie consent mechanisms, but lacks publicly visible privacy policies, terms of service, and explicit security or incident response policies. No contact information is found in the provided HTML content, which may impact user trust and compliance. Overall, the security posture is moderate with room for improvement in transparency and policy publication.

T

TheDive GmbH

thedive.com

56

TheDive GmbH is a German-based consultancy specializing in organizational development and sustainable business models. Their website targets organizations interested in adapting to modern work environments with services including change management, leadership development, and agile methodologies. The company positions itself as a niche player focused on sustainability and adaptability in business. Technically, the website employs modern JavaScript, CSS, and third-party services such as Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is mobile-optimized with good SEO practices but lacks visible security headers and explicit contact information, which could be improved. Security posture is moderate with no detected vulnerabilities but missing some best practices like security headers and incident response contacts. The WHOIS data is missing, raising some concerns about domain legitimacy, though the professional site content and compliance with privacy regulations mitigate this risk. Overall, the site is functional and professional but would benefit from enhanced transparency and security hardening.

R

Rinn Beton- und Naturstein GmbH

rinn.net

63

Rinn Beton- und Naturstein GmbH is a German company specializing in concrete and natural stone products for garden and property landscaping, with a history spanning over 100 years. The website presents a professional and well-structured digital presence using TYPO3 CMS, featuring comprehensive product information and a clear focus on quality and sustainability. The company targets garden owners, landscapers, and construction professionals, positioning itself as a trusted provider in the landscaping materials sector. Technically, the website employs modern web technologies including Cookiebot for consent management and Google Tag Manager for analytics, ensuring compliance with GDPR and related privacy regulations. However, the absence of WHOIS registration data raises concerns about domain legitimacy, despite the professional appearance and content quality of the site. Security measures such as HTTPS are implied but security headers and incident response policies are not explicitly found, indicating room for improvement in security posture. Overall, the website is functional, compliant, and trustworthy from a user perspective but requires verification of domain registration and enhancement of security policies to strengthen its risk profile.

E

easyfeedback

easy-feedback.com

57

easy-feedback.com is a professional online survey platform offering tools for creating questionnaires, forms, and quizzes with an emphasis on GDPR compliance and AI-powered analysis. The website targets businesses and individuals seeking flexible and privacy-conscious survey solutions. The platform is built on WordPress using Elementor and Yoast SEO, hosted by Hetzner Online GmbH, and integrates modern consent management via Cookiebot and analytics through Google Tag Manager. Security posture is solid with HTTPS and cookie consent, though explicit privacy and terms of service pages are missing, representing compliance gaps. The domain is mature and legitimate, supporting the business's credibility.

E

easyfeedback

indivsurvey.de

48

The website indivsurvey.de is a login portal for the easyfeedback survey tool, a SaaS platform focused on survey creation and feedback collection. The business operates primarily in the technology sector, targeting businesses and individuals requiring survey solutions. The site is professionally designed with consistent branding and good user experience, supporting mobile optimization and basic accessibility. The technical infrastructure leverages modern JavaScript libraries, Google Tag Manager for analytics, and Cookiebot for cookie consent management, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and secure form handling, though the absence of explicit security policies and incident response information suggests room for improvement. Overall, the site is trustworthy and functional, with no signs of blocking or WAF interference.

Glassdoor is a leading online job search and career community platform that provides millions of job listings, company reviews, salary comparisons, and employer branding services. The website targets job seekers, professionals, and employers, offering a comprehensive platform for workplace conversations and career advancement. The brand is well-established with a consistent and professional online presence. Technically, the site leverages modern web technologies including React, RudderStack, and Amplitude for analytics, ensuring a responsive and engaging user experience. Security is robust with HTTPS enforced and appropriate security headers, although explicit privacy and cookie policies were not detected in the provided content. Overall, Glassdoor demonstrates a mature digital infrastructure and a strong market position in the technology sector.

M

MediaValet

mediavalet.com

63

MediaValet is an enterprise-focused digital asset management software provider, positioning itself as a market leader in the DAM space. The company offers a comprehensive suite of services including advanced search, AI-powered tagging, experience portals, integrations, and video management, targeting large organizations seeking to centralize and streamline their digital assets. The website reflects a mature digital presence built on WordPress with modern SEO and marketing tools integrated, indicating a high level of digital maturity. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information could be improved. The absence of WHOIS data is a notable anomaly but does not currently detract significantly from the overall trustworthiness given the professional website and business presence. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and improving transparency around contact information for security matters.

E

Erblotse

erblotse.de

60

Erblotse.de is a German online platform specializing in inheritance and estate planning services. The website offers users tools to create legally compliant testaments, manage inheritance cases, and access expert advice from legal and tax professionals. It holds a strong market position supported by over 100 cooperation partners and excellent customer reviews, including a 5-star rating on Google and recommendations from Finanztip. The platform targets individuals involved in inheritance matters within Germany, providing accessible and user-friendly online solutions. Technically, the site is built on Webflow CMS, hosted on AWS infrastructure, and integrates modern analytics and marketing tools such as Google Analytics, Hotjar, and Facebook Pixel, all managed with user consent via a cookie banner. The website demonstrates excellent design quality, mobile optimization, and SEO practices, contributing to a positive user experience. Security-wise, the site enforces HTTPS and employs reputable third-party services but could improve by explicitly implementing security headers and publishing incident response contacts. Overall, Erblotse.de presents a trustworthy and professional digital presence with a solid security posture and compliance with GDPR requirements.

M

medpublico

med-publico.com

55

medpublico is a specialized full-service agency focused on medical and scientific communication, serving pharmaceutical companies, medical device manufacturers, academic institutions, and professional associations primarily in Germany. The company offers a broad range of services including strategic consulting, medical writing, PR and marketing, creative design, digital solutions, and training through its academy. With over 15 years of experience and a small but expert team, medpublico positions itself as a trusted partner in healthcare communication. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and integrating Google Analytics and Tag Manager for data insights, complemented by a cookie consent mechanism via Borlabs Cookie. Security posture is solid with HTTPS enforced and domain registration protections in place, though improvements could be made by enabling DNSSEC and adding security headers. Privacy compliance is basic, with cookie consent but no visible privacy policy or terms of service in the provided content. Overall, the website is professional, well-branded, and trustworthy, supporting the company's credibility in the healthcare communication sector.

K

Startseite - Konsens Booking

konsens-booking.com

60

Konsens Booking operates as an online hotel booking platform specializing in providing hotel room reservations for attendees of selected events and congresses primarily in the German-speaking DACH region. The website offers curated hotel options linked to various medical and scientific congresses, targeting event participants seeking convenient accommodation solutions. The business model focuses on acting as an intermediary between event attendees and hotel partners, facilitating bookings for niche event markets. The site content is primarily in German with an option to switch to English, indicating a regional focus with some international accessibility. From a technical perspective, the website employs common web technologies including jQuery, Google Analytics, and Google Tag Manager for tracking and analytics. The site is mobile optimized with a responsive design and includes a GDPR-compliant cookie consent mechanism. However, no CMS or hosting provider information is explicitly detectable, and no advanced frameworks are identified. Performance is moderate with good SEO practices evident through meta tags and sitemap inclusion. Security posture shows some strengths such as IP anonymization in analytics and cookie consent compliance, but lacks visible HTTP security headers and publicly available security policies or incident response contacts. The absence of WHOIS registration data raises concerns about domain legitimacy and transparency, although the professional presentation and GDPR compliance suggest a legitimate business operation. No direct contact emails or phone numbers are found on the homepage, with contact presumably via a form on a dedicated contact page. Overall, the website is functional and professional but would benefit from improved transparency regarding domain registration, enhanced security headers, and clearer direct contact information. These improvements would strengthen trustworthiness and security posture, supporting better compliance and user confidence.

W

WeldingPro Group s.r.o.

metalwell.eu

64

Metal Well, operated by WeldingPro Group s.r.o., is a Czech Republic-based metalworking company specializing in precision welding and locksmithing services. The company offers both custom and serial production of welded metal structures, leveraging expertise in 10 welding techniques and providing technical documentation services. Their market position is supported by ISO certifications and a portfolio of industrial references, targeting B2B clients in manufacturing and construction sectors. The website is professionally designed, multilingual, and provides comprehensive contact and certification information. Technically, the site is built on WordPress with modern tools like Google Tag Manager and reCAPTCHA, ensuring moderate performance and good SEO. Security posture is solid with HTTPS and form protections, though explicit security headers and policies are absent. Privacy compliance is strong with clear cookie consent and GDPR-aligned privacy policies. Overall, the site reflects a credible, established business with a good digital presence.

W

Welding Pro Group s.r.o.

metalwell.de

60

Metal Well, operated by Welding Pro Group s.r.o., is a medium-sized manufacturing company specializing in precise metal processing, welding, and small series production. The company holds multiple certifications including ISO 9001 and welding process certifications, positioning itself as a reliable and professional service provider in the manufacturing sector. The website is well-structured, multilingual, and targets industrial and commercial clients seeking high-quality metal fabrication services. Technically, the site is built on WordPress with modern plugins and technologies, including Google Tag Manager and reCAPTCHA, ensuring good digital maturity and user experience. Security posture is solid with HTTPS, secure forms, and cookie consent, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained.

W

Wölfel-Gruppe

dbel.cloud

60

dBEL GmbH + Co. KG is a German-based company specializing in cloud-based acoustic planning software solutions. As a young subsidiary of the Wölfel Group, which has over 50 years of expertise in acoustics and building physics, dBEL leverages scientific data and expert knowledge to provide accessible, professional tools for a broad range of industries including HVAC, event planning, and architecture. The company positions itself as a knowledge platform enabling users to independently plan and optimize acoustic projects efficiently. Technically, the website is built on TYPO3 CMS with modern frameworks like Bootstrap and integrates analytics and consent management tools such as Google Tag Manager, Hotjar, and CCM19. Security posture is solid with HTTPS enforced and domain protections in place, though DNSSEC is not enabled. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website is professional, well-structured, and trustworthy, reflecting a mature digital presence aligned with its business goals.

W

whistly. The secure whistleblower software.

whistly.org

67

Whistly.org is a small, specialized SaaS provider offering a digital whistleblower system designed to help companies comply with the EU Whistleblower Directive and supply chain regulations. The website positions itself as a secure and compliant whistleblower software solution targeting businesses needing to meet EU regulatory requirements. The business appears to be recently founded in 2023, consistent with the domain registration date. The platform is built on Bubble.io, leveraging modern JavaScript frameworks and integrates multiple marketing and analytics tools such as HubSpot, Google Analytics, LinkedIn Insight Tag, and Apollo.io. Cookie consent is implemented via Cookiebot, indicating some level of privacy compliance. However, no privacy policy or terms of service pages were detected in the provided content, which is a compliance gap.

I

i+m NATURKOSMETIK BERLIN

iplusm.berlin

54

i+m NATURKOSMETIK BERLIN is a small German company specializing in natural, fair, organic, and vegan cosmetics. The website serves as an e-commerce platform targeting consumers interested in ethical and natural skincare products. The business appears to be well-established with a domain age since 2014, consistent with its market presence. Technically, the website is built on WordPress, utilizing Yoast SEO for optimization and Google Tag Manager for analytics, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, though accessibility features could be improved. Security posture is basic with HTTPS enabled but lacking DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the site is professional and trustworthy but would benefit from improved security and privacy practices.

B

Bauck Mühle

bauck.de

48

Bauck Mühle is a German-based company specializing in organic and health food products, including gluten-free and vegan options. Their website is built on TYPO3 CMS and features a professional design with good mobile optimization and clear navigation. The business targets consumers interested in wholesome, organic food products and operates primarily in the retail and e-commerce sectors. The company maintains a moderate market position within the niche organic food market. Technically, the website employs modern technologies such as Google Analytics 4, Google Tag Manager, and Cookiebot for consent management, indicating a mature digital infrastructure. Security-wise, the site uses HTTPS and implements cookie consent mechanisms but lacks explicit security headers and published security policies, which could be improved. Overall, the website is trustworthy, with no signs of blocking or WAF interference, and maintains good privacy compliance through detailed cookie consent dialogs. However, the absence of visible privacy policy and terms of service pages is a notable gap.

B

Bau-Fritz GmbH & Co. KG

baufritz.com

51

Baufritz is a well-established German company specializing in ecological prefabricated wooden houses, combining sustainable architecture with innovative environmental technology. The company targets private and business customers seeking healthy and environmentally friendly housing solutions. Their market position is strong, with a history dating back to 1896 and certifications supporting their ecological claims. Technically, the website employs modern frameworks like Bootstrap and integrates Google Tag Manager and Usercentrics for analytics and consent management, reflecting a mature digital infrastructure. Security posture is good with HTTPS and consent mechanisms, though some security headers and explicit policies could be improved. The WHOIS data is missing or unavailable, which slightly impacts domain trustworthiness but does not detract from the professional presentation and comprehensive content. Overall, the website is high quality, accessible, and trustworthy for its audience.

R

reown inc.

reown.com

71

Reown Inc. is a technology company specializing in providing infrastructure and developer tools for onchain finance applications, including DeFi, payments, and enterprise solutions. Positioned as a connectivity layer for the financial internet, Reown offers SDKs and analytics to enable secure, user-friendly, and scalable digital ownership experiences. The company targets developers and teams building blockchain-based financial products, emphasizing growth and security. Technically, the website is built on modern frameworks such as Next.js and React, hosted via Cloudflare, and integrates HubSpot for forms and PostHog for analytics, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and domain registration protections, though DNSSEC is not enabled and no security.txt file is published. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the website demonstrates high professionalism, technical maturity, and business credibility, with minor recommendations for enhanced DNS security and incident response transparency.

G

Gut Klostermühle

gut-klostermuehle.com

49

Gut Klostermuehle is a boutique hospitality and wellness provider located in Brandenburg, Germany, offering unique accommodation, spa, culinary, and event services in a natural lakeside setting. The website is professionally designed using TYPO3 CMS and integrates modern tracking and marketing tools such as Google Tag Manager and Facebook Pixel. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Security posture is generally good with HTTPS enforced, but lacks some recommended security headers and incident response information. The domain WHOIS data is unavailable, which slightly impacts trust but the website content and business information appear consistent and professional. Overall, the site presents a trustworthy and user-friendly digital presence for its hospitality business.

Volvic Switzerland, operated by Danone Schweiz AG, is a well-established brand specializing in natural mineral water sourced from the volcanic Auvergne region in France. The website showcases a comprehensive product range including mineral water, flavored waters, and teas, with a strong emphasis on sustainability and environmental responsibility, supported by certifications such as B Corp and Carbon Trust climate neutrality. The target audience is general consumers in Switzerland seeking natural and sustainable beverage options. Technically, the site is built on Adobe Experience Manager, leveraging modern web technologies and privacy management tools, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS and privacy consent mechanisms, though some security headers could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR and cookie regulations.

N

Nutricia Limited

volvic.co.uk

70

Volvic UK is a consumer retail brand specializing in natural mineral water and flavored water products sourced from volcanic filtration in France. The company operates under Nutricia Limited and targets UK consumers with a focus on sustainability and sports sponsorship, notably the Women’s Rugby World Cup 2025. The website is built on TYPO3 CMS and integrates modern web technologies including Google Tag Manager and TrustCommander for privacy management. The site is well-structured, mobile-optimized, and provides comprehensive privacy and cookie policies with user consent mechanisms. Security posture is strong with HTTPS enforced, though security headers could be improved and incident response contacts are not publicly listed. WHOIS data for the exact domain is unavailable due to domain naming rules, indicating the domain is a subdomain rather than a registered domain, but the website content and branding strongly support legitimacy. Overall, the site demonstrates good digital maturity and business credibility with minor areas for security enhancement.

C

Carrefour

carrefour.be

64

Carrefour Belgium operates a comprehensive online and physical retail platform offering groceries and general merchandise to Belgian consumers. The website is built on Salesforce Commerce Cloud, leveraging modern e-commerce technologies and personalization tools such as CQuotient. The site provides a rich catalog of products, promotions, and services including home delivery and in-store pickup, targeting a broad consumer base in Belgium. The branding is consistent and professional, reflecting Carrefour's position as a leading supermarket chain in the region. Technically, the site uses deferred script loading, CDN resources, and Google Tag Manager with authentication tokens, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and no visible sensitive data exposure; however, the absence of explicit security headers and privacy/cookie policies suggests room for improvement in compliance and security best practices. WHOIS data is not available due to registry restrictions, but the domain appears legitimate and consistent with the brand. Overall, the website is well-designed, user-friendly, and trustworthy, though enhancements in privacy transparency and security disclosures are recommended.

Delhaize is a leading Belgian supermarket chain offering comprehensive online grocery shopping services including home delivery and in-store pickup. The website demonstrates a mature digital infrastructure leveraging modern web technologies such as React and Next.js, integrated with advanced marketing and analytics tools like Adobe DTM, Google Tag Manager, and Facebook Pixel. Security posture is strong with HTTPS enforcement and appropriate security headers, although WHOIS data is unavailable due to registry restrictions, which is common for .be domains. The site maintains good privacy and cookie policies aligned with GDPR requirements. Overall, the platform is professional, user-friendly, and trustworthy, serving a broad consumer base in Belgium.

W

WalletConnect Foundation

walletconnect.com

11

WalletConnect Foundation operates a leading decentralized connectivity layer for the financial internet, enabling seamless interaction between wallets and onchain applications. The platform supports a vast ecosystem including over 700 wallets, 70,000 apps, and millions of users, positioning itself as a critical infrastructure provider in the blockchain and decentralized finance space. Their business model leverages a native token (WCT) for network security, staking, and governance, reflecting a mature decentralized governance approach. Technically, the website is built on modern frameworks such as React and Next.js, hosted on Cloudflare, and integrates analytics and cookie consent tools to ensure compliance and performance. Security posture is strong with HTTPS, security headers, and domain transfer protections, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, WalletConnect presents a professional, trustworthy, and technically sound digital presence with a clear focus on developer and institutional audiences.

Y

Yuga Labs

yuga.com

60

Yuga Labs is a prominent technology company specializing in the creation and development of NFT projects and web3 community experiences, notably known for the Bored Ape Yacht Club and related initiatives. The company positions itself as a leader in the web3 space, focusing on storytelling, community engagement, and digital art innovation. The website reflects a modern and professional digital presence with consistent branding and targeted messaging towards NFT enthusiasts and the broader web3 community. Technically, the website employs modern JavaScript frameworks such as Nuxt.js, utilizes Prismic CMS for content management, and leverages Cloudflare for DNS and likely CDN services. Analytics are implemented via Plausible and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. From a security perspective, the site enforces HTTPS and uses domain status flags to protect against unauthorized domain changes. However, DNSSEC is not enabled, and no security headers were detected in the provided data, which could be improved. The absence of privacy and cookie policies, as well as contact information, represents compliance and transparency gaps. No forms or direct data collection mechanisms were found, reducing immediate risk exposure. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy compliance, security header implementation, and clearer contact channels to improve user trust and regulatory adherence.

L

Local Governments and Municipal Authorities Constituency (LGMA)

cities-and-regions.org

58

The website www.cities-and-regions.org serves as the official online presence for the Local Governments and Municipal Authorities Constituency (LGMA), a recognized group within the UNFCCC climate process advocating for local and regional governments. The site provides comprehensive information on their advocacy efforts, initiatives, and participation in global climate negotiations such as COP events. The content is professionally presented with a clear focus on climate governance and multilevel action, targeting local governments, climate negotiators, and sustainability stakeholders. Technically, the site is built on WordPress with modern plugins and frameworks, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and explicit policies could be improved. Privacy compliance is limited due to the absence of visible privacy and cookie policies. WHOIS data is unavailable, which slightly reduces trust but is mitigated by the site's official nature and partnerships. Overall, the site is a credible, well-maintained platform for climate advocacy with room for enhanced transparency and security documentation.

V

Vereniging Afvalbedrijven

verenigingafvalbedrijven.nl

60

Vereniging Afvalbedrijven is a well-established Dutch industry association focused on the waste management and circular economy sectors. Founded in 2002, it serves as a key partner in the transition towards sustainable resource use and environmental responsibility. The website provides information on their activities, news, thematic areas, and campaigns, targeting professionals and organizations involved in waste processing and recycling. The association maintains an active presence on major social media platforms and publishes annual reports to communicate its impact and initiatives. Technically, the website employs a moderate technology stack including jQuery and Google Analytics with IP anonymization, hosted by team.blue nl B.V. The site is mobile-optimized with a clear navigation structure and professional design. However, it lacks some advanced security headers and cookie consent mechanisms, which are important for GDPR compliance and enhanced security posture. From a security perspective, the site uses HTTPS and DNSSEC, indicating good baseline security. No critical vulnerabilities or blocking mechanisms were detected. The WHOIS data confirms a long domain history consistent with the organization's legitimacy. Nonetheless, improvements in security headers, privacy compliance, and incident response disclosures are recommended to strengthen trust and regulatory adherence. Overall, Vereniging Afvalbedrijven presents a credible and professional online presence with room for enhancement in privacy and security practices to align with best practices and legal requirements.

V

VDI Wissensforum GmbH

vdi-wissensforum.de

72

VDI Wissensforum GmbH operates a professional educational platform focused on seminars, conferences, and training for engineers and technical professionals in Germany. The company is well-established in the technical education sector, offering a range of events and courses to support continuing professional development. Their market position is solid, supported by a consistent brand presence and a comprehensive digital platform. Technically, the website is built on TYPO3 CMS, integrates modern tools such as Google Tag Manager and Cookiebot for analytics and privacy compliance, and employs reCAPTCHA for bot protection. The site is well-optimized for mobile and accessibility, with good SEO practices and structured data enhancing discoverability. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the website demonstrates a mature digital presence with good privacy compliance and trustworthy business information.

A

AGFW e. V.

agfw.de

53

AGFW e. V. is a well-established German industry association focused on promoting energy efficiency, combined heat and power, and district heating and cooling. With over 700 member companies and more than 50 years of experience, it serves as a technical and policy advocate, providing certifications, standards, and industry services. The website reflects a professional and consistent brand presence targeting energy sector stakeholders and professionals. Technically, the website is built on TYPO3 CMS with modern frontend technologies including Bootstrap and jQuery. It integrates Google Tag Manager and Google Maps APIs for analytics and location services. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Performance is moderate with room for improvement. From a security perspective, the site uses HTTPS (assumed from canonical URL), includes CSRF protection in forms, and implements a cookie consent mechanism compliant with GDPR. However, explicit security headers and incident response policies are not evident. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is trustworthy, professional, and compliant with privacy regulations. It effectively serves its business purpose but could enhance security posture by adding security headers and publishing incident response information.

I

Industrial Quick Search

industrialquicksearch.com

48

Industrial Quick Search is a well-established online industrial manufacturer directory founded in 2000, serving the OEM market and manufacturing industry primarily in the United States. The platform connects buyers and suppliers in plastic and metal commercial businesses, offering patented vendor preview and request for quote tools. It also provides marketing services such as SEO, social media management, PPC, and web design to industrial manufacturers. The website demonstrates consistent branding and a clear business model focused on facilitating industrial supply chain connections. Technically, the website uses a modern tech stack including jQuery, Materialize CSS, FontAwesome, and Google Analytics, hosted by DreamHost. The site is mobile optimized with good navigation and SEO practices, though accessibility features are basic. Performance is moderate, and the site lacks a CMS indication, suggesting a custom-built platform. From a security perspective, the site uses HTTPS but lacks DNSSEC and visible security headers, which could be improved. No security or incident response policies are published, and there is no cookie consent mechanism, indicating partial privacy compliance. The domain WHOIS data is consistent with the business claims, showing a long-established presence without privacy protection, supporting legitimacy. Overall, the website is professional and trustworthy with moderate security posture and privacy compliance. Strategic improvements in security headers, privacy mechanisms, and published policies would enhance trust and compliance.

S

SIPTRUNK.DE

siptrunk.de

51

SIPTRUNK.DE operates as a German-language online comparison portal specializing in SIP trunk telephone connections for businesses. The platform offers country-specific filtering and provider listings aimed at helping companies select appropriate telephony solutions. The website is small in scale with a niche market focus within the telecommunications sector in Germany. The content is basic and primarily informational, with limited interactive elements or advanced features. Technically, the site uses legacy JavaScript libraries such as jQuery 1.11.3, Backbone.js, and Underscore.js, alongside Google Tag Manager for analytics and tracking. The site lacks modern SEO optimization and accessibility features, and mobile optimization is basic. Performance is moderate but could benefit from modernization and improved responsiveness. From a security perspective, the site does not present visible security headers or cookie consent mechanisms, which are important for GDPR compliance and overall security posture. The use of outdated JavaScript libraries introduces potential vulnerabilities. No forms or email contacts are present, limiting attack surface but also reducing user engagement options. The domain WHOIS data shows a consistent registration status without privacy protection, supporting legitimacy but lacking detailed registrant information. Overall, the website is functional but basic, with moderate trustworthiness. Security and privacy compliance improvements are recommended to enhance user trust and regulatory adherence.

G

Google LLC

googleplay.com

73

Google Play Games is a digital distribution platform operated by Google LLC, serving as the official app store for Android and Windows devices. It provides users access to a wide range of games and applications, leveraging Google's extensive cloud infrastructure and technology stack. The platform is a market leader in app distribution with a comprehensive ecosystem supporting developers and users worldwide. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and reCAPTCHA, ensuring robust performance, security, and user experience. Security posture is strong with HTTPS enforcement, security headers, and privacy policies aligned with GDPR standards. No critical vulnerabilities or blocking mechanisms were detected, indicating a mature and secure platform. Overall, the site demonstrates high professionalism, trustworthiness, and compliance, making it a reliable service for digital content distribution.

W

Wölfel-Gruppe

woelfel.de

54

Wölfel-Gruppe is a well-established German engineering company specializing in services and products related to vibrations, acoustics, structural mechanics, and environmental protection. With over five decades of experience since its founding in 1971, the company serves diverse industrial sectors including energy, manufacturing, and transportation. Their offerings include consulting, expert reports, and tailored measurement and monitoring systems. The website reflects a mature digital presence built on TYPO3 CMS, featuring comprehensive content, clear navigation, and multilingual support. Technically, the site employs modern frameworks and integrates Google Tag Manager for analytics, indicating a moderate to advanced digital maturity. Security posture is good with HTTPS enforced, though some recommended security headers are not explicitly detected. Privacy compliance is strong with clear policies and consent mechanisms in place. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

S

South Pole

southpole.com

74

South Pole is a globally recognized company specializing in climate solutions aimed at helping businesses achieve net zero emissions. Their services include climate consulting, environmental certificates, project finance, and a marketplace for carbon credits. The company positions itself as a leader in the energy and sustainability sector, targeting organizations seeking to reduce their carbon footprint and comply with environmental regulations. The website is professionally designed, well-structured, and optimized for mobile devices, reflecting a mature digital presence. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics, Hotjar, and OneTrust for cookie consent, indicating a robust analytics and compliance infrastructure. Security posture is generally strong with HTTPS enforced and asynchronous loading of scripts, though explicit security headers and a published security policy are absent. The WHOIS data is notably missing or unavailable, which slightly reduces trust but is offset by the professional branding and presence of verified social media channels. Overall, the site is safe, business-focused, and compliant with privacy regulations, making it a credible resource in the climate solutions market.

C

Chiesi GmbH

chiesi.de

67

Chiesi GmbH is a well-established pharmaceutical company operating in Germany as part of the international Chiesi Group. The company focuses on developing and distributing pharmaceutical products in key therapeutic areas such as respiratory diseases, neonatology, rare diseases, and transplantation. The website targets healthcare professionals, patients, partners, and job seekers, providing comprehensive information about products, corporate responsibility, and career opportunities. The company holds a B Corp certification, indicating a commitment to sustainability and ethical business practices. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, and OneTrust for cookie consent, ensuring compliance with GDPR and providing a good user experience. The site is mobile optimized, has clear navigation, and integrates tracking and analytics responsibly. Security measures include HTTPS enforcement and standard security headers, with no visible vulnerabilities or exposed sensitive data. The security posture is strong, though the site could benefit from publishing explicit security policies and a vulnerability disclosure framework. Contact information is clearly provided, including phone numbers, physical address, and social media channels, enhancing business credibility. No WAF or blocking mechanisms interfere with content accessibility, and the WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, Chiesi GmbH's website reflects a professional, secure, and compliant digital presence aligned with its business objectives and regulatory requirements.

B

BWE-Service GmbH

bwe-seminare.de

46

BWE-Service GmbH operates as a subsidiary of the Bundesverband WindEnergie e.V., focusing on providing educational seminars, conferences, and networking events to support the renewable energy sector, particularly wind energy, in Germany. The website serves as a portal for these offerings and directs users to the partner platform ee-hub.de for a broader range of events. The company positions itself as a key facilitator in the energy transition by enabling knowledge sharing and industry collaboration. Technically, the website is built on Drupal 7 with standard web technologies and integrates Google Analytics and Google Tag Manager for tracking, alongside a cookie consent mechanism compliant with GDPR. Security posture is adequate with HTTPS enforced, though some security headers are missing. Contact information is clearly presented, enhancing business credibility. Overall, the site is professional, well-structured, and trustworthy.

Bored Ape Yacht Club (BAYC) is a leading NFT membership club operated by Yuga Labs, offering exclusive digital collectibles and community perks. The website serves as the official portal for BAYC and MAYC collections, providing member login and information about unique intellectual property rights. The business is positioned as a major player in the NFT and blockchain technology space, targeting digital art collectors and crypto enthusiasts. Technically, the site is built on modern frameworks such as Next.js and React, hosted with Cloudflare DNS, and integrates analytics tools like Google Tag Manager and Plausible Analytics. The site demonstrates excellent design quality, mobile optimization, and user experience. Security posture is strong with HTTPS and domain registration protections, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Overall, the site is trustworthy and professional but could improve transparency and compliance documentation.

F

Faraway

faraway.com

61

Faraway is a game studio specializing in the development and publishing of open economy games with blockchain and crypto integration. Their portfolio includes titles such as Dookey Dash: Unclogged, Serum City, Legends of the Mara, and Mini Royale: Nations. The company targets gamers interested in Web3 and blockchain gaming, positioning itself in a niche market focused on innovative game economies. The domain registration dating back to 2003 supports a long-standing presence in the industry, although the website content is currently inaccessible due to a client-side application error. Technically, the website employs modern technologies including Next.js and React, hosted behind Cloudflare with tracking integrations such as Google Tag Manager and Cloudflare Insights. However, the site lacks visible security headers and DNSSEC is not enabled, indicating room for improvement in security hardening. The website's performance and mobile optimization are moderate to basic, with limited accessibility and SEO optimization. From a security perspective, the absence of privacy and cookie policies, lack of contact information, and the presence of a client-side error reduce the site's trustworthiness and compliance posture. The domain registration is consistent and legitimate, but the website itself requires remediation to restore full functionality and improve user trust. Overall, the website scores low to moderate on content quality, technical implementation, security posture, and privacy compliance, resulting in an overall AI score of 48. Strategic improvements in error resolution, policy publication, security headers, and contact transparency are recommended to enhance the site's credibility and security.

The website https://www.snagged.market/loyalty currently serves a 404 error page indicating the requested content is not found. The site uses modern web technologies such as React and Next.js, and integrates third-party services like Stripe and Google Analytics. However, the lack of accessible content, absence of privacy, cookie, and terms policies, and missing contact information significantly limit the ability to assess the business or security posture. The WHOIS data is malformed and does not provide any registrar or registrant details, further reducing trust and transparency. Overall, the site appears incomplete or under development, with minimal digital maturity and poor user experience.

P

Premium Distribucija

premium-distribucija.hr

40

Premium Distribucija is a Croatian-based company specializing in the wholesale distribution of beverages for the hospitality industry, particularly targeting the HoReCa sector. The company positions itself as a premium distributor leveraging expert knowledge and experience to support successful hospitality operations. The website is professionally built on WordPress using Elementor and optimized with NitroPack and Google Site Kit, indicating a moderate level of digital maturity and performance optimization. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and professional but could improve transparency and security documentation to enhance trust and compliance.

C

Copy Electronic

copy-electronic.hr

50

Copy Electronic is a well-established Croatian company specializing in the sale, rental, and servicing of IT equipment, including printers, scanners, projectors, and related office technology. With a domain registered since 1997 and a clear focus on business customers, the company positions itself as a reliable provider of comprehensive office IT solutions. Their online presence includes a webshop with a broad product catalog and customer service features such as live chat and clear contact details. Technically, the website employs modern analytics tools like Google Analytics and Microsoft Clarity, and uses Google Tag Manager for marketing and tracking purposes. The site is hosted under a Croatian registrar (CARNET), uses HTTPS, and shows good compliance with GDPR and cookie regulations. However, explicit security policies and incident response contacts are not found, which could be improved to enhance trust and security posture. Overall, the website is professional, user-friendly, and trustworthy, serving a medium-sized business audience in Croatia.

T

Telensa Tech

telensatech.com

63

Telensa Tech is a small technology company specializing in Telco ICT and cybersecurity services, offering tailored solutions such as cloud services, system integration, telco, colocation, and comprehensive IT support. The website is professionally designed on the Squarespace platform, with clear navigation and a focus on business clients seeking digital infrastructure and security solutions. Technically, the site uses modern web technologies, has good SSL configuration with HTTPS and HSTS, and integrates Google Tag Manager for analytics. However, the absence of privacy and cookie policies and lack of WHOIS registration data present compliance and legitimacy concerns. Security posture is strong in SSL but could be improved with additional security headers and incident response information. Overall, the site is functional and professional but requires enhancements in privacy compliance and domain registration transparency.

G

Gist

giftcardpro.app

73

Gist operates Gift Card Pro, a Shopify app designed to enhance gift card sales and delivery for Shopify store owners. The app offers features such as digital and physical gift card sales, automated delivery via email and SMS, customizable designs, bulk sending, and balance reminders. Positioned as a niche e-commerce tool, it targets Shopify merchants seeking to improve customer gifting experiences. Technically, the app leverages modern web technologies including React, Stimulus, Tailwind CSS, and is hosted on Shopify's CDN infrastructure, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, CSRF protections, and no visible vulnerabilities, though explicit privacy and cookie policies are absent on the app detail page. Overall, the app demonstrates a mature digital presence with high user ratings and trust signals, but could improve privacy compliance and contact transparency.