Security Directory

S

Stadt Schortens

schortens.de

0

The Stadt Schortens website serves as the official digital portal for the city of Schortens, Germany, providing comprehensive information and services related to local government, politics, citizen services, culture, tourism, and economic development. The site targets residents, local businesses, and visitors, offering online services such as event calendars, online citizen services, and detailed municipal information. The business model is that of a government municipal service provider, focusing on transparency and accessibility for its community. Technically, the website employs a specialized CMS platform (NOLIS CMS) tailored for municipal websites, utilizing standard web technologies including JavaScript, CSS, and HTML5. The site is mobile-optimized and includes accessibility features, ensuring a good user experience across devices. SEO practices are well implemented with proper meta tags and structured data (JSON-LD) for enhanced search engine visibility. From a security perspective, the website enforces HTTPS and implements a cookie consent mechanism, aligning with GDPR requirements. However, it lacks explicit published security policies and incident response contact information. No critical vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data, while minimal, aligns with the domain's governmental use, supporting legitimacy. Overall, the website demonstrates a solid security posture and good privacy compliance, with a professional and trustworthy presentation. Strategic improvements could include publishing a formal security policy, incident response details, and enhancing security headers to further strengthen the security posture.

B

Bayerische Staatsbibliothek

bsb-muenchen.de

0

The Bayerische Staatsbibliothek website serves as the official online presence of the Bavarian State Library, a major government-funded research library in Germany. The site provides extensive information about its collections, services, and resources targeted primarily at researchers, students, and the general public interested in academic and cultural materials. The website is well-structured, professionally designed, and uses TYPO3 CMS with responsive design elements to ensure accessibility across devices. However, explicit privacy, cookie, and terms of service policies are not detected in the provided content, which may affect compliance and user trust. Technically, the site employs a modern CMS and responsive frameworks, but lacks visible security headers and explicit HTTPS enforcement details in the provided snippet. No analytics or tracking scripts were detected, indicating minimal user tracking. The domain WHOIS data aligns with the institution's identity, showing no privacy protection and consistent DNS servers, supporting legitimacy. Security posture is moderate with room for improvement in implementing security headers, publishing privacy and cookie policies, and providing incident response contacts. No vulnerabilities or suspicious content were detected. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security disclosures to improve compliance and user confidence.

B

Bischöfliches Generalvikariat Aachen

bistum-aachen.de

0

The Bistum Aachen website represents the official digital presence of the Catholic Diocese of Aachen, a large non-profit religious organization in Germany. The site offers comprehensive information and services related to faith, pastoral care, education, cultural events, and social support. It targets Catholic faithful, church communities, and interested individuals within the diocese's region. The business model is service-oriented and community-focused, emphasizing religious and social engagement. Technically, the website is built on the Alkacon Mercury CMS platform, utilizing modern JavaScript libraries and integrated with Piwik PRO for analytics and Usercentrics for consent management. The site is hosted on NetCologne infrastructure, employs HTTPS, and demonstrates good mobile optimization and accessibility standards. SEO practices are well implemented with proper meta tags and structured data. From a security perspective, the website enforces HTTPS and uses consent mechanisms for tracking, but lacks explicit security policy documentation and vulnerability disclosure channels. Security headers are not explicitly visible in the HTML but may be configured server-side. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with GDPR regulations. It provides a safe and informative user experience with clear contact information and strong branding. Strategic improvements could include publishing a formal security policy and enhancing security header configurations.

M

Mangold Consulting GmbH

mangoldconsulting.com

0

Mangold Consulting GmbH is a specialized consulting firm focused on economic and investment advisory related to Russia. The company, founded in 2013, targets business professionals and investors interested in the Russian market. The website is professionally designed using WordPress with the Divi theme and includes multilingual support, primarily in German. Technical infrastructure is modern and includes SEO optimization via Yoast, but lacks advanced security headers and DNSSEC. Security posture is adequate with HTTPS enabled and domain transfer protection, but could be improved with additional security policies and headers. Privacy compliance is limited due to absence of a privacy policy and terms of service. Overall, the website is functional and professional but would benefit from enhanced transparency and security documentation.

T

Technische Universität Chemnitz

tu-chemnitz.de

0

Technische Universität Chemnitz is a well-established public university in Germany offering diverse academic programs and research opportunities. The website reflects a strong institutional presence with comprehensive content targeting students, researchers, and academic partners. The university maintains a professional digital presence with clear navigation, multilingual support, and extensive information on faculties, services, and events. Technically, the site uses modern web technologies such as jQuery and Bootstrap, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although security headers and incident response information could be improved. Privacy compliance is well addressed with clear data protection and cookie policies. Overall, the website demonstrates high professionalism and trustworthiness, supporting the university's reputation and outreach efforts.

The Universität Bonn is a leading German university recognized for its excellence in research and education. The website reflects a strong academic focus, targeting students, researchers, and international partners. It offers comprehensive information about study programs, research profiles, and university events, positioning itself as a major institution in the German higher education landscape. Technically, the site is built on the Plone CMS platform, uses modern web technologies, and integrates Matomo analytics for user tracking, indicating a commitment to privacy and data control. Security posture is generally good with HTTPS enforced, but lacks visible security headers and explicit privacy and cookie policies, which are areas for improvement. Overall, the site is professional, well-branded, and trustworthy, with no signs of malicious or adult content.

L

Landkreis Lüneburg / Hansestadt Lüneburg / Wirtschaftsfördergesellschaft mbH für Stadt und Landkreis Lüneburg

lueneburg.de

0

The website www.lueneburg.de serves as an official information portal for the Lüneburg region in Germany, providing details about the district administration, city services, tourism, and economic development. It targets residents, tourists, and local businesses, positioning itself as a regional government and municipal service provider. The site links to official partner domains representing the district, city, and economic development agency, reinforcing its legitimacy and regional focus. Technically, the site employs standard web technologies including HTML5, CSS3, JavaScript with jQuery, and Matomo analytics for privacy-conscious visitor tracking. The cookie consent mechanism is well implemented, supporting GDPR compliance. Security posture is moderate with no visible critical vulnerabilities but lacks explicit security headers and a published security policy. No contact emails or phone numbers are directly visible in the provided content, which may limit direct user engagement. Overall, the site is professionally designed, mobile-optimized, and trustworthy for general audiences with no adult or questionable content detected.

The website www.hoechstadt.de is the official municipal portal for the city of Höchstadt a.d. Aisch in Germany. It serves as a comprehensive information hub for residents, visitors, and local businesses, offering details on citizen services, political information, cultural events, tourism, and local news. The site is well-structured with clear navigation and uses the TYPO3 CMS platform, supported by modern JavaScript libraries such as jQuery and Stimulus for enhanced interactivity. The presence of a cookie consent mechanism and a privacy policy indicates attention to GDPR compliance. However, explicit contact details and security policies are not prominently found in the provided content.

S

Stadt Bad Segeberg

bad-segeberg.de

0

The website www.bad-segeberg.de serves as the official municipal portal for the city of Bad Segeberg in Germany. It provides comprehensive information about local government, city services, tourism, culture, social programs, and community engagement. The site targets residents, visitors, and local businesses, offering a broad range of resources including digital city maps, event calendars, and administrative contacts. The business model is that of a government entity focused on public service and community support. Technically, the website is built on TYPO3 CMS, a robust open-source content management system widely used in government and enterprise environments. It employs modern web technologies such as Bootstrap for responsive design, OpenLayers for mapping, and FontAwesome for icons. The site is hosted via INWX, a reputable domain and hosting provider. Performance is moderate with good mobile optimization and accessibility features, ensuring a positive user experience across devices. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. It uses Matomo analytics with user consent to track usage while respecting privacy. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. However, security headers could be improved, and a formal security policy or incident response contact is not evident. The domain registration data is consistent and transparent, reinforcing the legitimacy of the site. Overall, the website demonstrates a solid security posture and good privacy compliance for a government portal. It offers trustworthy and professional content with clear navigation and user-friendly design. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a security.txt file to facilitate vulnerability disclosures. These steps would further strengthen the site's security maturity and trustworthiness.

H

Hochschule für Musik und Tanz Köln

hfmt-koeln.de

0

Hochschule für Musik und Tanz Köln is a leading European higher education institution specializing in music and dance education with campuses in Cologne, Aachen, and Wuppertal. The website reflects a well-established academic institution with a broad range of educational offerings and a strong cultural presence. The site uses TYPO3 CMS and Matomo analytics, indicating a modern and privacy-aware technical infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit privacy policies and security headers could be improved. Overall, the website is professional, trustworthy, and serves its target audience effectively.

B

Bielefeld University

uni-bielefeld.de

0

Bielefeld University is a well-established, internationally recognized research-intensive university in Germany, offering a broad range of academic programs and research initiatives. The institution emphasizes interdisciplinarity, diversity, and innovative teaching, targeting prospective and current students, researchers, and academic staff. The website reflects a professional and comprehensive digital presence with clear navigation and rich content tailored to its academic audience. Technically, the site employs modern web standards and responsive design, hosted likely by a reputable German research network provider. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and headers could be enhanced. Overall, the site demonstrates strong compliance with privacy regulations and maintains a trustworthy and professional image.

O

Open Research Office Berlin

open-access-berlin.de

0

The Open Research Office Berlin operates as a coordination and support entity for open science initiatives in Berlin, hosted by the Universitätsbibliothek der Freien Universität Berlin and supported by the Senatsverwaltung für Wissenschaft, Gesundheit und Pflege. It focuses on promoting open access, providing information, advice, and networking opportunities to scientific and cultural heritage institutions in Berlin. The website reflects a well-structured public service organization with a clear mission and target audience in the academic and governmental sectors. Technically, the website is built on a modern CMS platform (Infopark CMS Fiona) with Ruby on Rails integration, employing standard web technologies such as HTML5, CSS3, JavaScript, and jQuery. The site is mobile-optimized, SEO-friendly, and performs moderately well. Hosting appears to be managed by institutional providers linked to the Freie Universität Berlin and DFN, ensuring reliability. From a security perspective, the site uses HTTPS with proper CSRF protections but lacks explicit security headers and a cookie consent mechanism, which are recommended for enhanced security and compliance. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by a privacy policy, though cookie consent is missing. Contact information is primarily via a contact form, with no direct emails or phone numbers displayed. Overall, the website is trustworthy, professional, and serves its public mission effectively. Strategic improvements in security headers, cookie consent, and incident response disclosures would further strengthen its posture.

O

Open-Access-Tage: Open-Access-Tage

open-access-tage.de

0

The Open-Access-Tage website serves as the central platform for the annual Open Access and Open Science conference in the German-speaking region. It provides extensive documentation of past events, program details, and organizational information, targeting academic institutions, libraries, and Open Access advocates. The site is hosted on servers managed by GWDG and built on the TYPO3 CMS platform, utilizing modern web technologies such as jQuery and Bootstrap for responsive design. The website demonstrates good content quality, clear navigation, and multilingual support, enhancing user experience for its target audience. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though the absence of security headers and cookie consent mechanisms suggests room for improvement in compliance and security best practices. Overall, the domain registration and hosting align well with the academic and non-profit nature of the conference, indicating a trustworthy and legitimate online presence.

B

BiblioJobs

bibliojobs.eu

0

BiblioJobs is a specialized online job board focused on employment opportunities within libraries, archives, and information institutions, primarily serving the German-speaking market. The platform offers a comprehensive listing of job vacancies, categorized by institution type and job type, targeting professionals in the library and archival sectors. The website is built on WordPress, utilizing common web technologies such as jQuery, Bootstrap, and FontAwesome, providing a responsive and user-friendly experience. While the site is well-structured and professionally presented, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance given its European audience. Security-wise, the site uses HTTPS and some basic security headers but could improve by implementing additional headers and publishing security policies. Overall, BiblioJobs presents a credible and niche-focused service with moderate technical maturity and a good business credibility profile.

The Staatliches Institut für Musikforschung Preußischer Kulturbesitz is Germany's largest non-university research institution dedicated to musicology, encompassing various sub-disciplines such as historical musicology, instrumentology, and acoustic research. It operates a museum, library, and offers educational programs, publications, and events targeting researchers, students, and the general public interested in music and cultural heritage. The website reflects a well-established government cultural institution with consistent branding and a clear mission. Technically, the website is built on TYPO3 CMS, employs Matomo for analytics, and is hosted likely by German cultural institutions, ensuring a stable and secure infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is strong with HTTPS and no visible vulnerabilities, but lacks some advanced security headers and explicit incident response information. Privacy compliance is partially met with a comprehensive privacy policy in German, but the absence of a cookie consent mechanism is a notable gap given the use of tracking technologies. Contact information is available primarily via forms and dedicated pages, with no direct emails or phone numbers prominently displayed. Social media presence is official and supports outreach. Overall, the website is trustworthy, professional, and serves its audience well, but could improve in privacy compliance and security transparency to enhance user trust and regulatory adherence.

S

Staatliche Museen zu Berlin

smb.museum

0

Staatliche Museen zu Berlin is a prominent public cultural institution in Germany dedicated to preserving, researching, and sharing art and cultural treasures. The website reflects a mature digital presence with comprehensive content including exhibitions, research, educational programs, and online offerings. It targets a broad audience including the general public, researchers, students, and families. The institution maintains a strong market position as a leading universal museum in Berlin. Technically, the site is built on TYPO3 CMS and integrates modern analytics and marketing tools such as Google Analytics, Matomo, and Facebook Pixel, ensuring good performance and SEO optimization. Security posture is solid with HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities, although formal security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, trustworthy, and compliant with GDPR, providing a safe and accessible user experience.

Stiftung Preußischer Kulturbesitz (SPK) is a prominent German cultural foundation managing multiple research institutes, archives, libraries, and museums primarily in Berlin. It holds a significant position as one of the world's leading cultural institutions, serving a broad audience including researchers, cultural enthusiasts, and the general public. The foundation operates as a non-profit entity with government funding and a strong emphasis on cultural heritage preservation and research. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and Matomo for analytics, reflecting a mature digital infrastructure with good performance and accessibility. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks some advanced security headers and formal security policy disclosures. Privacy compliance is well addressed with a comprehensive privacy policy, though cookie consent mechanisms could be improved. Overall, the website is professional, trustworthy, and well-aligned with its institutional mission.

R

Rhein-Main Universitäten (RMU)

rhein-main-universitaeten.de

0

Rhein-Main Universitäten (RMU) is a strategic alliance of three major German universities collaborating in research, teaching, and regional development. The alliance serves over 95,000 students and 1,500 professors, aiming to strengthen scientific excellence and cooperation in the Frankfurt-Rhein-Main region. The website is professionally designed using Drupal 10, with modern web technologies and privacy-conscious analytics (Matomo). It offers multilingual content and clear navigation, targeting students, researchers, and academic partners. Security posture is strong with HTTPS and privacy-respecting analytics, though cookie consent mechanisms are absent. Contact information is comprehensive and transparent, enhancing trust.

G

Goethe Business School

goethe-business-school.de

0

Goethe Business School is a reputable educational institution based in Frankfurt am Main, Germany, offering part-time Master and MBA programs along with executive education tailored for professionals. The website reflects a professional and consistent brand image, targeting a global audience of career-oriented individuals seeking advanced business education. Technically, the site is built on TYPO3 CMS and integrates modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and Cookiebot for GDPR-compliant cookie management. The presence of a detailed cookie consent mechanism and a comprehensive privacy policy indicates a strong commitment to privacy compliance. Security-wise, the site enforces HTTPS and uses consent management effectively, though it lacks explicit security headers and published security policies or incident response contacts. Overall, the website demonstrates a solid security posture with room for improvement in transparency and contact availability. The domain WHOIS data is limited but does not raise immediate concerns, aligning moderately with the business's legitimacy. Strategic recommendations include adding terms of service, publishing security policies, and enhancing contact information to improve trust and compliance.

C

CAMPUSERVICE GmbH

campuslocation-frankfurt.de

0

CAMPUSERVICE GmbH operates a professional event location service website leveraging the Goethe University Frankfurt campus as a unique venue. The site targets event organizers and private clients seeking diverse event spaces in Frankfurt. The business model focuses on venue rental and associated event services such as catering and technical support. The website is built on WordPress with modern plugins and SEO optimizations, featuring multimedia content including videos and images to enhance user engagement. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy and terms policies are missing. Contact is primarily via a web form, with no direct emails or phone numbers published. WHOIS data is minimal but not suspicious, aligning moderately with the business claims. Overall, the site is professional and trustworthy but could improve privacy transparency and security headers.

S

Studierendenwerk Frankfurt am Main

studentenwerkfrankfurt.de

0

Studierendenwerk Frankfurt am Main is a regional non-profit organization dedicated to supporting students in the Rhein-Main area by providing essential services such as student housing, dining facilities, financial aid consulting (BAföG), and psychosocial counseling. The organization holds a strong market position as a key provider of student welfare services in Frankfurt and surrounding regions. Their business model focuses on enhancing student life through comprehensive support and infrastructure. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including Bootstrap for responsive design and Matomo for privacy-conscious analytics. The site demonstrates good digital maturity with mobile optimization, accessibility features, and a clear navigation structure. Hosting appears to be managed via rzone.de, a reputable provider. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism with opt-in for tracking, reflecting GDPR compliance. However, explicit security policies and incident response contacts are not published, representing an area for improvement. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is professional, trustworthy, and well-aligned with its mission. Strategic recommendations include publishing formal security and incident response policies, enhancing security headers, and providing clearer direct contact information to improve transparency and user trust.

C

CAMPUSERVICE GmbH Servicegesellschaft der Goethe-Universität Frankfurt am Main

stellenportal-uni-frankfurt.de

0

The Stellenportal der Uni Frankfurt is a professionally managed job portal operated by CAMPUSERVICE GmbH, affiliated with Goethe University Frankfurt. It serves as a regional employment platform targeting students and graduates in the Rhein-Main area, offering job listings, talent pool registration, company profiles, events, and news. The portal demonstrates a solid market position as a niche educational service with strong university backing and trusted partnerships. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Font Awesome icons, and Lottie animations, hosted on rzone.de infrastructure. The site is mobile-optimized with good SEO and accessibility basics. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though it lacks advanced security headers and published security policies. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information and social media presence. No critical vulnerabilities or suspicious patterns were detected.

S

SHS - Stahl-Holding-Saar

stahl-holding-saar.de

0

SHS - Stahl-Holding-Saar is a major German holding company in the steel manufacturing sector, managing key subsidiaries such as Dillinger and Saarstahl. The company focuses on sustainable steel production and climate-friendly initiatives, positioning itself as a leader in European steel markets. The website reflects a professional corporate presence with clear navigation, multilingual support, and a focus on sustainability projects like Power4Steel. Technically, the site is built on the Imperia CMS platform, uses modern web libraries, and is hosted on reputable German infrastructure. Security posture is adequate with HTTPS and cookie consent mechanisms, though explicit security policies and headers could be improved. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information via phone. No email contacts or social media links were found in the provided content.

U

Univention GmbH

univention-summit.de

0

Univention GmbH organizes the Univention Summit, a prominent open source event in Germany focused on digital sovereignty, IT trends, and community networking. The summit attracts IT service providers, software manufacturers, public sector officials, and educators from Germany and Europe. The website presents a professional, well-branded platform with detailed information about the event, speakers, partners, and registration. Technically, the site is built on WordPress with modern plugins and uses Matomo for privacy-conscious analytics. Security posture is good with HTTPS and no exposed sensitive data, though some security headers could be improved. Privacy and cookie policies are clearly stated with consent mechanisms, indicating GDPR compliance. Overall, the site is trustworthy, well-maintained, and serves its target audience effectively.

W

Wuppertal Institut

ressourcen-rechner.de

0

The website 'ressourcen-rechner.de' is an informational platform provided by the Wuppertal Institut, offering a calculator to measure the ecological footprint or 'ecological backpack' of an individual's lifestyle. It targets environmentally conscious users interested in understanding and reducing their resource consumption. The site is positioned as a niche educational tool within the sustainability sector, leveraging research data to inform users. Technically, the website uses a straightforward stack including HTML5, CSS, JavaScript, and jQuery, hosted likely on servers associated with the nameservers your-server.de and second-ns.de. The site is moderately optimized for performance and mobile use but lacks advanced frameworks or CMS integration. SEO and accessibility are basic but adequate for the content provided. From a security perspective, the site does not exhibit advanced security headers or explicit policies but does not expose sensitive data or use vulnerable libraries visibly. The absence of HTTPS information limits full security assessment. Privacy compliance is partially addressed with a privacy policy page but lacks cookie consent mechanisms. Contact information is minimal but present. Overall, the website presents a low-risk profile with good business credibility and content quality. Strategic improvements in security posture, privacy compliance, and technical modernization would enhance trust and user experience.

W

Wuppertal Institut

zukunftswissen.fm

0

The Wuppertal Institut is a well-established German research institute specializing in climate, environment, and energy sustainability. It operates as a leading think tank with a strong focus on transformative research and science communication, exemplified by its extensive podcast series Zukunftswissen.fm. The website is professionally designed, content-rich, and targets a broad audience including scientists, policymakers, industry stakeholders, and the general public interested in sustainability topics. Technically, the site is built on TYPO3 CMS, uses modern web standards, and is hosted under a reputable registrar. Security posture is solid with HTTPS and standard security headers, though DNSSEC is not enabled. Privacy and cookie policies are present and GDPR compliant, but no explicit terms of service or security incident response information is found. The site maintains a strong social media presence across major platforms. Overall, the website reflects a credible, trustworthy, and authoritative source in its domain.

B

Bates Saddles

batessaddles.eu

0

Bates Saddles is a specialized e-commerce retailer focused on high-performance equestrian saddles and accessories, targeting primarily the German market with localized domains for other regions. The company emphasizes innovation and comfort for horse and rider, supported by official partnerships with major equestrian organizations and ambassador endorsements. Their business model centers on direct online sales via the Shopify platform, complemented by rich content such as blogs and testimonials to engage their audience. Technically, the website leverages a modern Shopify infrastructure with integrations for payment solutions (ZipMoney/QuadPay), marketing (Klaviyo), and geolocation services. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. However, explicit privacy and cookie policies are not detected, which is a gap in compliance. From a security perspective, the site uses HTTPS and employs CAPTCHA on forms, but lacks visible security headers and formal vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data shows partial consistency with the business claims, though the use of Australian name servers for a German domain is notable but not necessarily suspicious. Overall, Bates Saddles presents a professional and trustworthy online presence with room for improvement in privacy compliance and security best practices to enhance user trust and regulatory adherence.

B

Bates Saddles

batessaddles.co.uk

0

Bates Saddles operates a professional e-commerce website focused on selling high-quality equestrian saddles and accessories, targeting primarily the German market with regional stores globally. The company holds official partnerships with major equestrian organizations, enhancing its market credibility and trustworthiness. The website is built on the Shopify platform, leveraging modern web technologies and integrations such as Klaviyo for marketing and Zip.co for payment options. The site demonstrates good design quality, user experience, and mobile optimization, with clear navigation and relevant content for its target audience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit privacy policies are lacking. Overall, the business presents a credible and trustworthy online presence with room for improvement in privacy compliance and security transparency.

B

Bates Saddles

batessaddles.us

0

Bates Saddles operates a professional e-commerce platform specializing in high-performance equestrian saddles and accessories, targeting primarily the German market with regional support for other countries. The company maintains a strong market position supported by official partnerships with major equestrian organizations and endorsements from ambassadors. The website is built on the Shopify platform, leveraging modern web technologies and payment integrations such as Zip Co and Quadpay. While the site demonstrates good design quality, mobile optimization, and user experience, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is solid with HTTPS and CAPTCHA protections, but could be enhanced with additional security headers and published incident response information. Overall, Bates Saddles presents a trustworthy and professional online presence with room for improvement in privacy compliance and security transparency.

B

Bates Saddles

batessaddles.com.au

0

Bates Saddles operates a professional e-commerce platform specializing in high-performance equestrian saddles and accessories, targeting primarily the German market with regional support for other global markets. The company holds official partnerships with major equestrian organizations, enhancing its market credibility and positioning it as a trusted brand in the equestrian sports industry. The website content is well-structured, professionally designed, and optimized for mobile devices, providing a good user experience and clear navigation. The business model focuses on direct online retail supported by strong social media engagement and customer testimonials. Technically, the website is built on the Shopify platform, leveraging modern JavaScript libraries and integrations such as Flickity for carousels, Klaviyo for email marketing, and Zip.co for payment options. The site benefits from Shopify's CDN hosting, ensuring fast load times and good performance. Accessibility and SEO optimizations are adequately implemented, contributing to a positive digital maturity profile. From a security perspective, the site enforces HTTPS and uses hCaptcha to protect forms, demonstrating good baseline security practices. However, it lacks explicit security headers and visible privacy or cookie policies, which are important for GDPR compliance and user trust. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data shows some minor inconsistencies in DNS hosting and address information, likely due to multi-region operations, but no suspicious patterns that would undermine legitimacy. Overall, Bates Saddles presents a secure, professional, and credible online presence with room for improvement in privacy compliance and explicit security policy disclosures. Strategic enhancements in these areas would further strengthen trust and regulatory adherence.

S

Saarstahl AG

saarstahl.com

0

Saarstahl AG is a large German steel manufacturing company focused on sustainable steel production and serving diverse industrial sectors including automotive, machinery, energy, and construction. The company emphasizes quality, innovation, and environmental responsibility, supported by certifications such as EcoVadis Platinum and CDP A-List. Their digital presence is built on a modern WordPress platform with performance and SEO optimizations, providing a professional and accessible user experience. Security posture is good with HTTPS and no visible vulnerabilities, though explicit security headers and incident response information are not publicly disclosed. The absence of WHOIS data for the domain is a notable anomaly but does not detract significantly from the overall legitimacy of the business. Strategic recommendations include enhancing security transparency and publishing vulnerability disclosure policies.

G

Goethe University Frankfurt

uni-frankfurt.de

0

Goethe University Frankfurt is a large, well-established public university in Germany offering a broad spectrum of academic faculties and research opportunities. The website serves students, researchers, and international scholars with detailed information about study programs, research projects, campus locations, and support services. The university maintains a strong digital presence with active social media channels and comprehensive contact information. Technically, the site is built on the Fiona 7 CMS by Infopark AG, uses modern JavaScript libraries, and implements a cookie consent mechanism via Klaro. Analytics are handled through Matomo, indicating a focus on privacy-conscious tracking. Security posture is adequate with HTTPS usage and cookie consent, though explicit security headers and incident response policies are not publicly documented. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

The website webhostlist.de is currently inaccessible, returning a 503 Service Unavailable error page indicating temporary downtime or maintenance. The site is hosted by netclusive GmbH, a German hosting provider, as confirmed by DNS and footer references. Due to the lack of accessible content, no business-specific information, privacy policies, or contact details are available for analysis. The technical infrastructure appears minimal with no detected scripts, analytics, or security headers, and no HTTPS information was provided. This limits the ability to assess the site's security posture or compliance status. Overall, the site shows poor content quality and minimal technical implementation, resulting in a low trust and credibility score.

F

Freedom BMX Magazin | Startseite

freedombmx.de

0

Freedom BMX Magazin is Germany's largest BMX-focused media outlet, providing daily news, videos, and photos related to BMX sports. The website targets BMX enthusiasts primarily in the German-speaking community and operates on a WordPress platform with extensive integration of advertising and affiliate marketing tools. The technical infrastructure includes modern analytics and advertising services such as Google Analytics, Google Adsense, Ezoic, and Outbrain, hosted via Ezoic's infrastructure. Security posture is adequate with HTTPS enforced and consent management implemented, though explicit security headers and formal security policies are absent. Privacy compliance is basic, with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the site is professionally designed and functional, with moderate risk due to missing formal policies and contact information.

W

we make it

we-make.it

0

We make it is a Berlin-based small studio specializing in risography printing, book works, and graphics services, catering primarily to independent publishers and DIY enthusiasts. The company emphasizes collaborative processes and democratization of art and information through self-publishing. The website is built on WordPress with a moderate technical infrastructure including jQuery and Swiper.js, and uses Yoast SEO for optimization. Marketing scripts from sender.net are present for email campaigns. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks advanced security headers and formal privacy or cookie policies. Contact information is available via email and physical address, with active social media presence. The domain is well-established since 2012, consistent with the business history. Overall, the website is professional and trustworthy but could improve privacy compliance and security practices.

S

Staatsbibliothek zu Berlin

staatsbibliothek-berlin.de

0

The Staatsbibliothek zu Berlin is a prominent public research library serving the humanities and social sciences community in Berlin. It operates two main locations and offers extensive collections, digital resources, and cultural programming. The website reflects a mature digital presence with a professional design, clear navigation, and multilingual support. Technically, it is built on TYPO3 CMS with modern frontend frameworks and privacy-conscious analytics via Matomo. Security posture is solid with HTTPS and no exposed sensitive data, though improvements in security headers and explicit policies are recommended. Overall, the site is trustworthy, well-maintained, and serves its audience effectively.

S

Stiftung Zentral- und Landesbibliothek Berlin

zlb.de

0

The Zentral- und Landesbibliothek Berlin (ZLB) is a major public and state library institution in Berlin, Germany, offering extensive media collections, educational programs, and cultural events. The website clearly targets a broad audience including students, researchers, families, and the general public, providing access to physical and digital resources. The institution holds a strong market position as a leading library with specialized collections and services such as provenance research and digital archives. Technically, the website is built on the TYPO3 CMS platform, employing modern web technologies including responsive design, deferred JavaScript loading, and privacy-conscious analytics via Matomo. The site demonstrates good performance and accessibility standards, with comprehensive SEO and structured data implementations enhancing discoverability. From a security perspective, the site enforces HTTPS and employs some security best practices, though it lacks explicit security headers like Content-Security-Policy and does not publish a dedicated security policy or incident response contacts. No vulnerabilities or suspicious activities were detected. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place, aligning with GDPR requirements. Overall, the ZLB website presents a professional, trustworthy, and user-friendly digital presence for a public cultural institution. Strategic improvements in security headers and transparency around security policies could further enhance trust and resilience.

O

openbiblio.eu

openbiblio.eu

0

Openbiblio.eu is a niche community platform dedicated to promoting openness and collaboration within the library and bibliothekswissenschaft sectors. It hosts various projects including an incentive system for open libraries, webcasts, and a Mastodon social instance, primarily serving library professionals and academics. The platform is operated by Stabi Berlin and leverages WordPress technology hosted by netcup GmbH. Technically, the website is functional with moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS enabled but missing important security headers and policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is safe, trustworthy, and serves its community purpose effectively but would benefit from enhanced security and compliance measures.

The Arbeitskreis Forum 13+ website represents an independent working group of experts from German library consortia and related academic institutions focused on open-access licensing and contract negotiations. The site serves as an informational platform for coordination and knowledge exchange among stakeholders in the German academic library sector. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and D3.js, hosted on academic infrastructure (GWDG). However, it lacks a CMS and advanced analytics or marketing tools, reflecting a focused, non-commercial purpose. Security posture is basic, with no explicit HTTPS or security headers information available, and no privacy or cookie policies present. Contact and incident response information are absent, limiting user trust and compliance visibility. Overall, the site is safe, professional, and targeted at a specialized academic audience but would benefit from enhanced security and compliance features.

O

open-access.network

open-access.network

0

open-access.network is a well-established non-profit educational platform focused on providing comprehensive information, training, and networking opportunities related to Open Access publishing primarily for the German-speaking scientific community. The website is supported by reputable academic institutions and public funding agencies, which reinforces its credibility and market position as a central resource for Open Access knowledge and community engagement. The platform offers a variety of services including workshops, helpdesk support, news updates, and event calendars, targeting researchers, librarians, publishers, and science administrators. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and delivering a responsive, accessible, and well-structured user experience. The presence of cookie consent mechanisms and use of Matomo analytics indicate a commitment to privacy compliance. However, some security headers are missing, and there is no visible security.txt or incident response information, suggesting areas for improvement in security transparency. The security posture is strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The WHOIS data is limited due to privacy protection and unsupported TLD, but the website's professional presentation and affiliations mitigate concerns. Overall, the site demonstrates a mature digital presence with good privacy and security practices, suitable for its educational and community-oriented mission. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and maintaining transparency to further build trust and compliance.

D

DEAL Konsortium

deal-konsortium.de

0

DEAL Konsortium is a German academic consortium focused on enabling open access publishing through transformative agreements with major scholarly publishers. The website serves librarians, researchers, and administrators by providing information and practical support for the implementation of Projekt DEAL agreements. The consortium is affiliated with prominent German science organizations and led by the German Rectors' Conference, positioning it as a key player in the German academic publishing landscape. Technically, the website is built on Joomla CMS with SP Page Builder and uses modern web technologies including jQuery, Font Awesome, and Awesomplete. It employs Cookiebot for GDPR-compliant cookie consent management and Matomo for privacy-respecting analytics. The site is hosted on infrastructure using domaincontrol.com nameservers, likely GoDaddy, and enforces HTTPS with good SSL configuration. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and consent-based analytics tracking. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not clearly detected and could be improved. No incident response or security policy information is published, which is a gap for transparency and readiness. Overall, the website is professional, well-structured, and compliant with privacy regulations. It lacks explicit contact details and terms of service, which could be enhanced to improve business credibility and user trust. There are no signs of malicious activity or content safety concerns, making it a safe and trustworthy resource for its target audience.

E

Ecocert Deutschland GmbH

ecocert.com

0

Ecocert Deutschland GmbH operates as a leading certification body specializing in ecological and social sustainability certifications across multiple sectors including agriculture, cosmetics, textiles, and forestry. The company offers certification services, professional training, and consulting to support sustainable practices globally. The website reflects a mature digital presence with multilingual support and a clear focus on sustainability and compliance. Technically, the site employs modern analytics and consent management tools, ensuring GDPR compliance and user privacy. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit incident response policies are absent. The WHOIS data is unavailable, which slightly impacts transparency but the overall business credibility remains high based on content and external trust signals. Strategic recommendations include enhancing security headers, publishing security policies, and improving WHOIS transparency to strengthen trust further.

B

Bates Saddles

batessaddles.com

0

Bates Saddles is a specialized e-commerce retailer focused on high-performance equestrian saddles and accessories, targeting primarily the German market with localized regional domains for other key markets. The company holds official partnerships with major equestrian organizations, reinforcing its strong market position and brand credibility. The website is professionally designed and built on the Shopify platform, leveraging modern web technologies and payment integrations to provide a seamless shopping experience. However, the absence of explicit privacy and cookie policies, as well as limited WHOIS transparency, slightly detracts from its overall compliance and trust posture. Security practices are generally sound with HTTPS enforced and no obvious vulnerabilities, but could be enhanced by adding security headers and incident response information.

V

VAMED Care Holding Deutschland GmbH

vamed-gesundheit.de

0

VAMED Gesundheit Deutschland is a large healthcare provider specializing in rehabilitation, acute clinics, outpatient medical centers, and senior care facilities across Germany. The company operates multiple clinics and centers, offering a broad range of specialized rehabilitation services including neurological, cardiological, oncological, and post-COVID-19 rehabilitation. The website reflects a professional and consistent brand presence with clear navigation and relevant content targeting patients, healthcare professionals, and potential employees. Technically, the website is built on the TYPO3 CMS platform, hosted via Akamai CDN infrastructure, and incorporates modern web technologies including JavaScript and SVG graphics. The site is mobile-optimized, accessible, and SEO-friendly. GDPR compliance is addressed through a cookie consent mechanism powered by Usercentrics, and privacy policies are clearly linked. From a security perspective, the site enforces HTTPS and uses cookie consent tools but lacks explicit security headers and publicly disclosed incident response contacts or vulnerability disclosure policies. No vulnerabilities or sensitive data exposures were detected. WHOIS data aligns well with the business profile, indicating a legitimate and trustworthy domain registration. Overall, the website demonstrates a strong business credibility and technical maturity with room for improvement in security transparency and incident response readiness.

The website perfectreplicawatches.to appears to be a minimal redirect page with no accessible content, likely designed to redirect visitors to another domain. The business focus implied by the domain name is the sale of replica watches, which are counterfeit products. The site lacks any visible privacy, cookie, or terms of service policies, and no contact or business legitimacy information is provided. Technically, the site uses basic JavaScript for redirection and is hosted via ParkLogic, but no modern frameworks or CMS are detected. Security posture is weak, with no security headers or HTTPS confirmation visible in the provided data. The use of privacy protection in WHOIS and the redirect behavior suggest attempts to obscure ownership and avoid scrutiny. Overall, the site presents a high risk from a security, compliance, and business credibility perspective.

L

LIV by Neher

livbyneher.de

0

LIV by Neher operates an e-commerce website focused on selling humane insect catchers and complementary home products such as candles, candle holders, flower seeds, and vases. The website targets consumers interested in gentle and environmentally friendly insect removal solutions, primarily in Germany and the EU. The business model is retail e-commerce with a niche market positioning emphasizing humane treatment of insects and stylish home decor. The site is professionally designed with consistent branding and good content quality, including product descriptions and customer ratings.

W

Wuppertal Institut für Klima, Umwelt, Energie gGmbH

wupperinst.org

0

The Wuppertal Institut für Klima, Umwelt, Energie gGmbH is a well-established German research institute specializing in sustainability, climate, energy, and environmental research. The website reflects a mature organization with a strong focus on scientific research, policy advice, and public engagement through events, publications, and podcasts. The institute targets a broad audience including policymakers, businesses, academia, and the general public interested in sustainable development. The domain age and WHOIS data confirm the legitimacy and long-standing presence of the organization. Technically, the website is built on TYPO3 CMS, featuring modern web design, responsive layouts, and good SEO practices. The site is performant with good mobile optimization and accessibility. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, though some security headers and DNSSEC are missing. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR. However, explicit contact information and security policies are not prominently published, which could be improved to enhance transparency and incident response readiness. Strategic recommendations include enabling DNSSEC, publishing a security policy and incident response contacts, and implementing additional security headers to strengthen the security posture further.

U

Univention GmbH

univention.social

0

Univention GmbH operates the Mastodon instance univention.social, providing decentralized social media services powered by the open source Mastodon platform. The company specializes in open source software development focused on digital identity management and IT application integration, with flagship products like Univention Corporate Server (UCS) and UCS@school tailored for educational institutions. Their market position is that of an established mid-sized technology provider serving public sector and enterprise clients primarily in Germany. Technically, the website leverages modern web technologies including React and Mastodon 4.4.8, with media hosted via an S3 proxy. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. Security posture is good with HTTPS enforced and script integrity checks, but lacks some security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service visible. WHOIS data is limited due to TLD registry constraints, but website content and contact information support legitimacy. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

U

Univention GmbH

univention-summit.com

0

Univention GmbH organizes the Univention Summit, a prominent open source event focused on digital sovereignty in government, education, and business sectors. The summit attracts IT service providers, software vendors, and users primarily from Germany and Europe, offering keynotes, panels, workshops, and an exhibition with numerous IT partners. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and uses Matomo analytics with user consent, indicating a good level of digital maturity. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response information are not published. The absence of WHOIS data is a notable anomaly but does not detract from the overall professionalism and trustworthiness of the site. Strategic recommendations include publishing security and incident response policies and verifying domain registration status.

U

Univention GmbH

software-univention.de

0

Univention GmbH operates a software update repository website for its Univention Corporate Server (UCS) product line, providing downloads of software versions, network installation files, and virtual machine images. The website is primarily targeted at IT professionals and organizations using Univention's enterprise Linux solutions. The business is positioned as an established player in the technology sector, focusing on software development, distribution, and support services. The website content is technical and functional, serving as a resource for software updates rather than marketing or customer engagement. Technically, the website uses basic HTML, CSS, and JavaScript, with Piwik analytics for user tracking. The site lacks advanced frameworks or CMS platforms and shows moderate performance and basic mobile optimization. The presence of PGP signatures for archive keys demonstrates a commitment to software integrity and security. However, the site does not implement advanced security headers or explicit privacy and cookie policies, indicating room for improvement in compliance and security best practices. From a security perspective, the website benefits from HTTPS and cryptographic signatures but lacks visible security headers and formal incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the company's identity and domain usage, supporting the legitimacy of the site. Overall, the security posture is moderate but could be enhanced by adopting additional security controls and compliance documentation. The overall risk assessment is low, with the main recommendations focusing on improving privacy compliance, security headers, and user transparency regarding data collection. Enhancing mobile optimization and accessibility would also improve user experience and SEO. The website serves its purpose as a software update portal effectively but would benefit from modernization and stronger security and privacy practices.