Germany security reports

F

FUNCTIONAL MED

functional-med.de

10

FUNCTIONAL MED is a specialized healthcare provider based in Hamburg, Germany, offering holistic and modern treatment and therapy concepts focused on functional medicine, physiotherapy, osteopathy, chiropractic, and related services. The company targets patients seeking advanced musculoskeletal care and rehabilitation. The website is professionally designed, content-rich, and provides clear navigation and contact information, supporting a strong local market position. Technically, the site is built on WordPress with modern plugins and frameworks, hosted on a reputable provider, and employs HTTPS and Google reCAPTCHA for security. However, some security headers are missing, and explicit security policies are not present. Overall, the security posture is good but could be improved with additional measures. The domain registration is consistent with the hosting provider and business claims, supporting legitimacy. Privacy and cookie policies are present and GDPR compliant, enhancing trust. No adult or questionable content is detected, making the site safe for general audiences.

Y

YONEX

yonex.de

10

YONEX is a well-established sports equipment company specializing in badminton, tennis, golf, running, and snowboarding products. The website serves as a regional German portal providing product catalogs, promotional offers, and social media integration, targeting sports enthusiasts and clubs. The site demonstrates a mature digital presence with modern web technologies such as Next.js and React, ensuring good performance and mobile responsiveness. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. Security posture is solid with HTTPS and some security best practices, though explicit security policies and incident response contacts are absent. Overall, the website is professional, trustworthy, and aligned with the brand's market position.

L

Lexus Deutschland

lexus.de

70

Lexus Deutschland operates as a premium automotive brand specializing in luxury and hybrid vehicles within the German market. The website serves as a digital platform for vehicle configuration, dealer location, and customer engagement, reflecting a strong market position in the premium transportation sector. The brand leverages modern digital infrastructure, including Adobe Experience Manager CMS, React frameworks, and advanced analytics tools such as Datadog RUM and Google Tag Manager, indicating a mature digital presence. Security practices include HTTPS enforcement and cookie consent management, though explicit security policies and vulnerability disclosures are absent. Overall, the site demonstrates a professional and trustworthy online presence aligned with Lexus's premium brand image.

B

Betway Limited

betway.de

11

Betway Limited operates a comprehensive online gambling platform focused on sports betting, casino games, and live betting experiences. The company holds official partnerships with prominent football clubs such as Arsenal FC, Manchester City, Chelsea, and Brighton & Hove Albion, reinforcing its strong market position in the European gambling sector. Licensed and regulated under German authorities, Betway targets adult users interested in regulated and responsible gambling services. The website is professionally designed, mobile-optimized, and provides clear navigation and content relevant to its audience. Technically, the website leverages modern web technologies including React and Next.js frameworks, hosted behind Cloudflare for performance and security. Analytics and tracking are implemented via Google Tag Manager and Snowplow, enabling extensive user behavior insights while maintaining GDPR compliance through cookie consent mechanisms. The site demonstrates good accessibility and SEO practices, contributing to a positive user experience. From a security perspective, Betway enforces HTTPS, employs multiple security headers, and avoids exposing sensitive data in its HTML content. However, explicit security policies and incident response details are not publicly available, and no vulnerability disclosure program is evident. The domain registration data aligns well with the business claims, showing transparency and legitimacy. Overall, the security posture is strong but could benefit from enhanced transparency and formalized disclosure processes. The overall risk assessment indicates a mature and trustworthy online gambling platform with robust technical and security foundations. Strategic recommendations include publishing detailed security policies, establishing a vulnerability disclosure channel, and providing data protection officer contact information to further enhance trust and compliance.

House of Energy is a medium-sized German company specializing in integrated building services engineering, including sanitary, heating, ventilation, and electrical systems. With approximately 200 employees and multiple locations, it holds a solid market position in the construction sector, focusing on quality and customer satisfaction. The website is built on WordPress with modern plugins and demonstrates good technical maturity, including GDPR compliance and cookie consent mechanisms. Security posture is good with HTTPS and reCAPTCHA usage, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable and trustworthy online presence.

C

Chemie Altersvorsorge

chemie-altersvorsorge.de

49

Chemie Altersvorsorge is a specialized organization providing tariff-based occupational pension schemes for employees in the German chemical industry. Their website offers detailed information about the benefits of additional retirement provisions beyond the statutory pension, emphasizing tax advantages and employer contributions. The site is well-positioned within its niche, supported by reputable partners such as BAVC and IGBCE, enhancing its credibility and market presence. Technically, the website is built on a modern WordPress platform with Elementor and Yoast SEO, ensuring good performance, mobile optimization, and SEO readiness. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, serving its target audience effectively.

M

MINT Zukunft schaffen!

mintzukunftschaffen.de

63

MINT Zukunft schaffen! is an educational initiative focused on promoting STEM (MINT in German) education in Germany. The website serves as a platform to honor STEM ambassadors and provide resources related to STEM education. It targets students, educators, and STEM enthusiasts, positioning itself as a niche educational platform with a small organizational size. Technically, the website is built on WordPress, hosted on WordPress.com infrastructure, and uses modern tools such as Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is mobile-optimized and performs moderately well. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. Overall, the website is safe, professional, and trustworthy, but could improve privacy and security transparency by publishing privacy policies and incident response information.

I

Initiative Neue Qualität der Arbeit (INQA)

inqa.de

46

The Initiative Neue Qualität der Arbeit (INQA) is a German government-backed initiative focused on supporting small and medium-sized enterprises (KMU) in developing sustainable and future-oriented workplace cultures. The website serves as a comprehensive resource hub offering coaching, checks, networking, and publications to promote quality work environments. It is positioned as a trusted government entity under the Bundesministerium für Arbeit und Soziales (BMAS), leveraging official branding and partnerships. Technically, the website employs a government site builder CMS, integrates a consent management platform for GDPR compliance, and uses Etracker for analytics. The site is mobile-optimized, accessible, and SEO-friendly, though some security headers are missing. The SSL configuration is excellent, ensuring secure HTTPS connections. From a security perspective, the site demonstrates good practices with HTTPS and consent mechanisms but lacks explicit security policies, incident response contacts, and some security headers. WHOIS data is minimal but does not raise immediate concerns. Overall, the site is safe, professional, and trustworthy, with room for improvement in transparency and security hardening. The overall risk is low, but strategic recommendations include publishing privacy and security policies, adding security headers, and providing clear contact information for security incidents to enhance trust and compliance.

E

Elementare Vielfalt

elementare-vielfalt.de

54

Elementare Vielfalt is an educational platform focused on providing comprehensive information about vocational training, salaries, career tools, application tips, and job vacancies in the chemistry and pharmaceutical sectors in Germany. The website targets students, companies, teachers, and parents interested in these fields. Technically, the site is built on TYPO3 CMS and leverages modern JavaScript libraries and Usercentrics for consent management, ensuring compliance with cookie regulations. Google Analytics 4 is integrated with IP anonymization to respect user privacy. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security headers and privacy policies are not clearly visible in the provided content. Overall, the site is professional, well-branded, and trustworthy, but could improve transparency by publishing detailed privacy and security policies and contact information.

C

Chemiehoch3

chemiehoch3.de

47

Chemiehoch3 is a German sustainability initiative focused on the chemical industry, providing information, news, publications, and event organization to promote sustainable practices. The website is built on TYPO3 CMS and hosted via plusline.de, featuring a professional and consistent design optimized for mobile devices. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are critical for compliance and trust. No WAF or blocking mechanisms were detected, allowing full content access. The security posture is basic, with room for improvement in SSL configuration and security best practices. Overall, the site serves its informational purpose well but should enhance compliance and security measures to improve trust and user confidence.

D

Deutscher Bauernverband e.V.

bauernverband.de

49

The Deutscher Bauernverband e.V. (DBV) is a prominent German agricultural association representing farmers' interests. The website serves as an information hub offering agripolitical positions, publications, event calendars, and thematic dossiers targeting farmers, policymakers, and stakeholders in the agricultural sector. The site is built on a modern TYPO3 CMS platform with Bootstrap and common JavaScript libraries, ensuring good mobile responsiveness and user experience. Security posture is solid with HTTPS enforced and a GDPR-compliant cookie consent mechanism, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-aligned with its non-profit government-related mission.

B

Bundesverband Großhandel, Außenhandel, Dienstleistungen e.V.

bga.de

53

The Bundesverband Großhandel, Außenhandel, Dienstleistungen e.V. (BGA) is a prominent German industry association representing the interests of wholesale, foreign trade, and B2B service companies. The organization supports its members in professional, economic, and social policy matters, positioning itself as a leading voice in the German market. The website reflects this professional stature with clear content focused on industry topics, events, and press releases, targeting B2B audiences in Germany and beyond. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies including jQuery and Klaro for cookie consent management. Analytics are handled via Piwik/Matomo, indicating a preference for privacy-conscious tracking. The site is hosted on domaincontrol.com nameservers, suggesting a reliable hosting environment. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is strong with a comprehensive privacy policy and GDPR-aligned cookie consent. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements could include publishing explicit security policies, enhancing security headers, and providing direct contact information for incident response to further strengthen trust and compliance.

A

Arbeitgeberverband Gesamtmetall

gesamtmetall.de

51

Gesamtmetall is the leading employer association representing the metal and electrical industry in Germany, encompassing over 26,000 companies and nearly 3.9 million employees. The website serves as a comprehensive platform for industry news, policy updates, educational initiatives, and event information, targeting employers, policymakers, and industry stakeholders. Technically, the site is built on WordPress with modern plugins such as Gravity Forms and uses Matomo for privacy-conscious analytics. The site is well-structured, mobile-optimized, and accessible, reflecting a mature digital presence. Security-wise, the site enforces HTTPS and implements cookie consent but lacks visible security headers and explicit security or privacy policy documents, which are recommended for compliance and trust. Overall, the website is professional, trustworthy, and content-rich, with room for improvement in privacy documentation and security hardening.

D

Die Arbeitgeber

arbeitgeber.de

54

Die Arbeitgeber is the leading national employers' association in Germany, representing the interests of German businesses and employers. The website serves as an information and advocacy platform focusing on labor market policies, employment issues, and employer-related topics. It targets employers, policymakers, and stakeholders in the German economy. The organization positions itself as a key player in shaping economic and labor policies in Germany. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO Premium for search optimization, LayerSlider for rich content presentation, and Borlabs Cookie for GDPR-compliant cookie management. Hosting is provided by Versatel, a reputable German hosting provider. The site uses Matomo analytics for user tracking with consent mechanisms, reflecting a moderate level of digital maturity. From a security perspective, the site employs HTTPS and cookie consent mechanisms, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is partially addressed through cookie consent, but explicit privacy and terms of service pages were not found in the provided data. Overall, the website is professional, trustworthy, and well-branded, with good content quality and user experience. However, improvements in security policy transparency, incident response information, and explicit privacy documentation would enhance its security posture and compliance standing.

Kuratorium der Deutschen Wirtschaft für Berufsbildung e.V. (KWB) is a German non-profit organization focused on coordinating and representing the interests of the economy in vocational education. The website serves as an informational and organizational platform presenting their key services such as vocational education policy, coordination of training regulations, and public relations activities. The target audience includes economic stakeholders, vocational education experts, and member organizations. The site is professionally designed with consistent branding and clear navigation, supporting a medium-sized organizational profile within the education sector in Germany. Technically, the website is built on TYPO3 CMS with jQuery, employing compressed CSS and JavaScript assets for performance. It is mobile-optimized and accessible at a basic level. No advanced analytics or tracking technologies are detected, and the site uses HTTPS with basic SSL configuration. However, security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site demonstrates a moderate posture with HTTPS and cookie consent mechanisms in place but lacks advanced security headers and vulnerability disclosure information. No critical vulnerabilities or suspicious patterns were detected. WHOIS data aligns with the website's professional nature, showing consistent domain registration and hosting. Overall, the website is trustworthy, professional, and compliant with GDPR requirements, though improvements in security headers and transparency around security policies could enhance its posture. No adult or questionable content is present, making it safe for general audiences.

V

Virtual Minds GmbH

yieldlab.com

41

Virtual Minds GmbH is a reputable European adtech company specializing in programmatic advertising solutions for publishers, broadcasters, agencies, and advertisers. As a 100% subsidiary of ProSiebenSat.1 Media SE, it holds a strong market position with a modular full-stack offering including enterprise marketing platforms, DSPs, DMPs, SSPs, and media management tools. The company targets B2B clients in the digital advertising ecosystem, emphasizing premium technology made in Europe. The website reflects a professional and consistent brand image with good content quality and clear messaging.

B

Babiel GmbH

babiel.com

10

Babiel GmbH, a subsidiary of the CONET group, is a well-established German company specializing in digital communication and digital business experiences. With over 30 years of expertise, Babiel offers strategic consulting and implementation services focused on digital transformation, customer and citizen experience management, and digital touchpoints. Their integration within the CONET group expands their capabilities to include data intelligence, AI, cloud services, and software development, positioning them as a comprehensive digital solutions provider for enterprises and public institutions. Technically, the website is built on Drupal 11, leveraging modern web technologies and consent management tools such as Usercentrics. The site is well-optimized for mobile devices, features clear navigation, and integrates Google Analytics and Google Tag Manager for analytics and marketing purposes. The presence of a cookie consent banner and a detailed privacy policy indicates good GDPR compliance. From a security perspective, the site enforces HTTPS and uses consent management but lacks publicly visible security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which slightly impacts overall trust. Overall, Babiel GmbH presents a professional and trustworthy digital presence with strong business credibility and technical maturity. Addressing the WHOIS data gap and enhancing security transparency would further strengthen their security posture and trustworthiness.

V

Home

vhu.de

44

The website www.vhu.de is a German-language site built on the Contao Open Source CMS platform. It integrates modern consent management tools such as Usercentrics and analytics platforms including Matomo and Google Tag Manager, indicating a moderate level of digital maturity. However, the site lacks visible privacy policies, terms of service, and explicit contact information, which limits its transparency and compliance posture. The technical infrastructure appears standard with no detected WAF or blocking mechanisms, and the site is accessible without security challenges. Security practices are basic, with no security headers detected and no vulnerability disclosure mechanisms in place. Overall, the site presents a moderate risk profile primarily due to missing compliance documentation and limited business information.

B

Bundesarbeitgeberverband Chemie

bavc.de

52

The Bundesarbeitgeberverband Chemie (BAVC) is a leading German employer association representing the chemical, pharmaceutical, rubber, and plastics processing industries. It advocates for tariff and social policy interests of its 10 regional member associations comprising 1,700 companies and 585,000 employees. The website serves as an information hub for members, policymakers, and the public, providing news, publications, and service information. The site is professionally designed, well-structured, and optimized for mobile devices, reflecting a mature digital presence. Technically, the website is built on Joomla CMS with modern JavaScript libraries such as Awesomplete for autocomplete, Tiny Slider for carousels, and Kick Consent Manager for cookie compliance. It integrates Google Analytics and Google Tag Manager for analytics and marketing. The site uses HTTPS with good SSL configuration and implements cookie consent mechanisms aligned with GDPR requirements. From a security perspective, the site demonstrates good practices including HTTPS enforcement, cookie consent management, and CSRF token usage in forms. However, explicit security headers are not detected, and no public security policy or incident response contacts are provided. No vulnerabilities or suspicious external links were found. Privacy compliance is strong with a comprehensive privacy policy and cookie management. Overall, the website is trustworthy, professional, and compliant with privacy regulations. It effectively supports the organization's business goals and stakeholder engagement. Strategic improvements could include adding security headers, publishing a vulnerability disclosure policy, and enhancing accessibility features.

S

Senic

senic.com

67

Senic is a small technology-focused e-commerce company specializing in smart switches compatible with Philips Hue, Sonos, and HomeKit ecosystems. The company targets consumers and businesses interested in smart home automation, offering niche products that enhance smart home control. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations such as Weglot for multilingual support and various marketing and analytics tools. The technical infrastructure is robust, with fast performance, mobile optimization, and good accessibility. Security posture is solid with HTTPS enforced and standard security headers likely in place, though explicit security policies and incident response information are absent. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. However, the absence of WHOIS registration data reduces domain trustworthiness and warrants further verification. Overall, the website presents a professional and trustworthy front for its business, with room for improvement in transparency around security and domain registration.

C

Captury

thecaptury.com

56

Captury is a technology company specializing in advanced markerless motion capture solutions that enable precise tracking of full-body, finger, and facial movements for multiple actors simultaneously. Their product suite includes real-time processing software, post-processing tools, and specialized hardware solutions targeting industries such as 3D game development, VFX, virtual reality, live entertainment, in-game player tracking, and life sciences research. The company has a solid market position with notable clients including Airbus, Audi, Daimler, Rockstar Games, and Scanline VFX. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as jQuery, CSS3 Animate It, and Slick Carousel for UI enhancements. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Hosting appears stable with SSL properly configured, ensuring secure HTTPS connections. From a security perspective, the site employs HTTPS but lacks visible security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but no cookie consent mechanism was found. Contact information is clearly presented, enhancing business credibility. Overall, Captury's website reflects a mature, professional technology company with strong business credibility and a good security posture. Strategic improvements in security headers, cookie consent, and incident response transparency would further enhance trust and compliance.

C

Centigrade GmbH

centigrade.de

48

Centigrade GmbH is a medium-sized German technology company specializing in human-centered IT solutions, focusing on digital product development, UX design, software engineering, and AI integration. The company serves business clients seeking to enhance user experience and digital transformation success. Their website reflects a mature digital presence with comprehensive service descriptions, client references, and industry awards, positioning them as a reputable player in the UX and software engineering consultancy market. Technically, the website employs a modern tech stack including jQuery, lazy loading, Google Analytics with privacy features, and a consent management platform (Usercentrics). The site is mobile-optimized, accessible, and SEO-friendly, though it appears to use a custom or proprietary CMS. Performance is moderate, with good user experience and navigation clarity. From a security perspective, the site enforces HTTPS, uses consent management for GDPR compliance, and implements form validation with required privacy consent. However, it lacks explicit security policies, incident response information, and security.txt files. No critical vulnerabilities or exposed sensitive data were detected, indicating a solid security posture but with room for improvement in transparency and security headers. Overall, the website is professional, trustworthy, and compliant with privacy regulations. The risk level is low, but strategic enhancements in security documentation and incident response readiness are recommended to further strengthen trust and compliance.

K

Korso-op.Kollektiv

korso-op.com

58

Korso-op.Kollektiv is a small cultural collective based in Germany focused on artistic and theatrical projects. Their website showcases various performances and events, emphasizing cooperative and multimedia artistic expressions. The technical infrastructure is built on a modern WordPress CMS with popular plugins such as Elementor and Modern Events Calendar, indicating a moderate level of digital maturity. The website is well-designed, mobile-optimized, and includes privacy and cookie compliance mechanisms, reflecting good adherence to GDPR requirements. Security posture is adequate with HTTPS enabled, but lacks some advanced security headers and a vulnerability disclosure policy. The absence of WHOIS registration data raises concerns about domain legitimacy, which should be further investigated. Overall, the site is professional and trustworthy from a content and user experience perspective but would benefit from enhanced security practices and clearer business contact information.

The CISPA Helmholtz Center for Information Security is a prominent German national research institution specializing in cybersecurity, privacy, and trustworthy artificial intelligence. It operates as a Big Science institution within the Helmholtz Association and is recognized as a world-leading center in its field. The website showcases extensive research achievements, faculty expertise, and collaborations, particularly with the Technical University of Munich. The institution focuses on foundational and applied research, technology transfer, and knowledge dissemination to benefit society and industry.

H

Haufe Group

rudolf.ai

60

The website rudolf.ai represents an AI initiative by the Haufe Group, a well-established German company specializing in legal and business software solutions. The platform focuses on integrating generative AI technologies to enhance user experience and automate routine tasks for professionals in HR, tax, and sustainability sectors. The site demonstrates a mature digital presence with modern technologies such as Webflow CMS, jQuery, and Google Tag Manager, combined with strong privacy and ethical guidelines around AI use. Security posture is solid with HTTPS, bot protection via FriendlyCaptcha, and exclusion of external crawlers, although some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, reflecting a reputable business entity.

H

Haufe-Lexware GmbH & Co. KG

advolux.de

68

Haufe-Lexware GmbH & Co. KG operates the Advolux website, offering specialized legal practice management software tailored for law firms in Germany. The company is a subsidiary of Haufe Group SE, a well-established entity headquartered in Freiburg im Breisgau. Advolux provides a comprehensive suite of digital tools including document management, deadline tracking, and integration with the German electronic lawyer mailbox (beA), supporting both cloud and on-premises deployments. The website demonstrates a strong market position with professional branding, extensive feature descriptions, and customer testimonials, targeting legal professionals seeking efficient digital solutions.

D

Deutsche Säge- und Holzindustrie Bundesverband e.V. (DeSH)

woodbook.online

66

Woodbook.online is a professionally developed digital platform serving as a digital training report booklet for apprentices and companies in the German wood industry. Backed by the Deutsche Säge- und Holzindustrie Bundesverband e.V. (DeSH) and funded by the Rudolf-Bleichert-Stiftung, it offers a free, user-friendly solution for managing apprenticeship documentation. The website targets apprentices (Azubis), companies, and trainers, providing a modern, accessible tool to streamline training record keeping. Technically, the site is built on WordPress with the Avada theme and WooCommerce, incorporating modern plugins for cookie consent and user experience. Security posture is good with HTTPS and domain transfer protections, though DNSSEC and some security headers could be improved. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and a clear business focus within the manufacturing sector.

F

Fachagentur Nachwachsende Rohstoffe e.V. (FNR)

bundeswaldinventur.de

45

The Bundeswaldinventur website is an authoritative German government-affiliated portal providing detailed forest inventory data and modeling for sustainable forest management. It serves forestry professionals, policymakers, researchers, and the public with comprehensive reports, seminars, and multimedia content. The site is well-branded and professionally maintained, reflecting its role as a trusted source of forestry information. Technically, it is built on TYPO3 CMS with modern JavaScript libraries and integrates Matomo analytics with privacy-conscious settings. Security posture is solid with HTTPS and no exposed sensitive data, though improvements in security headers and cookie consent mechanisms are recommended. Overall, the site demonstrates a mature digital presence with high trustworthiness and compliance with GDPR, supporting its mission to inform and guide forest-related policy and research in Germany.

T

twogether

twogether.online

9

twogether.online is a small business website focused on promoting strong relationships and love, as indicated by its tagline and branding. The site is primarily in German and targets a general audience in Germany. The business appears to be modest in scale with minimal content but professional design elements. The technical infrastructure is based on WordPress with popular plugins such as Yoast SEO and Slider Revolution, hosted on Hostpoint servers. The website is mobile optimized and includes a cookie consent mechanism compliant with GDPR requirements. Security posture is adequate with HTTPS enabled and no major vulnerabilities detected, though DNSSEC is not enabled and security headers are missing. No direct contact information or detailed business data is published, which limits business credibility assessment. Overall, the site is legitimate and stable but could improve transparency and security practices.

S

Stadt. Land. Niederrhein

stadt-land-niederrhein.de

48

Stadt. Land. Niederrhein is a regional tourism and cultural information website focused on the Niederrhein area in Germany. It provides visitors with culinary offers, cultural events, and regional attractions, targeting a general audience interested in tourism and local culture. The website is multilingual, supporting German, English, and Dutch, enhancing accessibility for international visitors. The business model centers on promoting regional tourism and culture, positioning itself as a key information portal for the Niederrhein region. The site uses WordPress CMS with a modern tech stack including Bootstrap, jQuery, and various plugins for SEO, multilingual support, and social media integration. Hosting is provided by kasserver.com, a professional hosting provider.

D

Die Sanierungsoffensive

sanierungs-offensive.de

48

Die Sanierungsoffensive is a German-based energy sector company specializing in providing comprehensive home renovation services focused on energy efficiency and sustainability. The company offers a digital Sanierungsrechner (renovation calculator) to help customers plan and estimate costs for modernizing heating, ventilation, sanitation, electrical installations, photovoltaics, and e-mobility solutions. Backed by the House of Energy GmbH, a medium-sized enterprise with multiple locations and a strong market presence, the website reflects a professional and well-structured digital platform supporting customer engagement and project management. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is partial due to missing explicit privacy policy and terms of service pages. Overall, the site is trustworthy, well-branded, and serves its target audience effectively.

TRAVELBOOK is Germany's largest online travel magazine, offering unique travel destinations, news, tips, and entertaining content for travelers primarily in the German-speaking market. The website is professionally designed with a strong brand presence, including partnerships with major media like Bild. The technical infrastructure leverages WordPress CMS, modern JavaScript libraries, and integrates advanced advertising and consent management platforms, reflecting a mature digital presence. Security posture is solid with HTTPS, GDPR compliance, and no visible vulnerabilities, though some security headers could be explicitly confirmed. Overall, the site demonstrates a high level of professionalism, content quality, and compliance, making it a trustworthy source for travel information.

TECHBOOK is a well-established German digital lifestyle and technology magazine offering a wide range of content including guides, tips, and product reviews focused on mobile lifestyle, home entertainment, streaming, and smart finance. The website targets tech-savvy and lifestyle-interested audiences primarily in Germany. The business model is based on online media publishing with revenue generated through advertising and partnerships. TECHBOOK maintains a consistent brand presence with active social media channels and structured data for SEO enhancement. Technically, the website is built on WordPress CMS and employs modern web technologies such as JavaScript, JSON-LD for structured data, and CSS. Hosting and content delivery are managed via Akamai CDN, ensuring good performance and availability. The site is mobile-optimized and implements basic accessibility features. SEO practices are well implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes security headers like CSP, HSTS, and X-Frame-Options. GDPR compliance is evident through comprehensive privacy and cookie policies and a consent management platform. However, explicit security policies and incident response contacts are not published, which could be improved to enhance trust and readiness. Overall, TECHBOOK presents a low-risk profile with a professional online presence, good privacy compliance, and a solid technical foundation. Strategic recommendations include publishing a dedicated security policy, adding vulnerability disclosure information, and enhancing accessibility and incident response transparency to further strengthen security posture and user trust.

PETBOOK is a German online magazine dedicated to pet owners and animal lovers, providing daily news, tips, and guidance on healthy pet care and maintenance. The site targets both beginners and professionals in pet ownership, positioning itself as a niche media outlet within the pet care sector. The business model primarily revolves around content publishing supported by advertising revenue. Technically, the website is built on WordPress and leverages modern technologies including JavaScript frameworks, consent management platforms, and advertising networks such as AppNexus. Hosting and content delivery are managed via Akamai, ensuring reliable performance and scalability. The site demonstrates good SEO practices and mobile optimization, contributing to a positive user experience. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit privacy and terms of service documents are not found in the provided content. Overall, PETBOOK presents as a professional and trustworthy media site with moderate to good technical maturity and compliance, suitable for general audiences without any adult or unsafe content.

H

Henkel AG & Co. KGaA

henkel-renntag.de

41

Henkel AG & Co. KGaA operates the website www.henkel-renntag.de to promote and provide information about its sponsorship of horse racing events, specifically the Henkel-Stutenpreis and the Henkel-Preis der Diana at the Düsseldorf-Grafenberg racecourse. The site targets horse racing enthusiasts and the general public interested in these events. The business model focuses on brand visibility through sports sponsorship, positioning Henkel as a key player in this niche market segment. The website is well-branded, professionally designed, and provides relevant content about the events and related partners.

H

Harro Höfliger

harrowho.com

10

Harro Höfliger is a well-established company specializing in high-tech machinery and process solutions primarily serving the pharmaceutical and medical technology industries. The company positions itself as a global technology leader and process solver, offering innovative technologies and services. The website is professionally designed, primarily in German, with an option to switch to English, targeting industry professionals and potential employees. Technically, the site is built on WordPress with a modern tech stack including Yoast SEO and Slider Revolution, ensuring good SEO and user experience. Security-wise, the site uses HTTPS and a comprehensive cookie consent mechanism but lacks advanced security headers and DNSSEC. No explicit security or incident response policies are published, which could be improved. Overall, the domain registration is transparent and consistent with the business profile, though the domain age is younger than the company's founding date, which is plausible for a new web presence.

H

Henkel AG & Co. KGaA

fritz-henkel.com

66

The website https://fritz-henkel.com/ is a professionally designed microsite dedicated to celebrating the 175-year legacy of Fritz Henkel, founder of Henkel AG & Co. KGaA. It provides rich historical content, brand heritage storytelling, and corporate culture insights targeted at a general audience including brand enthusiasts and stakeholders. The site leverages modern web technologies such as Nuxt.js and Vue.js, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent managed via OneTrust, although some security headers could be improved. The domain registration is consistent with the corporate identity and appropriate for a dedicated campaign site. Overall, the site demonstrates strong compliance with GDPR and presents trustworthy business information.

H

Henkel AG & Co. KGaA

henkel-ventures.com

61

Henkel Ventures is the corporate venture capital arm of Henkel AG & Co. KGaA, focusing on early-stage investments up to Series B in startups aligned with Henkel's strategic business units such as Adhesive Technologies, Beauty Care, and Laundry & Home Care. The website presents a professional and comprehensive overview of their investment focus, partnership approach, and strategic objectives, targeting startups and innovation partners globally. The technical infrastructure is modern, leveraging a custom CMS with advanced JavaScript libraries and analytics tools, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS and Content-Security-Policy headers, complemented by GDPR-compliant privacy and cookie policies with user consent mechanisms. However, the absence of WHOIS registration data for the domain is a notable anomaly that requires further verification to confirm domain legitimacy. Overall, the site reflects a mature corporate digital presence with good security and privacy practices.

H

Henkel

henkel.de

64

Henkel is a leading global enterprise operating in both industrial and consumer goods sectors, specializing in hair care, colorants, detergents, cleaning agents, fabric softeners, adhesives, sealants, and functional coatings. The company maintains a strong market position with a comprehensive portfolio targeting both B2B and B2C customers. The website reflects a mature digital infrastructure with modern JavaScript libraries, a corporate CMS, and extensive multilingual support. Security posture is robust with HTTPS enforcement, Content Security Policy, and cookie consent mechanisms aligned with GDPR. While no critical vulnerabilities or exposed sensitive data were detected, there is room for improvement in security headers and incident response visibility. Overall, the website demonstrates high professionalism, trustworthiness, and compliance, supporting Henkel's reputation as a global manufacturing leader.

B

Bundesamt für Familie und zivilgesellschaftliche Aufgaben

hilfetelefon.de

58

The website www.hilfetelefon.de is an official German government-supported platform operated by the Bundesamt für Familie und zivilgesellschaftliche Aufgaben. It provides a nationwide, free, and anonymous counseling service for women affected by violence, accessible 24/7 via phone (116 016) and online channels. The service targets women of all nationalities, including those with disabilities, as well as their relatives, friends, and professionals. The site is professionally designed with strong accessibility features including sign language and easy language options, supporting a broad and inclusive audience. Technically, the site is built on TYPO3 CMS, uses Matomo for privacy-conscious analytics, and is hosted with domainfactory for analytics services. The website employs HTTPS and cookie consent mechanisms aligned with GDPR requirements, ensuring user privacy and data protection. However, explicit security policies and incident response contacts are not found, and security headers are not evident, representing areas for improvement. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy standards.

Henkel AG & Co. KGaA is a global leader in manufacturing, specializing in Adhesive Technologies and Consumer Brands. The company operates worldwide with a strong emphasis on innovation, sustainability, and corporate governance. Their website reflects a mature digital presence with comprehensive content targeting industrial customers, consumers, partners, and investors. The business model combines B2B and B2C approaches, leveraging a broad portfolio of products and technologies. Henkel maintains a strong market position supported by ISO certifications and a consistent brand image. Technically, the website employs a modern technology stack including JavaScript libraries like GSAP, Highcharts, and SwiperJS, and is built on the CoreMedia CMS platform. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Security measures include HTTPS enforcement, a robust Content Security Policy, and cookie consent mechanisms, indicating a strong security posture. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies, GDPR compliance, and a visible data protection officer contact. The site uses multiple analytics and marketing tools, balancing user tracking with privacy considerations. Overall, the website demonstrates high professionalism, trustworthiness, and a secure environment suitable for a large multinational enterprise. Strategically, Henkel should continue enhancing its security posture by minimizing unsafe inline scripts, implementing a formal vulnerability disclosure program, and improving incident response visibility to maintain trust and compliance in an evolving regulatory landscape.

H

Henkel

henkel-forscherwelt.com

62

Henkel Researchers’ World is a well-established educational initiative by Henkel AG & Co. KGaA aimed at introducing children and educators to scientific methods and experiments in areas aligned with Henkel's business sectors such as adhesives, personal care, and sustainability. The website is professionally designed with rich content, including videos and interactive experiments, targeting a young audience and educators. The platform leverages modern web technologies and complies with GDPR through comprehensive privacy and cookie policies. However, the absence of WHOIS data for the domain raises questions about domain registration transparency, though the website content and branding strongly support its legitimacy. Security posture is strong with HTTPS and Content Security Policy in place, but additional security headers and explicit security policies could enhance trust. Overall, the site presents a credible, secure, and user-friendly educational resource with room for improvement in transparency and security documentation.

H

Henkel

henkel-forscherwelt.de

64

Henkel Forscherwelt is a well-established international educational initiative by Henkel, focused on fostering curiosity and scientific exploration among children. The website offers a variety of educational programs, teaching materials, and teacher training aligned with Henkel's research areas. The initiative has been active since 2011 and targets children and educators primarily in Germany. Technically, the website employs a modern tech stack including JavaScript libraries like GSAP, Highcharts, and uses CoreMedia CMS, hosted on professional DNS infrastructure. Privacy and cookie consent mechanisms are well implemented, with GDPR compliance evident. Security posture is strong with HTTPS and Content Security Policy in place, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and safe for its target audience.

E

ERF Medien

erf.de

70

ERF Medien is a German Christian media company providing news and engaging content focused on the Christian faith. The website targets German-speaking Christian communities and interested audiences, positioning itself as a niche media provider in this sector. The business model revolves around delivering faith-based media content through various digital channels. Technically, the website leverages modern technologies including Cloudflare for DNS and CDN, Cookiebot and Usercentrics for consent management, and Matomo and Google Analytics for user tracking and analytics. The use of Vue.js components indicates a modern frontend framework. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with clear cookie policies and GDPR adherence. No critical vulnerabilities or blocking mechanisms were detected, and the site content is safe for general audiences.

E

EHI Geprüfter Online-Shop

ehi-siegel.de

47

EHI Geprüfter Online-Shop operates as a certification provider specializing in e-commerce, offering seals, authentic customer reviews, and secure legal texts to promote safe and fair online shopping experiences. The website targets German online retailers and businesses seeking to enhance trust and compliance. Technically, the site is built on WordPress with the Divi theme, leveraging modern web technologies and privacy-conscious analytics via Matomo with disabled cookies. Security posture is solid with HTTPS and no evident vulnerabilities, though security headers and explicit privacy compliance measures are lacking. Overall, the site presents a professional and trustworthy front but would benefit from enhanced privacy disclosures and contact transparency.

B

BILD

bild.de

64

BILD.de is a leading German news media website operated by Axel Springer SE, offering a wide range of news, entertainment, sports, and video streaming services. The site targets a general audience with a comprehensive content offering including free and subscription-based (BILDplus) content. The business model relies on advertising and subscriptions, positioning BILD as a major player in the German media landscape. Technically, the website employs modern web technologies including ES6 JavaScript, CSS3, and HTML5, with a strong focus on performance and mobile optimization. Hosting is managed via Akamai, ensuring fast content delivery. The site integrates a Consent Management Platform to comply with GDPR requirements and uses various third-party scripts for analytics and advertising. From a security perspective, BILD.de enforces HTTPS and implements consent mechanisms for privacy compliance. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly visible, representing areas for improvement. The site shows no signs of WAF blocking or content restrictions, and no adult or NSFW content is present. Overall, BILD.de demonstrates a mature digital presence with strong business credibility and technical infrastructure. Strategic enhancements in transparency around privacy policies and security incident handling would further strengthen trust and compliance.

S

Seniorentreff im Internet

seniorentreff.de

45

Seniorentreff im Internet is a well-established German-language online community platform targeting seniors aged 50 and above. It offers a broad range of services including forums, blogs, interest groups, chats, and real-life event coordination, fostering social connections among its members. The platform operates on a free-to-use model supported by advertising and partner offers, positioning itself as a trusted and comprehensive social network for seniors in Germany. The website demonstrates consistent branding and professional content quality, appealing to its mature audience effectively. Technically, the website employs a variety of modern web technologies such as Google Tag Manager, Facebook SDK, Google Adsense, and Cookiefirst for consent management. It uses HTTPS with good SSL configuration and integrates third-party services for analytics, advertising, and social login. The site is mobile-optimized with good navigation and SEO practices, although no major CMS or hosting provider details are explicitly detected. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses reCAPTCHA on forms, but lacks visible security headers and a published security policy or incident response contacts. There are no detected vulnerabilities or exposed sensitive data in the provided content. Privacy compliance is strong with clear privacy and cookie policies and a consent mechanism in place, aligning with GDPR requirements. The WHOIS data is minimal but consistent, supporting the legitimacy of the domain. Overall, Seniorentreff im Internet presents a secure, privacy-conscious, and user-friendly platform with a strong focus on community engagement for seniors. Strategic improvements in security headers, incident response transparency, and technical performance could further enhance its security posture and user trust.

B

belboon GmbH

belboon.com

63

belboon GmbH operates as a leading international performance marketing and affiliate network headquartered in Berlin, Germany. Founded in 2005, the company offers comprehensive services including affiliate marketing, tracking solutions, first-party data strategies, and full funnel marketing to advertisers, publishers, and agencies. It is part of the Linehub marketing collective, enhancing its market reach and service portfolio. The website is professionally designed, multilingual, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the site is built on WordPress with modern tools such as Yoast SEO and Borlabs Cookie for compliance and user experience. Security posture is good with HTTPS and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. Contact information is transparent and includes multiple channels, supporting business credibility. Overall, belboon presents a trustworthy and professional digital footprint with room for security policy enhancements.

A

Adolf Würth GmbH & Co. KG

wuerth.de

67

Adolf Würth GmbH & Co. KG operates a professional and comprehensive website focused on assembly and fastening technology products for industrial and craft users. The company is positioned as a leading manufacturer and supplier in its sector, offering over 100,000 products including screws, dowels, tools, and safety equipment. The website targets professional users such as workshops, construction sites, and various tradespeople. Technically, the site uses a modern CMS (FirstSpirit), Bootstrap framework, and integrates Visual Website Optimizer for analytics and A/B testing. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enabled and no visible vulnerabilities, but lacks explicit security headers and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but could improve transparency and compliance aspects.