Germany security reports

T

Tennis Deutschland · tennisnet.com

tennisnet.com

50

The website tennisnet.com is a German-language sports news platform specializing in tennis coverage, including ATP and WTA news, live scores, and tournament updates. It targets tennis enthusiasts primarily in Germany and operates on the TYPO3 CMS platform, integrating various advertising and tracking technologies such as Google Analytics, Google Tag Manager, Facebook Pixel, and Google Adsense. The technical infrastructure is modern and supports mobile optimization, though performance is moderate. Security posture is generally good with HTTPS enabled, but lacks some security headers and explicit privacy and cookie policies. The absence of WHOIS data raises questions about domain registration legitimacy, though the website content and design appear professional and trustworthy. Overall, the site is functional and relevant to its audience but would benefit from enhanced privacy compliance and clearer business contact information.

N

naturenergie netze

naturenergie-netze.de

74

naturenergie netze is a regional energy network operator based in Südbaden, Germany, providing essential utility services including electricity, water, lighting, communication technology, and training. The company operates as part of the Energiedienst-Gruppe, positioning itself as a key regional player in energy distribution and infrastructure services. The website reflects a professional and consistent brand presence targeting customers and partners within the energy sector in the region. Technically, the site is built on TYPO3 CMS, hosted on Azure DNS infrastructure, and integrates modern web technologies including Cookiebot for GDPR-compliant cookie management, Google Analytics, and social media tracking tools. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Security posture is solid with HTTPS enforced and use of reputable third-party scripts, although explicit security headers and incident response information are not clearly published. Privacy compliance is well addressed through a comprehensive privacy policy and granular cookie consent mechanisms. Overall, the website is trustworthy, professional, and compliant with relevant regulations, supporting the company's business credibility and digital maturity.

F

Förderverein Landesgartenschau Bad Nenndorf 2026

foerderverein-laga26.de

44

The Förderverein Landesgartenschau Bad Nenndorf 2026 is a small non-profit organization dedicated to supporting the Landesgartenschau 2026 event in Bad Nenndorf, Germany. The website serves as an informational and engagement platform for local citizens, clubs, and businesses to participate in the event's development and related projects. The organization emphasizes sustainable and community-focused development of local parks and infrastructure. Technically, the website is built on WordPress with Elementor and Astra theme, employing modern web technologies and a cookie consent mechanism via Borlabs Cookie. Security posture is moderate, with HTTPS enabled but lacking some recommended security headers and formal privacy documentation. No contact emails or phone numbers are explicitly provided in the accessible content, which limits direct communication channels. Overall, the site is professionally designed, mobile-optimized, and trustworthy for its intended audience, but could improve compliance and security practices.

L

LaGaSaGa

lagasaga.de

35

LaGaSaGa is a German cultural storytelling project centered around the character Nennia, the guardian of the Süntelbuchen forests near Bad Nenndorf. The website promotes stories, podcasts, and cultural events related to the Landesgartenschau 2026 in Bad Nenndorf. The site is built on WordPress with modern SEO and multimedia integration, including podcasts on Spotify and embedded YouTube videos. The technical infrastructure is solid, hosted on kasserver.com with HTTPS enabled and uses popular plugins like Yoast SEO and WPBakery Page Builder. Security posture is good with no obvious vulnerabilities or exposed sensitive data, but lacks some security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanisms. Overall, the site is professional, trustworthy, and well-branded but should improve compliance and security documentation.

B

betaITS GmbH

beta-its.de

62

betaITS GmbH is a small German managed IT services provider specializing in modern, simple, and customer-friendly IT solutions. Their offerings include managed endpoint services, infrastructure management, Microsoft 365 management, security, backup, and hardware procurement. The company targets businesses seeking comprehensive IT management with a focus on proactive service and operational continuity. The website is professionally designed using modern technologies like Astro, with excellent mobile optimization and clear navigation. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies could be improved. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Contact is primarily via Calendly and social media, with no direct emails or phone numbers visible. Overall, the site is trustworthy, well-branded, and content-rich, supporting betaITS GmbH's market position as a reliable managed IT service provider.

B

Bundesverband BioEnergie e.V. (BBE)

fachverband-holzenergie.de

48

Fachverband Holzenergie is a German industry association dedicated to promoting sustainable wood energy usage. It operates under the umbrella of Bundesverband BioEnergie e.V. (BBE) and provides advocacy, publications, events, and working groups to support the wood energy sector. The website is professionally designed, content-rich, and targets industry stakeholders, policymakers, and environmental advocates. The association holds a solid market position within Germany's renewable energy landscape, focusing on sustainable forestry and climate protection through wood energy. Technically, the website is built on the Concrete5 CMS platform, utilizing modern JavaScript libraries such as jQuery and LayerSlider for interactive content. The site is mobile-optimized with good navigation and accessibility features, although some accessibility aspects could be improved. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and does not provide visible security policies or incident response contacts. No vulnerabilities or exposed sensitive data were found. Analytics are handled via Matomo, emphasizing privacy compliance with cookie opt-in. Overall, the website presents a trustworthy and professional front for the Fachverband Holzenergie association. Strategic improvements in security headers, incident response transparency, and accessibility would enhance its security posture and compliance. The domain WHOIS data is minimal but consistent with the website's German focus, supporting legitimacy. No WAF or blocking mechanisms interfere with content access.

B

Bayerische Staatsforsten AöR

baysf.de

65

Bayerische Staatsforsten AöR is a publicly owned forestry organization under the Free State of Bavaria, managing the entire Bavarian state forest with a focus on sustainable, integrative forest management. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content targeting citizens, forestry professionals, and environmental stakeholders. The organization offers a broad range of services including wood production, hunting, renewable energy, and nature conservation. Technically, the site is built on Drupal CMS, uses Matomo for analytics with user consent, and supports responsive design and accessibility. Security posture is strong with HTTPS enforced and cookie consent mechanisms, though explicit security headers and policies could be improved. Overall, the domain and WHOIS data align with the organization's government affiliation, supporting legitimacy and trust. No critical vulnerabilities or suspicious content were detected.

D

Deutsche Säge- und Holzindustrie Bundesverband e. V.

zukunft-holz.de

58

The website 'Zukunft Holz' represents the Deutsche Säge- und Holzindustrie Bundesverband e. V., a well-established German industry association focused on sustainable wood usage and the sawmill sector. The organization acts as a key intermediary between forestry and wood processing industries, promoting climate protection, employment, and value creation. The site offers comprehensive information, press releases, event details, and project highlights, targeting industry stakeholders, policymakers, and interested public. Technically, the site is built on WordPress with a modern theme and plugins, including SEO and cookie consent tools, ensuring a professional digital presence. Security measures such as HTTPS, hCaptcha, and cookie consent are implemented, though additional security headers could enhance protection. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness. Overall, the site is well-designed, content-rich, and compliant with GDPR, supporting the organization's mission effectively.

G

ge-webdesign.de

ge-webdesign.de

39

ge-webdesign.de is a small, local web design service provider based in Berlin, Germany, specializing in affordable and technically sound website creation using the CMSimple platform. The website offers CMSimple templates, plugins, and installation services, targeting small businesses and individuals in the Berlin-Brandenburg region. The business emphasizes over 20 years of experience and provides a general license for its templates and plugins. Technically, the website is built on CMSimple 5.21 with jQuery 1.12.4 and standard HTML/CSS, showing good mobile optimization and SEO practices but lacking modern security headers and cookie consent mechanisms. Security posture is moderate with no visible vulnerabilities but could be improved by updating libraries and enhancing SSL and header configurations. Overall, the site is accessible without WAF or blocking, contains no adult or questionable content, and demonstrates moderate trustworthiness with room for technical and privacy compliance improvements.

P

Primus-Ofenshop.com

primus-ofenshop.com

62

Primus-Ofenshop.com operates as a specialized e-commerce retailer focused on fireplaces, tiled stoves, and related accessories, targeting consumers in Germany. The company emphasizes professional consulting by stove masters and offers individual stove planning and handcraft services, positioning itself as a trusted regional expert with a broad product range and over 15,000 completed projects. The website is built on a modern WordPress and WooCommerce platform, leveraging Elementor for design and integrating trusted third-party services such as Trusted Shops and MonsterInsights for reviews and analytics. Cookie consent is managed via Cookiebot, reflecting attention to privacy compliance. Security posture is solid with HTTPS enforced and privacy-focused analytics settings, though the absence of explicit security headers and visible privacy policies indicates room for improvement. The lack of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be verified to ensure trustworthiness. Overall, the site presents a professional and user-friendly experience with moderate risk due to incomplete compliance documentation and domain registration opacity.

S

Stilbetten.de

stilbetten.de

60

Stilbetten.de is a German e-commerce retailer specializing in beds and mattresses, offering a wide selection of quality products to consumers aiming to enhance their bedroom experience. The website is built on a modern WordPress platform using WooCommerce for e-commerce functionality and Elementor for design, hosted on Amazon AWS infrastructure. The site integrates advanced tracking and consent management tools such as Google Analytics, Microsoft Clarity, and Cookiebot, reflecting a moderate level of digital maturity. Security posture is solid with HTTPS enforced and privacy-conscious analytics configurations, although the absence of explicit privacy policies and terms of service pages indicates room for compliance improvement. Overall, Stilbetten.de presents a professional and trustworthy online retail presence with a focus on user experience and privacy-aware tracking.

M

Mundharmonika Berlin

mundharmonika-berlin.de

39

Mundharmonika Berlin is a small local business specializing in the sale and consultation of Mundharmonika musical instruments, as well as live music performances in Berlin. The website serves as a platform for showcasing the business offerings, including an online shop and detailed information about the proprietor's musical background. The business targets music enthusiasts and players of the harmonica, focusing on a niche market within the Berlin area. Technically, the website is built on the CMSimple CMS platform, utilizing standard web technologies such as HTML5, CSS, and jQuery. The site demonstrates moderate performance and basic mobile optimization. SEO and accessibility features are present but could be improved. Hosting appears to be provided by a German hosting provider associated with the domain's nameservers. From a security perspective, the website lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and user protection. No HTTPS or SSL configuration details were provided, which is a critical area for improvement. The site does not disclose any formal security policies or incident response contacts, indicating a low maturity in security governance. Overall, the website is functional and professional for a small business but requires enhancements in security posture, privacy compliance, and technical modernization to improve trust and user experience.

PŸUR is a German telecommunications provider specializing in internet and TV services, targeting private customers, businesses, and housing industries. The website presents a professional and modern digital presence with clear service offerings and a strong market position as indicated by awards such as 'Testsieger bei connect'. The technical infrastructure leverages modern web technologies including React and Chakra UI, with integrated analytics and tag management tools from Google and Adobe. Security posture is solid with HTTPS enforcement and standard security headers, though explicit security policies and incident response information are not publicly detailed. The absence of WHOIS data limits full domain legitimacy verification but the overall business credibility remains high based on website content and branding.

B

Bouldern gegen Krebs

bouldern-gegen-krebs.de

53

Bouldern gegen Krebs is a German non-profit charity initiative organizing bouldering events to support cancer patients and related social projects. Founded in 2020 by Steffen Rieger, the organization leverages sport and community engagement to raise awareness and funds. The website is built on TYPO3 CMS and hosted by agenturserver, featuring a clean, professional design with good navigation and mobile optimization. Contact information and partner logos enhance credibility. However, the site lacks a cookie consent mechanism and visible security headers, indicating room for improvement in privacy and security compliance. No forms or tracking scripts were detected, suggesting minimal data collection and user tracking. Overall, the website is trustworthy and serves its niche audience effectively.

S

Stiftung Leben mit Krebs

rudern-gegen-krebs.de

51

Rudern gegen Krebs is a well-established German non-profit initiative organized by Stiftung Leben mit Krebs, focused on hosting charity rowing regattas to support cancer patients through medically supervised sports therapies. The website demonstrates a strong market position as one of Germany's largest grassroots charity sports events, with extensive participation and reputable sponsorship. Technically, the site is built on WordPress with modern plugins and themes, showing good SEO, accessibility, and mobile optimization. Security posture is solid with HTTPS and GDPR compliance, though formal security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and aligned with its charitable mission.

F

FID Verlag GmbH

gesundheitswissen.de

58

Gesundheitswissen.de is a German health information portal operated by FID Verlag GmbH, providing expert-backed content on health, nutrition, natural medicine, and wellness. The site offers newsletters, webinars, and an online shop, targeting health-conscious German-speaking audiences. The business model focuses on content publishing and community engagement through subscriptions and educational offerings. Technically, the website is built on WordPress, hosted on AWS infrastructure, and employs modern web technologies including FriendlyCaptcha for form security. The site demonstrates good mobile optimization and SEO practices but lacks some advanced security headers and explicit cookie consent mechanisms. Security posture is solid with HTTPS and anti-bot measures but could be enhanced with formal security policies and headers. WHOIS data confirms domain legitimacy and consistency with the business. Overall, the site is professional, trustworthy, and safe for general audiences.

M

Medicproof GmbH

medicproof.de

10

Medicproof GmbH operates as a specialized medical service provider for private health insurance in Germany, focusing on the creation of medical expert assessments and care evaluations. The company processes a high volume of reports daily from its Cologne headquarters, serving insured individuals, medical professionals, and caregivers. Their services include care level assessments, caregiver training programs, and expert evaluations, positioning them as a key player in the private health insurance healthcare sector. The website is built on TYPO3 CMS and uses modern frontend technologies, providing a professional and user-friendly experience with good mobile optimization and clear navigation. Security posture is solid with HTTPS, cookie consent, and secure forms, though there is room for improvement in publishing explicit security policies and incident response details. The site integrates analytics and marketing tools such as Matomo, Mouseflow, and Facebook Pixel with GDPR-compliant consent mechanisms. WHOIS data aligns well with the business claims, showing consistent domain registration and no suspicious patterns. Overall, the website is trustworthy, professional, and compliant with privacy regulations, supporting Medicproof's market position as a reputable healthcare service provider.

C

compass private pflegeberatung GmbH

pflegeberatung.de

53

pflegeberatung.de is a German healthcare information portal operated by compass private pflegeberatung GmbH, focusing on elder care and nursing services. The website offers comprehensive information, a search platform for care providers, and guidance for individuals and families navigating care situations. It targets a broad audience including care recipients and their relatives within Germany. Technically, the site is built on TYPO3 CMS, hosted likely by NetCologne, and integrates modern tools such as Google Tag Manager and a chatbot for enhanced user interaction. The site is well-structured, mobile-optimized, and provides a professional user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and implements a detailed cookie consent mechanism aligned with GDPR requirements. However, it lacks explicit published security policies or incident response contacts, which could be improved. Overall, the site demonstrates a strong security posture with no detected vulnerabilities or suspicious elements, supporting its credibility and trustworthiness in the healthcare sector.

C

compass private pflegeberatung GmbH

compass-pflegeberatung.de

11

Compass private pflegeberatung GmbH is a German healthcare service provider specializing in free and independent care consultation for privately insured individuals and their families. The company operates nationwide with regional teams and offers telephone, on-site, and video consultations. It is affiliated with the PKV-Verband and recognized as a trusted care consultation service with a strong market presence. The website is professionally designed, content-rich, and well-branded, targeting a general audience seeking care advice and support.

C

Careproof DE

careproof.de

47

Careproof DE is a German-based digital platform focused on the digitalization of healthcare and nursing services. The website serves as an information hub and is developing innovative software solutions aimed at revolutionizing digital care. The platform positions itself as a future leader in the digital care sector, targeting professionals and stakeholders interested in healthcare technology advancements. The site is built on WordPress using the Divi theme, with modern SEO and GDPR compliance tools integrated, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, accessible, and trustworthy, with no signs of malicious activity or content blocking.

P

P3 DIGITAL / GROUP

p3digital.group

10

P3 DIGITAL / GROUP is a German media agency specializing in web development, video production, and recruiting services. The company offers a range of digital media solutions including multilingual web platforms, SEO-optimized websites, creative video content, and employer branding tools. Their market position is supported by a diverse client portfolio and professional online presence. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and includes SEO and GDPR compliance features. Security posture is solid with HTTPS enforced and cookie consent management implemented, though security headers could be improved. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a credible digital media service provider.

W

WISTA Management GmbH

adlershof.de

10

The website www.adlershof.de represents the Berlin Adlershof Technology Park, managed by WISTA Management GmbH. It serves as a modern hub for science, technology, business, and media, hosting over 1,300 companies and numerous research institutions. The site targets scientists, startups, companies, students, and visitors interested in the technology and science ecosystem in Berlin. The business model focuses on providing infrastructure, office and lab spaces, business support, and networking opportunities within a large, well-established technology park. The website content is rich, professionally designed, and well-structured, reflecting a mature digital presence.

W

WISTA.Service GmbH

wista-service.de

60

WISTA.Service GmbH is a medium-sized German company founded in 2001, specializing in comprehensive building and facility management services at the Berlin Adlershof high-technology location. Their offerings include maintenance of buildings, laboratories, and clean rooms, as well as commercial services such as tenant management and IT infrastructure consulting. The company serves a clientele of research institutions, technology firms, and real estate developers, positioning itself as a trusted local leader with recognized certifications and memberships. Technically, the website is built on TYPO3 CMS, hosted by manitu.net, and demonstrates good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements could be made by adding security headers and explicit privacy consent mechanisms. Overall, the site reflects a professional and trustworthy business presence with room for enhanced privacy and security transparency.

W

WISTA.Plan GmbH

wista-plan.de

60

WISTA.Plan GmbH is a Berlin-based urban development agency specializing in regional, city, and quarter planning, land development, construction, and real estate marketing. The company operates primarily in the Berlin-Johannisthal/Adlershof and Former Güterbahnhof Köpenick areas, serving businesses and stakeholders involved in urban development. The website is professionally designed using TYPO3 CMS, with good mobile optimization and accessibility features. It provides clear business information and contact details, including a physical address, phone number, and email. The presence of a LinkedIn profile adds to its credibility. Security posture is solid with HTTPS and no visible vulnerabilities, though some security best practices like security headers and cookie consent mechanisms are missing. Overall, the site is trustworthy and well-positioned within its sector.

V

Verband der Privaten Krankenversicherung e.V.

pkv.de

57

The Verband der Privaten Krankenversicherung e.V. is a prominent German association representing private health and nursing insurance providers and their insured members. The website serves as an information and advocacy platform, targeting private insured individuals, insurers, policymakers, and media. It offers news, policy positions, educational content, and links to subsidiary organizations. Technically, the site is built on TYPO3 CMS, uses Bootstrap for styling, and integrates Matomo for analytics, reflecting a moderate level of digital maturity. The presence of embedded YouTube videos and social media integration indicates active engagement with audiences. Security-wise, the site uses HTTPS and privacy-respecting analytics but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. Overall, the site is professional, trustworthy, and safe for general audiences, with a solid business credibility and moderate technical implementation.

D

Deutsche Krankenhausgesellschaft e. V.

dkgev.de

65

The Deutsche Krankenhausgesellschaft e. V. (DKG) is a prominent German hospital federation dedicated to representing hospital interests and influencing healthcare policy. The website serves as an information hub for healthcare professionals, policymakers, and the public, offering position papers, event information, and advocacy content. The organization operates as a non-profit entity with a strong market position in Germany's healthcare sector. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as jQuery and Slick Carousel for UI components. It implements GDPR-compliant cookie consent mechanisms and uses Matomo for analytics, indicating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site enforces HTTPS and employs cookie consent tools but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious content were detected. WHOIS data aligns with the organization's German identity, reinforcing legitimacy. Overall, the website is professional, secure, and compliant with privacy regulations, supporting the organization's mission effectively. Strategic improvements in security headers and transparency around security policies could further enhance trust and resilience.

T

talentsconnect

job-shop.com

66

talentsconnect is a German-based HR technology company specializing in software and consulting services that optimize recruiting and employee retention for medium to large enterprises. Their product suite includes innovative recruiting platforms like JobShop, retention tools such as Internal JobShop and Preboarding, and AI-driven conversational recruiting solutions. The company positions itself as a strategic partner helping HR teams transform from cost centers to profit centers through data-driven talent acquisition and retention strategies. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support.

I

Institut für ökologische Wirtschaftsforschung

ioew.de

48

The Institut für ökologische Wirtschaftsforschung (IÖW) is a leading German research institute specializing in sustainability and ecological economic research. It provides strategies and actionable insights for sustainable economic practices, targeting academics, policymakers, and civil society. The website reflects a mature digital presence with comprehensive content, including news, publications, and project information. The institute maintains a strong market position in sustainability research with a medium-sized organizational footprint. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries like jQuery and SlickNav for navigation, and uses Matomo for privacy-conscious analytics. Cookie consent mechanisms are implemented in compliance with GDPR, enhancing user privacy. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and session management cookies properly configured. However, explicit security headers and published security policies are absent, representing areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is minimal but consistent with the business, supporting legitimacy. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its audience effectively. Strategic enhancements in security transparency and contact information visibility could further strengthen trust and compliance.

W

WISTA Management GmbH

wista.de

59

WISTA Management GmbH is a landeseigene Wirtschaftsförderungsgesellschaft focused on business support, innovation promotion, and real estate management in Berlin and Brandenburg. The company operates technology parks and innovation centers, supports startups and established companies, and fosters cooperation between science and industry. Their market position is strong as a government-affiliated entity with multiple subsidiaries and partner sites. The website is built on TYPO3 CMS, hosted on manitu.net, and demonstrates good technical maturity with modern frameworks and accessibility features. Security posture is solid with HTTPS and basic security headers, though improvements are recommended in cookie consent and explicit security policies. Overall, the site is professional, trustworthy, and well-structured, targeting business and innovation stakeholders in the region.

I

ITSG GmbH

itsg.de

62

ITSG GmbH is a medium-sized German company specializing in the development and operation of innovative IT applications for digital communication in the healthcare and social sectors. The company targets healthcare organizations and social service providers, offering specialized IT solutions to enhance digital communication. The website reflects a professional and consistent brand image with good content quality and SEO optimization. Technically, the site is built on WordPress using modern plugins and frameworks, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks explicit security headers and detailed privacy policies. No critical vulnerabilities or suspicious WHOIS data were found, indicating a trustworthy domain registration. Overall, the website presents a credible and professional digital presence aligned with its business focus.

E

Employer-Branding-Suite

employer-branding-suite.com

40

Employer-Branding-Suite.com is a German-based small business specializing in comprehensive employer branding solutions targeted at companies seeking to attract and engage talent, particularly SMEs. Their offerings include career websites, recruiting videos, photo impressions, video interviews, and social media packages. The website is professionally designed, well-structured, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, it is built on WordPress with modern plugins and frameworks, ensuring a stable and maintainable infrastructure. Security posture is good with HTTPS, cookie consent, and spam protection via Google reCAPTCHA, though some security headers could be improved. Privacy compliance is strong with clear GDPR-aligned policies and cookie management. Overall, the site demonstrates high professionalism and trustworthiness with transparent business information and active customer engagement channels.

K

Kraftfahrt-Bundesamt

kba-online.de

62

The Kraftfahrt-Bundesamt (KBA) operates as a federal government authority in Germany, providing a range of online services related to vehicle registration, recall databases, driver points information, and other transport-related data management. The website serves a broad audience including citizens, businesses, and governmental bodies, positioning itself as the authoritative source for vehicle and traffic data in Germany. The business model is centered on public service delivery through digital platforms, enhancing accessibility and efficiency for users. Technically, the website employs modern frontend technologies such as Vue.js and Vuetify, ensuring a responsive and user-friendly interface optimized for mobile devices. The site demonstrates moderate performance and basic accessibility features, with room for improvement in SEO and security header implementation. Hosting and backend details are not explicitly disclosed but the use of official German name servers indicates a stable and secure infrastructure. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries in the frontend. However, it lacks visible security headers and does not provide explicit security policies or incident response contact information, which are areas for enhancement. Privacy compliance is generally good with a comprehensive privacy policy and GDPR adherence, though the absence of a cookie consent mechanism is a minor gap. Overall, the website is trustworthy, professionally maintained, and aligned with its governmental role. Strategic recommendations include implementing security headers, adding cookie consent, publishing security and incident response policies, and enhancing accessibility to further strengthen the security posture and user trust.

M

Ministerium für Wirtschaft, Arbeit und Tourismus Baden-Württemberg

gut-ausgebildet.de

57

gut-ausgebildet.de is an official educational and vocational training information portal supported by the Ministry of Economy, Labor and Tourism Baden-Württemberg. It serves as a comprehensive resource for students, trainees, parents, and educators in the Baden-Württemberg region, providing detailed information on apprenticeship opportunities, career guidance, and related initiatives such as Praktikumswoche and AzubiCardBW. The platform is well-positioned as a trusted government-backed source with strong partnerships across regional economic and labor organizations. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including Bootstrap and Matomo analytics for privacy-conscious user tracking. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience. The use of no-cookie YouTube embeds and a clear cookie consent mechanism reflects a commitment to privacy compliance. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data aligns with the website's official nature, showing consistent domain registration without privacy protection, supporting legitimacy. Overall, gut-ausgebildet.de presents a secure, professional, and trustworthy platform with excellent content quality and strong business credibility. Strategic improvements could include enhancing HTTP security headers and publishing explicit security and incident response policies to further strengthen security posture and user trust.

The website www.vr-media-online.de serves as a financial information portal primarily targeting customers of German cooperative banks under the DZ BANK group umbrella. It provides access to the Börsenkompass content, gated by a residency and customer verification form. The site is built on Adobe Experience Manager and integrates Usercentrics for cookie consent and Matomo for analytics, reflecting a moderate level of digital maturity. However, the content quality is basic, with minimal visible business information and no explicit privacy or terms of service pages on the analyzed page. Security posture is moderate, with consent-based tracking but lacking visible security headers or detailed policies. Overall, the site appears legitimate and consistent with DZ BANK branding but would benefit from enhanced transparency and security documentation.

G

GerroMed Pflege- und Medizintechnik GmbH Hamburg

gerromed.de

50

GerroMed Pflege- und Medizintechnik GmbH Hamburg is a specialized provider of patient care and medical technology products, focusing on patient positioning and decubitus prophylaxis. The company has recently integrated its operations into Arjo Deutschland GmbH, which now manages its rental business. The website clearly communicates this transition and provides resources such as user manuals and contact information for existing customers. The target audience primarily consists of healthcare professionals and institutions requiring specialized patient care equipment. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries such as jQuery and jQuery UI, and is hosted on a reputable provider (1&1 IONOS). The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses session cookies with CSRF protection, but lacks explicit security headers and published security policies. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, though terms of service and incident response information are absent. Overall, the website is trustworthy and professional, with room for improvement in security transparency and policy disclosures.

D

Deutsche Gesellschaft für Hämatologie und Medizinische Onkologie e.V.

onkopedia.com

65

Onkopedia is a well-established German-language medical guideline portal specializing in hematology and oncology. It serves healthcare professionals by providing up-to-date clinical guidelines, drug assessments, and educational webinars. The platform is affiliated with reputable medical societies in Germany, Austria, and Switzerland, reinforcing its credibility and market position as a leading oncology guideline resource in the German-speaking region. The business model is non-profit and focused on knowledge dissemination within the healthcare sector. Technically, the website is built on the Plone CMS, uses modern web technologies including HTML5, CSS3, JavaScript, and jQuery, and is hosted by Hetzner Online GmbH. The site is mobile optimized with good navigation and professional design, though accessibility features are basic. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and explicit incident response information. Privacy compliance is good with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a minor gap. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the site. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing security policies to improve compliance and trust.

FUBIC is a German innovation center focused on transforming a former hospital site into a technology quarter emphasizing life sciences, health economy, and ICT. The project is notable for pioneering an all-electric, 100% renewable energy supply system for the campus, supported by a consortium of universities, startups, and energy companies, funded by the German Federal Ministry for Economic Affairs and Climate Action. The website is well-designed, content-rich, and uses modern web technologies, providing comprehensive information about the project, news updates, and multimedia resources. Security posture is adequate with HTTPS usage but lacks visible security headers and cookie consent mechanisms. WHOIS data is unavailable, likely due to privacy protection, but the website's legitimacy is supported by its institutional affiliations and funding. Overall, the site presents a professional and trustworthy digital presence for a medium-sized research and innovation entity in the energy sector.

A

ARAG

karriere-bei-arag.de

52

The website karriere-bei-arag.de serves as a career portal for ARAG, a well-established insurance and legal services company based in Germany. It targets job seekers interested in opportunities within ARAG. The site uses modern frontend technologies such as Vue.js and Nuxt.js, with extensive use of custom web fonts to enhance visual appeal. However, the content quality is basic, focusing primarily on career information without extensive business or security disclosures. Security posture is moderate but lacks important elements such as security headers and privacy policies. No signs of WAF or content blocking were detected, allowing full content access. Overall, the site is functional but could benefit from enhanced privacy compliance and security best practices.

A

Deine Karriere im ARAG Vertrieb

arag-vertrieb.de

50

The website www.arag-vertrieb.de serves as a career portal for ARAG Vertrieb, likely a sales or distribution division of the ARAG insurance group. It targets job seekers interested in career opportunities within this sector. The site is built using modern web technologies such as Vue.js and Nuxt.js, with custom fonts hosted externally. However, the content quality is basic, focusing primarily on recruitment information without extensive business or security disclosures. From a technical perspective, the site demonstrates moderate performance and good mobile optimization but lacks comprehensive SEO and accessibility features. Security posture is weak due to the absence of security headers, privacy policies, and incident response contacts. No analytics or tracking technologies were detected, indicating minimal user tracking. The WHOIS data is limited, providing only domain status and name servers without registrant details, which restricts full legitimacy assessment. No privacy, cookie, or terms of service policies were found, and no contact information such as emails or phone numbers was identified in the provided content. Overall, the website is safe for general audiences but requires significant improvements in privacy compliance, security practices, and business transparency to enhance trust and professionalism.

D

Deutsche Gesellschaft für Hämatologie und Medizinische Onkologie e.V.

dgho.de

64

The Deutsche Gesellschaft für Hämatologie und Medizinische Onkologie e.V. (DGHO) is a well-established German professional medical society specializing in hematology and medical oncology. The organization provides comprehensive services including clinical guidelines via the Onkopedia portal, certification programs such as KoMedT, professional events, and member networking opportunities. Their website reflects a mature digital presence with a focus on healthcare professionals and researchers in Germany. The content is rich, professionally presented, and regularly updated with news and events relevant to their field. Social media integration and external partnerships further enhance their outreach and credibility. Technically, the website is built on the Plone CMS platform, utilizing standard web technologies like JavaScript and CSS. The site is mobile-optimized and accessible, with good SEO practices evident. However, there is room for improvement in security posture, particularly in implementing and displaying security headers such as CSP and HSTS. The site uses HTTPS but lacks visible cookie consent mechanisms, which could be enhanced to improve privacy compliance. From a security perspective, the site shows a moderate maturity level with secure login forms and HTTPS usage. No critical vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns well with the website's claims, indicating a legitimate and trustworthy domain registration. Incident response and explicit security policies are not prominently featured, suggesting an area for future enhancement. Overall, DGHO's website is a professional, trustworthy, and content-rich platform serving its niche audience effectively. Strategic improvements in security headers and privacy consent mechanisms would further strengthen its compliance and security posture.

E

Einkaufen in Weil am Rhein

einkaufen-in-weil.de

52

The website 'Einkaufen in Weil am Rhein' serves as a local shopping guide promoting small shops, boutiques, and local businesses in Weil am Rhein, Germany. It targets general consumers interested in local retail and services, providing an informational platform rather than direct e-commerce. The site is built using the Weblication® CMS, indicating a moderate level of technical infrastructure suitable for small business needs. The design is professional and mobile-optimized, with good accessibility and SEO practices observed. However, the site lacks critical privacy and cookie policies, contact information, and security headers, which are essential for compliance and trust. No advanced analytics or tracking mechanisms are detected, suggesting minimal user tracking. The domain registration is standard but lacks detailed registrant information, which slightly impacts trustworthiness. Overall, the site is functional and informative but requires improvements in privacy, security, and contact transparency to enhance credibility and compliance.

W

Wohnbau Weil

wohnbau-weil.de

47

Wohnbau Weil is a small local real estate company based in Germany, specializing in housing market services, senior living facilities, social management, and tenant support. Their website provides information about available apartments, senior housing, social engagement initiatives, and tenant communications. The site is primarily informational with basic navigation and content structure, targeting residents and tenants in the Weil am Rhein area. Technically, the website is built with basic HTML and CSS without modern CMS or frameworks detected. Hosting appears to be provided by netcup based on DNS nameservers. The site lacks advanced technical features such as mobile optimization, accessibility enhancements, or SEO best practices. No analytics or tracking technologies are present, indicating minimal user data collection. From a security perspective, the website does not show evidence of HTTPS enforcement or security headers, which lowers its security posture. There are no visible privacy or cookie policies beyond a basic imprint/privacy page, and no incident response or vulnerability disclosure information is provided. The WHOIS data is consistent with the website's business profile, indicating legitimacy. Overall, the website is functional for its purpose but would benefit from improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.

H

HC24 GmbH & Co. KG

hc24.de

55

HC24 GmbH & Co. KG operates an online platform specializing in furnished temporary housing rentals across Germany. The website offers a user-friendly search and booking experience for furnished apartments, rooms, and houses, targeting individuals seeking flexible living arrangements. The company positions itself as a trusted intermediary with verified listings and customer support. Technically, the website is built on modern frameworks such as Next.js and React, with media assets hosted on Amazon S3, ensuring a moderate to good performance and mobile optimization. Security-wise, the site enforces HTTPS and implements a comprehensive cookie consent mechanism, though lacks visible security headers and explicit security or privacy policy pages. Overall, the site is professional, trustworthy, and compliant with basic privacy regulations, but could improve transparency and security posture by publishing detailed policies and contact information.

L

Lofo-Gewerbepark

lofo-gewerbepark.de

41

Lofo-Gewerbepark is a commercial real estate provider specializing in offering industrial and production land and properties in Weil am Rhein, Germany, strategically located in the tri-border area of Germany, France, and Switzerland. The website presents a professional image with clear business focus on attracting handcraft and production companies seeking growth opportunities in a well-connected location. The technical infrastructure is based on the Weblication® CMS platform, with a moderate performance profile and good mobile and accessibility features. Security posture is moderate, with HTTPS likely enabled but lacking explicit security headers and detailed security policies. Privacy compliance is adequate with accessible privacy and cookie policies, though terms of service and incident response information are missing. Overall, the site is trustworthy and suitable for its business purpose but could improve in security and contact transparency.

S

Städte-Verlag E. v. Wagner & J. Mitterhuber GmbH

staedte-verlag.de

56

Städte-Verlag E. v. Wagner & J. Mitterhuber GmbH is a well-established media company specializing in cartographic advertising media such as city maps, brochures, online portals, and digital infoterminals. With over 70 years of market leadership in Germany and subsidiaries in neighboring countries, the company targets both end-users seeking orientation and businesses aiming to advertise in relevant local contexts. The business model centers on direct sales through a dedicated field sales team, supported by modern digital platforms and traditional print media. Technically, the website is built on TYPO3 CMS, integrates Google Tag Manager and Cookiebot for analytics and consent management, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent but lacks published security policies or incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR, though it could improve transparency around security and vulnerability disclosures.

E

Else Kröner-Fresenius-Stiftung

ekfs.de

54

Else Kröner-Fresenius-Stiftung (EKFS) is a well-established German non-profit foundation founded in 1983, dedicated to funding medical research and supporting humanitarian projects. The website clearly communicates the foundation's mission, funding opportunities, and recent news, targeting medical researchers and humanitarian stakeholders. The organization maintains a professional online presence with comprehensive content and clear navigation, supporting its credibility and outreach efforts. Technically, the website is built on Drupal 10, leveraging modern web technologies including Matomo for privacy-conscious analytics and AddToAny for social sharing. The site is mobile-optimized, accessible, and performs moderately well. Hosting appears stable with consistent domain and DNS configurations. From a security perspective, the site enforces HTTPS, implements cookie consent mechanisms aligned with GDPR, and respects user privacy by disabling tracking cookies unless consented. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit security policy documentation and incident response contacts, which are recommended for enhanced trust and compliance. Overall, EKFS demonstrates a strong digital maturity and trustworthy online presence suitable for its non-profit healthcare sector role. Strategic improvements in security transparency and formal policies would further strengthen its posture.

S

Stiftung Leben mit Krebs

stiftung-leben-mit-krebs.de

39

Stiftung Leben mit Krebs is a German non-profit organization dedicated to improving the quality of life for people affected by cancer. The foundation operates multiple funding and charity projects aimed at supporting cancer patients and raising awareness. Their website is professionally designed using WordPress and Elementor, hosted on Cloudpit, and includes comprehensive privacy and cookie policies with consent management, reflecting a strong commitment to GDPR compliance. Contact information and social media presence are clearly provided, enhancing accessibility and trust. Technically, the website employs modern web technologies and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies could be improved. No WAF or blocking mechanisms interfere with content accessibility. Overall, the website presents a trustworthy and professional image suitable for its healthcare and non-profit mission. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining up-to-date software to further strengthen security and compliance.

B

Bank für Kirche und Diakonie eG - KD-Bank

kd-bank.de

11

Bank für Kirche und Diakonie eG - KD-Bank is a specialized cooperative bank with a century-long tradition, focusing on ethical and sustainable financial services primarily for church and diaconal institutions as well as private customers. The bank offers a broad range of services including private banking, business accounts, sustainable investment funds, financing solutions, and a dedicated donations portal. Their market position is strong within their niche, emphasizing trust, sustainability, and community engagement. Technically, the website is built on modern frameworks such as Angular and integrates Adobe Experience Manager components, ensuring a responsive and accessible user experience. Security posture is robust with HTTPS enforcement, consent management, and no visible vulnerabilities, although explicit security headers should be confirmed. Overall, the site demonstrates high professionalism, good privacy compliance, and strong business credibility.

Deine Wege is a German-language website operated under the auspices of the Deutscher Verkehrssicherheitsrat (DVR), focusing on promoting safe mobility in corporate and public sectors. The platform offers a variety of services including prevention planning, consulting, seminars, safety trainings, campaigns, and a media/material portal. The website is well-branded with consistent use of logos from reputable German traffic safety and insurance organizations, indicating a strong market position within the transportation safety sector. The target audience primarily includes businesses and organizations interested in traffic safety and mobility management. Technically, the site is built on TYPO3 CMS and uses Matomo for analytics with privacy-conscious configurations such as disabled cookies and a clear cookie consent mechanism. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content.

M

mediaspects Beratungsgesellschaft für neue Medien mbH

mediaspects.com

47

Mediaspects Beratungsgesellschaft für neue Medien mbH is a German technology company specializing in software development, telemedicine, online competence, consulting, and OEM development services. Established in 2005, the company targets business clients seeking digital media and healthcare technology solutions. The website is built on TYPO3 CMS with Bootstrap and jQuery, reflecting a moderate level of digital maturity with basic mobile optimization and SEO practices. Security posture is adequate with HTTPS usage and no visible vulnerabilities, but lacks advanced security headers and cookie consent mechanisms. Privacy compliance is minimal with a basic privacy policy and no cookie banner. Overall, the website presents a professional image with clear contact information and consistent branding, but could improve in privacy and security transparency.