Germany security reports

S

Stadtwerke Bonn

swb-karriere.de

65

Stadtwerke Bonn operates as a regional public utility company in Germany, providing energy and transportation services. Their website, swb-karriere.de, serves as a comprehensive career portal targeting students, apprentices, professionals, and job seekers interested in joining the company. The portal offers detailed information on job openings, training programs, and employee testimonials, positioning the company as an attractive employer in the regional market. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries and a cookie consent framework to ensure GDPR compliance. The site is mobile-optimized, accessible, and professionally designed, reflecting a mature digital presence. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms, though it lacks explicit security headers and a public security policy or incident response contact. Overall, the website demonstrates a strong security posture with room for improvement in transparency and security best practices. The domain registration data aligns well with the company's business claims, supporting legitimacy and trustworthiness. Strategic recommendations include enhancing security headers, publishing a security policy, and providing clear incident response contacts to further strengthen trust and compliance.

C

Creative SHOPPING GmbH

creative-shopping.com

54

Creative SHOPPING GmbH is a German-based technology company specializing in premium advantage and cashback solutions, operating over 120 shopping portals including the well-known GETMORE cashback portal. The company targets businesses seeking to enhance customer and employee loyalty through white-label and custom SaaS platforms. Their market position is strong, supported by awards and a minority investment by ProSiebenSat.1 Media SE. Technically, the website employs modern web technologies, including Google Analytics with privacy features and reCAPTCHA for form security, reflecting a mature digital infrastructure. Security posture is good with HTTPS and form protections, though some security headers and explicit policies are missing. Overall, the website is professional, trustworthy, and compliant with GDPR, with clear contact information and privacy policies. No critical vulnerabilities or suspicious content were detected.

L

Leuchtenmarkt

leuchtenmarkt.de

49

Leuchtenmarkt is a well-established German e-commerce retailer specializing in LED lighting products including LED Einbaustrahler, sets, and accessories. With over 30 years of experience, it holds a strong market position as a trusted provider in the residential lighting sector. The website offers a professional shopping experience with detailed product information, customer reviews, and a modern digital infrastructure. Technically, the site is built on the Shopware platform, leveraging Google Analytics, Google Tag Manager, Matomo, and reCAPTCHA for analytics and security. The site is mobile-optimized and provides a good user experience with clear navigation and consistent branding. Security posture is solid with HTTPS and bot protection, though explicit security headers could be enhanced. Privacy compliance is robust with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is trustworthy and professionally managed, with no signs of blocking or suspicious activity.

K

KM-Werbemittel GmbH

laprinta.de

66

laprinta.de is a well-established German e-commerce website specializing in promotional products and advertising gifts, operated by KM-Werbemittel GmbH since 1988. The site offers a broad product range including office supplies, USB and tech gadgets, bags, food and beverages, sustainable items, sports and leisure products, seasonal goods, and more. It targets businesses and organizations seeking customized promotional merchandise, positioning itself as a trusted specialist with over 30 years of market presence. The website features professional design, clear navigation, and consistent branding, supporting a positive user experience.

TransPak AG is a well-established German packaging supplier with over 50 years of experience, serving business customers across Germany, Austria, and Switzerland. The company offers a broad range of over 40,000 packaging products and related services including logistics, eProcurement, and packaging machine support. Their market position is strong, supported by multiple physical locations and certifications such as ISO 9001 and 14001. Technically, the website is built on modern frameworks like Next.js and React, with good performance, mobile optimization, and SEO practices. Security posture is robust with HTTPS, security headers, and secure forms, though incident response details are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR and cookie regulations.

F

Famulus Verpackungen Horst GmbH

famulus.de

55

Famulus Verpackungen Horst GmbH is a well-established German company specializing in the production and sale of gift packaging and related products. With a history dating back to 1874 and over 150 years of family business experience, the company holds a leading market position in presentation cartons and packaging solutions, primarily serving B2B customers such as wine and sparkling wine producers and retailers. Their business model combines e-commerce with wholesale distribution, supported by a comprehensive product catalog and custom printing services. Technically, the website is built on the Shopware e-commerce platform, utilizing modern web technologies including jQuery and various Shopware plugins. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Hosting is provided by Timme Hosting, with secure HTTPS connections and no detected blocking mechanisms. From a security perspective, the site enforces HTTPS and uses CAPTCHA on forms, but lacks explicit security headers and published security or incident response policies. Privacy compliance is limited, with no visible privacy or cookie policies or consent mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, trustworthy, and functional, but could improve privacy compliance and security transparency to enhance user trust and regulatory adherence.

K

KabelScheune

kabelscheune.de

63

KabelScheune operates a professional e-commerce platform specializing in network technology, electrical materials, multimedia, and cable management products primarily targeting both private and business customers in Germany. The website demonstrates a solid market position as a specialized retailer with a comprehensive product catalog and clear navigation structure. Technically, the site is built on the OXID eShop CMS platform, employs modern web technologies including responsive design and SVG icons, and integrates analytics and consent management tools to comply with GDPR requirements. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies could be improved. Overall, the site is trustworthy and professionally maintained, with no signs of malicious activity or adult content.

S

SEFE Energy GmbH

sefe-energy.eu

59

SEFE Energy GmbH is a prominent European energy supplier specializing in delivering natural gas, hydrogen, and digital infrastructure solutions to industrial and municipal clients across Germany, Belgium, and the Netherlands. As part of the SEFE Group, owned by the German federal government, the company serves over 50,000 customers and emphasizes sustainability and energy transition through investments in clean energy and hydrogen ecosystems. The website reflects a mature digital presence with comprehensive product information, customer portals, and multilingual support. Technically, the site leverages modern web technologies including Umbraco CMS, Vue.js, and integrates analytics and marketing tools such as Google Tag Manager and Trustpilot widgets. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some enhancements in security headers and explicit incident response policies could improve resilience. Overall, SEFE Energy presents a trustworthy and professional online presence aligned with its market position as a leading energy provider in Europe.

C

Cimbergy

cimbergy.com

55

Cimbergy is a specialized service provider focused on wind and solar energy projects primarily in Schleswig-Holstein, Germany. The company offers tailored solutions including planning, implementation, and management of renewable energy parks. Their market position is regional with a clear focus on sustainable energy and citizen participation. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on TYPO3 CMS, uses modern JavaScript libraries, and integrates privacy-compliant analytics and marketing tools such as Matomo and Facebook Pixel. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS data raises some concerns about domain registration transparency, but the website itself appears legitimate and trustworthy. Overall, the site demonstrates a mature digital presence suitable for its business domain.

M

MITSUBISHI MOTORS

mitsubishi-motors.de

64

MITSUBISHI MOTORS Germany operates a professional website showcasing their automotive models, services, and offers with a focus on modern mobility including electric and plug-in hybrid vehicles. The site targets German automotive consumers and provides detailed navigation for models and services. The technical infrastructure is based on TYPO3 CMS with modern frontend technologies and includes comprehensive cookie consent and analytics integration. Security posture is good with HTTPS and cookie consent but lacks explicit security policies or vulnerability disclosures. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

E

e-mobil BW GmbH

emobil-sw.de

61

e-mobil BW GmbH operates the Cluster Elektromobilität Süd-West, a regional network focused on advancing electromobility and digitalization in the energy and transportation sectors. The cluster facilitates collaboration among companies, research institutions, and stakeholders to accelerate innovation and market development in Baden-Württemberg and surrounding regions. Their services include project coordination, working groups, internationalization support, and educational initiatives, positioning them as a key player in the regional electromobility ecosystem. Technically, the website is built on TYPO3 CMS with modern frontend technologies such as Bootstrap and Swiper.js, ensuring good mobile responsiveness and accessibility. The use of Matomo analytics reflects a privacy-conscious approach to user tracking. The site is well-structured, SEO-optimized, and provides a professional user experience with clear navigation and comprehensive content. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks explicit security policy documentation and incident response contact details, which are recommended for enhanced transparency and trust. No vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the business identity, supporting legitimacy. Overall, the website demonstrates a strong business credibility and technical maturity with minor areas for improvement in security transparency and contact information. The risk profile is low, and the site effectively supports the cluster's mission and stakeholder engagement.

A

Ambu

ambu.de

49

Ambu is a well-established company specializing in the development and manufacturing of innovative single-use medical devices for clinical and preclinical applications. Their product portfolio includes disposable endoscopes, ventilation bags, laryngeal masks, and electrodes for cardiology and neurology, targeting healthcare professionals and institutions. The website reflects a professional and consistent brand presence, with clear focus on healthcare industry needs. Technically, the site uses a modern CMS (Dynamicweb 9), integrates with multiple reputable third-party services for analytics and marketing, and employs a comprehensive cookie consent mechanism compliant with GDPR. Security posture is solid with HTTPS enforced and session management via secure cookies, although explicit security headers and incident response information are lacking. Overall, the site is trustworthy, well-structured, and compliant with privacy regulations, supporting Ambu's market position as a key player in disposable medical products.

B

Bodensee Energie

bodensee-energie.de

60

Bodensee Energie is a regional energy provider in Germany offering electricity and gas services with a focus on certified eco-friendly energy. The website targets residential and commercial customers in the Bodensee region, emphasizing competitive pricing and customer service excellence. The digital infrastructure includes modern web technologies such as jQuery, Google Tag Manager, and an advanced accessibility tool by digi·access GmbH, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The site demonstrates good privacy compliance with a comprehensive cookie policy and GDPR adherence. Overall, the website is professional, accessible, and trustworthy, supporting the company's market position as a reliable regional energy supplier.

U

United Kiosk AG

united-kiosk.de

56

United Kiosk AG operates a well-established German e-commerce platform specializing in digital and print magazine and newspaper subscriptions. With over 25 years in the market, it offers a vast catalog of more than 5,000 titles, serving a broad audience interested in diverse topics. The company emphasizes sustainability, fair practices, and trusted certifications, positioning itself as a reliable and culturally significant media provider in Germany. The website's design is professional, consistent, and optimized for mobile devices, providing an excellent user experience with clear navigation and relevant content.

M

MEDIMAX

medimax.de

71

MEDIMAX operates as a large-scale retail and e-commerce platform specializing in consumer electronics, household appliances, and entertainment electronics primarily targeting the German market. The website demonstrates a professional and comprehensive digital presence with extensive product categories and a user-friendly interface. The business is well-positioned in the retail sector with a strong focus on online shopping convenience and local store integration. Technically, the site employs modern JavaScript frameworks, Google Tag Manager, and various third-party marketing and analytics tools, reflecting a mature digital infrastructure. Security posture is robust with HTTPS enforcement, CSRF protection, and a detailed cookie consent mechanism, although explicit security headers could be enhanced. Privacy compliance is strong, with GDPR-aligned policies and consent management. Overall, the site is trustworthy, professionally maintained, and suitable for general consumers.

B

BauNetz Media

baunetz.de

68

BauNetz.de is a leading German architecture news portal providing daily updates, architect rankings, office profiles, interviews, competitions, and job listings targeted at architects and planners. The site holds a strong market position as the largest German architecture portal with international coverage. Technically, the website is built on the InterRed CMS platform, utilizing a mix of modern and legacy technologies including jQuery, RequireJS, and various marketing and analytics tools such as Hotjar and Google Tag Manager. The site demonstrates good GDPR compliance with a comprehensive cookie consent mechanism and privacy policy. Security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements are recommended in security headers and updating legacy libraries. Overall, the website is professional, well-branded, and trustworthy, with a moderate to good technical performance and user experience.

H

Help – Hilfe zur Selbsthilfe e. V.

help-ev.de

51

Help – Hilfe zur Selbsthilfe e.V. is a well-established German non-profit humanitarian organization founded in 1981, dedicated to providing emergency aid and sustainable development support worldwide. The organization focuses on empowering people through self-help initiatives and immediate relief in crisis regions such as Ukraine, Gaza, Afghanistan, and others. It maintains a strong market position supported by recognized certifications and memberships in reputable aid coalitions. The website reflects a professional and trustworthy image with comprehensive content and clear calls to action for donations and support. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries like Swiper.js and Usercentrics for consent management. It is hosted on servers indicated by the domain's nameservers, with good mobile optimization and SEO practices. The site uses HTTPS and Google Tag Manager for analytics, with a privacy-first approach evident in cookie consent mechanisms. From a security perspective, the site enforces HTTPS and uses consent management but lacks explicit security policy pages or vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the organization's identity, showing a consistent and legitimate domain registration. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic improvements could include publishing a dedicated security policy, incident response contacts, and a vulnerability disclosure framework to enhance transparency and trust further.

Q

Qwellcode GmbH

qwellcode.de

10

Qwellcode GmbH is a German software development company specializing in custom software solutions for industry and small to medium-sized enterprises (KMUs). Established since 2013, the company offers a broad range of services including web development, e-commerce, mobile applications, virtual reality, and blockchain technologies. Their market position is that of an experienced, innovative agency with international reach and a focus on modern technologies. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the site is built on OctoberCMS with modern frontend technologies and is hosted behind Cloudflare DNS, ensuring good performance and security. The site is mobile optimized and SEO friendly, although accessibility features are basic. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and publicly available security policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

B

Bitburger Braugruppe GmbH

dasgastroportal.de

73

DasGastroPortal is a professional B2B service portal operated by Bitburger Braugruppe GmbH, targeting both aspiring and experienced gastronomy professionals in Germany. The portal offers a comprehensive suite of services including a B2B shop for promotional materials, educational resources, partnership programs, and a marketplace for gastronomy properties. The website is well-branded, consistent, and designed to support the hospitality industry with a focus on alcohol-related products and services. Technically, the site is built on TYPO3 CMS with modern web technologies, optimized for mobile and SEO, and integrates privacy and cookie consent mechanisms. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. The site complies with GDPR and provides clear contact information but lacks explicit public security policies or incident response details. Overall, the site is trustworthy, professional, and mature audience appropriate due to alcohol content.

B

Bitburger Braugruppe

bitburger-braugruppe.de

51

Bitburger Braugruppe is a well-established German brewing group specializing in the production and distribution of alcoholic beverages, primarily beer. The company targets adult consumers and business partners, emphasizing responsible alcohol consumption and compliance with legal age restrictions. The website reflects a professional and consistent brand image, with clear navigation and relevant content for its audience. Technically, the site is built on TYPO3 CMS and employs OneTrust for GDPR-compliant cookie consent management. Hosting appears to be managed by a reputable provider, Deutsche Telekom, based on nameserver data. Security posture is solid with HTTPS enforced and age verification implemented, though some security headers could be improved. Privacy policies are comprehensive and GDPR compliant, but no explicit terms of service or security policies were found. Overall, the website demonstrates a mature digital presence with good business credibility and moderate technical sophistication.

S

Stadtwerke Bonn

bewerbung-fahrdienst-swb.de

59

The website bewerbung-fahrdienst-swb.de serves as a recruitment portal for SWB Bus und Bahn, a subsidiary of Stadtwerke Bonn, focusing on hiring bus and tram drivers in the Bonn region. The company operates a large public transportation network with extensive services and a significant workforce. The site provides detailed information about the business, job requirements, and links to application portals, reflecting a well-established municipal transport operator. Technically, the site uses standard web technologies with external font hosting and JavaScript for UI and cookie management. The site is mobile-optimized and presents a professional user experience with clear navigation and consistent branding. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and published security policies. No vulnerabilities or tracking scripts were detected in the provided content. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy entity. Strategic improvements could focus on enhancing security headers, publishing incident response information, and adding vulnerability disclosure mechanisms.

S

SWB Konzern - Stadtwerke-Bonn

swb-konzern.de

65

SWB Konzern - Stadtwerke-Bonn is a large regional utility and transportation company serving Bonn, Germany, providing essential services such as electricity, natural gas, water, district heating, and public transport. The company emphasizes sustainability and climate neutrality, reflected in its projects and communications. The website is built on TYPO3 CMS and integrates modern technologies like Google Tag Manager and reCAPTCHA, indicating a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though formal security policies and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

S

Stadtwerke Bonn

stadtwerke-bonn.de

67

Stadtwerke Bonn (SWB) is a large regional utility provider based in Germany, offering a comprehensive range of services including energy supply (electricity and gas), water, public transportation, waste management, and district heating. The company positions itself as a top local supplier with a strong commitment to sustainability and climate protection, targeting a broad audience including residential customers and families. Their business model integrates multiple utility and mobility services under the SWB brand, supported by several related domains and subsidiaries. Technically, the website is built on the TYPO3 CMS platform, employs modern web technologies such as JavaScript and Owl Carousel, and is hosted on reputable German infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with a good user experience and professional design. Security-wise, the site enforces HTTPS, implements cookie consent mechanisms, and avoids exposing sensitive data. However, it lacks publicly visible security policies and incident response contacts, which could be improved. Overall, the website demonstrates a mature digital presence with strong privacy compliance and trustworthy business credibility.

G

Göttingen Tourismus

goettingen-marketing.de

69

Göttingen Tourismus operates a comprehensive and professionally designed official tourism website for the city of Göttingen, Germany. The site provides extensive information on local attractions, events, accommodations, and cultural offerings, targeting tourists, families, and business visitors. The business model focuses on destination marketing and visitor engagement through digital content, event promotion, and booking facilitation. The website demonstrates strong branding consistency and trust indicators, including social media integration and structured data usage. Technically, the site is built on WordPress with modern plugins such as Yoast SEO, Oxygen Builder, and Usercentrics for cookie consent management. It employs various third-party services for analytics (etracker), booking (Regiondo), and email marketing (Sendinblue). The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate and could benefit from further optimization. From a security perspective, the website enforces HTTPS and uses cookie consent mechanisms aligned with GDPR. While no critical vulnerabilities or exposed sensitive data were detected, the site lacks explicit security headers and a published security policy or incident response contact. The WHOIS data is consistent with the website's official nature, showing no suspicious patterns or privacy protection that would raise concerns. Overall, Göttingen Tourismus presents a low-risk, trustworthy online presence with good privacy compliance and a solid technical foundation. Strategic improvements in security headers and incident response transparency could further enhance its security posture.

B

Brinkhaus / Ferchow

bf-net.de

53

Brinkhaus / Ferchow is a small creative agency specializing in web design, advertising, and online marketing services primarily targeting clients in Oldenburg, Rastede, and surrounding regions in Germany. The website is built on WordPress using Elementor and jQuery, reflecting a moderate level of technical maturity with good mobile optimization and a professional design. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal policies such as privacy or cookie policies. No incident response or vulnerability disclosure mechanisms are evident. Overall, the website presents a professional image but could improve compliance and security transparency.

L

Landeshauptstadt Mainz

mainz.de

68

Landeshauptstadt Mainz operates an official municipal government website providing comprehensive information and services related to city administration, politics, tourism, culture, and public events. The site targets residents, tourists, and businesses, offering multilingual support and various online services. The technical infrastructure is based on the Sitepark Information Enterprise Server CMS, utilizing modern JavaScript libraries such as jQuery and Modernizr, with Matomo analytics integrated for user tracking under GDPR-compliant consent mechanisms. Accessibility and mobile optimization are well implemented, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response contacts are not evident. The WHOIS data aligns with the official city domain, confirming legitimacy and trustworthiness. Overall, the website demonstrates high professionalism, good security hygiene, and strong compliance with privacy regulations.

C

Campana & Schott

campana-schott.com

59

Campana & Schott is a large international management and technology consulting firm headquartered in Germany, with over 600 employees across Europe and the USA. The company specializes in digital transformation, project and change management, Microsoft technologies, and IT strategy consulting. Their website reflects a mature digital presence with professional design, clear navigation, and comprehensive service descriptions targeting business clients undergoing significant organizational and technological changes. Technically, the site is built on TYPO3 CMS, uses modern web technologies, and integrates consent management via Usercentrics, indicating attention to privacy compliance. Security posture is good with HTTPS and consent mechanisms, though explicit security headers could be improved. The absence of WHOIS data is a notable anomaly, reducing trust slightly, but the overall professional presentation and market position support legitimacy. No adult or questionable content is present, and the site is fully accessible without WAF blocking.

S

Stadtverwaltung Eschborn

eschborn.de

55

The website www.eschborn.de serves as the official municipal portal for the city administration of Eschborn, Germany. It provides a comprehensive range of online services and information targeted at citizens, businesses, and visitors. The site is well-branded and includes extensive accessibility features to support diverse user needs. The content is primarily in German with multi-language support available through an integrated accessibility tool. The business model is focused on public service delivery and community engagement, positioning the city government as a trusted local authority. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and employs modern web technologies including Bootstrap and jQuery. Analytics are managed via Matomo and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some performance optimizations could be considered. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns with the official nature of the site, showing consistent domain registration and hosting. Overall, the website presents a professional and trustworthy digital presence for the Eschborn city administration. Strategic improvements in privacy policy publication, security header implementation, and incident response transparency would enhance compliance and security posture further.

I

IHK Frankfurt am Main

startup-pilot.online

74

IHK Frankfurt am Main operates as a regional chamber of commerce and industry, providing a comprehensive platform called Startup-Pilot FrankfurtRheinMain that aggregates over 300 regional support offerings for startups. These include networking opportunities, financing, talent activation, accelerator programs, incubators, and competitions, targeting startups and innovation-driven enterprises in the FrankfurtRheinMain region. The website serves as a key resource for startups, investors, and academic institutions, positioning IHK Frankfurt am Main as a central facilitator in the regional startup ecosystem. Technically, the website is built on the CoreMedia CMS platform, utilizing modern web technologies including JavaScript, CSS, and HTML5. It integrates third-party services such as eTracker for analytics, Userlike for chat support, and CCM19 for cookie consent management, reflecting a mature digital infrastructure. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience across devices. From a security perspective, the site enforces HTTPS, employs cookie consent mechanisms with granular user control, and uses secure forms with CSRF tokens. While explicit security policies and incident response information are not published, no vulnerabilities or exposed sensitive data were detected. The domain and WHOIS data align with the official branding and regional chamber identity, supporting legitimacy and trustworthiness. Overall, the website presents a professional, secure, and privacy-compliant digital presence that effectively supports its business mission. Strategic improvements could include publishing detailed security policies, incident response contacts, and vulnerability disclosure information to enhance transparency and trust further.

Hofheimer Wohnungsbau GmbH (HWB) is a regional real estate company focused on socially responsible housing and city development in Hofheim am Taunus, Germany. The company offers a broad range of services including residential construction, social management, property management, and community engagement. Their market position is that of a trusted local housing provider with a strong emphasis on social responsibility and sustainability, supported by published annual and sustainability reports. Technically, the website employs a moderate technology stack with jQuery and several UI libraries, delivering a well-structured, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in security headers and updating legacy libraries. Privacy compliance is partially met with a privacy policy and cookie policy present, but lacks an active cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with the business's mission and audience.

S

Spezial Tourenwagen Trophy

spezial-tourenwagen-trophy.de

55

Spezial Tourenwagen Trophy (STT) is a well-established German motorsport racing series founded in 1986, catering to both professional and amateur racing drivers. The website serves as a central hub for news, event schedules, race results, and media galleries related to the racing series. It maintains a professional and consistent brand presence with a focus on delivering relevant content to motorsport enthusiasts. Technically, the site employs modern web technologies including HTTPS, JavaScript, and cookie consent management tools, hosted on resellerinterface.de infrastructure. The site demonstrates good digital maturity with moderate performance and mobile optimization. Security-wise, the website enforces HTTPS and includes a comprehensive cookie consent mechanism, but lacks some advanced security headers and formal security policies. Privacy compliance is strong with GDPR-aligned cookie management and a detailed privacy policy. Overall, the site is trustworthy, professionally maintained, and serves its niche audience effectively.

H

Hochschule der Bildenden Künste Saar

hbksaar.de

50

The Hochschule der Bildenden Künste Saar (HBKsaar) is a public higher education institution specializing in fine arts and design, located in Saarbrücken, Germany. The website serves as a comprehensive portal for prospective and current students, offering detailed information on academic programs, student services, events, and institutional news. The institution holds a solid regional position as an art university with a medium-sized footprint and a history dating back to 1970. Technically, the website is built on the Contao Open Source CMS platform, utilizing a range of front-end libraries including Bootstrap 3 and jQuery 1.11.2. While the site is generally well-structured, mobile-optimized, and accessible, some outdated libraries pose potential security risks. The hosting infrastructure appears to be university-affiliated, with nameservers linked to the German Research Network and Saarland University. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and uses an outdated jQuery version, which could expose it to vulnerabilities. No dedicated security or incident response policies are publicly available. Privacy compliance is strong, with a clear privacy policy and cookie management in place. Overall, the website is professional, trustworthy, and serves its educational mission effectively. Strategic improvements in updating third-party libraries and enhancing security headers would further strengthen its security posture and compliance.

C

COREhub, S.R.L.

shop4runners.com

10

Shop4Runners is a German-language e-commerce retailer specializing in running shoes, clothing, and accessories. Established in 2011 and operated by COREhub, S.R.L., the website targets runners and sports enthusiasts primarily in German-speaking countries. The business model focuses on online retail with a curated selection of top brands and customer support services. The website demonstrates a professional design with clear navigation and mobile optimization, supporting a positive user experience. Technically, the site leverages Magento as its e-commerce platform with a modern frontend (Hyvä Themes), integrates marketing and analytics tools such as Google Tag Manager and SalesManago, and uses Cloudflare for DNS and likely CDN services. Security posture is adequate with HTTPS enforced and domain status protections, but lacks DNSSEC and visible security headers. Privacy compliance is limited due to absence of privacy and cookie policies and no cookie consent mechanism. Overall, the site is trustworthy and well-established but would benefit from enhanced privacy and security disclosures.

K

Knipp Medien und Kommunikation GmbH

shop4runners.eu

71

Shop4Runners.eu is a specialized e-commerce retailer focused on running shoes and apparel, offering products from well-known brands such as Asics, Adidas, and New Balance. The website targets runners and sports enthusiasts primarily in Germany and surrounding regions, providing services like free shipping and a 30-day return policy. The business is operated by Knipp Medien und Kommunikation GmbH, which is consistent with the domain registration data, indicating a legitimate and established entity. Technically, the website is built on Magento CMS with a modern frontend stack including JavaScript libraries and marketing tools such as Google Tag Manager and SalesManago. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Consent management for cookies is implemented, reflecting awareness of privacy regulations. From a security perspective, the site uses HTTPS with good SSL configuration and employs cookie consent mechanisms. However, it lacks visible security headers and does not publicly disclose security policies or incident response contacts, which are areas for improvement. No vulnerabilities or suspicious activities were detected in the provided content. Overall, Shop4Runners.eu presents a trustworthy and professional online retail platform with moderate to good technical maturity and privacy compliance. Strategic enhancements in security transparency and policy disclosures would further strengthen its security posture and customer trust.

B

Behinderten- und Rehabilitationssportverband Nordrhein-Westfalen e.V.

brsnw.de

53

Behinderten- und Rehabilitationssportverband Nordrhein-Westfalen e.V. (BRSNW) is a non-profit organization dedicated to enabling people with disabilities to participate in sports activities within the North Rhine-Westphalia region of Germany. The website serves as a comprehensive portal offering information about rehabilitation sports, inclusive sports programs, training, and support services for sports clubs and individuals. It holds a strong regional market position as a leading association in its sector. Technically, the website is built on the TYPO3 CMS platform, employs privacy-friendly Matomo analytics, and integrates a cookie consent mechanism compliant with GDPR. The site is well-structured, mobile-optimized, and accessible, reflecting a mature digital infrastructure. Security-wise, the site uses HTTPS and session management cookies but lacks explicit security headers and a published security policy or incident response contacts. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with room for improvement in security transparency and incident response readiness.

D

D.SPORTS

d-sports.de

50

D.SPORTS is a German sports-related website powered by TYPO3 CMS, targeting a general audience interested in sports activities or services. The website employs modern technologies such as Google Tag Manager for analytics and Usercentrics for cookie consent management, indicating a moderate level of digital maturity. However, the absence of explicit privacy policies, terms of service, and clear contact information suggests room for improvement in compliance and user trust. The security posture is adequate with HTTPS enabled and no detected blocking mechanisms, but lacks comprehensive security headers and incident response details. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices to improve trust and compliance.

The website dafuer-sein-ist-alles.de is operated by the Deutscher Olympischer Sportbund e.V. (DOSB), the German Olympic Sports Confederation, serving as a platform to promote and inform about Germany's bid for the Olympic and Paralympic Games. It targets the German public and stakeholders interested in the Olympic movement, providing detailed information on bidding concepts from major German cities and regions, interactive tools, and news updates. The site enjoys strong government backing, evident from the partnership with the German Federal Ministry of the Interior and official logos displayed. Technically, the website employs modern web technologies including ES modules, Alpine.js for interactivity, and Vite for bundling. It integrates consent management via Consentmanager.net, analytics through Matomo, and uses Google reCAPTCHA for form security. The site is well-optimized for mobile devices, fast loading, and accessible, with good SEO practices and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS, uses reCAPTCHA to protect forms, and manages cookie consent properly. While explicit security headers like X-Content-Type-Options and X-Frame-Options are not visible in the HTML, the overall security posture is strong with no exposed sensitive data or vulnerable libraries detected. Privacy compliance is robust, with a comprehensive privacy policy and cookie consent mechanism in place. Overall, the website presents a professional, trustworthy, and secure platform aligned with its governmental and non-profit nature. It effectively balances user engagement, privacy, and security, making it a reliable source for information on Germany's Olympic bid.

L

Lumosa GmbH

sportplatzbeleuchtung.de

55

Lumosa GmbH is a specialized manufacturer and service provider of LED floodlighting solutions for sports facilities, including football, tennis, hockey, and equestrian sports. The company positions itself as a leading player in the European market with a strong focus on energy efficiency and innovative lighting technology. Their website reflects a professional and well-structured digital presence, leveraging WordPress CMS and modern web technologies to deliver a responsive and user-friendly experience. Privacy and cookie policies are well implemented with consent mechanisms, indicating good compliance with GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Overall, the domain and website content are consistent and trustworthy, supporting Lumosa's market position as a reputable business in the energy-efficient sports lighting sector.

A

Auto Centrum Lass GmbH

autocentrum-lass.de

67

Auto Centrum Lass GmbH is a medium-sized regional automobile dealership specializing in Toyota vehicles, serving customers primarily in Schleswig-Holstein, Germany. The company offers a comprehensive range of services including new and used car sales, financing options, vehicle servicing, test drives, and electric mobility solutions. Their market position is that of a trusted Toyota partner with a strong local presence. The website reflects a professional and consistent brand image with good content quality and clear navigation tailored to car buyers and service customers. Technically, the site is built on WordPress with Elementor and leverages modern web technologies such as Alpine.js and Swiper.js, hosted on INWX infrastructure. The site is mobile-optimized and implements structured data for SEO benefits. Security-wise, the website enforces HTTPS, uses security headers, and provides a cookie consent mechanism compliant with GDPR. However, it lacks explicit security policy and incident response information, which could be improved. Overall, the domain registration data aligns well with the website content, supporting the legitimacy of the business.

Müllverbrennung Kiel GmbH & Co. KG (MVK) operates a highly efficient and environmentally friendly waste-to-energy facility in Kiel, Germany, processing approximately 140,000 tons of household and commercial waste annually. The company serves around 500,000 residents and employs about 70 staff members. Ownership is split between the City of Kiel (51%) and REMONDIS GmbH (49%), positioning MVK as a key regional player in waste management and energy recovery. The website reflects a professional and consistent brand image with clear business information and contact details. Technically, the site is built on the Contao CMS platform, utilizing common JavaScript libraries and a cookie consent mechanism compliant with GDPR requirements. Analytics are handled via Matomo, ensuring privacy-conscious tracking.

M

MULTA MEDIO AG

lotto-sh.de

66

LOTTO Schleswig-Holstein operates as the official regional lottery provider for Schleswig-Holstein, Germany, offering a comprehensive portfolio of lottery games including LOTTO 6aus49, Eurojackpot, GlücksSpirale, BINGO!, KENO, Rubbellose, and TOTO. The website facilitates online ticket purchases, subscription services, and jackpot tracking, targeting adult lottery players within the region. The platform is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, the site employs modern JavaScript frameworks, consent management via Usercentrics, and analytics through Etracker, hosted likely on Telekom infrastructure, ensuring reliable performance and compliance with data protection regulations. Security posture is solid with HTTPS enforcement, CAPTCHA integration, and ISO 27001 certification, though some security headers could be enhanced. Overall, the site demonstrates a mature digital presence aligned with legal and regulatory requirements for gambling services in Germany.

R

REMONDIS Entsorgung

remondis-entsorgung.de

67

REMONDIS Entsorgung operates as a leading enterprise in the waste management and environmental services sector in Germany. The company offers a broad range of services including waste disposal, management, sorting, transport, and recycling solutions tailored for businesses. Their market position is strong, supported by a professional website that clearly communicates their services and target audience. The website is built on TYPO3 CMS and integrates modern consent management tools such as Cookiebot, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and standard security headers, although explicit security policies and incident response information are not publicly available. Overall, the website demonstrates good compliance with privacy regulations, including GDPR, through comprehensive cookie consent mechanisms. The risk profile is low, with no critical vulnerabilities or suspicious indicators detected. Strategic recommendations include publishing detailed security and incident response policies, implementing a vulnerability disclosure program, and enhancing accessibility features to further improve compliance and user trust.

Schleswig-Holstein Netz GmbH operates as a regional energy network operator serving Schleswig-Holstein and parts of Nordniedersachsen in Germany. The company provides essential services including electricity and gas network connections, energy feed-in, and customer support portals. The website is professionally designed, well-structured, and targets both residential and commercial customers in the energy sector. The presence of multiple customer portals and detailed service information indicates a mature digital presence. Technically, the site leverages modern JavaScript frameworks like React, integrates consent management via Usercentrics, and uses analytics tools such as Matomo and Google Tag Manager, reflecting a good level of digital maturity. Security posture is strong with HTTPS enforced, consent mechanisms in place, and no obvious vulnerabilities detected. However, the absence of publicly available WHOIS registration data for the domain www.sh-netz.com raises concerns about domain legitimacy and ownership transparency. This discrepancy should be addressed to improve trust. Overall, the site is a reliable and professional resource for energy network customers but would benefit from clearer domain registration information and enhanced security policy disclosures.

P

Provinzial Versicherung Aktiengesellschaft

provinzial.de

55

Provinzial Versicherung Aktiengesellschaft operates as a regional insurance provider in Germany, offering services focused on property protection, securing existence, and future planning. The website targets a general audience seeking insurance consultation and services within their region. The company positions itself as a trusted, established player in the finance and insurance sector with a clear regional focus. The website content is professionally presented with good branding consistency and accessibility features, including multiple accessibility profiles to support users with disabilities.

S

Sparkassen- und Giroverband für Schleswig-Holstein

sgvsh.de

51

The Sparkassen- und Giroverband für Schleswig-Holstein is a regional umbrella association serving the savings banks in Schleswig-Holstein, Germany. It acts as a partner, service provider, and representative body offering career services, sustainability initiatives, legal and personnel support, and financial information. The website reflects a professional and consistent brand presence targeting regional financial institutions and the general public interested in savings banks. Technically, the site is built on TYPO3 CMS with a modern responsive design, good accessibility, and moderate performance. Security posture is adequate with HTTPS enforced and secure forms, but lacks visible security headers and published security policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and well-maintained but could improve in security transparency and privacy compliance.

H

Hamburger Sportjugend

hamburger-sportjugend.de

44

Hamburger Sportjugend is a well-established non-profit organization dedicated to youth sports in Hamburg, representing over 220,000 athletes. The website provides comprehensive information about their services including education, voluntary services, funding, and prevention of sexualized violence. Their market position is strong within the Hamburg sports community, supported by partnerships and a clear digital presence. Technically, the website is built on WordPress with Elementor, offering good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms in place, though there is room to improve by publishing explicit security policies and incident response information. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

K

KERN CHERKEH Rechtsanwälte Partnerschaft mbB

kern-cherkeh.de

55

KERN CHERKEH Rechtsanwälte Partnerschaft mbB is a specialized law firm based in Hannover, Germany, offering expert legal services primarily in labor law, sports law, banking and capital markets law, and compliance. The firm positions itself as a top legal service provider with nationwide reach, emphasizing high-quality, practice-oriented legal advice and representation. Their recognition as a top law firm in sports law by WirtschaftsWoche underscores their market credibility and expertise. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript with the Swiper.js library for interactive elements. The site is mobile-optimized and presents content clearly, though some advanced accessibility features are basic. Security-wise, the site uses HTTPS but lacks visible security headers and explicit security policies, which suggests room for improvement in hardening the security posture. Privacy compliance is partially addressed with a privacy policy present, but no cookie consent mechanism was detected. Overall, the website is professional and trustworthy, with clear contact information and relevant content for its target audience.

S

Staatskanzlei des Landes Nordrhein-Westfalen

sportland.nrw

67

Sportland.NRW is an official government platform operated by the Staatskanzlei des Landes Nordrhein-Westfalen, dedicated to promoting sports activities, events, and funding opportunities within the North Rhine-Westphalia region. The website serves a broad audience including sports fans, athletes, clubs, and event organizers, providing comprehensive information about sports in the region, upcoming events, and government initiatives. The platform maintains a strong market position as the authoritative source for sports-related information in NRW, supported by consistent branding and official government endorsements. Technically, the website is built on Drupal 10 CMS, leveraging modern frontend technologies such as Font Awesome 6 and Bootstrap components. It integrates Matomo for privacy-conscious analytics and implements a robust cookie consent mechanism compliant with GDPR. The site is mobile-optimized and accessible, with good SEO practices and clear navigation, contributing to an excellent user experience. From a security perspective, the site enforces HTTPS and employs cookie consent controls to manage tracking. While DNSSEC is not enabled, the domain registration is consistent and transparent, with no suspicious patterns detected. No critical vulnerabilities or exposed sensitive data were found in the content. However, additional security headers and a vulnerability disclosure policy could enhance the security posture. Overall, Sportland.NRW presents a trustworthy, professional, and well-maintained digital presence for government sports promotion. The risk profile is low, with strong compliance to privacy regulations and good technical implementation. Strategic recommendations include enabling DNSSEC, adding security headers, and publishing a security.txt file to further improve security and transparency.

A

ASS-Einrichtungssysteme GmbH

ass.de

64

ASS-Einrichtungssysteme GmbH is a German family-owned manufacturer specializing in ergonomic and modern school furniture and learning environments. The company has a strong market position in the education sector, offering a wide range of products including chairs, tables, storage solutions, and digital learning accessories such as the FLEXCHARGE® system. The website reflects a medium-sized enterprise with a focus on quality and ergonomic design, targeting educational institutions and schools primarily in Germany. Technically, the website is built on a modern stack with Pimcore CMS, uses Cloudflare DNS, and is hosted by Hetzner Online GmbH. It features responsive design and good SEO practices, although some accessibility features could be improved. Security posture is solid with HTTPS and cookie consent mechanisms in place, but lacks explicit security headers and public security policies. Overall, the site is professional, trustworthy, and safe for general audiences.

R

Rheinischer Sparkassen- und Giroverband

rsgv.de

48

The Rheinischer Sparkassen- und Giroverband (RSGV) is a regional financial association based in Düsseldorf, Germany, representing 27 Sparkassen in the Rheinland region. It provides advisory services and represents the interests of its member savings banks, aligning with the Deutscher Sparkassen- und Giroverband. The website reflects a professional and consistent brand image, targeting financial institutions and the public. The business model focuses on regional financial collaboration and policy coordination. Technically, the site is built on TYPO3 CMS, uses Matomo for analytics, and implements a cookie consent mechanism compliant with GDPR. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is solid with HTTPS enforced and no exposed sensitive data, though explicit security policies and incident response contacts are absent. WHOIS data confirms domain legitimacy and consistency with the organization's claims. Overall, the site is trustworthy and well-maintained, supporting the organization's credibility and digital presence.