Germany security reports

E

EVH GmbH & Co. KG

evholz.de

50

EVH GmbH & Co. KG operates as a purchasing alliance for wood dealers in Germany, established in 2012 and part of the hagebau group. The company focuses on optimizing purchasing conditions and supporting its members through a network of over 50 sales locations and more than 100 supplier relationships. The website reflects a professional business presence targeting wood dealers and suppliers, emphasizing collaboration and market strength. Technically, the website is built on the Contao CMS platform, utilizing jQuery and Rocksolid Slider for interactive elements. It is hosted with INWX and uses HTTPS with proper session and CSRF protections. The site is mobile-optimized with basic accessibility and SEO features, though some security headers could be improved. From a security perspective, the site enforces HTTPS and includes a GDPR-compliant cookie consent mechanism. However, explicit security policies and incident response contacts are not present. No vulnerabilities or suspicious elements were detected. WHOIS data aligns well with the business information, supporting domain legitimacy. Overall, the website presents a trustworthy and professional image with good privacy compliance and moderate technical sophistication. Recommendations include enhancing security headers, adding explicit security policies, and expanding analytics and marketing transparency for improved digital maturity.

L

Ludwig & Co

ludwig-holz.de

52

Ludwig & Co is a well-established German company specializing in the import and trade of wood products, particularly for construction and packaging. With over 100 years of experience, the company positions itself as a leading expert in the wood industry, offering a range of products including Sperrholz/LUCOply, Nadelschnittholz, and Sibirische Lärche. The website reflects a professional and consistent brand image, emphasizing sustainability certifications such as FSC® and PEFC. Technically, the site is built on Joomla CMS with modern UIkit framework and includes GDPR-compliant cookie consent mechanisms. Security practices include HTTPS enforcement and email obfuscation, though some HTTP security headers are not explicitly detected. Contact information is comprehensive, listing multiple experts with direct phone and email contacts. No social media or analytics tracking is evident, indicating a privacy-conscious approach.

H

Holz-Tusche GmbH & Co. KG

holztusche.de

58

Holz-Tusche GmbH & Co. KG is a medium-sized, established family business in Germany specializing in high-quality wood-based materials and innovative services for the construction and manufacturing sectors. The company operates a professional e-commerce platform built on Shopware 6, offering a wide range of wood products including panels, doors, and construction timber. Their market position is supported by partnerships with reputable suppliers such as Egger, Finsa, and Resopal. Technically, the website employs modern JavaScript libraries, integrates advanced search via Fact Finder, and uses analytics tools like Google Tag Manager and PostHog, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and error monitoring via Sentry, though additional security headers and explicit policies could enhance compliance and trust. Overall, the site is well-structured, mobile-optimized, and trustworthy, targeting B2B customers in the wood materials industry.

C

Carl Götz

carlgoetz.de

63

Carl Götz is a medium-sized German company specializing in the retail and distribution of wood products and related construction materials. The website presents a comprehensive catalog of products including panels, wood construction materials, flooring, doors, and garden-related items, targeting both business and private customers. The company maintains multiple physical locations and offers digital services such as customer login, configurators, and sample services. Technically, the website is built on the Shopware CMS platform, uses modern web technologies including Google reCAPTCHA and Google Tag Manager, and is hosted on a reliable DNS provider. Security posture is good with HTTPS enforced and CSRF protection on forms, though additional security headers and policies could enhance protection. Privacy compliance is basic with a cookie consent mechanism but lacks a visible privacy policy or terms of service. Overall, the website is professional, trustworthy, and well-structured, with room for improvement in privacy and security transparency.

hagebau Handelsgesellschaft für Baustoffe mbH & Co. KG operates a well-established cooperative retail and wholesale business specializing in building materials and home improvement products primarily in Germany. The website presents a professional and content-rich platform featuring specialist trade, retail, career opportunities, and press information, targeting both business partners and end customers. The company is positioned as a major player in its sector with a large operational footprint and active engagement through news and job postings. Technically, the site is built on CoreMedia CMS, employs modern tracking and consent management tools like Usercentrics and eTracker, and uses structured data for SEO and business transparency. Security posture is good with HTTPS and domain transfer protections, though DNSSEC is not enabled and security policies are not publicly disclosed. Overall, the site is trustworthy, well-maintained, and compliant with GDPR cookie consent requirements.

D

Der Holzring GmbH

holzring.de

43

Der Holzring GmbH operates as a cooperative service provider focused on process optimization, intelligent performance remuneration, and fostering successful networking between shareholders and suppliers. The company positions itself as a trusted intermediary enhancing business relationships within the wood supply sector. The website reflects a medium-sized enterprise based in Germany, offering consulting and optimization services with a clear business model centered on collaboration and efficiency. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies such as Bootstrap and jQuery, hosted likely on Your-Server.de infrastructure. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security posture is solid with HTTPS enforced and privacy-conscious analytics implementation, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the website is professional, trustworthy, and well-maintained, supporting the company's business credibility and digital maturity.

A

A&J HOLZZENTRUM – Andresen & Jochimsen GmbH & Co. KG

holzzentrum.de

55

A&J HOLZZENTRUM – Andresen & Jochimsen GmbH & Co. KG operates a specialized retail and online shop business focused on wood products, building materials, doors, and garden supplies primarily serving the Hamburg region in Germany. The company positions itself as Hamburg's largest selection provider in this sector, targeting both B2C and B2B customers. Their business model combines physical retail with an integrated e-commerce platform, leveraging Shopware technology to deliver a comprehensive shopping experience. Technically, the website is built on the Shopware CMS platform, enhanced with modern JavaScript libraries such as jQuery and integrated with marketing and customer service tools like Google Tag Manager, Superchat, and Trusted Shops widgets. The hosting is managed via 1&1 IONOS, with consistent domain registration and DNS configurations. The site demonstrates good mobile optimization, SEO practices, and basic accessibility features, supporting a positive user experience. From a security perspective, the website enforces HTTPS, employs standard security headers, and integrates CAPTCHA on forms to mitigate automated abuse. While no critical vulnerabilities or exposed sensitive data were detected, the absence of a dedicated security policy or incident response contact suggests room for improvement in transparency and preparedness. Privacy and cookie policies are present and include consent mechanisms, aligning with GDPR requirements. Overall, the website presents a trustworthy and professional front with solid business credibility and technical implementation. The risk profile is low, with recommendations focusing on enhancing security documentation, incident response readiness, and accessibility compliance to further strengthen the security posture and user trust.

Alois Denzel KG operates as one of the largest wood wholesalers in southern Germany, providing a wide range of wood products and services to customers in trade, industry, and craftsmanship. Founded in 1938, the company has grown into a large enterprise with extensive warehousing and a dedicated fleet of trucks, emphasizing sustainability and customer-centric service. Their website reflects a mature digital presence with comprehensive product information, online tools, and certifications that reinforce their market position. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Contact Form 7, ensuring good SEO and user experience. The site is mobile-optimized, accessible, and integrates Matomo for privacy-conscious analytics. Security posture is solid with HTTPS and secure form handling, though some security headers could be improved. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the security posture is strong with no evident vulnerabilities or exposed sensitive data. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. The site is safe for general audiences with no adult or questionable content. Strategic recommendations include enhancing security headers, adding explicit security policies, and considering a vulnerability disclosure policy to further strengthen trust. This analysis indicates a professionally managed business website with strong compliance and security awareness, suitable for its industry and customer base.

H

Holz Adrian

holz-adrian.de

67

Holz Adrian operates as a wood wholesaler and retailer primarily serving the construction, craft, and industrial sectors in Germany. The company offers a broad range of wood products including construction timber, parquet, doors, stairs, and garden wood products. Their market position is that of a regional supplier with a focus on B2B customers. The website is built on WordPress with WooCommerce, indicating a mature e-commerce infrastructure. Plugins for search, anti-spam, and cookie consent are implemented, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and anti-spam measures in place, but lacks advanced security headers and explicit privacy or terms policies, which are areas for improvement. Overall, the website is professional and trustworthy, but could enhance compliance and security transparency.

D

DigiShop GmbH

kloepfer.de

60

Klöpfer Holzhandel operates a professional B2B e-commerce platform specializing in wood and wood-related construction materials, targeting professional tradespeople and commercial customers primarily in Germany. The website offers a comprehensive product catalog, planning tools, and customer account management features, positioning itself as a leading provider in the German wood trade market. Technically, the site uses a modern JavaScript stack with Bootstrap, jQuery, Slick Slider, and a ColdFusion backend, hosted likely on Deutsche Telekom infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and product categorization. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and published privacy or terms policies. No WAF or blocking mechanisms were detected, and no suspicious or adult content is present. Overall, the site is professional, trustworthy, and well-structured but could improve privacy transparency and security header implementation.

D

DigiShop GmbH

weltholz.de

59

Weltholz is a German-based wood import company specializing in high-quality timber and exclusive wood products for wholesale and retail customers. The website presents a professional and well-structured platform targeting B2B clients such as large and wood dealers. It offers a comprehensive product catalog, marketing support, and online tools like a terrace planner. Technically, the site uses a custom ColdFusion backend with modern frontend libraries including jQuery, Bootstrap, and Slick Slider, integrated with HubSpot and Google Analytics for marketing and analytics. The security posture is solid with HTTPS and cookie consent mechanisms, though security headers are not explicitly detected and could be improved. Privacy compliance is strong with clear policies and consent management. Overall, the site is trustworthy, well-branded, and professionally maintained.

B

Bundesministerium für Bildung und Forschung

bne-portal.de

61

The BNE-Portal is an official German government platform managed by the Bundesministerium für Bildung und Forschung (BMBF) dedicated to promoting education for sustainable development (Bildung für nachhaltige Entwicklung - BNE). It serves as a comprehensive resource hub offering educational materials, news, event calendars, and information on funding opportunities. The portal targets educators, learners, policymakers, and the general public interested in sustainability education. Technically, the site is built on the Government Site Builder CMS, employs modern web standards, and is optimized for accessibility and mobile devices. Security-wise, the site uses HTTPS and provides a cookie consent mechanism with anonymized analytics via Matomo, but lacks explicit security policies or incident response contacts. Overall, the site demonstrates a strong professional and trustworthy presence consistent with a government educational service.

D

Deutscher Gründerpreis für Schüler:innen

dgp-schueler.de

56

The Deutscher Gründerpreis für Schüler:innen is a German educational initiative focused on promoting entrepreneurship education among students, primarily targeting those in the 9th grade and above, as well as teachers and Sparkasseninstitutes. The initiative organizes competitions, provides educational materials, and fosters practical learning experiences to sensitize young people to economic topics and entrepreneurial self-employment. The website is professionally designed, well-structured, and consistent with the brand's mission, supported by recognized partners such as Sparkasse, ZDF, Porsche, and others. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with embedded YouTube videos and Google Tag Manager for analytics. The site appears to be built on TYPO3 CMS, indicated by URL patterns and asset naming conventions. Performance and mobile optimization are good, with accessibility features implemented. Privacy compliance is strong, featuring a cookie consent banner and a comprehensive privacy policy aligned with GDPR requirements. From a security perspective, the site uses HTTPS with good SSL configuration and anonymizes IP addresses in analytics. However, no explicit security headers were detected in the HTML content, and there is no visible incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were found. The domain WHOIS data is consistent with the website's purpose, supporting legitimacy. Overall, the website presents a low-risk profile with a solid security posture and good privacy compliance. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding a security.txt file to improve vulnerability disclosure transparency.

D

Deutscher Sparkassen- und Giroverband

planspiel-boerse.de

62

Planspiel Börse is an educational platform operated under the auspices of the Deutscher Sparkassen- und Giroverband, offering Europe's largest stock market simulation game targeted at students and pupils. The website presents a professional and consistent brand image with a focus on financial education and engagement through interactive competitions. Technically, the site leverages modern frameworks such as Next.js and React, ensuring good mobile optimization and accessibility. However, the absence of explicit privacy and cookie policies, as well as missing security headers, indicates room for improvement in compliance and security posture. Overall, the domain registration data aligns well with the website's German educational focus, supporting its legitimacy.

funny-frisch.de is the official website of funny-frisch, a leading German snack brand known for its salty snack products. The site is branded under the parent company Intersnack Deutschland SE and positions itself as a market leader with a strong consumer focus in Germany. The website offers product information, brand storytelling, and consumer engagement through social media and campaigns. Technically, the site is built on the Contao CMS platform and uses modern JavaScript libraries such as jQuery, Slick Slider, and WOW.js to deliver a responsive and visually appealing user experience. The site is mobile optimized and SEO friendly, with clear navigation and professional design. Security-wise, the site uses HTTPS with good SSL configuration and avoids exposing sensitive data. However, it lacks visible security headers and explicit cookie consent mechanisms, which are important for GDPR compliance. No direct contact emails or phone numbers are published, with contact primarily via a web form. Overall, the website is trustworthy, professional, and safe for general audiences, with room for improvement in privacy compliance and security transparency.

M

Mondelez International

fcmilka.de

63

The website fcmilka.de serves as a promotional platform for the Milka brand's campaign in partnership with the Bundesliga football league. It offers consumers opportunities to participate in contests and win prizes by entering codes from Milka products. The site targets football fans and Milka consumers primarily in Germany, leveraging strong brand partnerships and official licensing to enhance engagement. The business model focuses on marketing and brand promotion through interactive fan experiences and contests. Technically, the website is built using modern web technologies including React and Next.js, hosted behind Cloudflare's CDN and security services. It employs Google Tag Manager and cookie consent tools to manage analytics and privacy compliance. The site is well-optimized for mobile devices, performs well, and follows good SEO and accessibility practices. From a security perspective, the site enforces HTTPS, uses security headers, and avoids exposing sensitive data. However, it lacks explicit security policy documentation and incident response contacts, which could be improved. Privacy compliance is strong with clear links to comprehensive privacy and cookie policies managed by Mondelez International. Overall, the website presents a low-risk profile with high legitimacy due to its association with a major global brand. Strategic recommendations include publishing a dedicated security policy, adding vulnerability disclosure information, and enhancing incident response visibility to further strengthen trust and compliance.

S

Sportec Solutions

sportec-solutions.de

54

Sportec Solutions is a joint venture between Deltatre and the DFL Gruppe, specializing in sports data analysis and sports technology. The company positions itself as an innovation leader in these sectors, targeting sports organizations, broadcasters, and technology partners primarily in Germany. The website reflects a professional and consistent brand image with a focus on technology-driven sports solutions. Technically, the site is built on WordPress with modern plugins and hosted on Amazon AWS infrastructure, indicating a mature digital presence. Security posture is adequate with HTTPS enabled and domain registration protections in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is partial, with cookie consent mechanisms present but lacking a visible privacy policy or terms of service. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced transparency and security practices.

S

Sportcast GmbH

sportcast.de

50

Sportcast GmbH is a specialized media production company focused on live TV production for the Bundesliga and 2. Bundesliga football leagues. As a subsidiary of the DFL Deutsche Fußball Liga, it holds a leading position in the German sports broadcasting market, producing over 600 games per season. The company leverages modern technology and a skilled workforce to deliver high-quality sports content to millions of fans worldwide. The website reflects a professional and consistent brand image with clear contact information and multilingual support. Technically, the site is built on TYPO3 CMS, hosted likely on AWS infrastructure, and demonstrates good performance and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and policies could be improved. Privacy compliance is adequate with accessible privacy and cookie policies, though no explicit consent mechanism was detected. Overall, the site is trustworthy and well-maintained, supporting the company's business credibility and market presence.

DFL Digital Sports GmbH is a subsidiary of Deutsche Fußball Liga GmbH, focused on digital content creation and media production for the Bundesliga, Germany's premier football league. The company operates from Cologne with a medium-sized team and freelancers, delivering innovative digital experiences to football fans and partners. The LinkedIn profile reflects a professional and active organization with strong branding and consistent content updates. Technically, the company leverages the LinkedIn platform for its online presence, utilizing modern web technologies and video streaming capabilities. The website is well-optimized for performance, mobile, and accessibility, with good SEO practices. Security posture is strong, with HTTPS enforced and standard security headers implied. No vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are managed by LinkedIn, ensuring GDPR compliance and user consent mechanisms. Overall, the risk profile is low given the use of a reputable platform and professional content. Recommendations include maintaining security best practices and monitoring third-party scripts. The domain linkedin.com is a trusted platform, though WHOIS data for linkedin.com is not publicly available here, the legitimacy of the company page is unquestioned.

B

Bundesliga International GmbH

bundesliga-international.com

70

Bundesliga International GmbH operates as the global marketing and media rights arm of the Bundesliga, Germany's premier football league. The company focuses on international sales of media rights, commercial partnerships, and marketing initiatives to engage football fans worldwide. The website reflects a professional and consistent brand presence aligned with the parent company DFL Deutsche Fußball Liga. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses Google Tag Manager for analytics. Security posture is good with HTTPS and cookie consent implemented, though security headers are not evident and could be improved. The absence of WHOIS data for the domain is a notable anomaly, raising questions about domain registration transparency despite the site's legitimacy and official branding. Overall, the site is well-structured, GDPR compliant, and serves its business purpose effectively.

D

Deutsche Fußball Liga GmbH

bundesliga.com

74

The website represents the official digital presence of the Bundesliga, Germany's premier professional football league. It offers comprehensive sports content including live scores, news, match highlights, and club information, targeting football fans and sports media worldwide. The site is professionally designed with consistent branding and high-quality content, reflecting its position as a leading sports media entity. Technically, the site leverages modern web technologies such as Angular framework, Google Tag Manager for analytics, and Dynatrace for performance monitoring. It is hosted likely on AWS infrastructure, optimized for fast loading and excellent mobile responsiveness. The site employs robust security measures including HTTPS, security headers, and cookie consent mechanisms, indicating a mature digital infrastructure. Security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. However, no explicit contact information or incident response channels are publicly visible, which could be improved for transparency. Overall, the website is trustworthy, secure, and professionally maintained, though the lack of WHOIS data introduces some uncertainty about domain registration details. Strategic recommendations include enhancing visible contact and security incident response information and maintaining regular security audits to uphold the high security standards.

H

Haufe-Lexware GmbH & Co. KG

lexfree.de

70

Haufe-Lexware GmbH & Co. KG operates the website lexware.de, providing comprehensive business software solutions primarily targeting small and medium-sized enterprises, freelancers, and founders in Germany. The company is a market leader with over 360,000 customers and offers a broad range of services including accounting, invoicing, payroll, e-invoicing, and integrated banking solutions. The website is professionally designed, well-structured, and optimized for mobile devices, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS and leverages modern JavaScript libraries and consent management tools to ensure compliance and user experience. Security posture is strong, with HTTPS enforced, TÜV and ISO certifications, and GDPR compliance clearly demonstrated. No critical vulnerabilities or blocking mechanisms were detected, indicating a secure and trustworthy platform. Overall, the site scores highly on content quality, technical implementation, security, privacy compliance, and business credibility.

H

Haufe-Lexware GmbH & Co. KG

lexrocket.de

66

Haufe-Lexware GmbH & Co. KG is a well-established German software company specializing in business and accounting software solutions for self-employed individuals, freelancers, and small to medium-sized enterprises. Operating since 1993 as part of the Haufe Group, Lexware holds a strong market position in Germany, offering a range of products including accounting, payroll, and business management software, complemented by educational content and tools for entrepreneurs. The website content is professionally curated, targeting entrepreneurs and business owners with relevant knowledge and practical advice on business formation and management. Technically, the website is built on the TYPO3 CMS platform and integrates modern technologies such as Usercentrics for consent management, Econda for analytics, and Kameleoon for marketing optimization. The hosting infrastructure is managed by the Haufe Group, ensuring reliable performance and security. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and employs consent management to comply with privacy regulations. While explicit security headers are not visible in the provided data, no vulnerabilities or exposed sensitive data were detected. The company maintains comprehensive privacy and cookie policies, indicating a mature approach to data protection and GDPR compliance. However, the absence of a public security policy or incident response information suggests areas for improvement. Overall, Haufe-Lexware's website reflects a mature, trustworthy, and professional digital presence with strong business credibility and compliance posture. Strategic enhancements in security transparency and header implementation could further strengthen its security stance and user trust.

S

smartsteuer GmbH

smartsteuer.de

63

smartsteuer GmbH operates a well-established online tax declaration platform targeting German taxpayers including employees, self-employed individuals, students, and pensioners. The service offers an intuitive, step-by-step tax filing experience with TÜV certifications and integration options such as Lexware Office. The company positions itself as a user-friendly alternative to traditional tax filing methods, emphasizing ease of use and maximizing tax refunds. Technically, the website is built on WordPress with modern plugins and libraries, hosted on sysEleven infrastructure, and optimized for performance and mobile use. Security posture is strong with HTTPS, cookie consent management, and TÜV certifications, though some security headers could be improved. Privacy compliance is robust with clear policies and consent mechanisms. Overall, smartsteuer demonstrates a mature digital presence with high trustworthiness and professional business operations.

L

Lexware (implied from URLs and branding)

quicksteuer.de

62

QuickSteuer.de is a German website offering tax declaration software targeted at private individuals seeking a fast and easy way to file taxes. The site is professionally designed, leveraging modern web technologies such as Webflow CMS, jQuery, and integrates Google Tag Manager and Usercentrics for analytics and privacy compliance. The business is positioned as an established player with over 25 years of experience and strong trust signals including TÜV Saarland and Chip magazine certifications. The website is fully accessible with no blocking or WAF challenges detected, and it demonstrates good privacy and cookie consent mechanisms. However, direct contact information and explicit security policies are not published, which could be improved to enhance trust and compliance.

H

Haufe X360

lexbizz.de

62

Haufe X360 is a cloud-based ERP platform tailored for small and medium-sized enterprises (KMU) primarily in German-speaking countries. It offers a comprehensive suite of integrated business functions including finance, inventory, CRM, production, and e-commerce, supported by a strong partner ecosystem and over 60 integration interfaces. The platform leverages modern technology partnerships with Acumatica and Microsoft Azure to deliver scalable, secure, and user-friendly ERP solutions. The website reflects a mature digital presence with professional design, clear navigation, and a focus on data security and compliance. Security posture is strong, with ISO 27001 certification and data hosting in German data centers, though explicit privacy and terms policies are not directly found in the provided content. Overall, Haufe X360 positions itself as a trusted, innovative ERP provider for the mid-market segment.

D

Deutscher Sparkassen- und Giroverband e.V.

sparkassen-schulservice.de

48

The Sparkassen-Schulservice website is a well-established educational platform operated by the Deutscher Sparkassen- und Giroverband e.V., providing free, neutral, and comprehensive financial literacy materials for school students in Germany. The platform targets both students and teachers, offering a wide range of resources including PDFs, videos, interactive exercises, and printed materials. The site is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Technically, it is built on WordPress with modern plugins such as Yoast SEO and H5P for interactive content, and uses Google Tag Manager for analytics. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and incident response policies are not published. Overall, the site is trustworthy, safe, and compliant with GDPR, serving as a valuable resource in the financial education sector.

G

GKV-Bündnis für Gesundheit

gkv-buendnis.de

59

The GKV-Bündnis für Gesundheit website represents a collaborative initiative of statutory health insurance funds in Germany focused on advancing health promotion and prevention across various life settings such as communities, schools, and care facilities. The site provides practical resources and information targeting health professionals and stakeholders involved in these sectors. The business model is non-profit and government-related, emphasizing public health improvement. Technically, the website employs modern web standards with responsive design, accessibility features, and uses Matomo analytics with a consent mechanism, reflecting a privacy-conscious approach. Hosting and DNS infrastructure align with official statutory health insurance IT services, indicating a stable and trustworthy technical foundation. From a security perspective, the site enforces HTTPS, uses cookie consent, and avoids exposing sensitive data. However, it lacks explicit security policy documentation and incident response contacts, which could be improved to enhance transparency and trust. No vulnerabilities or suspicious elements were detected. Overall, the website is professional, trustworthy, and well-aligned with its public health mission. Strategic recommendations include publishing dedicated security and incident response policies, enhancing security headers, and providing clearer contact information to strengthen user trust and compliance.

S

Stiftung Leben mit Krebs

beweg-dich-gegen-krebs.de

10

Beweg Dich gegen Krebs is a German non-profit initiative operated by Stiftung Leben mit Krebs, focused on promoting physical activity and sports for cancer patients. The initiative leverages a mobile app to engage users in tracking their activities and encourages donations to support cancer patients locally. The website is professionally designed using WordPress and integrates modern technologies such as Swiper.js and Borlabs Cookie for consent management. It maintains a moderate security posture with HTTPS and cookie consent but lacks published privacy and terms of service policies. The site is well-positioned in the healthcare non-profit sector in Germany, targeting patients, supporters, and the general public interested in health and charity. The digital infrastructure is adequate, with room for improvement in security policies and compliance documentation.

I

IQS Initiative Qualitätssperrholz

iqsperrholz.org

44

The IQS Initiative Qualitätssperrholz is a voluntary association of companies within the wood import industry in Germany, focused on promoting fair competition and transparency in plywood product quality and labeling. The website serves as an informational platform to educate customers and industry participants about plywood standards and product declarations. The business model centers on collaboration among industry members to ensure consistent quality and compliance with relevant norms. The site is well-positioned within its niche, supported by a network of partner companies and the Gesamtverband Deutscher Holzhandel e.V., which provides organizational backing. Technically, the website is built on a modern WordPress CMS platform using Elementor and JetEngine plugins, with SEO optimization via Yoast and cookie consent managed by Borlabs Cookie. The site is mobile-optimized and performs moderately well, with a clean and professional design. Security posture is adequate with HTTPS enabled and domain transfer protection in place, though it lacks explicit security policies and vulnerability disclosures. Security-wise, the site benefits from SSL encryption and domain status protections but is missing critical compliance documents such as a privacy policy and terms of service, which impacts GDPR compliance and overall trust. No incident response or vulnerability disclosure mechanisms are present, which could be improved to enhance security readiness. Overall, the website is a credible and professional representation of the IQS initiative with good business credibility and technical implementation. Strategic improvements in privacy compliance and security transparency would further strengthen its position and trustworthiness.

Fahrschule Scheelen is a well-established driving school based in Emmendingen and Teningen, Germany, with over 40 years of experience and a strong local presence. The company offers comprehensive driving education services for various license classes, including cars and motorcycles, supported by modern vehicles and online learning tools. Their target audience includes both young and older individuals seeking driving licenses in the region. The website is professionally designed, mobile-optimized, and provides clear navigation and contact options, including multiple contact forms and direct phone and email contacts. Technically, the site is built on WordPress with Elementor and uses modern libraries and frameworks, hosted likely on Your-Server.de. Security posture is good with HTTPS and email obfuscation, though some security headers and cookie consent mechanisms are missing. Overall, the site reflects a credible and trustworthy business with a solid digital presence.

G

gb consite GmbH | Geomarketing und Logistik Software

gbconsite.de

53

gb consite GmbH operates a professional website offering specialized software solutions in the geomarketing and logistics sector. Their services include location analysis and route optimization tools targeted at businesses seeking to optimize their geographic marketing and logistics operations. The company positions itself as a niche provider with a focus on affordable and professional online geomarketing software. The website is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, indicating a moderate level of digital maturity and technical infrastructure. Cookie consent is managed effectively via Cookiebot, demonstrating attention to privacy compliance. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities detected, though improvements in security headers and incident response documentation are recommended. Overall, the website presents a trustworthy and professional front for a small technology company based in Germany.

B

Bundesinstitut für Öffentliche Gesundheit (BIÖG)

j1-info.de

65

The website www.j1-info.de is an official public health information portal managed by the Bundesinstitut für Öffentliche Gesundheit (BIÖG) in Germany. It provides comprehensive information about the J1 health check for adolescents aged 12 to 14, including educational content, appointment scheduling assistance, and a doctor search feature. The site targets youth, their parents, and healthcare professionals, positioning itself as a trusted government resource in the healthcare sector. The content is well-structured, multilingual, and includes accessible media, enhancing user engagement and inclusivity. Technically, the site is built on TYPO3 CMS, employs Matomo for privacy-conscious analytics, and uses modern web technologies including accessible video players and responsive design. The website demonstrates good performance and SEO practices, with strong accessibility features. Hosting details are not explicitly disclosed, but data processing for analytics is localized in Germany, aligning with GDPR requirements. From a security perspective, the site enforces HTTPS, anonymizes IP addresses in analytics, and implements a clear cookie consent mechanism. While some security headers like Content-Security-Policy are not explicitly found, the overall posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is excellent, with detailed policies and user consent mechanisms in place. Overall, the website presents a low-risk profile with high trustworthiness, serving as a professional and reliable source of health information for its audience. Strategic recommendations include enhancing security headers and publishing explicit security policies to further strengthen trust and compliance.

K

Komm.ONE

komm.one

73

Komm.ONE is a public law institution and IT service provider dedicated to supporting municipalities across Baden-Württemberg, Germany. The organization develops and operates software and IT services tailored for local government administration, positioning itself as a key regional player in the public sector IT market. Their offerings include consulting, cloud services, security, innovation management, and training, targeting municipal administrations and public entities. The website reflects a professional and consistent brand image aligned with their mission. Technically, the website is built on a modern stack including jQuery, Bootstrap, and specialized CMS templates, with good mobile optimization and accessibility features. The presence of a cookie consent mechanism and Matomo analytics indicates a mature digital infrastructure with privacy considerations. Performance is moderate, and SEO practices are well implemented. From a security perspective, the site enforces HTTPS and uses cookie consent controls but lacks explicit published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, likely due to privacy protection, but the domain and website content strongly indicate legitimacy as a public institution. Overall, Komm.ONE presents a trustworthy and professional online presence with room for improvement in transparency around security policies and incident response. The risk level is low, and the site is suitable for its target audience of public sector entities.

Unser-stadtplan.de is a German website operated by Städte-Verlag E. v. Wagner & J. Mitterhuber GmbH, providing digital and printed city maps, district maps, and comprehensive business directories. The platform also features job listings, targeting local residents and businesses in Germany. The website content is primarily in German and focuses on delivering detailed geographic and commercial information to its users. The business model revolves around map publishing and local business promotion, positioning itself as a regional leader in city planning and local information services. Technically, the website uses standard web technologies including JavaScript and CSS with custom scripts for UI interactions and animations. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. No CMS or major frameworks are detected. The hosting provider and SSL configuration details are not explicitly available, limiting a full technical assessment. From a security perspective, the site does not explicitly show HTTPS status or security headers in the provided data, indicating potential gaps in security best practices. No privacy or cookie consent banners are present, which is a compliance concern under GDPR. The site includes a privacy policy and contact form but lacks visible incident response or security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is functional and provides valuable local information but would benefit from enhanced security measures, improved privacy compliance, and better technical modernization to strengthen trust and user experience.

W

Weil am Rhein Wirtschaft und Tourismus GmbH

w-wt.de

55

The website for Weil am Rhein Wirtschaft und Tourismus GmbH serves as the official platform for economic development, tourism, and city marketing in the municipality of Weil am Rhein, Germany. It targets local businesses, tourists, and residents, providing information on commercial real estate, events, and tourism services. The site is built on the Weblication® CMS platform and features a well-structured navigation system with multilingual support. Accessibility is a key focus, evidenced by the dedicated accessibility menu offering font size, contrast, dark mode, and reading options. However, the site lacks explicit privacy, cookie, and security policies, which are critical for compliance and user trust.

S

Stadt Rheinfelden (Baden)

rheinfelden.de

49

Stadt Rheinfelden (Baden) operates an official municipal website providing extensive information and services to residents and visitors. The site covers a broad range of topics including citizen services, cultural events, urban planning, and tourism. The website is well-structured, professionally designed, and primarily targets local citizens and tourists. Technically, the site uses the cEasy CMS platform and integrates Matomo analytics for privacy-conscious user tracking. The infrastructure is modern with HTTPS enforced, but lacks some advanced security headers and cookie consent mechanisms. Security posture is moderate with no critical vulnerabilities detected. Overall, the site reflects a mature municipal digital presence with room for improvement in privacy compliance and security best practices.

L

Landkreis Lörrach

loerrach-landkreis.de

49

Landkreis Lörrach operates as a regional government authority in Germany, providing a broad range of public services including transportation, economic development, social and family support, environmental initiatives, and tourism promotion. The website serves residents and visitors with comprehensive information and digital services, reflecting a mature public sector entity with a consistent brand and professional presentation. Technically, the site is built on the cEasy CMS platform, employs modern web technologies, and integrates privacy-conscious analytics via Matomo. The site is well-optimized for mobile and accessibility standards, ensuring a good user experience. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website demonstrates a trustworthy and professional digital presence aligned with its governmental role.

L

Loonexx AG

smartaxxess.io

9

The website smartaxxess.io serves as a login portal for the smartakte service, operated by Loonexx AG, a German technology company founded in 2022. The site targets professional users requiring secure access to digital services. The business model appears to be subscription or account-based access to a technology platform. The website is professionally designed with a consistent brand presence and basic content quality focused on user authentication. Technically, the site uses modern web technologies including JavaScript ES modules and CSS, hosted by IONOS SE. The site is mobile optimized and performs moderately well. However, it lacks advanced SEO and accessibility features. Security is enforced via HTTPS and CSRF tokens in forms, but no security headers or DNSSEC are implemented, representing areas for improvement. From a security posture perspective, the site shows good basic protections but lacks published privacy, cookie, and terms policies, as well as incident response or vulnerability disclosure information. No contact information or social media presence is visible, which limits transparency. The WHOIS data is consistent and trustworthy, with no suspicious patterns. Overall, the site is safe and suitable for general audiences, with no adult or questionable content. The main risks relate to compliance and security best practices gaps. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, enabling DNSSEC, and providing clear contact and incident response information to enhance trust and compliance.

B

B. Metzler seel. Sohn & Co. AG

metzler.com

10

Bankhaus Metzler is Germany's oldest family-owned bank, specializing in capital market services for institutions and discerning private clients. The company operates across four main business areas: Asset Management, Capital Markets, Corporate Finance, and Private Banking. The website reflects a strong market position with a focus on personalized, long-term financial solutions. The bank emphasizes stability, reliability, and a tradition of excellence in its services. Technically, the website is well-structured with modern HTML5, CSS, and JavaScript technologies. It is mobile-optimized and provides a good user experience with clear navigation and comprehensive content. The presence of structured data (JSON-LD) enhances SEO and trustworthiness. However, explicit security headers are missing, and no CMS or hosting provider details are evident from the source. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a notable concern for a financial institution, potentially indicating privacy protection or registry issues. No incident response or vulnerability disclosure information is publicly available, which could be improved to enhance transparency and trust. Overall, the website is professional, trustworthy, and compliant with privacy regulations, but improvements in security headers, incident response transparency, and WHOIS data availability are recommended to strengthen the security posture and business credibility.

H

herzog kommunikation GmbH

herzogkommunikation.de

53

herzog kommunikation GmbH is a small digital agency based in Stuttgart, Germany, specializing in scalable and future-proof web and application development. Their services include customized web tools, mobile apps, digital installations, and concept development, targeting both established companies and startups. The website reflects a professional digital agency with a clear portfolio and contact information, positioning them as a regional player in the technology sector. Technically, the site uses modern web technologies such as HTML5, Bootstrap, PHP, and Docker, ensuring responsive design and moderate performance. Security posture is good with HTTPS enforced and CSRF tokens present, but lacks advanced security headers and formal security policies. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is trustworthy and professionally maintained.

A

Amnesty International

amnesty.de

68

Amnesty International Germany operates a comprehensive website focused on human rights advocacy and activism. The organization is positioned as the largest global human rights movement, targeting a broad audience interested in social justice and human rights. The website provides information about activism opportunities both locally and online, reflecting a non-profit business model centered on membership and campaign engagement. Technically, the site is built on Drupal 10, leveraging modern JavaScript libraries and third-party tools such as Cookiebot for consent management and Visual Website Optimizer for A/B testing and analytics. The infrastructure indicates a mature digital presence with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, the absence of explicit security headers and vulnerability disclosure mechanisms suggests room for improvement. Privacy compliance is partially addressed through cookie consent but lacks a visible privacy policy and terms of service. Overall, the website is professional, trustworthy, and safe for general audiences, with a solid foundation for further enhancements in security and compliance.

F

Fachkommission Internet – Amnesty International

amnesty-intern.de

43

The Fachkommission Internet (FK Internet) website serves as an informational and support platform for the German section of Amnesty International, focusing on IT-related services such as webhosting, email, cloud storage, and intranet support. The organization operates as a small, volunteer-driven non-profit entity providing specialized IT assistance to Amnesty International groups and districts in Germany. The website is built on WordPress and leverages a variety of plugins and modern web technologies to deliver content and services effectively. Hosting is provided by Manitu, a reputable German hosting provider, which aligns with the organization's regional focus. From a technical perspective, the site demonstrates a moderate level of digital maturity with a modern tech stack, responsive design, and active content updates. However, there is room for improvement in areas such as security headers implementation and cookie consent mechanisms to enhance GDPR compliance. The absence of explicit terms of service and vulnerability disclosure pages suggests potential gaps in formal security and compliance documentation. Security posture is generally good, with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The site does not exhibit signs of malicious activity or phishing. Privacy compliance is supported by the presence of a privacy policy, though cookie consent mechanisms are lacking. Contact information is available primarily via email and contact forms, but no phone numbers or physical addresses are prominently displayed. Overall, FK Internet presents a trustworthy and professional online presence consistent with its non-profit mission. Strategic recommendations include enhancing privacy compliance with cookie consent, implementing security headers, and publishing formal security policies to strengthen trust and compliance further.

E

EWE VERTRIEB GmbH

werder-strom.de

62

Werder Strom is a niche energy product offered by EWE Vertrieb GmbH targeting Werder Bremen football fans with 100% renewable electricity and fan engagement incentives such as monetary rewards per goal scored. The website is professionally designed, mobile optimized, and uses modern tracking and consent management technologies. Hosting is on AWS with DNS consistent with the business. Privacy compliance is strong with a comprehensive privacy policy linked to the EWE domain and an active cookie consent mechanism. However, the site lacks explicit security policy and incident response information, which could be improved to enhance trust. Overall, the site is secure, compliant, and credible with a good user experience and clear business focus.

Studierendenwerk Aachen is a regional non-profit organization providing essential student services such as housing, dining, and social support primarily for the academic community in Aachen, Germany. The website serves as an informational portal targeting students and university affiliates. The technical infrastructure relies on established but somewhat dated technologies including jQuery 1.12.4, Materialize CSS, and Google Maps API, with consent management handled by Usercentrics, indicating some GDPR awareness. However, the website lacks explicit privacy and cookie policies, which is a compliance gap. Security posture is moderate with HTTPS implied but no visible security headers or modern security practices. No contact or business certification information is readily available in the provided content, limiting trust signals. Overall, the site is functional but could benefit from modernization and enhanced compliance documentation.

D

DigiBib - Digitale Bibliothek - DigiBib

digibib.net

55

DigiBib is a digital library portal primarily serving German libraries and their users by providing a centralized access point to multiple library resources. The website offers a map and search functionality to locate libraries that provide access to the DigiBib portal, with usage often requiring a library card. The site is professionally designed with good navigation and mobile optimization, leveraging modern technologies such as Bootstrap, Leaflet for mapping, and Matomo for privacy-conscious analytics. However, the absence of privacy and cookie policies, as well as missing WHOIS domain registration data, raises concerns about compliance and domain legitimacy. Security posture is moderate with some best practices observed, but lacks critical security headers and explicit incident response contacts. Overall, DigiBib appears to be a legitimate educational service with room for improvement in privacy compliance and security transparency.

I

ift Rosenheim GmbH

ift-montageplaner.de

57

ift Rosenheim GmbH is a reputable German institute specializing in building technology, particularly in the testing, certification, and planning of windows and building components. Their ift-Montageplaner tool facilitates professional and compliant planning of window wall connections, targeting installers, planners, and processors. The company holds multiple ISO certifications and is recognized internationally. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and includes consent management for privacy compliance. Security posture is strong with HTTPS and consent mechanisms, though additional HTTP security headers could enhance protection. Overall, the site is professional, well-structured, and trustworthy, with clear contact information and partner integrations.

H

Holzbau-Offensive

aufholzbauen.de

61

The website aufholzbauen.de represents the Holzbau-Offensive, an educational initiative focused on timber construction for planners in the Baden-Württemberg region of Germany. It offers courses, webinars, and resources to support professionals in this niche sector. The platform is built on WordPress with WooCommerce integration for course management, indicating a digital maturity aligned with modern CMS and e-commerce technologies. The site is well-branded, consistent, and targets a specialized professional audience with relevant content in German. Technically, the site uses standard web technologies including jQuery and Revolution Slider, and implements GDPR-compliant cookie consent mechanisms via CookieYes. Security posture is adequate with HTTPS and basic security headers, though there is room for improvement in advanced headers and explicit security policies. No critical vulnerabilities or suspicious patterns were detected. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though it lacks explicit contact and security policy disclosures.

C

Cluster Forst und Holz BW

cluster-forstholz-bw.de

54

The website represents the Cluster Forst und Holz BW, a cluster initiative in Baden-Württemberg, Germany, focused on promoting innovation and collaboration within the forestry and wood industry sectors. It serves as a platform for companies and research institutions to access funding programs, project information, and networking opportunities. The site highlights its strong market position with significant economic impact in the region, supported by partnerships with government and EU funding bodies. Technically, the website is built on the Yii framework with Bootstrap and jQuery, hosted on Hetzner servers, and demonstrates good mobile optimization and SEO practices. Security measures include HTTPS enforcement and CSRF protection, though some security headers and policies are not explicitly published. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page. Overall, the site is professional, trustworthy, and well-structured, though it lacks direct contact emails and explicit security or incident response policies.