Germany security reports

N

National Geographic

nationalgeographic.de

68

National Geographic Germany operates a comprehensive media platform delivering inspiring stories, breathtaking adventures, and brilliant photography focused on nature, science, culture, and travel. The website serves a broad audience interested in educational and adventure content, leveraging a strong global brand under the Walt Disney Company umbrella. The business model includes magazine subscriptions, online editorial content, and e-commerce through affiliated partner sites. Technically, the site is built on WordPress with Elementor and Yoast SEO, ensuring modern content management and SEO optimization. The presence of cookie consent mechanisms indicates attention to privacy compliance, although explicit privacy and terms policies are not found in the provided content. Security posture is solid with HTTPS and consent-based script loading, but could be improved with additional security headers and published policies. Overall, the site is professional, trustworthy, and well-positioned in the media sector.

R

Roger Lehner

rogerlehner.com

47

Roger Lehner operates a small, specialized design studio based in Germany, focusing on ambitious projects that emphasize collaboration, creativity, and accessibility. The website showcases a professional portfolio with services including branding, digital and print design, and inclusive design practices. The business targets clients seeking high-quality, dynamic visual communication solutions. Technically, the website employs modern JavaScript libraries such as Swup and Swiper for enhanced user experience and uses Umami Analytics for minimal user tracking. Hosting is provided by hosttech.de, a German hosting provider, aligning with the business location. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and does not implement cookie consent mechanisms, which are areas for improvement. Overall, the website is professional, trustworthy, and well-designed but could enhance compliance and security practices.

M

MOBILEE

mobilee-plattform.de

43

MOBILEE is a German non-profit platform dedicated to social work through sport and movement. It serves as a networking and resource hub for initiatives, organizations, and individuals working at the intersection of social work and sports. The platform is supported by notable foundations and sport organizations, enhancing its credibility and reach within its niche. The website is professionally designed using WordPress and Elementor, featuring rich content, event information, and partner links. Technically, the site uses modern web technologies and privacy-conscious analytics (Matomo), but lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is good with HTTPS and no exposed sensitive data, but could be improved by adding security headers and vulnerability disclosure mechanisms. Overall, the site is trustworthy, well-branded, and serves its target audience effectively.

S

Spielfeld Gesellschaft

spielfeld-gesellschaft.de

10

Spielfeld Gesellschaft is a German non-profit platform focused on fostering social cohesion and integration within the Niedersachsen region. Supported by the Niedersächsische Lotto-Sport-Stiftung, it offers community engagement through events, podcasts, newsletters, and networking opportunities. The website reflects a clear mission to connect people and ideas for an open society. Technically, the site uses modern JavaScript modules, Matomo analytics with cookies disabled, and good accessibility and SEO practices, though some improvements in cookie consent and security headers are recommended. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks published security policies or incident response contacts. Overall, the site is professional, trustworthy, and safe for general audiences.

L

lernando

lernando.de

72

lernando.de is a German e-commerce website specializing in educational materials such as school books, learning aids, and exercise booklets for children of all school grades. The platform targets parents and children seeking verified publisher materials with convenient shipping options. Technically, the site is built on Drupal 11 with Commerce 3, leveraging modern web technologies including jQuery UI, Cookiebot for consent management, Google Tag Manager, and Meta Pixel for marketing and analytics. The website demonstrates good digital maturity with mobile optimization and SEO best practices. Security-wise, the site enforces HTTPS and employs a comprehensive cookie consent mechanism, but lacks explicit security policies or incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR, though it could improve by adding Terms of Service and security disclosure information.

A

Arena Verlag

arena-verlag.de

72

Arena Verlag is a reputable German publishing company specializing in high-quality children's and youth books. The website reflects a professional digital presence with a focus on book publishing and e-commerce, targeting children and youth audiences. The company leverages modern technologies including Drupal 11 CMS and integrates marketing and analytics tools such as Facebook Pixel and Google Ads. The website demonstrates good mobile optimization and SEO practices, enhancing user experience and accessibility. Privacy compliance is well addressed through a comprehensive cookie consent mechanism powered by Cookiebot, ensuring GDPR adherence. However, explicit contact information and terms of service are not readily found, which could be improved to enhance transparency and user trust. Security posture is solid with HTTPS enforced, but the absence of security headers and a security.txt file suggests room for improvement in security best practices.

A

Amadeu Antonio Stiftung

swipeaway.de

50

SwipeAway is an educational self-learning tool designed to raise awareness about recognizing hostile narratives on social media platforms and to promote digital civil courage. The project is operated by the Amadeu Antonio Stiftung, a reputable non-profit foundation in Germany, and is supported by Stiftung Mercator. The website targets a general audience interested in social media literacy and digital rights education. The business model is non-commercial, focusing on social impact and education. Technically, the website is built using modern web technologies including Nuxt.js, JavaScript, HTML5, and CSS3. It is hosted on servers associated with agenturserver, with good mobile optimization and moderate performance. The site uses HTTPS with an excellent SSL configuration but lacks some security headers that could enhance protection. The site employs minimal user tracking via the privacy-conscious Umami analytics platform. From a security perspective, the website demonstrates a solid baseline with HTTPS enabled and no exposed sensitive data. However, it lacks security headers and a cookie consent mechanism, which are important for GDPR compliance and security best practices. No incident response or security policy information is provided, and no contact information is readily available on the main page, which could impact user trust and compliance. Overall, the website is professional, trustworthy, and focused on educational content without any adult or questionable material. The domain registration data aligns well with the website's stated purpose and parent organization, indicating legitimacy. Strategic recommendations include implementing security headers, adding a cookie consent mechanism, publishing security and incident response policies, and providing clear contact information to enhance trust and compliance.

L

Landesverband Nachhaltiges Sachsen e.V.

nachhaltiges-sachsen.de

57

Landesverband Nachhaltiges Sachsen e.V. is a regional non-profit organization dedicated to promoting sustainable development in Saxony, Germany. The website serves as a platform for networking, supporting projects, and providing educational materials related to sustainability. It targets stakeholders interested in social-ecological transformation and regional engagement. The organization maintains an active presence through newsletters, social media, and project coordination. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and Matomo for privacy-respecting analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a good level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and policies could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting the organization's credibility and mission.

A

Afeefa - Digitaler Zusammenhalt e.V.

afeefa.de

48

Afeefa - Digitaler Zusammenhalt e.V. operates a non-profit digital platform focused on social integration and community engagement in Leipzig, Germany. The website provides multilingual access to information about social services, volunteer opportunities, and local offers for people with diverse backgrounds. The platform positions itself as a local community hub fostering inclusion and participation. Technically, the website uses modern frontend technologies such as Vue.js and MapLibre GL for interactive maps, indicating a moderate level of digital maturity. However, the site lacks visible security headers and explicit privacy or cookie consent mechanisms, which are areas for improvement. Social media presence on Instagram and Facebook supports community outreach. Overall, the security posture is basic with no critical vulnerabilities detected but improvements are recommended to enhance compliance and trust. The domain registration data is consistent and supports the legitimacy of the website. Strategic recommendations include implementing security headers, cookie consent, and clearer contact information to improve user trust and regulatory compliance.

Cowiki is a non-profit project affiliated with anstiftung and the Verbund offener Werkstätten, providing a structured knowledge base platform aimed at supporting open workshops and collaborative communities in Germany. The website serves as a community resource with links to partner organizations and open source code repositories, reflecting a niche market position focused on knowledge sharing and collaboration. Technically, the site uses modern JavaScript frameworks such as Vue.js and integrates Umami Analytics for minimal user tracking, indicating a moderate level of digital maturity. The website is accessible, mobile-optimized, and presents a consistent brand image aligned with its non-profit mission. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. Privacy compliance is basic, with a privacy policy linked externally but no cookie consent mechanism detected. Overall, the site is trustworthy and safe for general audiences, with no adult or questionable content detected.

N

NDK Wurzen

leerstellen-lkl.de

47

The website leerstellen-lkl.de is a well-structured non-profit project focused on documenting cases of right-wing violence in the Leipzig district. It provides a digital memorial and educational resource through a web documentary, peer networks, and workshops primarily targeting youth and affected communities. The project is funded by reputable organizations and operated by NDK Wurzen, indicating a credible and mission-driven initiative. Technically, the site uses modern frameworks like Nuxt.js and Vue.js, ensuring a responsive and user-friendly experience, though some improvements in accessibility and SEO could be made. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and cookie consent mechanisms, which are recommended for GDPR compliance. Overall, the site is trustworthy, professional, and safe for general audiences.

HANSEPILZ is a small local business specializing in mushroom consulting and educational mushroom walks primarily serving the Northern Germany region including Hamburg, Schleswig-Holstein, and Niedersachsen. The website also showcases mushroom photography, appealing to enthusiasts and learners interested in mycology. The business maintains a niche market position with a focus on education and community engagement, supported by media appearances and active social media channels on Instagram and Facebook. Technically, the website is built on WordPress using the Twenty Seventeen theme, with standard plugins such as Contact Form 7 and CleanTalk for spam protection. Hosting is provided by 1blu, as indicated by the nameservers. The site demonstrates moderate performance and basic mobile optimization, with room for improvement in accessibility and SEO. Security posture is adequate with HTTPS enabled and anti-spam measures in place, but lacks important security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. Overall, the site is trustworthy and professional but could benefit from enhanced security and privacy features to improve compliance and user trust.

K

KMU Werk

kmuwerk.de

66

KMU Werk is a German-based consulting network specializing in providing comprehensive, cross-disciplinary services to small and medium-sized enterprises (SMEs). Their focus is on practical, result-oriented business consulting covering topics from company foundation to succession, addressing challenges such as skilled labor shortages and digital transformation. The website is professionally designed using WordPress and Elementor, featuring clear navigation, contact information, and GDPR-compliant privacy and cookie policies. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are absent. Overall, the site reflects a trustworthy and credible business presence in the SME consulting sector.

V

Vulkan Verlag

vulkan-shop.de

52

Vulkan Shop is a German-based e-commerce platform specializing in the sale of technical books, magazines, and eBooks focused on energy, automation, water, and industrial sectors. The website is professionally designed using Magento 2, featuring a comprehensive catalog of specialized publications targeting professionals and specialists in these industries. The platform supports German and English languages and integrates Google Analytics for user behavior tracking. Cookie consent mechanisms are implemented to comply with GDPR requirements. Security posture is solid with HTTPS enforced and secure cookie settings, although explicit security headers and policies are not fully documented. Contact information and terms of service pages are not clearly presented in the analyzed content, which could impact user trust and compliance transparency.

D

Deutscher Olympischer Sportbund e.V.

sportdeutschland.de

44

Sportdeutschland is the official digital platform of the Deutscher Olympischer Sportbund e.V., Germany's leading sports organization. It promotes sports participation nationwide, offering digital tools such as an interactive sports club map, a club app, and website services tailored for sports clubs and associations. The platform supports Olympic and Paralympic initiatives and targets sports enthusiasts, clubs, and volunteers across Germany. Technically, the website is built on TYPO3 CMS with modern front-end libraries and uses Matomo for privacy-conscious analytics. The site is well-structured, mobile-optimized, and professionally designed, reflecting a mature digital presence. Security posture is solid with HTTPS and secure forms, though it lacks some security headers and a cookie consent mechanism. Privacy compliance is strong with a comprehensive GDPR-aligned privacy policy. Overall, the site is trustworthy and authoritative in its domain.

B

BOTAX Steuerberatungsgesellschaft mbH

botax.de

49

BOTAX Steuerberatungsgesellschaft mbH is a German tax consulting firm offering a range of services including corporate, private individual, employee, association, and testament-related tax consulting. The company positions itself as a trusted advisor with certifications and memberships in professional organizations, targeting businesses and private clients in Germany. The website is built on WordPress using the Themify Ultra theme and employs common plugins such as Contact Form 7 and GDPR Cookie Compliance, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

S

Sparkasse Hannover

sparkasse-hannover.de

68

Sparkasse Hannover is a prominent regional bank serving Hannover and its surrounding region, offering a broad spectrum of financial services including online banking, investment products, insurance, real estate financing, and personalized advisory services. The website reflects a mature digital presence with comprehensive content tailored to private, corporate, and young customers. The bank holds recognized certifications and awards, underscoring its market leadership and customer service excellence. Technically, the site is built on Adobe Experience Manager, leveraging modern web technologies and providing a responsive, accessible user experience. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security headers could be better documented. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and cookie regulations.

H

Hannoversche Volksbank eG

hannoversche-volksbank.de

63

Hannoversche Volksbank eG is a regional cooperative bank in Germany focused on providing local banking and financial services. The website reflects a professional and consistent brand presence, targeting local customers with a clear business model centered on cooperative banking. The digital infrastructure uses modern web technologies including Angular framework and integrates marketing consent management and analytics tools such as Adobe Launch and OneTrust. Security posture is solid with HTTPS enforced and monitoring scripts in place, though explicit security headers and published security policies are absent. Privacy compliance is partially addressed via cookie consent mechanisms but lacks visible privacy and terms of service documentation. Overall, the website is trustworthy and well-positioned in its market segment, with room for improvement in transparency and security documentation.

D

Deutscher Olympischer Sportbund (DOSB)

deutsches-sportabzeichen.de

57

The Deutsches Sportabzeichen website serves as the official platform for Germany's prestigious multi-disciplinary sports award, managed by the Deutscher Olympischer Sportbund (DOSB). It targets a broad audience including individuals of all ages and abilities, schools, sports clubs, and examiners. The site offers comprehensive information, digital services for submitting and managing awards, event details, and community engagement resources. The platform is well-positioned as the authoritative source for the Sportabzeichen, supported by strong partnerships and a large active user base.

S

SoVD-Landesverband Niedersachsen e.V.

inklusionspreis-niedersachsen.de

48

The website www.inklusionspreis-niedersachsen.de represents a regional non-profit initiative jointly managed by the SoVD-Landesverband Niedersachsen e.V. and the LandesSportBund Niedersachsen e.V. It focuses on promoting and awarding projects that foster inclusion and equal participation of people with and without disabilities in Niedersachsen, Germany. The site provides detailed information about award categories, past winners, and event highlights, targeting volunteers, media professionals, sports clubs, and the general public interested in inclusion. The business model is centered on recognition and awareness rather than commercial activities. Technically, the website is built on TYPO3 CMS, leveraging modern frontend libraries such as jQuery and Slick Slider for interactive content. It demonstrates good digital maturity with mobile responsiveness, accessibility features, and SEO optimization. The cookie consent mechanism is implemented with clear user options, reflecting compliance with GDPR requirements. Hosting appears to be managed via Your-Server.de, with secure HTTPS enforced. From a security perspective, the site benefits from HTTPS and a cookie consent framework but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is minimal but consistent with a legitimate non-profit entity. Overall, the security posture is solid but could be enhanced by adding security headers and formal incident response information. The overall risk is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include improving security headers, publishing security and incident response policies, and enhancing contact information transparency to further build trust and compliance.

Radpass Hannover is a small, community-focused organization dedicated to promoting cycling sports and organizing cycling events in Hannover, Germany. The website serves as a hub for event information, registration links, and showcases partner cycling clubs. Technically, the site is built on WordPress with modern plugins for gallery display, GDPR compliance, and lightweight analytics. The site is well-optimized for performance and mobile devices, with good SEO and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or compliance gaps were detected. Overall, the site presents a trustworthy and professional image suitable for its local community audience.

E

eichels GmbH

marathon-hannover.de

45

The ADAC Marathon Hannover website represents a well-established regional sports event organizer specializing in marathon and related running events in Lower Saxony, Germany. The business is operated by eichels GmbH and enjoys strong partnerships with reputable sponsors and regional organizations such as ADAC. The website provides comprehensive event information, registration options, media galleries, and community engagement features, targeting runners, sponsors, and local participants. Technically, the site is built on TYPO3 CMS with a modern yet slightly dated technology stack including Bootstrap 3 and jQuery 3.2.1. It demonstrates good mobile optimization, accessibility features, and SEO practices. The site uses HTTPS with strong SSL configuration and employs spam protection for email addresses. However, it lacks some advanced security headers and a formal security policy or incident response information. From a security perspective, the site is generally secure with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR adherence. Contact information is transparent and includes multiple channels. No suspicious or malicious content is detected, and the site is free from adult or NSFW content. Overall, the website scores well in content quality, technical implementation, security posture, privacy compliance, and business credibility. Strategic improvements in security headers, incident response transparency, and modernization of the tech stack could further enhance the site's security and resilience.

D

Deutsche Stiftung für Engagement und Ehrenamt

deutsche-stiftung-engagement-und-ehrenamt.de

53

The Deutsche Stiftung für Engagement und Ehrenamt is a German non-profit foundation dedicated to strengthening volunteer engagement through funding, consulting, education, and networking services. The organization holds a reputable position in the national non-profit sector, targeting volunteers and community organizations across Germany. Their digital presence is built on a modern WordPress infrastructure with professional design and good SEO practices, supported by plugins such as Rank Math and Borlabs Cookie for privacy compliance. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit privacy and terms of service pages are missing. Overall, the website reflects a trustworthy and professional entity with a clear mission to support civic engagement.

W

Wilhelm Hirte Stiftung

wilhelm-hirte-stiftung.de

42

The Wilhelm Hirte Stiftung is a small non-profit foundation based in Hannover, Germany, focused on supporting projects in youth aid, sports, and social sectors. The website clearly communicates its mission and provides donation information, targeting a general audience interested in charitable activities. The foundation appears to have a stable market position within its local/regional context, with a business model centered on funding and supporting community projects. Technically, the website is built on WordPress, utilizing common plugins such as Yoast SEO and Contact Form 7, with additional anti-spam measures like Honeypot. The hosting provider is inferred to be netcup based on DNS data. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features and good SEO practices. However, some technical improvements could enhance security and privacy compliance. From a security perspective, the site uses HTTPS and implements basic anti-spam protections. However, it lacks important security headers and does not provide explicit security policies or incident response contacts. The absence of a cookie consent mechanism despite using Google Analytics indicates a gap in privacy compliance. No vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the website's claims, supporting legitimacy. Overall, the website presents a trustworthy and professional image for a non-profit foundation but would benefit from enhanced security headers, privacy compliance improvements, and clearer security policies to strengthen its security posture and user trust.

N

Niedersächsische Bingo-Umweltstiftung

bingo-umweltstiftung.de

46

The Niedersächsische Bingo-Umweltstiftung is a well-established non-profit foundation based in Lower Saxony, Germany, dedicated to environmental protection and development cooperation. The foundation supports various projects and initiatives aimed at sustainability and community engagement. The website reflects a professional and consistent brand presence, targeting residents and organizations interested in environmental causes within the region. The foundation operates with a transparent and accessible digital presence, including multilingual accessibility features and comprehensive content about its activities and funding opportunities. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and accessibility enhancements, hosted on a professional hosting provider (hostpress.de). The site demonstrates good performance, mobile optimization, and SEO practices. Security posture is solid with HTTPS enabled and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the security posture is strong for a non-profit organization, with no critical vulnerabilities detected. The site lacks explicit public security policies or incident response contacts, which could be enhanced. The domain registration is consistent and trustworthy, supporting the legitimacy of the foundation. No adult or questionable content is present, making the site safe for general audiences. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and maintaining regular updates and audits to sustain security and compliance standards.

Penny is a well-established German discount grocery retailer operating under the PENNY Markt GmbH legal entity. The website serves as a digital storefront and information portal for customers, offering online shopping, market location services, and promotional content. The site is professionally designed, mobile-optimized, and uses modern web technologies including Adobe Experience Platform and Usercentrics for consent management. Security posture is strong with HTTPS enforced and consent mechanisms in place, though explicit security headers should be verified. Privacy compliance is robust, with comprehensive privacy and cookie policies and GDPR adherence clearly communicated. Overall, Penny's digital presence reflects its large market position and commitment to user privacy and security.

L

LandesSportBund Niedersachsen

lsb-niedersachsen.de

55

The LandesSportBund Niedersachsen is a prominent non-profit sports federation serving the Niedersachsen region in Germany. It acts as a lobbyist, service provider, and promoter of sports activities, offering a wide range of services including advocacy, funding, education, and member support. The website reflects a mature organization with a clear market position as the leading sports federation in the region, targeting a broad audience including sports clubs, athletes, and the general public. Technically, the website is built on TYPO3 CMS with a modern technology stack including jQuery, Bootstrap, and Matomo analytics configured for privacy compliance. The site is well-optimized for mobile and accessibility, featuring structured navigation and comprehensive content. Hosting appears to be local to Germany, consistent with the organization's regional focus. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms with disabled tracking cookies by default. While no explicit security policies or incident response contacts are published, no vulnerabilities or sensitive data exposures were detected. Security headers could be improved for enhanced protection. Overall, the website presents a professional, trustworthy, and privacy-conscious digital presence suitable for a large non-profit organization. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to strengthen trust and compliance.

D

DOSB New Media GmbH

sportdeutschland.tv

60

Sport Europe, operated by DOSB New Media GmbH, is a German-based media platform specializing in streaming and broadcasting European sports content. The website targets sports fans primarily in Europe, offering live and on-demand sports media services. The business is relatively young, founded in 2018, and operates with a medium-sized organizational footprint. The domain registration details align well with the company's German origin and media focus, indicating legitimacy and consistency in business operations. Technically, the website employs modern web technologies including HTML5, CSS3, Bootstrap framework, and Font Awesome icons, ensuring a responsive and visually appealing user experience. Hosting is provided by IONOS SE, a reputable provider. Performance is moderate with good mobile optimization, though accessibility features are basic. SEO optimization is present but could be improved with more comprehensive metadata and structured data. From a security perspective, the site uses HTTPS but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. No privacy or cookie policies were detected, which is a compliance gap especially under GDPR regulations. No contact information or incident response details were found, limiting transparency and user trust. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website presents a professional and functional sports media platform with room for improvement in privacy compliance and security hardening. Strategic enhancements in these areas would improve trustworthiness and regulatory adherence.

T

trainersuchportal

trainersuchportal.de

66

trainersuchportal.de is a specialized online job board platform focused on the sports sector, connecting trainers, coaches, and sports professionals with employers such as clubs, associations, and fitness studios primarily in Germany. The platform offers job listings, trainer profiles, and integrates partner job boards to expand reach. The website is professionally designed, mobile-optimized, and provides rich content including blogs and testimonials, positioning itself as a niche leader in the sports employment market. Technically, it employs modern web technologies including Google Tag Manager, Google Analytics, and Cloudflare DNS/CDN, ensuring good performance and security. Security posture is solid with HTTPS and error monitoring via Sentry, though explicit security headers and policies could be enhanced. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the site is trustworthy, user-friendly, and well-positioned in its market niche.

The website lsb-nds.net serves as the official portal for the LandesSportBund Niedersachsen, a regional sports association in Germany. It primarily facilitates members in applying for funding and accessing educational and administrative services related to sports. The site targets members of the LandesSportBund Niedersachsen and operates as a non-profit government-related entity. The business model focuses on providing digital access to sports-related funding and educational resources within the Niedersachsen region. Technically, the website employs basic web technologies including HTML5, CSS, and JavaScript, with a custom MD5-based challenge-response login mechanism. The infrastructure is moderate in performance and mobile optimization, with hosting linked to InterNetX GmbH and DNS servers under htp-tel.de. However, the site lacks modern security enhancements such as DNSSEC and security headers, and uses outdated cryptographic methods for authentication. From a security perspective, while the domain registration is consistent and legitimate, the use of MD5 hashing and absence of DNSSEC and security headers present vulnerabilities. No explicit privacy or cookie consent mechanisms are implemented, though a privacy policy is linked externally. The site is accessible without WAF or blocking mechanisms, but improvements in security posture and privacy compliance are recommended. Overall, the website is functional and serves its intended audience but would benefit from modernization of security practices, enhanced privacy compliance, and improved technical implementation to strengthen trust and resilience against threats.

L

Landeshauptstadt Hannover

hannover.de

55

The website www.hannover.de serves as the official portal for the city and region of Hannover, Germany. It provides comprehensive information and services for citizens, tourists, and businesses, including cultural events, tourism highlights, public services, and economic development resources. The portal is well-positioned as a trusted government resource with a broad target audience encompassing residents, visitors, and local enterprises. The business model focuses on public service delivery and regional promotion. Technically, the site employs modern web technologies such as React components, Matomo analytics with GDPR-compliant consent management, and a CMS likely based on EZ Publish. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate to fast performance profile. The infrastructure appears robust and professionally maintained. From a security perspective, the site enforces HTTPS, uses consent management for privacy compliance, and avoids exposing sensitive data. While explicit security headers are not fully confirmed, the overall posture is strong with no visible vulnerabilities. The WHOIS data aligns with the official nature of the site, confirming legitimacy and consistency. Overall, the site presents a low-risk profile with high trustworthiness and professionalism. Strategic recommendations include publishing explicit security policies, incident response contacts, and vulnerability disclosure mechanisms to further enhance transparency and security posture.

A

active elements GmbH

active-elements.de

57

active elements GmbH is a well-established German agency specializing in web design, print design, SEO, and digital marketing services. With nearly two decades of experience, the company serves businesses and organizations seeking comprehensive digital and print marketing solutions. Their offerings include modern web development using TYPO3 and WordPress, creative print projects, SEO optimization, Google AdWords campaign management, and client training through e-learning and on-site sessions. The company emphasizes personalized service and full support, positioning itself as a trusted partner in the regional market around Hannover and Garbsen. Technically, the website is built on a modern stack including HTML5, CSS3, JavaScript, Bootstrap, and CMS platforms TYPO3 and WordPress. Hosting is provided by Hetzner, a reputable German hosting provider, ensuring good performance and security. The site is mobile-optimized, accessible, and SEO-friendly, with privacy-conscious analytics via Matomo. Cookie consent and GDPR-compliant privacy policies are implemented, reflecting a mature digital presence. From a security perspective, the site uses HTTPS with strong SSL configuration and secure form handling. However, it lacks explicit security policies, incident response contacts, and advanced security headers, which are recommended for enhanced protection. No vulnerabilities or suspicious elements were detected in the content or scripts. Overall, active elements GmbH presents a professional, trustworthy, and technically sound online presence. The company demonstrates good compliance with privacy regulations and offers a comprehensive suite of services for digital and print marketing. Strategic improvements in security transparency and incident response readiness would further strengthen their security posture.

P

Praktikumsjahr GbR

praktikumsjahr.de

54

Praktikumsjahr GbR operates an educational platform focused on providing school leavers in Germany with the opportunity to explore multiple professions through a structured internship year. The platform facilitates digital management of applications, offers monthly stipends, and partners with over 100 companies, positioning itself as a niche leader in practical career orientation. The website is professionally designed, mobile-optimized, and rich in relevant content, including testimonials, partner logos, and press references, enhancing its credibility and trustworthiness. Technically, the site employs modern web technologies such as Bootstrap, Font Awesome, Google Analytics, Hotjar, and Cookiebot for consent management, hosted on Google Cloud infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though it lacks explicit security headers and a published security policy. Privacy compliance is strong with comprehensive GDPR-aligned policies and clear contact information. Overall, the site presents a low-risk profile with no detected vulnerabilities or suspicious content.

S

Stafftastic GmbH

ausbildungsradar.de

56

Ausbildungsradar.de is a German educational platform focused on supporting companies and associations in retaining and recommending applicants within regional or association-based training programs. The platform is positioned as a niche service enhancing digital collaboration in apprenticeship and training sectors. The business is likely small-sized and operates primarily in Germany, with Stafftastic GmbH as the associated company. Technically, the website employs modern JavaScript technologies, Cookiebot for GDPR-compliant cookie management, and Plausible Analytics for privacy-friendly traffic analysis. Hosting is via Google Cloud DNS, indicating a reliable infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit security policy or incident response contacts are published. Privacy compliance is strong, with a comprehensive privacy policy linked on a partner domain. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

E

ENERGETIX GmbH & Co. KG

energetix.tv

62

ENERGETIX GmbH & Co. KG is a German company specializing in magnetic jewelry and wellness products, operating primarily through a direct sales business model. The website targets consumers interested in wellness and magnetic jewelry, as well as potential business partners and hosts for home parties. The company positions itself as a niche market leader in Europe with a focus on combining design and wellness benefits. Technically, the website is built on WordPress with Bootstrap and jQuery, featuring modern web technologies and analytics tools such as Google Analytics and Cloudflare Insights. The site is mobile-optimized and provides a good user experience with clear navigation and multilingual support. Security posture is adequate with HTTPS enabled and privacy compliance through cookie consent and a comprehensive privacy policy. However, the absence of WHOIS data and lack of explicit security headers and incident response information slightly reduce trustworthiness. Overall, the website is professional, trustworthy, and compliant with GDPR, but could improve security transparency and WHOIS data availability.

B

Bundesministerium für Digitales und Verkehr (BMV)

erneuerbarekraftstoffe.de

50

The website erneuerbarekraftstoffe.de is an official German government initiative managed by the Bundesministerium für Digitales und Verkehr (BMV). It focuses on promoting renewable fuels through a comprehensive funding and development program aimed at reducing greenhouse gas emissions in the transportation sector. The site provides detailed information on various funding measures, development platforms, and market ramp-up strategies for renewable fuels such as advanced biofuels and power-to-liquid fuels. The target audience includes policymakers, industry stakeholders, researchers, and applicants for funding programs. Technically, the site is built on WordPress with Elementor and supports multilingual content, indicating a mature digital infrastructure. Security posture is good with HTTPS and cookie consent mechanisms in place, though explicit privacy and terms of service policies are not found. Overall, the site is professional, trustworthy, and aligned with government standards, but could improve privacy compliance documentation.

F

Fachagentur Nachwachsende Rohstoffe e.V.

bauerhubert.de

41

Bauer Hubert is an educational website operated by Fachagentur Nachwachsende Rohstoffe e.V., a German non-profit organization focused on renewable raw materials. The site targets children and parents by providing educational stories, games, comics, and audio plays to promote awareness of sustainable resources. The website is well-branded, consistent, and supported by official German government and agency partners, reflecting a strong market position in educational content for renewable energy and sustainability. Technically, the website is built on TYPO3 CMS with Foundation CSS and uses jQuery and Matomo analytics with cookies disabled, indicating a privacy-conscious approach. The site is hosted on servers associated with agenturserver domains, suggesting professional hosting. The website is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. From a security perspective, Bauer Hubert enforces HTTPS and disables cookies in analytics, which is positive. However, it lacks visible security headers, a cookie consent mechanism, and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. WHOIS data is consistent with the website's claims, showing legitimacy and stable domain registration. Overall, the website presents a low-risk profile with good business credibility and technical implementation but could improve privacy compliance and security posture by adding cookie consent, security headers, and formal security policies.

C

Cubus Medien Verlag GmbH

schulbau-messe.de

54

SCHULBAU.online is a professional German platform focused on educational construction, offering a magazine, trade fairs, and think tanks targeted at architects, school authorities, and planners. The website is well-positioned as a leading resource in the education construction sector in Germany, supported by a medium-sized company, Cubus Medien Verlag GmbH. The technical infrastructure is based on a modern WordPress CMS with relevant plugins for e-commerce, events, SEO, and multilingual support, hosted under a reputable registrar. Security posture is good with HTTPS and cookie consent mechanisms, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is strong, with clear GDPR-aligned privacy and cookie policies. Overall, the site is trustworthy, professionally designed, and content-rich, serving a general audience interested in educational infrastructure.

F

Fachagentur Nachwachsende Rohstoffe e.V. (FNR)

charta-fuer-holz.de

43

The website www.charta-fuer-holz.de represents the 'Charta für Holz 2.0' initiative managed by the Fachagentur Nachwachsende Rohstoffe e.V. (FNR), a German non-profit agency focused on promoting sustainable wood use and forestry. The site serves as an information hub for government bodies, industry stakeholders, researchers, and the public, offering resources, event information, and project updates related to renewable raw materials and wood construction. The business model is non-profit and government-supported, positioning the organization as a key player in Germany's sustainable forestry sector. Technically, the website is built on TYPO3 CMS with modern front-end technologies including jQuery, Foundation CSS, and Slick Carousel. It is mobile-optimized and provides a good user experience with clear navigation and professional design. Analytics are implemented via Matomo with cookies disabled, reflecting a privacy-conscious approach. However, the site lacks a cookie consent mechanism and some security headers, which are areas for improvement. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. No major vulnerabilities or security incidents are evident. The absence of a published security policy or incident response contact reduces transparency but does not indicate immediate risk. WHOIS data is consistent and supports the legitimacy of the domain and organization. Overall, the website is professional, trustworthy, and well-aligned with its mission. Strategic recommendations include implementing security headers, adding cookie consent mechanisms, and publishing security and incident response policies to enhance compliance and trust.

F

Fachagentur Nachwachsende Rohstoffe e.V. (FNR)

holzbauplus-wettbewerb.info

62

The website holzbauplus-wettbewerb.info serves as the official platform for the Bundeswettbewerb HolzbauPlus 2025/26, a German federal competition promoting sustainable wood construction projects. It is managed by the Fachagentur Nachwachsende Rohstoffe e.V. (FNR) under the auspices of the German Federal Ministry of Food, Agriculture and Homeland. The site provides comprehensive information about competition goals, categories, jury, archives, and an online application portal. The content is professionally presented, targeting builders, planners, and stakeholders interested in sustainable building practices in Germany. Technically, the website is built on TYPO3 CMS with modern frontend frameworks such as Foundation and uses privacy-conscious Matomo analytics with cookies disabled. The site is mobile-optimized and demonstrates good SEO and accessibility basics. HTTPS is enforced, but security headers are missing, and no cookie consent mechanism is present, indicating areas for improvement in security and privacy compliance. From a security perspective, the site shows a solid posture with secure forms and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and cookie consent could be addressed to enhance compliance and protection. The WHOIS data is malformed and lacks detailed registrant information, likely due to privacy protection, but the website's official nature and government affiliation support its legitimacy. Overall, the website is trustworthy, professionally maintained, and serves an important government function promoting sustainable construction. Strategic recommendations include implementing security headers, adding cookie consent for GDPR compliance, and publishing security and incident response policies to further strengthen trust and compliance.

F

Fachagentur Nachwachsende Rohstoffe e.V. (FNR)

klav.de

45

KLAV is a German government-affiliated competence center focused on reducing food waste across the supply chain sectors including primary production, processing, trade, and out-of-home catering. It operates as part of the National Strategy to reduce food waste and collaborates with economic actors, policymakers, and scientists. The website is professionally designed using TYPO3 CMS and modern frontend technologies, providing comprehensive information, seminar offerings, and sector dialogue facilitation. The technical infrastructure is solid with good mobile optimization and accessibility. Security posture is strong with HTTPS and privacy-conscious analytics (Matomo with disabled cookies), though explicit cookie consent and security policies are missing. Contact information is clearly presented, enhancing trust and credibility. Overall, KLAV presents a trustworthy and authoritative online presence aligned with its governmental mission.

F

Fachagentur Nachwachsende Rohstoffe e. V. (FNR)

klimaanpassung-wald.de

44

The website www.klimaanpassung-wald.de is an official government-related platform operated by the Fachagentur Nachwachsende Rohstoffe e. V. (FNR) that provides comprehensive information and support for the climate-adapted forest management funding program in Germany. It serves private and communal forest owners by offering program details, document submission options, and relevant news. The site is well-positioned as an authoritative source within the forestry and environmental protection sector, supported by government ministries. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and uses Matomo for privacy-conscious analytics. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced, though some security headers are missing and privacy policies are not explicitly presented. Contact information is clearly provided, enhancing trust and credibility.

K

kolle.dev

kolle.dev

50

Kolle.dev is a small digital collaboration service based in Germany, focusing on supporting digital projects through project management, design, programming, and long-term support. The website presents a professional and clean design using modern technologies such as Nuxt.js and Tailwind CSS, indicating a good level of digital maturity. The site is fast, mobile-optimized, and provides clear information about its services and partner projects. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks security headers and formal privacy or cookie policies, which are important for compliance and trust. Overall, the risk is moderate with recommendations to improve privacy compliance and security headers to enhance trust and regulatory adherence.

T

Treestate Productions

treestate.de

63

Treestate Productions is a small media production company based in Germany, specializing in film, photography, and 3D content creation. The website presents a professional and visually appealing interface showcasing their media portfolio. The company maintains an active social media presence on LinkedIn, Facebook, and Instagram, reinforcing their brand identity. The site is built on WordPress with modern plugins for SEO and GDPR compliance, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit security policies. Overall, the website is trustworthy and functional, serving its niche audience effectively.

W

Westermann Gruppe

westermanngruppe.de

10

Westermann Gruppe is a prominent German educational media provider offering a broad range of digital and print educational products, supported by printing and logistics services. The company holds a strong market position in the German-speaking education sector, serving educators, students, and institutions. Their website reflects a professional and consistent brand image with clear navigation and comprehensive business information. Technically, the site is built on TYPO3 CMS with modern web technologies and includes GDPR-compliant cookie consent mechanisms and privacy protections. Security posture is solid with HTTPS enforced and privacy-respecting analytics, though formal security policies and incident response contacts are absent. Overall, the website is trustworthy, well-maintained, and compliant with relevant privacy regulations.

N

Niedersächsische Lotto-Sport-Stiftung

lotto-sport-stiftung.de

56

The Niedersächsische Lotto-Sport-Stiftung is a regional non-profit foundation focused on promoting sports and the integration of people with migration backgrounds in Lower Saxony, Germany. The website serves as an information and engagement platform, offering news, project details, funding opportunities, and community initiatives. It targets local organizations, sports clubs, and integration stakeholders. The foundation maintains a professional online presence with clear branding and consistent messaging aligned with its mission. Technically, the website employs modern web technologies including Vue.js and Bootstrap, with performance and mobile optimization rated as good. The use of Matomo analytics reflects a privacy-conscious approach to user tracking. However, some technical improvements are possible, such as implementing security headers and a cookie consent mechanism to enhance GDPR compliance. From a security perspective, the site uses HTTPS with a strong SSL configuration and no visible vulnerabilities in the HTML content. The absence of explicit security policies or incident response contacts suggests room for maturity in security governance. Overall, the domain registration data aligns well with the foundation's identity, supporting legitimacy and trustworthiness. The website is safe for general audiences, containing no adult or explicit content. It provides valuable resources and engagement channels for its community. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and adding cookie consent to improve compliance and user trust.

K

KraLos GmbH

kralos.eu

56

KraLos GmbH is a German cybersecurity company specializing in developing automated solutions to detect and defend against digital threats such as phishing, web attacks, and data breaches. The company targets businesses of all sizes, with a focus on medium-sized enterprises and international customers. Their key offerings include WEBOUNCER for web application protection, PHISHING GUARD for email and message threat detection, SHADOWKEY for encrypted communications, and a Web Surface Scanner for vulnerability discovery. The website is professionally designed, leveraging WordPress and Elementor, and includes GDPR-compliant cookie consent mechanisms. Social media presence on LinkedIn and Instagram supports their brand visibility. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, KraLos presents a credible and trustworthy business with a solid technical foundation and good privacy compliance.

H

Hannoversche Sportjugend

hannoversche-sportjugend.de

56

Hannoversche Sportjugend is a local youth sports organization affiliated with SSB Hannover, providing news updates and equipment rental services for sports and community events in the Hannover region. The website is built on WordPress using the Avada theme and WooCommerce plugin, indicating a moderate level of digital maturity. The site content is primarily in German and targets local sports clubs and youth. Technically, the site uses modern web technologies but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and privacy compliance mechanisms. No contact or incident response information is provided, which limits trust and compliance. Overall, the site is functional but would benefit from enhanced security, privacy policies, and clearer contact information to improve credibility and compliance.

S

Stadtsportbund Hannover e.V.

ssb-hannover.de

58

Stadtsportbund Hannover e.V. is a well-established non-profit organization dedicated to supporting and promoting club sports in Hannover, Germany. The organization provides advisory, funding, training, and networking services to over 350 sports clubs and related stakeholders. Their website reflects a professional and comprehensive digital presence with clear navigation, rich content, and a focus on community engagement. The target audience includes sports clubs, coaches, volunteers, and sports enthusiasts in the Hannover region. Technically, the website uses modern web technologies including JavaScript, jQuery, Owl Carousel, and SVG graphics, managed via the AmphiCMS platform. Accessibility features such as font size changers and visual assistance tools are implemented, and the site is mobile-optimized with good SEO practices. The presence of a consent management platform ensures compliance with privacy regulations. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or suspicious content were detected. The WHOIS data is limited but does not raise concerns about legitimacy. Overall, the website demonstrates a strong security posture, good privacy compliance, and high business credibility. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further improve trust and security maturity.