Germany security reports

Engagement Global is a German non-profit organization serving as the central contact agency for development policy initiatives. Their mission focuses on fostering fair global coexistence through support, consultation, networking, and financial aid for development projects. The website reflects a professional and consistent brand presence, targeting NGOs, educational institutions, and development actors. Technically, the site is built on the Contao CMS with Bootstrap framework, hosted on Vodafone infrastructure, and integrates modern analytics and cookie consent tools, demonstrating a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, compliant with GDPR, and well-positioned in its sector.

S

Stadt Hennigsdorf

hennigsdorf.de

66

The website represents the Musikschule Hennigsdorf, a municipal music school serving children, youth, and adults in the city of Hennigsdorf, Germany. It is positioned as the second largest music school in the Oberhavel district, offering a wide range of musical education services including early childhood music education, instrumental and vocal lessons, and ensemble participation. The site targets local residents interested in music education and cultural engagement. The business model is public and community-focused, operated under the city administration. Technically, the site uses a mature but somewhat dated technology stack centered around jQuery and various UI libraries, hosted on an IKISS CMS platform. The site is well-structured with good accessibility and mobile optimization, though some modernization opportunities exist. SEO and metadata are well implemented, supporting good discoverability. From a security perspective, the site uses HTTPS (implied by domain and no warnings), has a cookie consent mechanism, and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security headers and incident response information, and uses an older jQuery version which could pose risks. Privacy compliance is strong with a clear privacy policy and cookie banner, aligned with GDPR requirements. Overall, the site is trustworthy and professional, with no signs of malicious content or blocking mechanisms. Recommendations include updating libraries, enhancing security headers, and adding security policy disclosures to improve the security posture and compliance transparency.

L

Löwen Medien Service

loewenmedienservice.de

69

Löwen Medien Service is a specialized educational media distributor operating under the Westermann Gruppe umbrella, focusing on supplying schools and educators in Germany with a comprehensive range of teaching materials from all publishers. Their business model emphasizes convenience through no minimum order values, statutory discounts, free shipping, and tailored packaging and delivery services. The website reflects a professional and consistent brand presence with good content quality and user experience. Technically, the site is built on TYPO3 CMS with modern libraries and frameworks, hosted by a reputable provider, and includes privacy-conscious analytics via Matomo with cookie consent managed by Klaro. Security posture is solid with HTTPS and form protections, though lacking explicit security headers and published security policies. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.

S

solute GmbH

solute.de

9

solute GmbH is a small e-commerce company based in Karlsruhe, Germany, specializing in e-commerce solutions and consulting services. The website emphasizes company culture, vision, and career opportunities, targeting businesses and professionals interested in e-commerce. Technically, the site is built on Weblication® CMS and hosted behind Cloudflare, indicating a moderate level of digital maturity with standard security and performance measures. The presence of LinkedIn Insight tracking shows some marketing sophistication. Security posture is adequate with HTTPS and Cloudflare protection, but lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms, which are important for trust and compliance. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and safe but could improve transparency and compliance documentation.

The website anneschwalbe.shop is a small-scale e-commerce platform specializing in the sale of art prints, posters, books, and clothing related to the photography and art of Anne Schwalbe. The business operates primarily in Germany and targets art collectors and enthusiasts. The site is built on the Shopify platform, leveraging its infrastructure and security features. The technical infrastructure is modern and well-optimized for mobile and desktop users, with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and domain locking enabled, though DNSSEC is not enabled and some HTTP security headers could be improved. Privacy compliance is addressed with a cookie consent banner and a privacy policy, but lacks explicit GDPR or incident response details. Overall, the site presents a professional and trustworthy e-commerce experience with room for enhanced security and compliance documentation.

E

eichels GmbH

eichels-event.com

50

eichels GmbH is a German-based event management and marketing company specializing in emotional marketing, event planning, innovation marketing, and network strategies. The company targets corporate clients seeking impactful and sustainable event experiences. Their website is professionally designed using TYPO3 CMS and modern frontend libraries, providing a good user experience with mobile optimization and clear navigation. Contact information and privacy compliance measures such as cookie consent and privacy policy are present, supporting trustworthiness. However, the absence of WHOIS registration data raises concerns about domain legitimacy and requires further verification. Security posture is moderate with HTTPS enabled and spam-protected emails, but lacks visible security headers and explicit security policies. Overall, the website is functional and professional but would benefit from enhanced security practices and domain registration transparency.

H

Handicap Kickers Hannover e.V.

handicap-kickers.de

57

Handicap Kickers Hannover e.V. is a non-profit inclusive youth football club based in Germany, focusing on integrating children and adolescents with and without handicaps. The organization operates multiple training locations and organizes inclusive football leagues and tournaments, positioning itself as a regional leader in inclusive sports. The website is built on WordPress with a modern theme and plugins, demonstrating a moderate level of digital maturity with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and GDPR-compliant cookie consent mechanisms, though security headers and explicit security policies are absent. Overall, the site is trustworthy, professional, and serves its community effectively.

I

Indo-German Center For Higher Education

igche.de

48

The Indo-German Center For Higher Education (IGCHE) operates as a consortium of German universities offering bilingual engineering degree programmes that facilitate student exchange and cultural integration between India and Germany. The website clearly communicates its educational mission, target audience of prospective engineering students, and key services including German language training and internships. Technically, the site is built on RapidWeaver CMS with Stacks, uses Matomo for privacy-conscious analytics, and demonstrates good mobile responsiveness and navigation clarity. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and incident response policies are absent. Overall, the site is professional, trustworthy, and well-aligned with its educational objectives.

H

Hochschulen für Angewandte Wissenschaften Baden-Württemberg e.V.

hochschulen-bw.de

57

Hochschulen für Angewandte Wissenschaften Baden-Württemberg e.V. (HAW BW e.V.) is a regional association representing 21 state and 3 church-affiliated universities of applied sciences in Baden-Württemberg, Germany. The organization fosters collaboration among member institutions and advocates their interests in public and political spheres. The website reflects a professional and comprehensive digital presence, targeting students, academic stakeholders, and policymakers. It offers information on services, research, study programs, and upcoming events, positioning itself as a key regional educational entity. The technical infrastructure is based on WordPress CMS with the Avada theme, enhanced by plugins such as Slider Revolution, Logo Carousel Pro, and Matomo for analytics. Hosting is provided by kasserver.com, with modern web technologies and good mobile optimization. The site implements GDPR-compliant privacy and cookie policies with a consent mechanism, indicating a mature approach to privacy and data protection. Security posture is solid with HTTPS enforced, cookie consent, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are absent, representing an area for improvement. The website is free from WAF or security challenge blocks, allowing full content accessibility. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance suitable for an educational association. Strategic recommendations include enhancing security transparency, publishing incident response information, and adopting advanced HTTP security headers to further strengthen the security posture.

B

Bosch Sicherheitssysteme GmbH

boschbuildingsolutions.com

54

Bosch Energy and Building Solutions Global operates as a key integrator business within Bosch Building Technologies, delivering connected and integrated building solutions focused on safety, comfort, and energy efficiency. The company targets business customers such as building managers and energy professionals, offering services including building automation, security and life safety, energy services, and digital solutions like the NEXOSPACE Energy Manager. The website reflects a strong global market presence with consistent branding and professional content. Technically, the website employs modern web technologies including Google Tag Manager, YouTube iframe API, and custom web components for privacy management. It is mobile-optimized, accessible, and SEO-friendly, though no specific CMS or hosting provider is identified. Performance is moderate with good user experience and navigation clarity. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security policies, incident response information, and security headers. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a concern but the website's professional appearance and trusted external links mitigate some risk. Overall, the website is trustworthy and professionally managed, though improvements in transparency around security policies and domain registration details are recommended to enhance credibility and compliance.

B

Bosch Climate Solutions

bosch-climate-solutions.com

59

Bosch Climate Solutions is a sustainability consultancy focused on helping SMEs and industrial companies achieve sustainability goals and comply with European sustainability reporting requirements such as CSRD. The company leverages Bosch's industrial heritage and expertise to provide customized climate protection and energy efficiency consulting services. The website is built on the HubSpot CMS platform, incorporating modern JavaScript libraries and marketing tools such as Google Tag Manager and HubSpot Analytics. While the site is professionally designed and mobile optimized, it lacks visible privacy and cookie policies despite using tracking technologies, which is a compliance gap. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. The domain registration is consistent and legitimate, supporting the business claims. Overall, the website presents a trustworthy and professional image but should improve privacy compliance and security best practices.

B

Brain City Berlin

braincity.berlin

53

Brain City Berlin is an information and networking platform dedicated to promoting Berlin as a leading science metropolis in Europe. The website provides comprehensive content about research developments, funding opportunities, events, and a vibrant ambassador program featuring prominent figures from Berlin's scientific community. The platform targets researchers, academics, students, and stakeholders interested in Berlin's science ecosystem. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates consent management for GDPR compliance. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers and policies are not evident. Overall, the site is professional, content-rich, and trustworthy, with good user experience and mobile optimization.

S

SIGNAL IDUNA

signal-iduna.de

68

SIGNAL IDUNA is a well-established German insurance and financial services group with over 100 years of history. The company offers a broad portfolio of insurance products including health, life, property, liability, motor, accident, and travel insurance, supported by digital customer portals and mobile applications. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site is built on Adobe Experience Manager, leveraging modern web technologies and consent management tools to ensure GDPR compliance. Security posture is solid with HTTPS and consent mechanisms in place, though explicit security headers should be verified. Overall, the site demonstrates high professionalism and trustworthiness, with no signs of blocking or malicious content.

H

HANSAINVEST Hanseatische Investment-GmbH

hansainvest.com

59

HANSAINVEST Hanseatische Investment-GmbH is a leading German service capital management company specializing in fund administration across all relevant asset classes. The company emphasizes personalized service and comprehensive fund partner support, positioning itself as a key player in the German financial services market. Their website offers extensive fund listings, financial calculators, and compliance information, targeting institutional investors and financial professionals. Technically, the website is built on a custom CMS with Bootstrap and jQuery, providing a responsive and well-structured user experience. Security posture is strong with HTTPS enforcement, security headers, and ISO 27001 certification, though DNSSEC is not enabled, representing an area for improvement. Privacy compliance is robust with clear privacy and cookie policies and GDPR adherence. Overall, the website reflects a mature, professional, and trustworthy financial services provider with a solid digital presence.

Zahlenzorro is an educational online platform operated by the Westermann Gruppe, offering interactive math exercises targeted at primary school students (grades 1-4) in Germany. The platform provides engaging math stories, training apps, and classroom management tools with a subscription-based licensing model for individuals, classes, schools, and school districts. The website is professionally designed with consistent branding and clear navigation, supporting both desktop and mobile devices. It integrates Piwik analytics with privacy-conscious settings and links to reputable educational partners. Security posture is moderate with HTTPS usage and some privacy considerations, but lacks explicit security headers and published security policies. Contact information and trust signals such as awards and partner logos enhance credibility. Overall, the site is safe, compliant with GDPR, and well-positioned in the German educational market.

W

Westermann Gruppe

grundschuldiagnose.de

55

The website grundschuldiagnose.westermann.de is a professionally developed educational platform operated by the Westermann Gruppe, targeting German primary school educators with online diagnostic tests and differentiated learning materials for German and Mathematics. The platform offers subscription-based licenses for classes, schools, and school districts, supported by a centralized student management system and integration with partner educational services. The site is built on TYPO3 CMS with modern frontend technologies, providing a responsive and accessible user experience. Security posture is solid with HTTPS enforced, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a clear privacy policy but no cookie consent mechanism detected. Contact information is clearly provided, and the site holds a child-safe certification (fragFINN). Overall, the site is trustworthy, well-branded, and serves a clear educational niche.

W

Westermann

bibox.schule

72

The website www.bibox.schule is a professionally designed digital education platform operated by Westermann Gruppe, a well-established educational publisher in Germany. It offers digital textbooks and teaching materials tailored for various school levels including Grundschule, Mittlere Schulformen, Gymnasium, and Berufliche Bildung. The platform targets schools, teachers, and students primarily in German-speaking countries, providing apps and licensing services to facilitate digital learning. The site demonstrates a strong market position within the education sector, leveraging digital transformation to enhance traditional educational content delivery. Technically, the website is built on TYPO3 CMS and integrates modern analytics and marketing tools such as Matomo, Google Tag Manager, and Meta Pixel, all managed with a clear cookie consent mechanism compliant with GDPR. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. However, some security headers appear missing, and no explicit security or incident response policies are published, indicating areas for improvement. From a security perspective, the site uses HTTPS with good SSL configuration and respects user privacy through consent-based tracking. No critical vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data limits domain registration trust analysis, but the website’s branding, contact information, and domain usage strongly indicate legitimacy. Overall, the site maintains a good security posture with room for enhancement in security policy transparency and header implementation. The overall risk assessment is low, with recommendations focusing on improving security headers, publishing a security policy, and adding a vulnerability disclosure mechanism. These steps would enhance trust and compliance, supporting the platform’s role as a reliable digital education provider.

W

Westermann

alfons.de

59

ALFONS Online-Lernwelt is an educational platform operated by Westermann, targeting primary school students, teachers, and parents in Germany. It offers interactive learning games for German, Mathematics, and English, supported by detailed evaluation tools and a centralized student management system. The platform is positioned as a reputable and certified educational service with a medium-sized market presence in the German education sector. Technically, the website is built on Angular 9 with modern web standards, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enforced, but lacks some advanced security headers and explicit incident response information. Privacy compliance is mostly met with a clear privacy policy, though cookie consent mechanisms are missing. Overall, the site is professional, trustworthy, and safe for its intended audience.

W

Westermann Gruppe

westermann.de

72

Westermann Gruppe operates a comprehensive educational media and services platform primarily targeting teachers, parents, students, and educational professionals in German-speaking countries. The website offers a broad range of services including educational books, digital learning platforms like BiBox, teacher training webinars, school consulting, and an online shop. The company is positioned as a large, established player in the education sector with consistent branding and a professional online presence. Technically, the website employs modern web technologies, including JavaScript frameworks, responsive design, and lazy loading for images, ensuring a good user experience across devices. The site is well-optimized for SEO and accessibility, with clear navigation and rich content. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. However, it lacks explicit security headers and a published security policy or incident response contact, which are areas for improvement. Overall, the website is safe, trustworthy, and professionally maintained, with no signs of adult or questionable content. The domain registration appears legitimate though limited WHOIS data restricts full verification. Strategic recommendations include enhancing security headers, publishing a security policy, and establishing a vulnerability disclosure process to further strengthen trust and compliance.

S

stafftastic GmbH

praktikumswoche.de

60

Praktikumswoche.de is a German educational platform operated by stafftastic GmbH that facilitates internship weeks for students across over 200 regions in Germany. The platform enables students to explore different companies and professions by participating in daily internships during the holidays. It serves both students and companies, offering free registration and participation. The website is well-positioned in the education sector with strong media recognition and a broad regional presence. Technically, the website employs a modern tech stack including Bootstrap, jQuery, FontAwesome, and Cookiebot for cookie consent management. Hosting is managed via Google Domains, and privacy-respecting analytics are implemented using Plausible Analytics. The site is mobile-optimized with good SEO and accessibility basics. From a security perspective, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. Cookie consent is properly implemented, and privacy is respected with no-cookie YouTube embeds. However, security headers are not explicitly detected, and no public security policy or incident response contacts are provided, which could be improved. Overall, the website is trustworthy, professional, and compliant with GDPR. It lacks explicit contact information on the main page but provides social media links and a privacy policy. The domain registration is consistent and legitimate, supporting the platform's credibility.

P

Präsenzstelle O-H-V | Velten

praesenzstelle-velten.de

59

The Präsenzstelle O-H-V | Velten website serves as a regional hub connecting higher education institutions in Brandenburg with local communities, students, and businesses. It provides access to teaching and research, facilitates networking, and offers consultation services. The site is positioned as a non-profit educational and research facilitation center with strong partnerships including Technische Hochschule Brandenburg, Universität Potsdam, and regional economic development entities. The content is well-structured, professionally presented, and targets a broad audience including students, citizens, and companies in the region. Technically, the website is built on TYPO3 CMS, employs modern web standards, and is mobile-optimized with good accessibility and SEO practices. The site uses HTTPS exclusively and implements a GDPR-compliant cookie consent mechanism. However, it lacks visible security headers and explicit security or incident response policies. Analytics usage is minimal and privacy-conscious, relying on Matomo. From a security perspective, the site demonstrates a solid baseline with HTTPS and cookie consent but could improve by adding security headers and publishing security policies or vulnerability disclosure information. No critical vulnerabilities or suspicious patterns were detected. The domain registration data aligns well with the website's claims, supporting legitimacy and trustworthiness. Overall, the website is a credible, well-maintained regional educational platform with good content quality and technical implementation. Strategic improvements in security policy transparency and header implementation would enhance its security posture and trust further.

W

wedooper

karriere-hennigsdorf.de

37

The Karriereportal Hennigsdorf is a regional career portal focused on connecting companies in Hennigsdorf with young talents seeking internships, apprenticeships, study opportunities, and jobs. The platform is operated by wedooper in collaboration with the city's economic development office, positioning itself as a niche regional service provider in the education sector. The website is well-structured, with clear navigation and relevant content tailored to its target audience of local companies and job seekers. Technically, the site uses modern web technologies including jQuery, Swiper.js, and Modernizr, and is served over HTTPS with a cookie consent mechanism in place, though it lacks advanced security headers and analytics integration. Security posture is moderate with no critical vulnerabilities detected, but improvements are recommended in security headers and incident response transparency. Overall, the site is safe, professional, and trustworthy with a good balance of privacy compliance and user experience.

M

media touch

mediatouch.de

45

media touch is a German technology company operating a website powered by TYPO3 CMS, targeting German-speaking users. The company appears to provide digital technology services, though specific services are not detailed in the provided content. The website uses modern frontend technologies including Bootstrap and jQuery, and integrates Usercentrics for GDPR-compliant cookie consent management. Hosting is provided by Schlundtech, a German hosting provider, consistent with the website's regional focus. Security posture is moderate with HTTPS enabled and consent management in place, but lacks explicit privacy policies, terms of service, and security headers. Contact information and incident response details are not present, limiting transparency and trust. Overall, the website is professionally designed and mobile-optimized but could improve in privacy and security disclosures.

M

MINT

mint-frauen-bw.de

66

The website mint-frauen-bw.de represents a regional initiative in Baden-Württemberg, Germany, focused on promoting women in STEM (MINT) careers. It provides educational measures, workshops, and career planning support targeting women interested in STEM fields. The site is built on WordPress using the Avada theme and includes SEO and accessibility features, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and cookie consent implemented, but lacks explicit privacy policies, terms of service, and security headers. Contact information is not readily available, which may impact user trust and compliance. Overall, the site is professional and trustworthy for its purpose but could improve in privacy and security transparency.

H

Hochschulallianz für Angewandte Wissenschaften (HAWtech)

hawtech.de

46

HAWtech is a German university alliance focused on applied sciences and engineering education, uniting six leading universities of applied sciences. The website serves as an information portal for students, researchers, and industry partners, emphasizing collaboration in teaching, research, and innovation. Technically, the site is built on TYPO3 CMS with modern JavaScript frameworks and includes privacy-compliant cookie consent and analytics via Matomo. Security posture is solid with HTTPS and no visible vulnerabilities, though formal security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and well-maintained, supporting the alliance's mission effectively.

explorhino is a German educational science center focused on interactive learning experiences for children, families, and schools. It offers hands-on exhibits, workshops, courses, and events designed to engage young learners in science and technology. The website reflects a well-structured and professionally designed platform that supports its educational mission with clear navigation and relevant content. Technically, the site is built on WordPress with modern plugins for SEO, event management, and GDPR compliance, ensuring a good digital maturity level. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy, compliant with privacy regulations, and provides clear contact information and social media presence.

S

Viele Hochschulen. Ein Ziel. Ihr Weiterkommen.

suedwissen.de

57

The website www.suedwissen.de serves as an educational platform focused on providing information about multiple universities and supporting educational advancement, primarily targeting students and prospective university attendees in Germany. The site features a modern technical infrastructure utilizing JavaScript frameworks such as Vue.js, with Cookiebot managing cookie consent and Matomo for analytics, hosted on bunny.net's infrastructure. While the site demonstrates good design quality and user experience with mobile optimization, it lacks explicit privacy policies, terms of service, and contact information, which are critical for compliance and user trust. Security posture is moderate, with no detected security headers or incident response policies, indicating room for improvement in security best practices. Overall, the site is safe for general audiences and does not contain adult or questionable content.

G

Graduate Campus Hochschule Aalen

learniac.org

43

Graduate Campus Hochschule Aalen operates as a professional continuing education provider offering a range of courses primarily in technology, business, and digital transformation. The platform leverages modern online delivery methods including live-online sessions and e-learning modules, targeting professionals seeking flexible and compact learning formats. The website is built on TYPO3 CMS and integrates cookie consent management and analytics tools, reflecting a moderate to advanced digital maturity. Security posture is solid with HTTPS and consent mechanisms, though lacks published privacy and security policies. Overall, the site presents a trustworthy and professional educational service with room for improvement in compliance documentation and security transparency.

T

Taxmaster

taxmaster.de

66

Taxmaster.de is an educational website focused on providing a Master of Taxation degree and tax consultancy training in Germany. The site targets students and professionals interested in taxation, offering dual qualifications. The business operates in the education sector with a niche focus on taxation studies. The website is built on TYPO3 CMS and integrates modern technologies such as Google reCAPTCHA, Cookiebot for consent management, and Google Tag Manager for analytics. The technical infrastructure is solid with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and consent mechanisms in place, though some security headers and explicit policies could be improved. Privacy compliance is strong, with comprehensive cookie policies and GDPR adherence. Overall, the site is professional, trustworthy, and well-positioned within its market niche.

G

Graduate Campus Hochschule Aalen

graduatecampus.de

43

Graduate Campus Hochschule Aalen is a reputable educational institution specializing in professional continuing education and part-time study programs including Bachelor and Master degrees, certificates, and courses primarily in technology, business, and IT sectors. The website reflects a strong market position in Germany with a focus on flexible learning formats such as blended learning, online, and on-campus options. The institution leverages modern digital tools including TYPO3 CMS, Google Tag Manager, and Usercentrics for consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security policies and incident response contacts are absent. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

S

Studierendenwerk Ulm

studierendenwerk-ulm.de

61

Studierendenwerk Ulm is a non-profit public institution dedicated to supporting the social needs of students in Ulm and surrounding academic institutions. The organization provides a broad range of services including student housing, cafeteria and food services, financial aid consulting (notably BAföG), psychosocial and legal counseling, childcare support, and services for international students. The website reflects a well-established regional leader in student social services with a clear focus on accessibility and comprehensive support. Technically, the website is built on WordPress with common plugins such as Events Manager and AIOSEO, leveraging jQuery and RoyalSlider for interactive elements. The site is served over HTTPS with a Content-Security-Policy header, indicating a good baseline security posture. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured data. Security-wise, the site benefits from HTTPS and some security headers but lacks others like HSTS and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial; while a comprehensive privacy policy is present, no cookie consent mechanism was found, which may pose GDPR compliance risks. Contact information is available, though no direct company emails are exposed on the site. Overall, the website is trustworthy, professional, and well-aligned with its mission. Strategic improvements in privacy compliance and security headers would enhance its security posture and regulatory adherence.

B

Bosch Building Automation GmbH

gfr.de

56

Bosch Building Automation GmbH, formerly GFR mbH, is a subsidiary of the Bosch Group specializing in innovative building automation solutions focused on comfort, efficiency, and sustainability. The company leverages Bosch's strong brand and technological expertise to serve facility managers, building owners, and energy managers primarily in Germany. Their offerings include system automation, room automation, building management software, and related services. The website is professionally designed, well-structured, and provides comprehensive information about their portfolio and corporate identity. Technically, the site uses modern web technologies including Google Tag Manager and Qualtrics for analytics and surveys, with good mobile optimization and accessibility. Security posture is solid with HTTPS and consent management, though explicit security policies and incident response details are absent. WHOIS data is unavailable, which slightly reduces transparency but does not detract significantly from trust given the strong Bosch affiliation and professional presentation. Overall, the site demonstrates a mature digital presence aligned with Bosch's corporate standards.

N

Net at Work GmbH

netatwork.de

60

Net at Work GmbH is a German technology company specializing in Microsoft solutions such as Microsoft 365, Teams, Security, SharePoint, and Exchange. The company positions itself as an experienced Microsoft Solutions Partner, offering consulting, migration, managed services, and change management to enable modern, secure digital workplaces. Their website reflects a professional and consistent brand image targeting business customers seeking Microsoft-based collaboration and security solutions. Technically, the website is built on WordPress with a modern theme and plugins, including Borlabs Cookie for GDPR-compliant cookie consent and Google Analytics for tracking. Security posture is good with HTTPS and cookie consent, but lacks visible advanced security headers and explicit security policies. Privacy compliance is partial due to missing explicit privacy and terms of service pages. WHOIS data is minimal but consistent with the business location and domain usage. Overall, the website is professional, trustworthy, and well-maintained, with room for improvement in privacy transparency and security documentation.

W

WInTO GmbH – Wirtschafts-, Innovations- und Tourismusförderung Oberhavel GmbH

youlab.de

51

youlab.de is the official website for the youlab career and educational fair organized by WInTO GmbH, serving the Oberhavel region in Germany. The site provides comprehensive information about the event, including exhibitor registration, apprenticeship opportunities, and media impressions. It targets students, young job seekers, and local companies, positioning itself as the largest career orientation fair in the region. The business model focuses on event organization and promotion, supported by local government and industry partners. Technically, the website is built on a modern stack including HTML5, CSS3, JavaScript, and uses Cookiebot for consent management and Matomo for analytics. The CMS appears to be Redaxo, inferred from media URL patterns. The site is hosted on servers indicated by the nameservers your-server.de and second-ns.de. Performance and mobile optimization are good, with basic accessibility and SEO features implemented. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism with blocking mode. No critical vulnerabilities or exposed sensitive data were detected. However, security headers are not explicitly observed in the provided data, and no published security or incident response policies were found. Privacy compliance is strong, with a clear privacy policy and cookie management aligned with GDPR requirements. Overall, the website is professional, trustworthy, and well-suited for its educational purpose. Recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and continuing to monitor third-party scripts for security risks.

W

WInTO GmbH

gruenderservice-oberhavel.de

47

WInTO GmbH operates the Gründerservice Oberhavel website, providing comprehensive support and consulting services for business founders in the Oberhavel region of Germany. The company focuses on guiding entrepreneurs through orientation, planning, implementation, and consolidation phases of business establishment. The website serves as a regional government-related platform to foster a startup-friendly environment with clear contact points and event information. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Font Awesome icons, and Swiper.js for UI components. Cookie consent is managed via Cookiebot, ensuring GDPR compliance, and user analytics are handled through Matomo with cookies disabled to enhance privacy. The site is mobile-optimized and presents a professional design with good navigation clarity. From a security perspective, the site uses HTTPS and integrates cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or suspicious elements were detected in the content or WHOIS data. The domain registration information is minimal but consistent with the business claims. Overall, the website is a trustworthy, professional resource for its target audience, with moderate technical sophistication and good privacy compliance. Strategic improvements in security headers, incident response transparency, and SEO could further enhance its posture and user trust.

F

fib Oberhavel

fib-oberhavel.de

49

fib Oberhavel is a regional workforce information office operating under the WInTO GmbH umbrella, focused on supporting companies, schools, and higher education institutions in the Oberhavel district of Germany. It provides coordination, networking, and advisory services to address the growing demand for skilled workers in the region. The website presents a professional and content-rich platform with clear navigation and responsive design, targeting local businesses, students, and educational institutions. Technically, the site uses modern front-end technologies including Font Awesome, Bootstrap, and Cookiebot for consent management, alongside Matomo for privacy-conscious analytics. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and explicit policies could be improved. Overall, the site demonstrates a good balance of usability, privacy compliance, and business credibility, suitable for a government-affiliated entity.

fairplaid.org is a German crowdfunding platform specializing in sports projects, enabling sports clubs and athletes to raise funds for their initiatives. The platform has been operational since 2012, indicating a mature presence in its niche market. The website is well designed with good content relevance and user experience, targeting sports organizations and individuals in Germany. The technical infrastructure leverages modern JavaScript frameworks and integrates multiple analytics and marketing tools while maintaining user privacy through cookie consent and IP anonymization. Security posture is solid with HTTPS enforced and domain registration protections in place, though improvements such as enabling DNSSEC and adding security headers could enhance resilience. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism, but the absence of terms of service and explicit security policies is noted. Overall, the site demonstrates a professional and trustworthy online presence with moderate to good technical and security maturity.

T

TARGOBANK

targobank.de

66

TARGOBANK is a well-established German financial institution offering a broad range of banking products including loans, accounts, cards, savings, investments, and insurance. The website targets private, business, and corporate customers with a strong emphasis on flexible, customer-centric financial solutions. The bank maintains a significant physical presence with approximately 340 branches and complements this with a robust digital platform featuring online banking and mobile apps. The site content is professional, comprehensive, and well-structured, reflecting a mature business model in the banking sector. Technically, the website employs modern web technologies including asynchronous JavaScript, CSS, and uses third-party services such as Google Tag Manager and TagCommander for analytics and consent management. The site is hosted on a CDN, ensuring moderate to good performance and excellent mobile optimization. Accessibility features and SEO best practices are well implemented. From a security perspective, the site enforces HTTPS, includes multiple security headers, and integrates a consent management platform to comply with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, explicit incident response contacts and vulnerability disclosure mechanisms like security.txt are not found, representing an area for improvement. Overall, the website demonstrates a high level of professionalism, security, and compliance suitable for a large financial institution. Strategic recommendations include enhancing transparency around security incident response and vulnerability disclosure to further strengthen trust and security posture.

V

VGH Stiftung

nsks.de

50

The website www.nsks.de represents the Niedersächsische Sparkassenstiftung (NSKS) and the VGH Stiftung, two cultural foundations focused on promoting arts, music, museums, monument preservation, and sustainability projects in Lower Saxony, Germany. The platform serves as an information hub for cultural awards, events, and funding opportunities, targeting cultural institutions, artists, and the general public interested in regional culture. The business model is non-profit, emphasizing cultural support and community engagement. Technically, the website is built on WordPress with a modern tech stack including Bootstrap for responsive design, Yoast SEO for search optimization, and Borlabs Cookie for cookie consent management. Hosting is provided via DomainDiscount24, and the site uses HTTPS with a good SSL configuration. The site is moderately performant and well-optimized for mobile devices, though accessibility features are basic. From a security perspective, the site benefits from HTTPS and cookie consent mechanisms but lacks visible security headers and explicit privacy policies. No vulnerability disclosures or incident response contacts are present, which could be improved to enhance trust and compliance. No WAF or blocking mechanisms were detected, and no adult or questionable content is present, making the site safe for general audiences. Overall, the website is professional and trustworthy, with good content quality and business credibility. However, improvements in privacy policy publication, security headers, and contact information would strengthen its security posture and compliance with GDPR requirements.

C

CELLEHEUTE.DE | Nachrichten für Stadt und Landkreis Celle

celleheute.de

54

The website www.celleheute.de appears to be a small-scale local news or information portal based in Germany, built using the Wix platform. The site uses standard Wix hosting and scripts, including Google Tag Manager and Facebook Pixel for analytics and tracking. However, the website lacks critical privacy and cookie policies, contact information, and security policies, which impacts its overall trustworthiness and compliance posture. The content quality is minimal based on the provided HTML snapshot, and no structured data or Open Graph metadata is present to enhance SEO or social sharing. Technically, the site benefits from HTTPS and Wix's hosting infrastructure but lacks advanced security headers and accessibility features.

W

Westermann Gruppe

antolin.de

60

Antolin by Westermann Gruppe is a well-established educational platform focused on promoting reading skills among students from grades 1 to 10. The platform offers a vast database of quizzes related to children's and youth literature, enabling self-directed learning and performance tracking. The website is professionally designed, mobile-optimized, and provides comprehensive content relevant to its target audience of students, teachers, parents, and libraries. The business model revolves around licensing and subscriptions for schools, with free trial options available. Recognized certifications and awards enhance its market credibility. Technically, the website employs a modern tech stack including jQuery, Flexslider, and Piwik (Matomo) for analytics, with responsive design and good SEO practices. However, some security best practices such as security headers and cookie consent mechanisms are missing or not detected, which could be improved to enhance GDPR compliance and security posture. The site uses HTTPS and disables cookies in analytics to protect user privacy. From a security perspective, the site shows a moderate security maturity with no visible vulnerabilities or exposed sensitive data. The absence of a published security policy or incident response contact limits transparency. The WHOIS data is partially consistent but lacks detailed registrant information, though no suspicious patterns are detected. Overall, the domain and website appear legitimate and trustworthy. Strategically, the platform should focus on improving privacy compliance by implementing cookie consent banners, publishing security policies, and adding incident response contacts. Enhancing security headers and conducting regular security audits would further strengthen its security posture. These improvements will support trust and compliance in the education sector, ensuring continued growth and user confidence.

D

Discover-Culture

discover-culture.com

63

Discover-Culture is a small media company based in Germany, specializing in digital cultural tours, VR experiences, and interactive cultural media. The website offers digital tours and cultural films accessible without restrictions after purchase, targeting a general audience interested in culture and art. The business model is primarily e-commerce focused on digital content delivery. Technically, the website is built on WordPress with WooCommerce, integrating modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and HubSpot. Hosting is via Amazon AWS infrastructure, ensuring reliable performance and scalability. Security posture is good with HTTPS enforced and domain transfer protection, though the absence of DNSSEC and explicit security headers suggests room for improvement. Privacy compliance is partial, with a cookie policy and consent mechanism present but lacking explicit privacy and terms of service pages. Overall, the website is professional, well-branded, and functional, with moderate trustworthiness and a solid technical foundation.

P

Prosegur Deutschland

prosegur.de

72

Prosegur Deutschland is a leading security and cash management service provider in Germany, specializing in secure transportation and handling of physical and digital assets. The company positions itself as the market leader in Germany, serving B2B clients including banks, public institutions, and enterprises. Their comprehensive service portfolio includes cash management outsourcing, cash deposit solutions, technical services, and high-security storage. Technically, the website employs modern tracking and consent management tools, hosted on a reputable CDN provider (Akamai), and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting Prosegur's strong market presence.

F

Flüchtlingsrat RLP e.V.

civi-kune-rlp.de

46

civi kune RLP is a non-profit project operated by Flüchtlingsrat RLP e.V., focusing on refugee support, community engagement, and volunteer coordination in the German state of Rheinland-Pfalz. The website serves as an informational hub providing news, event updates, and resources for volunteers and refugees. It maintains a consistent brand identity aligned with its parent organization and regional government partners. Technically, the site is built on WordPress, leveraging standard web technologies and hosted by Manitu GmbH. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some advanced security headers and formal security policies. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, serving its community-focused mission effectively.

P

Paulo Fernandes & André Kleegräfe GbR

u21.de

53

U21 mediendesign is a small, owner-operated media design agency based in Hannover, Germany, founded in 1999. The company specializes in responsive web design, Typo3 CMS implementations, SEO, SEA, and app programming, targeting businesses seeking professional digital presence solutions in the Hannover region. Their market position is that of an established regional player with over two decades of experience, offering comprehensive digital services with a focus on quality and client trust. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as jQuery, FontAwesome, Google reCAPTCHA, and Typekit fonts. The hosting is managed via kasserver.com, and the site demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with room for optimization. The site includes a cookie consent mechanism and uses Matomo analytics with transparent data retention policies. From a security perspective, the site enforces HTTPS and uses reCAPTCHA for form protection. Cookie consent is granular and GDPR compliant. However, explicit security headers are not detected, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were found. The WHOIS data aligns with the business claims, showing a consistent domain age and hosting setup. Overall, the website presents a professional, trustworthy, and compliant digital presence with minor areas for security and technical enhancement. The risk level is low, with recommendations to improve security headers, publish security policies, and consider vulnerability disclosure mechanisms to further strengthen trust and compliance.

S

Störungsauskunft.de

xn--strungsauskunft-9sb.de

42

Störungsauskunft.de is a specialized German website providing real-time information on utility outages including electricity, gas, water, district heating, and street lighting. It serves end consumers in Germany by offering outage maps and reporting tools, positioning itself as a niche information portal in the energy sector. The website leverages modern web technologies such as Angular and Google Maps API to deliver an interactive and responsive user experience. Security posture is solid with HTTPS and standard security headers implemented, though it lacks explicit incident response and vulnerability disclosure mechanisms. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the site is professional, trustworthy, and focused on delivering relevant utility outage information to its audience.

R

rapidmail

emailsys1a.net

55

Rapidmail operates as a German-based email marketing and servicedomain provider targeting businesses and marketers primarily in German-speaking regions. The website presents a professional but basic digital presence with a focus on servicedomain offerings. The technical infrastructure is standard, utilizing modern web fonts and CSS, hosted with DNS Made Easy, indicating a reliable DNS setup. However, the site lacks visible advanced frameworks or CMS indications. Security posture is minimal with no detected security headers or incident response information, and privacy compliance is not evident due to missing privacy and cookie policies. Overall, the site is accessible and safe but would benefit from enhanced security and compliance features to strengthen trust and regulatory adherence.

H

HANSAINVEST Hanseatische Investment-GmbH

hansainvest.de

59

HANSAINVEST Hanseatische Investment-GmbH is a leading German capital management company specializing in fund administration and comprehensive fund solutions across all relevant asset classes. The company positions itself as a trusted partner for fund partners and asset managers, offering services including insourcing and Luxembourg-based fund solutions through its subsidiary HANSAINVEST LUX S.A. The website is professionally designed, content-rich, and targets institutional investors and potential employees. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and frameworks, hosted by Schlund Technologies, and optimized for mobile devices. Security posture is strong with HTTPS and GDPR compliance via Usercentrics, though some security headers could be improved. No blocking or WAF challenges were detected, and the domain registration is consistent with the business claims, indicating a legitimate and trustworthy online presence.

E

ETHENEA Independent Investors S.A.

ethenea.link

69

ETHENEA Independent Investors S.A. operates as an independent asset management company specializing in multi-asset investment funds, targeting both private and professional investors primarily in Germany. The website presents a professional and well-structured digital presence, showcasing their key fund offerings such as Ethna Funds and HESPER FUND, along with ESG investment principles. The company positions itself as a strong, independent partner in asset management with a focus on capital preservation and growth across various risk profiles. Technically, the website leverages modern JavaScript libraries, cookie consent management tools, and Google Tag Manager for analytics, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms, although explicit security headers and incident response information are not evident. The absence of WHOIS data reduces domain registration transparency but does not detract significantly from the overall legitimacy given the professional content and compliance indicators. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving contact information visibility to strengthen trust and compliance further.

3

3Q GmbH

3q.video

73

3Q GmbH is a German-based technology company specializing in professional video streaming and hosting solutions. Their platform offers a comprehensive suite of services including live streaming, video hosting, webcasting, video analytics, and AI-powered video optimization. Positioned as a GDPR-compliant and ISO 27001 certified provider, 3Q targets businesses and organizations requiring secure, scalable, and flexible video infrastructure primarily in Europe but also worldwide. The company operates its own infrastructure, ensuring data sovereignty and reliability. Technically, the website demonstrates a mature digital presence with modern web technologies such as HTML5, JavaScript, HubSpot integration, and Cookiebot for consent management. The proprietary 3Q video player and content delivery network underline their technical capabilities. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a high level of digital maturity. From a security perspective, 3Q maintains strong practices including HTTPS enforcement, security headers, GDPR compliance, and ISO 27001 certification. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public vulnerability disclosure or incident response contact is noted as an area for improvement. Overall, 3Q GmbH presents a trustworthy, professional, and secure platform with strong compliance and business credibility. The website effectively communicates their offerings and supports user engagement through clear contact channels and marketing tools.