Germany security reports

N

Naturpark Barnim

barnim-naturpark.de

44

Naturpark Barnim operates as a regional nature park jointly managed by Brandenburg and Berlin, focusing on nature conservation, environmental education, and tourism. The website serves as an informational portal for visitors and stakeholders, providing rich content about the park's landscapes, flora, fauna, and cultural heritage. Technically, the site is built on TYPO3 CMS, hosted by a professional hosting provider, and uses HTTPS for secure communication. However, it lacks explicit privacy and cookie policies, as well as visible contact information, which are important for compliance and user trust. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosure mechanisms. Overall, the site is professional, trustworthy, and well-branded but could improve in privacy compliance and security best practices.

CampusVital is a health and fitness initiative focused on supporting employees and members of the Campus Berlin-Buch community in Germany. The website offers a range of onsite and digital health promotion services including fitness courses, wellness programs, and a membership card. The organization collaborates with prominent research institutions and the Techniker Krankenkasse insurance provider, positioning itself as a trusted regional health partner. Technically, the website uses a moderately modern stack with Bootstrap and jQuery, integrates Matomo for analytics, and employs Klaro for cookie consent management, reflecting a reasonable level of digital maturity. Security posture is moderate with no visible security headers and unknown SSL configuration, suggesting room for improvement. Privacy compliance is supported by the presence of a privacy policy and cookie consent mechanism. Overall, the website is professional, well-branded, and trustworthy with no signs of malicious content or blocking mechanisms.

L

Lange Nacht der Wissenschaften (LNDW)

langenachtderwissenschaften.de

49

Lange Nacht der Wissenschaften (LNDW) is a well-established science event organizer based in Berlin, Germany, with a 25-year history. The website serves as an information hub for the event, targeting science enthusiasts, visitors, media, and partners. It provides event details, news, partner information, and newsletter subscription services. The organization appears to be a medium-sized entity operating in the education and non-profit sectors, with a strong local presence and community engagement. Technically, the website is built on TYPO3 CMS with modern front-end technologies such as Bootstrap and Swiper.js, ensuring good mobile responsiveness and accessibility. The site uses Matomo analytics configured for privacy by disabling cookies, and it implements a cookie consent banner compliant with GDPR requirements. Performance is moderate, with no major technical issues detected. From a security perspective, the site enforces HTTPS and employs privacy-conscious analytics. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were found. The WHOIS data aligns well with the website content, confirming legitimacy and consistent domain age. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with room for improvement in security policy transparency and security header implementation.

H

Handeln JETZT!

handeln-jetzt.org

30

Handeln JETZT! is a German non-profit environmental project focused on empowering youth to implement projects related to biodiversity, climate, and climate justice. It provides financial support and mentorship through a network of project buddies. The website is well-structured, content-rich, and targets young people interested in environmental activism. Technically, the site uses modern JavaScript libraries and analytics tools with privacy compliance mechanisms such as Usercentrics CMP and CAPTCHA on forms. Security posture is good with HTTPS enforced, but lacks explicit security headers and WHOIS transparency. Overall, the site is trustworthy and professionally maintained, supported by recognized environmental youth organizations and federal funding.

N

NAJU (Naturschutzjugend im NABU)

trashbusters.de

47

Trashbusters.de is a German non-profit youth environmental campaign website operated under the umbrella of NAJU, the youth organization of NABU. The site focuses on mobilizing youth and environmental activists to combat plastic pollution through cleanup actions, political engagement, and educational initiatives. The website is well-branded, consistent, and provides relevant content for its target audience. Technically, it is built on the Jimdo Creator CMS platform, leveraging jQuery UI and third-party widgets such as POWr.io and Google Maps. The site is mobile-optimized and uses HTTPS with cookie consent mechanisms, reflecting good privacy compliance. However, explicit contact information and formal security or incident response policies are not present, which limits direct communication and security transparency. Overall, the site is trustworthy and professionally maintained, suitable for its non-profit mission.

T

travel-to-nature

travel-to-nature.de

71

travel-to-nature is a specialized German tour operator offering unique nature and wildlife travel experiences worldwide, focusing on sustainable and conservation-linked tourism since 1997. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content targeting nature enthusiasts, bird watchers, photographers, families, and groups. Technically, the site is built on TYPO3 CMS, uses modern JavaScript modules, and integrates advanced analytics and consent management tools, indicating a good level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are not published. Overall, the site is trustworthy, compliant with GDPR, and provides a positive user experience.

Y

YAEZ GmbH

yaez.com

61

YAEZ GmbH is a German communication agency specializing in talent communication, education communication, and future-oriented topics. The company targets businesses, associations, and institutions seeking innovative communication solutions to shape the future. The website is professionally designed, multilingual (German and English), and features a strong social media presence across Instagram, Twitter, LinkedIn, and TikTok. The business model focuses on providing specialized communication services with a niche market position in future topics and personal marketing. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and WPML, ensuring excellent SEO, mobile optimization, and user experience. Security posture is good with HTTPS and cookie consent mechanisms, but lacks explicit security policies and incident response contacts. The absence of WHOIS registration data is a concern and should be investigated further to confirm domain legitimacy. Overall, the site presents a trustworthy and professional image with room for improvement in transparency and security documentation.

N

N&B Stiftung

nb-stiftung.de

44

N&B Stiftung is a small German non-profit foundation focused on supporting young people through education, community engagement, and funding innovative ideas. The website clearly communicates its mission to empower youth by fostering talents and providing opportunities for personal development. The foundation appears to be recently established in 2020, consistent with the domain registration date. Technically, the website is built on WordPress using Elementor and Yoast SEO, with Borlabs Cookie managing GDPR-compliant cookie consent. The site is well-structured, mobile-optimized, and uses HTTPS with good SSL configuration. Security practices include cookie consent and no visible exposed sensitive data, though additional security headers could enhance protection. Contact information is clearly provided, including company emails and phone numbers, supporting business credibility. No terms of service or explicit security policies are published, which could be improved. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its target audience effectively.

R

Roche

roche.de

61

Roche Deutschland is a leading healthcare company focused on innovative medicines, diagnostics, and digital health technologies. The website reflects a mature digital presence built on modern frameworks such as React and Gatsby, with integration of advanced marketing and analytics tools including OneTrust for cookie consent, Google Tag Manager, and Adobe Launch. The site is well-structured, mobile-optimized, and professionally designed, targeting patients, healthcare professionals, and partners. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not published. Privacy compliance is partially demonstrated through cookie consent but lacks a clearly linked privacy policy or terms of service. WHOIS data confirms domain legitimacy and consistency with the corporate identity. Overall, the website is trustworthy and professional, with room for improvement in transparency and compliance documentation.

K

Klaus Tschira Stiftung gGmbH

klaus-tschira-stiftung.de

63

The Klaus Tschira Stiftung gGmbH is a well-established German non-profit foundation founded in 1995, focusing on promoting natural sciences, mathematics, and computer science through education, research, and science communication. The foundation targets a broad audience including children, students, educators, and researchers, offering both operational projects and funding opportunities. Their market position is strong within the German MINT education and research sector, supported by a professional and content-rich website. Technically, the site is built on WordPress with modern front-end technologies and uses Matomo analytics with GDPR-compliant consent mechanisms. Hosting is provided by INWX, a reputable German registrar and hosting provider. Security posture is good with HTTPS enforced and privacy-respecting analytics, though security headers are not explicitly detected and no incident response or vulnerability disclosure policies are published. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable digital presence for the foundation.

D

Dietmar Hopp Stiftung GmbH

dietmar-hopp-stiftung.de

52

The Dietmar Hopp Stiftung GmbH is a well-established non-profit foundation based in Germany, focused on funding projects in medicine, education, social welfare, youth sports, and climate protection within the Rhein-Neckar metropolitan region. Founded by Dietmar Hopp, co-founder of SAP, the foundation leverages significant resources to support community and philanthropic initiatives. The website presents a professional and consistent brand image, targeting non-profit organizations and beneficiaries in the region. The business model centers on grant-making and social impact, positioning the foundation as a key regional philanthropic actor. Technically, the website is built on the TYPO3 CMS platform, utilizing modern frontend technologies such as Bootstrap, jQuery, and FontAwesome. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Performance is moderate, with no major technical issues detected. SEO and accessibility features are basic but functional. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism with opt-in options for statistics and marketing cookies, demonstrating good privacy compliance. However, no explicit security policies or incident response contacts are publicly disclosed. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data is consistent and supports the legitimacy of the domain and organization. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving SEO and accessibility features to further strengthen the site's security posture and user trust.

D

Die Siedlung Saarbrücken

siedlung-saarbruecken.de

41

Die Siedlung Saarbrücken operates as a municipal housing provider for the city of Saarbrücken, Germany, offering rental apartments through a transparent and fair process. The website serves as a portal for current housing offers and provides a registration option for notifications about new listings. The target audience is local residents seeking affordable housing solutions. The business model is focused on public sector housing management with a medium-sized operational scale. Technically, the website uses basic HTML and CSS with custom fonts but lacks advanced frameworks or CMS indications. The site is moderately optimized for performance and mobile use but lacks accessibility and SEO enhancements. No analytics or tracking technologies were detected, indicating a privacy-conscious or minimalistic approach. From a security perspective, the site lacks visible security headers and published policies such as privacy or cookie policies, which are critical for GDPR compliance. No contact information or incident response channels are provided, limiting transparency and user trust. The domain registration data is consistent with the business's geographic and operational profile, supporting legitimacy. Overall, the website is functional and provides relevant content but requires improvements in privacy compliance, security posture, and user contact transparency to enhance trust and regulatory adherence.

F

Fachagentur Nachwachsende Rohstoffe e. V. (FNR)

waldklimafonds.de

10

The Waldklimafonds website serves as an authoritative information portal for the German forest climate fund initiative, operated by the Fachagentur Nachwachsende Rohstoffe e. V. (FNR). It provides comprehensive resources including project databases, research updates, events, and educational materials aimed at promoting sustainable forest management and climate adaptation. The site targets researchers, policymakers, forest managers, and environmentally conscious citizens. The business model is government-funded and non-profit, positioning the site as a trusted source within the forestry and environmental sectors in Germany. Technically, the website is built on TYPO3 CMS, a robust and widely used content management system for institutional websites. It employs modern JavaScript libraries such as jQuery and Slick Carousel for interactive elements and uses Matomo analytics with cookies disabled to respect user privacy. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Hosting appears to be managed by German providers, consistent with the site's governmental affiliation. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and does not publish a security policy or incident response contacts. Privacy compliance is good with a comprehensive privacy policy present, but no cookie consent mechanism is implemented. Overall, the security posture is solid but could be improved by adding security headers and formal policies. The overall risk assessment is low, with no signs of malicious activity or vulnerabilities. Strategic recommendations include implementing cookie consent, adding security headers, publishing security and incident response policies, and enhancing transparency to further build trust. The website demonstrates a high level of professionalism, trustworthiness, and alignment with its governmental and non-profit mission.

B

BDEW Bundesverband der Energie- und Wasserwirtschaft e.V.

bdew.de

39

BDEW Bundesverband der Energie- und Wasserwirtschaft e.V. is a leading German industry association representing over 2,000 companies in the energy and water sectors, including electricity, natural gas, heating, and water/wastewater. The organization serves as a key partner for policymakers, industry stakeholders, and the public by providing industry positions, data, publications, and events. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding consistent with its market position. Technically, the site employs modern web technologies including Bootstrap, jQuery, Google Tag Manager, and Usercentrics for consent management, indicating a commitment to privacy compliance and user experience. Hosting is managed via DomainControl DNS services, and the site shows good mobile optimization and SEO practices. Performance is moderate, with lazy loading and carousel features enhancing usability. From a security perspective, the site uses HTTPS and integrates consent management but lacks visible security headers and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism. However, the absence of terms of service and vulnerability disclosure pages suggests areas for improvement. Overall, the website is trustworthy, professionally maintained, and aligned with the organization's business goals. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and adding vulnerability disclosure mechanisms to strengthen security posture and trust.

A

Aktionsbündis Faire Verlage

aktionsbuendnis-faire-verlage.com

9

Aktionsbündis Faire Verlage (FAIRLAG) is a small, non-profit advocacy organization focused on promoting fair publishing practices for authors in German-speaking countries. The website provides educational content, contract evaluation guidance, and warnings against pay-to-publish models. Supported by reputable authors' associations, it serves as a trusted resource for authors seeking fair treatment in publishing. Technically, the site is built on WordPress with common plugins and demonstrates good content quality and user experience, though some technical and security enhancements are recommended. The security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. WHOIS data is missing, which raises some legitimacy concerns, but the professional content and partner links mitigate this risk. Overall, the site is a valuable resource with room for technical and compliance improvements.

A

Auto verkaufen leicht gemacht!

autohierverkaufen.de

58

Autohierverkaufen.de is a German-focused online platform facilitating the sale of cars with services including quick vehicle valuation, immediate payment via bank transfer, and fast deregistration. The website targets individual car sellers in Germany and positions itself as a stress-free, efficient car selling solution. Technically, the site employs modern JavaScript technologies, integrates Google Analytics and Google Ads for marketing and tracking, and uses Cookiebot for cookie consent management. The hosting is provided by 1&1 IONOS, inferred from the nameservers. Security-wise, the site uses HTTPS but lacks visible security headers and formal security policies. Privacy compliance is partial, with cookie consent present but no privacy policy or terms of service pages found. Overall, the site is accessible, professionally designed, and mobile-optimized but would benefit from enhanced security and compliance documentation.

Kommunity GmbH & Co. KG is a small, established IT service provider based in Hannover, Germany, with over 25 years of experience. The company specializes in IT consulting, support, security, and offers specialized software solutions such as tomedo® Praxissoftware for medical practices. Their website reflects a professional and consistent brand image, targeting local businesses and medical practices seeking reliable IT infrastructure and Apple software solutions. The business model focuses on providing comprehensive IT services and software tailored to the healthcare sector and general IT needs.

V

VisionConnect GmbH

visionconnect.de

68

VisionConnect GmbH is a well-established digital media agency based in Hannover, Germany, founded in 1995. The company specializes in providing comprehensive digital solutions including TYPO3 CMS, Wordpress, e-commerce shops, SEO, and web marketing services. Their market position is strong with over 25 years of experience and a portfolio of reputable clients across various sectors. The website reflects a professional and consistent brand image, targeting businesses and institutions seeking digital transformation and web development services. Technically, the site is built on TYPO3 CMS with integrations of Wordpress and uses Matomo for privacy-conscious analytics. The site is mobile-optimized, accessible, and SEO-friendly, demonstrating a mature digital infrastructure. Security posture is good with HTTPS enforced and privacy-respecting analytics, though some security headers could be improved and a formal security policy is absent. Overall, the website is trustworthy, professional, and compliant with GDPR, with clear contact information and transparent cookie consent mechanisms.

D

DiG Plus GmbH

dig-berlin.de

55

DiG Plus GmbH is a Berlin-based design and communication agency specializing in political and social themes with over 20 years of experience. The company offers services including campaign design, publishing, and product development, targeting political organizations, social campaigns, and non-profits. The website reflects a professional and consistent brand presence with detailed project showcases and clear contact information. Technically, the site uses standard web technologies such as HTML5, CSS3, jQuery, and Bootstrap icons, with moderate performance and good mobile optimization. Security posture is moderate with basic best practices like email obfuscation and meta referrer policy, but lacks advanced security headers and HTTPS confirmation. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is safe, professional, and trustworthy with room for security and privacy improvements.

O

one4vision GmbH

one4vision.saarland

49

one4vision GmbH is a specialized IT consulting firm focused on barrier-free web design using TYPO3 CMS and secure network infrastructure solutions. The company serves primarily municipal and public sector clients in Saarland and Luxembourg, offering a comprehensive range of IT services including hosting, connectivity, and network security. Their website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the site is built on TYPO3 CMS with integration of modern libraries such as jQuery and Matomo for analytics, demonstrating a moderate level of digital maturity. Privacy compliance is well addressed through a comprehensive privacy policy and a cookie consent mechanism that respects GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although the absence of explicit security policies and incident response information suggests room for improvement. Overall, the website presents a trustworthy and credible business presence with good technical implementation and privacy practices.

N

Netzwerkagentur Saarland by one4vision GmbH

netzwerkagentur-saarland.de

52

Netzwerkagentur Saarland, operating as the technical division of one4vision GmbH, is a well-established IT service provider in the Saarland region of Germany. With over two decades of experience, the company specializes in hosting, network management, security, cloud services, and IT support primarily targeting public sector clients and small to medium-sized enterprises. The website reflects a professional and comprehensive presentation of their services, emphasizing reliability and regional expertise. Technically, the website is built on TYPO3 CMS with modern frameworks such as Bootstrap 5 and jQuery, ensuring good mobile responsiveness and accessibility. The hosting environment is secure, leveraging a certified data center in Germany, and the site employs Matomo analytics configured with privacy-respecting settings. The technical implementation is solid, with no visible vulnerabilities or exposed sensitive data. From a security perspective, the site enforces HTTPS and likely includes standard security headers, though explicit policies such as incident response or vulnerability disclosure are not published. Privacy policies are comprehensive and GDPR compliant, but the absence of a cookie consent mechanism is a minor compliance gap. Contact information is available, including a phone number and remote support via TeamViewer, enhancing user trust. Overall, the website and domain exhibit high legitimacy and trustworthiness, with consistent WHOIS data and alignment between business claims and technical infrastructure. The site scores well across content quality, technical implementation, security posture, privacy compliance, and business credibility, making it a reliable and professional digital presence for the company.

S

Seedshirt

seedshirt.de

10

Seedshirt is a German-based e-commerce platform specializing in print-on-demand merchandising solutions. It enables users such as fundraisers, artists, influencers, and groups to create and sell custom apparel and products via crowdfunding campaigns or white-label shops without upfront costs or risks. The platform integrates production, sales, and shipping, positioning itself as a reliable partner with a significant user base. Technically, the website is built on Webflow and leverages modern analytics and marketing tools including Google Analytics, Google Tag Manager, and Facebook Pixel, with Cloudflare providing DNS and likely CDN services. The site demonstrates good GDPR compliance with a comprehensive cookie consent mechanism and privacy policy. Security posture is solid with HTTPS enforced and anonymized analytics, though explicit security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and well-optimized for user experience and marketing.

Produktgenuss GmbH is a small technology company based in Germany specializing in the development, marketing, and operation of web platforms, with a strong focus on podcast-related services. Their key offerings include LetsCast.fm, a podcast hosting platform; podcasten.de, a podcast production support service; and Speedrank, a website performance auditing tool. The company targets podcasters ranging from hobbyists to power users, providing streamlined solutions to manage and distribute podcast content effectively. The website presents a professional and consistent brand image, emphasizing service quality and user engagement through clear calls to action and project showcases. Technically, the website is built with modern HTML5, CSS, and JavaScript technologies, hosted on variomedia.de servers. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. However, there is room for improvement in accessibility and SEO optimization. No CMS or advanced frameworks are detected, indicating a likely custom or lightweight implementation. Performance is moderate, with deferred scripts and optimized images enhancing load times. From a security perspective, the site uses HTTPS but lacks visible security headers and a cookie consent mechanism, which are important for GDPR compliance and overall security posture. No incident response or security policy information is published, and no vulnerability disclosure or security.txt files are found. The WHOIS data shows standard hosting provider name servers without privacy protection, consistent with a small business setup. No suspicious patterns or exposed sensitive data are detected, but security best practices could be enhanced. Overall, Produktgenuss GmbH presents a trustworthy and professional online presence with a clear business focus. Strategic improvements in security policies, privacy compliance, and contact information transparency would strengthen their credibility and reduce risk. The AI score reflects a good but improvable website, with recommendations to address cookie consent, security headers, and expanded contact details to enhance trust and compliance.

A

Anne Schwalbe

anneschwalbe.de

57

Anne Schwalbe operates a professional photography portfolio website primarily targeting art enthusiasts and potential buyers in Berlin and beyond. The site features a curated gallery of photographic works, an online shop for art sales, and a newsletter subscription to engage visitors with updates on exhibitions and new works. The business is positioned as a niche artist portfolio with a small-scale operation, founded at least since 1995, reflecting a mature presence in the art community. Technically, the website is built with standard HTML, CSS, and JavaScript without reliance on major CMS platforms or advanced frameworks. The site demonstrates good content quality, clear navigation, and basic mobile optimization. However, it lacks modern security headers and cookie consent mechanisms, which are important for compliance and user trust. Hosting is managed via UI-DNS name servers, indicating a stable but modest infrastructure. From a security perspective, the site uses secure form inputs with consent checkboxes for newsletter subscriptions but does not exhibit advanced security policies or incident response information. No blocking or WAF mechanisms are detected, and the domain WHOIS data aligns well with the website's claims, indicating legitimacy and consistent registration history. The absence of exposed sensitive data and minimal tracking enhances privacy compliance, though cookie consent should be improved. Overall, the website scores well in content quality and business credibility but has room for improvement in security posture and privacy compliance. Strategic enhancements in security headers, cookie consent, and incident response transparency would strengthen trust and compliance.

Nacha Vollenweider Illustration is a small-scale artistic portfolio website showcasing the illustrator's comic and illustration works, including various series, exhibitions, and live drawing events. The site targets art enthusiasts and cultural audiences, positioning itself as a niche platform for creative expression and promotion. Technically, the website is built on the Jimdo Creator platform, leveraging its hosting and content management capabilities. The site is moderately optimized for mobile devices and offers a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and implements basic cookie consent mechanisms but lacks advanced security headers and formal security policies. Privacy compliance is basic, with a privacy policy and cookie control present but no terms of service or detailed GDPR compliance indicators. Overall, the website is trustworthy and professional for its scope but could improve in security and compliance documentation.

I

Institut der deutschen Wirtschaft (IW)

iwkoeln.de

49

Institut der deutschen Wirtschaft (IW) is a private economic research institute based in Germany, focusing on economic and social policy, education systems, and labor markets. The website is professionally designed using TYPO3 CMS and provides comprehensive research articles, press releases, and studies targeting economic stakeholders, policymakers, and researchers. The technical infrastructure includes modern analytics tools such as Matomo and eTracker, and push notification services via CleverPush, indicating a mature digital presence. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, but lacks explicit security headers and public security policies. Privacy compliance is limited due to absence of visible privacy and cookie policies. Overall, the website is trustworthy and professionally maintained, serving as a credible source of economic research in Germany.

The Hochschulbildungsreport website is a professionally maintained platform dedicated to providing comprehensive reports and data analysis on higher education in Germany. Operated by the Stifterverband für die Deutsche Wissenschaft e.V., it serves academics, policymakers, and educational institutions with research-driven content. The site leverages modern technologies including Drupal 10, lazy loading for images, and a self-hosted Matomo analytics solution, reflecting a mature digital infrastructure. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent managed via Usercentrics. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response contacts are not publicly detailed. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical competence, making it a reliable resource in the education sector.

D

Deutsche Bildung

deutsche-bildung.de

48

Deutsche Bildung AG operates a specialized education financing platform focused on providing study and living cost financing for students in Germany. The company offers flexible payout options, an integrated academy for educational success, income-dependent repayment models, and support for financing foreign studies. Positioned as a reputable and established player since 2020, Deutsche Bildung targets students seeking alternative financing solutions beyond traditional loans or scholarships. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its audience. Technically, the site is built on WordPress with modern plugins and frameworks, hosted on Cloudpit infrastructure, and incorporates advanced SEO and consent management tools. Security posture is strong with HTTPS, security headers, and secure login portals, though explicit security policies and vulnerability disclosures are not publicly detailed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and cookie regulations.

M

Mobilitätshaus GmbH

mobilitaetshaus.eu

42

Mobilitätshaus GmbH is a German company specializing in sustainable mobility solutions, offering a range of electric vehicles including E-Roller, E-Bikes, E-Autos, and Lastenfahrräder, alongside consulting and repair services. The company operates primarily in Berlin and partners with established automotive and mobility service providers, positioning itself as a niche player in the sustainable transportation sector. The website is professionally designed, optimized for SEO, and provides clear information targeting both private and business customers interested in eco-friendly mobility options. Technically, the site is built on WordPress with modern plugins and demonstrates good mobile optimization and performance. Security posture is adequate with HTTPS enforced, but lacks some security headers and incident response disclosures. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and safe for general audiences, with room for improvement in security and privacy practices.

Osiander operates a professional e-commerce platform specializing in books, eBooks, audiobooks, and related retail products targeting general consumers in Germany. The website demonstrates a mature digital infrastructure with modern JavaScript frameworks, consent management via Usercentrics, and integration of Google Analytics and Tag Manager for marketing and analytics. Security posture is strong with HTTPS enforcement, Cloudflare DNS and security services, and secure login forms featuring CSRF tokens and CAPTCHA. However, the absence of explicit privacy policy and terms of service pages, as well as lack of visible contact information, limits full compliance and user trust. The domain WHOIS data is minimal and uses Cloudflare name servers, which is common but reduces transparency. Overall, the site is well-designed, accessible, and safe for general audiences.

P

Produktgenuss GmbH

letscast.fm

69

LetsCast.fm is a German-based podcast hosting service operated by Produktgenuss GmbH, founded in 2020. The company provides a comprehensive platform for podcasters of all levels to host, publish, and monetize their podcasts across major platforms such as Spotify, Apple Podcasts, and YouTube. The service emphasizes ease of use, unlimited podcast and episode uploads, and extensive analytics. The website is professionally designed, mobile-optimized, and offers clear pricing tiers with transparent features. Social media and community engagement are active, enhancing brand trust and user support. Technically, LetsCast.fm employs modern web technologies including JavaScript frameworks, Tailwind CSS, and Podlove Web Player integration. Hosting appears to be on AWS infrastructure, with DNS managed via AWS nameservers. Analytics are implemented using Google Tag Manager and Plausible Analytics, balancing tracking needs with privacy considerations. The site enforces HTTPS and includes CSRF protection tokens, indicating good security hygiene. Security posture is solid with HTTPS, clientTransferProhibited domain status, and cookie consent mechanisms. However, DNSSEC is not enabled, and explicit security policies or incident response contacts are not publicly documented. No critical vulnerabilities or suspicious activities were detected. Privacy compliance is strong with comprehensive privacy and cookie policies, and GDPR adherence is evident. Overall, LetsCast.fm presents a trustworthy, professional, and user-friendly podcast hosting platform with a strong market position in the German-speaking podcast ecosystem. Strategic improvements in DNS security and published security policies could further enhance trust and compliance.

S

Saarländische Nahverkehrs-Service GmbH

saarvv.de

61

The website saarvv.de represents the Saarländische Nahverkehrs-Service GmbH, the regional public transportation authority for Saarland, Germany. It provides information and services related to public transport, including ticketing and schedules, targeting commuters and travelers within the Saarland region. The site is professionally designed with consistent branding and clear navigation, optimized for mobile devices. The business model focuses on public transport coordination and customer service within the transportation sector.

A

Autohaus Golbeck GmbH Berlin

autohaus-golbeck.de

61

Autohaus Golbeck GmbH Berlin is a well-established automotive service provider specializing in vehicle workshop services, bodywork, and car sales with locations in Berlin-Friedrichshain and Berlin-Buch. Founded in 1982, the company targets private and corporate vehicle owners in Berlin, offering a broad range of services including inspections, tire service, car care, and mobility solutions. The website reflects a professional and consistent brand presence with strong customer trust signals such as ProvenExpert reviews. Technically, the site is built on Joomla CMS with modern frontend technologies and is mobile optimized. Security posture is good with HTTPS and privacy-conscious analytics (Matomo), though improvements are recommended in security headers and cookie consent mechanisms. Overall, the site is trustworthy and professionally maintained, supporting the company's market position as a reliable local automotive service provider.

W

Wissenschaftlich-didaktische Beratungsstelle für die Grundbildung

wibeg-online.de

46

WiBeG-online.de is a specialized educational consulting and training platform affiliated with the Pädagogische Hochschule Weingarten in Germany. It serves as the first nationwide scientific-didactic consulting and training center focused on professionalizing basic literacy education. The website offers consulting, qualification programs, and networking opportunities targeted at professionals in adult literacy and basic education. Technically, the site is built on WordPress with Elementor and Yoast SEO plugins, hosted on servers associated with dmsolutions.de. It features a cookie consent mechanism compliant with GDPR and uses modern web technologies to ensure good performance and mobile optimization. Security posture is solid with HTTPS enabled and no critical vulnerabilities detected, though some security headers could be improved. The site maintains good privacy compliance and provides clear contact information and legal notices. Overall, the website is professional, trustworthy, and well-positioned in the education sector.

N

Netzwerk JUBITH / Arbeit und Leben Thüringen

jubith.de

50

JUBITH is a youth environmental and development education network based in Thuringia, Germany, operating under the parent organization Arbeit und Leben Thüringen. The organization focuses on promoting sustainable development and global learning among young people through educational project days, workshops, and digital offerings. It is supported by multiple governmental and non-governmental funding bodies, positioning it as a reputable regional educational network. The website is built on Joomla CMS with a modern framework and common libraries, hosted on Hetzner servers, and demonstrates good digital maturity with mobile optimization and clear navigation. Security posture is adequate with HTTPS and CSRF protections but lacks some security headers and incident response disclosures. Privacy compliance is generally good, though a cookie consent mechanism is missing. Overall, the site is trustworthy, professional, and well-aligned with its educational mission.

D

Deutscher Gewerkschaftsbund

dgb.de

56

The Deutscher Gewerkschaftsbund (DGB) is a major German trade union confederation representing 5.7 million members across eight unions. The website serves as an information hub for labor rights, political advocacy, campaigns, and union services. It targets workers, union members, and political stakeholders in Germany, positioning itself as a leading non-profit organization in the labor sector. Technically, the site is built on TYPO3 CMS and uses Matomo for analytics, reflecting a modern and privacy-aware infrastructure. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enabled and asynchronous script loading, but lacks visible security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from enhanced privacy disclosures and security transparency.

E

Edkimo

edkimo.com

58

Edkimo is an education technology company founded in 2014, providing a SaaS platform that enables educators and schools to create surveys and collect anonymous feedback to improve lessons and school development. The platform emphasizes GDPR compliance and data privacy, hosting servers in Germany and offering a user-friendly, device-agnostic experience. Technically, the website is built using modern frameworks like SvelteKit, delivering fast performance and excellent mobile optimization. Security posture is solid with HTTPS and domain transfer protections, though some improvements are recommended such as enabling DNSSEC and publishing explicit security policies. Overall, the website is professional, trustworthy, and well-aligned with its business goals.

D

Der Beauftragte der Bundesregierung für Kultur und Medien

kulturstaatsministerin.de

67

The website kulturstaatsminister.de is the official online presence of the German Federal Government's Commissioner for Culture and Media. It serves as a comprehensive information portal about cultural policies, funding, media support, and historical remembrance initiatives in Germany. The site targets citizens, cultural institutions, artists, and media professionals, providing authoritative content and resources. Technically, the site is built on TYPO3 CMS, hosted by ITZBund, and employs Matomo analytics with a strong focus on privacy and consent management. The security posture is robust with HTTPS enforcement and consent-based cookie usage, though some security headers could be explicitly confirmed. Overall, the site demonstrates a high level of professionalism, accessibility, and compliance with GDPR regulations, reflecting its governmental nature and public trust requirements.

L

Loxone Lighthouse

loxone-lighthouse.com

52

Loxone Lighthouse is a specialized participation company focused on corporate succession, offering responsible and sustainable business handover services primarily targeting entrepreneurs and business owners in Germany. The website presents a professional and consistent brand image, emphasizing trust and long-term development of acquired companies. Technically, the site is built on WordPress with modern plugins and tracking tools, providing a good user experience with mobile optimization and GDPR-compliant cookie management. Security posture is adequate with HTTPS and consent mechanisms, though lacking some advanced security headers and explicit incident response information. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy, warranting further verification. Overall, the site is functional, trustworthy, and business-oriented but could improve transparency and security practices.

F

Faktor B gGmbH

faktor-b.org

56

Faktor B gGmbH is a German non-profit organization specializing in innovative educational financing based on a reverse generational contract model. The organization aims to promote equitable access to higher education by pooling donations and subordinated loans to fund students, who later repay a share of their income to sustain the fund. The website is professionally designed, content-rich, and targets students, donors, foundations, and companies interested in social impact through education. Technically, the site is built on WordPress with modern plugins and SEO optimizations, delivering good performance and mobile responsiveness. Security posture is solid with HTTPS and consent management, though some HTTP security headers are missing and no explicit security policy is published. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is common for non-profits. Overall, the site is trustworthy, compliant with GDPR, and well-positioned in the education non-profit sector.

T

TIVENTS

tivents.info

51

TIVENTS is a German-based B2B platform specializing in the sale and management of event tickets, vouchers, and related services such as seat plan bookings and certificates. The company targets event organizers and partners, offering a streamlined process for registering, creating, and managing sales through their platform. The website demonstrates a professional presence with consistent branding and partner testimonials, indicating a trusted regional market position. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS enforced, though some improvements in security headers and explicit privacy compliance are recommended. Overall, the platform shows a mature digital infrastructure suitable for its business model.

T

TIVENTS

tivents.de

60

TIVENTS is a German-based e-commerce platform specializing in the sale of event tickets, gift vouchers, and animal sponsorships. The website targets consumers interested in local events and unique gifting options, operating primarily within Germany. The platform leverages Shopware 6 technology and integrates payment solutions such as PayPal, providing a modern and functional user experience. The site is mobile-optimized and includes features like pagination and sorting to enhance usability. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and formal privacy or terms of service documentation. Overall, the website presents a moderate security posture with room for improvement in compliance and transparency.

P

PRO ASYL

proasyl-shop.de

39

PRO ASYL is a German non-profit organization dedicated to advocating for the rights of refugees and migrants in Germany and Europe. The website serves as a platform to provide information about their mission and to offer publications and materials through an integrated webshop. The organization maintains a strong presence on multiple social media platforms and provides clear contact information, enhancing its accessibility and outreach. Technically, the website is built using the One.com Web Editor CMS and hosted by checkdomain.de. It employs modern web technologies such as Swiper.js for image sliders and integrates Termly for cookie consent management, indicating a moderate level of digital maturity. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features could be improved. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks published security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. Overall, the security posture is adequate but could benefit from enhanced transparency and formal policies. The overall risk assessment is low, with the website appearing trustworthy and professionally maintained. Strategic recommendations include publishing a security policy, adding incident response and vulnerability disclosure information, improving accessibility, and creating a terms of service page to enhance compliance and user trust.

Berlin gegen Nazis is a small non-profit organization focused on anti-Nazi activism and social justice in Berlin. Their website serves as an informational and mobilization platform, providing news, event announcements, and calls to action for protests and rallies. The platform targets the general public interested in combating right-wing extremism and promoting solidarity. The website is multilingual, supporting English, German, and Turkish, enhancing accessibility to diverse audiences. Technically, the website is built on WordPress and utilizes a range of plugins including Yoast SEO for search optimization, Matomo for privacy-conscious analytics, and a GDPR-compliant cookie consent plugin. Hosting is provided by a German hosting provider (oopen.de), and the site uses HTTPS with a good SSL configuration. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of a security.txt file or vulnerability disclosure policy suggests room for improvement in transparency and security maturity. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It effectively serves its mission as an anti-Nazi informational platform but could enhance its security posture and transparency to further build trust and resilience.

V

Verein für Demokratische Kultur in Berlin (VDK) e.V.

regishut.de

52

Regishut is a non-profit project supporting the Berlin Police through political education aimed at preventing and prosecuting antisemitic crimes. The project, active since 2021, focuses on sensitizing police staff to current forms of antisemitism and supporting democratic culture in Berlin. The website reflects a niche, mission-driven organization with clear funding from the Berlin Senate and donation mechanisms to support its activities. Technically, the site uses a modern CMS (KONTEXT-CMS), jQuery, Tailwind CSS, and FontAwesome, providing a good user experience with responsive design and clear navigation. However, the site lacks explicit privacy and cookie policies, security headers, and contact information, which are areas for improvement. No blocking or WAF mechanisms were detected, and the domain registration data is consistent and legitimate for the business purpose. Overall, the site is professional and trustworthy but could enhance its security and compliance posture.

R

Report Antisemitism

report-antisemitism.de

51

The website 'Report Antisemitism' serves as a platform dedicated to reporting and raising awareness about antisemitism incidents, primarily focused on Germany. It targets the general public, victims, researchers, and policymakers interested in antisemitism data and reporting. The business model appears non-commercial and informational, with no evident monetization or advertising. The website uses a modern static site generator (Gatsby) and is hosted on Hetzner, a reputable German hosting provider, indicating a solid technical infrastructure. The site is mobile-optimized and has a good design quality, but lacks comprehensive privacy and cookie policies, which is a compliance gap. Security posture is strong with a strict Content-Security-Policy, but additional security headers could enhance protection. No contact information or social media links were found, limiting direct communication channels. Overall, the site is safe, professional, and trustworthy but would benefit from improved privacy compliance and contact transparency.

D

German TV in Thailand - streaming, download, Apps

deutsches-fernsehen-weltweit.de

49

The website deutsches-fernsehen-weltweit.de offers a subscription-based streaming and cloud DVR service providing access to 44 German TV channels worldwide, targeting German expatriates and German-speaking audiences, especially in Thailand. The business model centers on providing easy access to German TV content without hardware requirements, leveraging cloud recording technology. The site is well-branded and consistent, with clear service descriptions and pricing, positioning itself as a niche media provider in the German expatriate market. Technically, the site uses modern web technologies including Google Analytics, Google Tag Manager, and Google Fonts, hosted on AWS infrastructure. The site is mobile-optimized and SEO-friendly, with moderate performance and basic accessibility features. However, no CMS or advanced frameworks are detected. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and does not publish privacy, cookie, or security policies, which reduces its privacy compliance posture. No incident response or vulnerability disclosure information is provided, limiting transparency. The WHOIS data aligns with the website content and hosting, indicating a legitimate domain. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures to improve trust and compliance. There are no indications of malicious or adult content, making it safe for general audiences.

F

Freiheitswolke

freiheitswolke.org

58

Freiheitswolke is a German community-driven platform offering privacy-focused open-source cloud and communication services, primarily Nextcloud and Mattermost. Founded in 2014, it operates on a donation-based model emphasizing data freedom and security. The website is built on GravCMS and uses modern web technologies, providing a good user experience with clear navigation and mobile optimization. However, it lacks explicit privacy and cookie policies, which impacts compliance with GDPR standards. Security practices include encrypted connections and redundant backups, but DNSSEC is not enabled and security headers are missing, indicating room for improvement. Overall, the domain registration and hosting details are consistent and legitimate, supporting trust in the platform.

A

Arbeit und Leben Niedersachsen e.V.

aul.app

44

Arbeit und Leben Niedersachsen e.V. operates the platform aul.app, which serves as a hub for their websites and apps. The organization is a regional non-profit based in Germany, focusing on providing digital platform services. The website content is minimal but clearly communicates the platform's purpose. The business model centers on supporting digital presence for their initiatives. The site is built on WordPress with custom theming, indicating moderate digital maturity. Technical infrastructure is basic with room for improvement in performance and mobile optimization. Security posture is average; HTTPS is assumed but no explicit security headers or policies are detected. Privacy compliance is partially met with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is trustworthy but could benefit from enhanced security and compliance measures.

E

Eduversum Verlag und Bildungsagentur GmbH

eduversum.de

47

Eduversum Verlag und Bildungsagentur GmbH is a well-established German educational agency and publisher with over 40 years of experience in school communication. They provide full-service educational content development, including digital media such as web, film, games, apps, and print, targeting schools, teachers, NGOs, and government bodies. The company holds multiple certifications and awards, reflecting a strong market position and trustworthiness. Their partnerships with reputable organizations further enhance their credibility. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses Matomo for privacy-conscious analytics. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security is robust with HTTPS and cookie-less analytics, but could benefit from enhanced security headers and explicit incident response information. Overall, the security posture is good with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence, though a cookie consent mechanism is absent. Contact is primarily via web forms, and social media presence is active on major platforms. The website is professional, trustworthy, and content-rich, making it a reliable platform for educational services. Strategic recommendations include implementing security headers, adding incident response contacts, and introducing cookie consent to further strengthen compliance and security.