Germany security reports

E

Energieversorgung Halle Netz GmbH (EVH)

evh.de

58

Energieversorgung Halle Netz GmbH (EVH) is a regional energy provider based in Halle, Germany, offering a comprehensive portfolio of energy products including electricity, gas, heat, and innovative energy solutions such as e-mobility and photovoltaics. The company targets private and commercial customers, positioning itself as a key player in the regional energy market with a focus on sustainable and customer-centric services. The website reflects a mature digital presence with clear navigation, professional design, and comprehensive content tailored to its audience. Technically, the site employs modern frameworks like Bootstrap and integrates privacy and security tools such as Usercentrics CMP and FriendlyCaptcha, indicating a commitment to GDPR compliance and user security. Security posture is strong with HTTPS enforcement, security headers, and bot mitigation mechanisms, though explicit security policies and incident response contacts are not publicly detailed. Overall, EVH demonstrates a solid business and technical foundation with room for enhanced transparency in security governance.

O

one4vision GmbH

one4vision.de

72

one4vision GmbH is a well-established IT consulting and service provider based in Saarbrücken, Germany, with nearly 30 years of experience. The company specializes in TYPO3 CMS web development, network and security solutions, cloud services, and remote support. Their market position is strong regionally, particularly in the Saarland and Luxembourg areas, with a focus on delivering flexible and secure IT solutions to businesses. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site is built on TYPO3 CMS, uses Matomo for privacy-conscious analytics, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and formal security policies. Overall, the website is trustworthy, compliant with GDPR, and provides a positive user experience.

EVENTIM Inhouse is a medium-sized technology company specializing in flexible ticketing solutions and event management services primarily targeting event organizers, cultural institutions, and museums in Germany. Their offerings include ticketing systems, CRM, reporting, sales channels, access control, and consulting services. The website is built on TYPO3 CMS and uses modern web technologies such as Bootstrap and jQuery, with integrated GDPR-compliant consent management and Google Tag Manager for analytics. Security posture is solid with HTTPS and secure login forms, though explicit security policies and incident response information are not publicly available. Overall, the site is professional, well-branded, and trustworthy with good content quality and user experience.

O

one4vision GmbH

14v.de

72

one4vision GmbH is a well-established IT consulting and service provider based in Saarbrücken, Germany, with nearly 30 years of experience. The company specializes in TYPO3 CMS web development, network and security solutions, and cloud services, targeting businesses seeking flexible and secure IT infrastructure and digital presence. Their market position is strong regionally, supported by a consistent brand and multiple related service domains. Technically, the website is built on TYPO3 CMS with a modern tech stack including PHP, MySQL, and Matomo analytics, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security headers and published security policies. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

S

SHC Netzwerktechnik GmbH

shc.eu

60

SHC Netzwerktechnik GmbH is a German-based IT security and infrastructure company specializing in comprehensive solutions for data centers, core networking, and cloud computing. The company partners with leading manufacturers such as Sophos, Dell, VMware, and Microsoft, positioning itself as a trusted provider of managed detection and response, endpoint protection, and security operations center services. Their market presence is focused on serving businesses across Germany with a strong emphasis on IT security and network technology. Technically, the website is built on WordPress using the Divi theme, incorporating modern web technologies and analytics tools like Matomo. The site demonstrates good mobile optimization and SEO practices, with GDPR compliance mechanisms in place, including cookie consent banners. The technical infrastructure reflects a moderate to good level of digital maturity suitable for their business model. From a security perspective, the website enforces HTTPS and employs GDPR-compliant cookie management. However, it lacks some advanced security headers and does not publicly disclose a formal security policy or incident response plan. The WHOIS data is privacy protected, which is typical for European domains and justified given the company's IT security focus. No critical vulnerabilities or suspicious indicators were found in the website content or technical setup. Overall, SHC Netzwerktechnik GmbH presents a professional and trustworthy online presence with a solid foundation in IT security services. Strategic improvements in security transparency and enhanced header configurations could further strengthen their security posture and customer trust.

K

Koeln.Business

koelnbusiness.de

60

Koeln.Business is the official economic development agency for the city of Cologne, Germany, providing support for businesses, startups, and investors. The website offers services such as funding consultation and business facilitation, targeting entrepreneurs and startups primarily within Cologne. The organization positions itself as a key facilitator for economic growth and business establishment in the region. Technically, the website is built on TYPO3 CMS, a mature and widely used content management system, and incorporates modern JavaScript libraries such as Slick Slider and Owl Carousel for enhanced user experience. Cookiebot is implemented for GDPR-compliant cookie consent management, and Matomo Analytics is used for privacy-conscious visitor tracking. The site is mobile-optimized and demonstrates good SEO and accessibility practices. From a security perspective, the site enforces HTTPS and uses a comprehensive cookie consent mechanism. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure information, which are recommended for improving transparency and trust. No critical vulnerabilities or suspicious content were detected. Overall, Koeln.Business presents a professional and trustworthy online presence consistent with a government economic development entity. The domain WHOIS data is privacy protected but shows no signs of suspicious activity. Strategic recommendations include publishing security and incident response policies, enhancing security headers, and maintaining regular audits of third-party scripts to sustain a strong security posture.

The website mind.de represents Sinma GmbH, a small German company specializing in AI hosting and internet services since 2005. The business emphasizes reliable infrastructure, hosting in the NTT datacenter Berlin with multiple ISO and security certifications, positioning itself as a niche provider in AI hosting. The website is minimalistic, generated with RocketCake, and provides basic navigation and content focused on the company's AI offerings and infrastructure capabilities. Contact is primarily via a contact form, with no explicit emails or phone numbers listed. No privacy or cookie policies are present, and no security headers or HTTPS status are visible in the provided data. The WHOIS data shows consistent domain naming and name servers related to Sinma GmbH, supporting legitimacy but lacks detailed registrant info. Overall, the site demonstrates moderate business credibility but lacks in privacy compliance and technical security visibility.

P

Prager Frühling

prager-fruehling-magazin.de

51

Prager Frühling is a German political magazine focused on themes of freedom and socialism, targeting a politically left-leaning audience. The website offers multiple content formats including magazine issues, podcasts, blogs, and newsletters, positioning itself as a niche media outlet within the German political discourse. The business model centers on content publishing and community engagement through digital channels. Technically, the site is built on the KONTEXT-CMS platform, leveraging JavaScript libraries such as jQuery, RoyalSlider, and Modernizr, with hosting and DNS managed by Warenform. While the site uses HTTPS and includes basic SEO and accessibility features, some technologies are outdated and there is no cookie consent mechanism, which is a GDPR compliance gap. Security posture is moderate with no visible vulnerabilities but lacks published security policies or incident response contacts. Overall, the site is professionally presented with consistent branding and moderate trust indicators but could improve in privacy compliance and security transparency.

S

Sprachenatelier Berlin [isk] gGmbH

sprachenatelier-berlin.de

53

Sprachenatelier Berlin [isk] gGmbH is a small, established language school located in Berlin, Germany, specializing in German language courses from beginner to advanced levels (A1 to C2), including telc German exams and over 50 foreign language offerings. The school provides both onsite and online learning options, catering to international students, professionals, and language enthusiasts. Recognized by the Berlin Senate and holding multiple certifications, the institution maintains a strong market position within the education sector. The website reflects a professional and comprehensive presentation of their services, pricing, and cultural programs, targeting a broad audience seeking language education in Berlin. Technically, the website is built on the KONTEXT-CMS platform, utilizing modern web technologies such as jQuery, Google Analytics, Google Tag Manager, and Matomo for analytics. The site is mobile-optimized with good SEO practices and moderate performance. Hosting is provided by warenform.de, consistent with the domain's nameservers and analytics endpoints. From a security perspective, the site enforces HTTPS with an excellent SSL configuration and avoids exposing sensitive data. However, it lacks visible security headers and does not provide explicit security policies or incident response contacts. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism, which is a GDPR compliance gap. The business credibility is high, supported by clear contact information, certifications, and professional content. Overall, the website is trustworthy, well-maintained, and suitable for its educational purpose. Strategic improvements in privacy compliance and security transparency would enhance its security posture and regulatory adherence.

C

Caren Lay MdB

caren-lay.de

49

The website www.caren-lay.de represents Caren Lay, a member of the German Bundestag affiliated with the DIE LINKE party. It serves as a political communication platform focusing on housing policy, social issues, and club policy. The site provides articles, brochures, and information about her political work and positions. The target audience is German-speaking citizens interested in left-wing politics and social housing matters. The business model is centered on political representation and public engagement. Technically, the site is built on KONTEXT-CMS 3.9.9, uses modern frontend technologies such as Tailwind CSS and FontAwesome, and includes jQuery 3.5.1. Hosting is provided by Warenform, with CDN usage for fonts and images. The site is mobile optimized and has good SEO practices. Analytics are handled by Matomo with an opt-in cookie consent mechanism, reflecting a privacy-conscious approach. From a security perspective, the site enforces HTTPS and uses cookie consent with opt-in for tracking. However, it lacks explicit security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent and legitimate, supporting trustworthiness. Overall, the site demonstrates a good security posture but could improve by adding security headers and incident response information. The overall risk is low given the nature of the site as a political information platform with no sensitive transactions or personal data collection beyond a contact form. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility features to further strengthen trust and compliance.

I

Institut Solidarische Moderne

solidarische-moderne.de

50

Institut Solidarische Moderne is a German non-profit think tank and platform focused on developing progressive political concepts through dialogue among parties, movements, trade unions, civil society, and academia. The organization offers analysis, publications, podcasts, events, and forums to promote social-ecological transformation and solidarity politics. Their business model relies on memberships and donations, emphasizing independence and community engagement. The website is professionally designed, content-rich, and well-structured, targeting progressive political actors and the general public interested in leftist political discourse. Technically, the website is built on the KONTEXT-CMS platform, uses modern frontend technologies like Tailwind CSS and jQuery, and is hosted via Warenform DNS servers. It features responsive design and good SEO practices. Analytics are implemented via Matomo with a GDPR-compliant opt-in cookie consent mechanism, reflecting a mature approach to privacy and data protection. However, some security best practices such as explicit security headers and published security policies are missing. From a security perspective, the site enforces HTTPS, uses cookie consent with opt-in for tracking, and does not expose sensitive data or vulnerable libraries. There is no evidence of incident response or vulnerability disclosure policies, which could be improved. The WHOIS data is limited but consistent with a small non-profit organization using CMS hosting services. No WAF or blocking mechanisms are detected, and the site is fully accessible. Overall, the website presents a trustworthy, professional, and privacy-conscious platform for political discourse. Strategic recommendations include publishing security and incident response policies, enhancing security headers, and improving accessibility features to further strengthen trust and compliance.

D

Dieter Janecek

dieterjanecek.de

49

Dieter Janecek's website serves as the official online presence for a German Bundestag member representing Munich-West/Mitte. The site focuses on political communication, providing news, event information, and a newsletter subscription to engage constituents and supporters of the Green party. The business model centers on political representation and public outreach, targeting German citizens and political stakeholders. The website is well-branded, consistent, and offers multilingual support, enhancing accessibility for a broader audience. Technically, the site is built on WordPress using a modern tech stack including jQuery, Swiper.js, and several reputable plugins for events, forms, and multilingual content. The site demonstrates good mobile optimization and moderate performance, with a clean and professional design. SEO and accessibility are basic but adequate for the site's purpose. From a security perspective, the website enforces HTTPS and implements a GDPR-compliant cookie consent mechanism with granular user controls. No critical vulnerabilities or exposed sensitive data were detected. However, security headers are not explicitly present, and there is no dedicated security or incident response policy visible. The WHOIS data aligns with the website content, indicating a legitimate and consistent domain registration. Overall, the website presents a low-risk profile with good privacy compliance and a solid security posture for a political site. Strategic improvements could include adding security headers, incident response information, and enhanced accessibility features to further strengthen trust and compliance.

A

Arbeitskreis Humanitäre Hilfe für Asylbewerber e.V.

ak-asyl-nw.de

51

The website represents a small non-profit organization named Arbeitskreis Humanitäre Hilfe für Asylbewerber e.V., focused on providing humanitarian aid and consultation services to asylum seekers in Germany. The site content is primarily informational, offering consultation times and links to related refugee support organizations. The organization appears to operate locally with a clear humanitarian mission. Technically, the website is built on Joomla CMS using the Helix Ultimate template and Bootstrap 5.3.3, indicating a moderately modern infrastructure. The site is mobile optimized and includes a cookie consent mechanism that blocks cookies and local storage until user consent is given, reflecting good privacy awareness. However, no advanced analytics or tracking tools are detected, and security headers are not present, suggesting room for improvement in security hardening. From a security perspective, the site enforces HTTPS and implements cookie consent, but lacks explicit security policies, incident response contacts, and terms of service. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data is consistent with the website's purpose and shows no suspicious patterns, supporting the legitimacy of the domain. Overall, the website is safe, with content appropriate for a general audience. It demonstrates basic compliance with GDPR through its privacy and cookie policies but could enhance its security posture and business credibility by adding more detailed policies and contact information.

F

Fabio De Masi

fabio-de-masi.de

49

Fabio De Masi's website serves as an official political platform providing comprehensive information about his role as a member of the European Parliament. The site offers visitors access to news, media content, transparency reports, and opportunities to subscribe to newsletters. The target audience primarily consists of European citizens interested in political affairs and transparency. The business model is centered on public political representation and information dissemination, with a strong emphasis on transparency and engagement through social media and newsletters. Technically, the website is built on the KONTEXT-CMS platform, utilizing legacy jQuery and modern FontAwesome icons, hosted by warenform.de. The site demonstrates moderate performance and good mobile optimization but could benefit from updating outdated libraries and enhancing accessibility features. Security-wise, the site employs HTTPS and an opt-in cookie consent mechanism with Matomo analytics, reflecting good privacy compliance. However, the absence of security headers and the use of an outdated jQuery version present moderate risks. No explicit security or incident response policies are published, and contact information is limited to forms and social media links. Overall, the website is professional, trustworthy, and compliant with GDPR, but improvements in security posture and technical modernization are recommended.

B

Bundesregierung

gleichstellungsbericht.de

45

The website gleichstellungsbericht.de is an official German government platform dedicated to publishing gender equality reports and related information. It serves as a key resource for policymakers, administrators, and the public interested in gender equality progress and recommendations in Germany. The site provides access to current and past reports, event announcements, and downloadable documents, positioning itself as a trusted governmental information source. The business model is informational and regulatory, with a focus on transparency and public engagement in gender equality matters. Technically, the website is built on WordPress and employs common web technologies such as jQuery and Owl Carousel for interactive content. It integrates a sophisticated accessibility tool (digi·access) supporting multiple languages and accessibility needs, reflecting a high level of digital maturity and inclusiveness. Hosting is managed via domaincontrol.com (GoDaddy), a reputable provider. The site demonstrates good mobile optimization and SEO practices. From a security perspective, the site enforces HTTPS and includes essential security headers, contributing to a strong security posture. No vulnerabilities or exposed sensitive data were detected. However, the absence of a cookie consent mechanism, explicit security policies, and vulnerability disclosure pages indicates areas for improvement in compliance and transparency. No incident response contacts or data protection officer information were found, which are recommended for enhanced trust and regulatory adherence. Overall, the website is professional, trustworthy, and well-maintained, with a strong focus on accessibility and content quality. Strategic recommendations include implementing cookie consent, publishing security and incident response policies, and adding vulnerability disclosure information to further strengthen compliance and user trust.

The website schoenearbeit.de represents a small-scale design service operated by Christine Massuthe, a diploma designer based in Berlin, Germany. The site provides basic contact information and a simple presentation of the business but lacks comprehensive business or security policies. The business appears to be a freelance or consultancy service targeting local clients seeking design expertise. Technically, the website is built with basic HTML, CSS, and a small JavaScript file for image swapping. There is no evidence of a CMS or modern frameworks, and the site shows minimal mobile optimization and SEO efforts. Hosting is likely provided by the nameserver operator Warenform.de. No analytics or tracking technologies are detected, indicating a low digital maturity level. From a security perspective, the site lacks HTTPS information and security headers, which are critical for protecting user data and ensuring trust. No privacy, cookie, or incident response policies are present, which raises compliance concerns especially under GDPR. The contact information is clearly displayed, but no formal security or data protection measures are evident. Overall, the website is functional but basic, with moderate trustworthiness due to clear contact details but limited security and compliance features. Strategic improvements in security posture, privacy compliance, and technical modernization are recommended to enhance business credibility and user trust.

o.open is a small German IT service provider specializing in network design, system integration, hosting, and administration of internet and office networks. The company focuses on supporting social and left-wing projects, providing technical expertise and infrastructure services. The website content is professional and targeted at a niche audience within Germany, with references to partner organizations and detailed contact information. The business appears to have been founded in the early 2000s, with a strong community and social orientation. Technically, the website uses standard modern web technologies such as HTML5, CSS3, and vanilla JavaScript with some security-conscious practices like nonce usage in scripts. However, there is no evidence of advanced frameworks or CMS platforms. The site is moderately optimized for performance and mobile use but lacks comprehensive accessibility and SEO features. Security posture is moderate, with no visible security headers or HTTPS confirmation in the provided data, and no cookie or privacy consent mechanisms detected. From a security perspective, the site does not show signs of blocking or WAF interference, and no vulnerabilities or exposed sensitive data were found in the content. The WHOIS data is limited due to DENIC privacy policies but shows consistent nameservers under the domain's control. The domain legitimacy is high, though some WHOIS details like creation and expiry dates are not disclosed. Privacy compliance is basic, with GDPR-related documents available but no cookie consent. Overall, the website is trustworthy and professional but could improve its security posture and privacy compliance. Strategic recommendations include implementing HTTPS verification, adding security headers, introducing cookie consent mechanisms, and enhancing mobile and accessibility features to improve user experience and compliance.

5

52°Nord | Paris-Berlin

52nord.eu

49

52°Nord | Paris-Berlin is a small German media production company specializing in film and media content including interviews, thematic films, image films, fiction, and portraits. Their website is built on WordPress and showcases their services and content with a focus on the German-speaking audience. The company provides clear contact information including a physical address in Berlin, phone number, and email, enhancing their business credibility. Technically, the website uses an older WordPress version (5.3.20) with plugins such as MetaSlider and Vipers Video Quicktags, and includes jQuery 1.12.4. The site is hosted via domainfactory GmbH, a reputable registrar and hosting provider. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility and SEO features. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the website uses HTTPS but lacks important security headers such as Content-Security-Policy and X-Frame-Options. There is no visible cookie consent mechanism or privacy policy compliance banner, which is a GDPR compliance gap. No incident response or security policy information is provided. The site does not expose sensitive data or show signs of vulnerabilities but uses an outdated jQuery version which could pose risks. Overall, the website is safe with no adult or questionable content, and the domain registration is consistent with the business profile. Recommendations include implementing security headers, updating JavaScript libraries, adding cookie consent and privacy compliance mechanisms, and improving accessibility and SEO to enhance security posture and user trust.

123Comics is a small German-based creative media organization specializing in comics, graphic recording, animation, and educational workshops. Their website presents a professional and well-structured platform showcasing their projects and services, targeting educators, children, and institutions interested in political and social education through comics and animation. The technical infrastructure is based on a custom CMS (KONTEXT-CMS) with common web technologies like jQuery and Slick Carousel, and they use Matomo analytics to respect user privacy. Security posture is moderate with room for improvement, especially regarding security headers and updating legacy libraries. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and social media presence suggest a genuine operation. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, but no explicit terms of service or security policies are found. Overall, the site is safe, accessible, and professionally maintained but would benefit from enhanced security and clearer business legitimacy indicators.

T

TV1 GmbH

tv1.eu

71

TV1 GmbH is a well-established German live streaming and online event production company with over two decades of experience. They provide a comprehensive range of services including virtual events, AI-based subtitling, and operate their own streaming platform, Video.Taxi. Their client base includes prominent organizations such as the German Bundestag and European Commission, positioning them as a leading player in the German streaming market. The website reflects a professional and trustworthy business with clear contact information and strong branding. Technically, the site is built on WordPress with modern plugins and frameworks, optimized for mobile and SEO. Security posture is solid, supported by ISO 27001 certification and HTTPS, though some security headers could be improved. Privacy compliance is robust with a comprehensive privacy policy and cookie consent mechanism. Overall, the site demonstrates high professionalism, good technical implementation, and strong business credibility.

D

Deutscher Bundestag

bundestag.de

63

The Deutscher Bundestag website serves as the official online presence of the German Parliament, providing comprehensive information about parliamentary activities, members, schedules, and live streams. The site targets the general public and stakeholders interested in German governmental affairs. It demonstrates a high level of content quality, professional design, and clear navigation, reflecting its role as a government information portal. Technically, the site uses standard web technologies including JavaScript and CSS, with moderate performance and good mobile optimization. However, there is a lack of visible security headers and explicit privacy or cookie policies, which are areas for improvement. The security posture is moderate due to missing explicit security best practices and incident response information. Overall, the domain and website are legitimate and consistent with official government use, with no suspicious indicators detected.

U

united-domains AG

europa.blog

52

Europa Blog is a niche German-language media platform focusing on European political, social, and cultural topics. It publishes essays and columns from various authors, including notable contributors like Jürgen Klute and Frederik D. Tunnat. The site targets readers interested in in-depth socio-political analysis and commentary within Europe. The business model centers on content publishing without evident commercial sales or e-commerce components. The domain is registered since 2016 with privacy protection, consistent with the site's profile as a small media outlet.

G

Grundstücksgesellschaft Franz-Mehring-Platz 1 mbH

muenzenbergforum.de

46

The Internationales Willi Münzenberg Forum is a German non-profit organization that serves as a loose network of scientific project groups, political-cultural education providers, and media enterprises. The website reflects a niche educational and cultural collaboration platform with a focus on political culture and media projects. It targets politically and culturally engaged audiences, providing resources such as events, journals, and a library. The organization appears small and specialized, with a founding date around 2015. Technically, the website is built on WordPress 6.8.3, utilizing modern plugins such as Yoast SEO, Contact Form 7, and GDPR compliance tools like ShapePress DSGVO. Hosting is provided by Hetzner in Germany, aligning with the website's language and business location. The site demonstrates good mobile optimization, SEO practices, and moderate performance. From a security perspective, the site enforces HTTPS and implements GDPR-compliant cookie consent mechanisms. However, no explicit security headers were detected, and there is no visible security or incident response policy. No vulnerabilities or exposed sensitive data were found in the HTML content. The absence of contact emails and phone numbers is mitigated by the presence of contact forms and social media channels. Overall, the website presents a professional and trustworthy front for a small non-profit organization. Recommendations include enhancing security headers, adding explicit security policies, and possibly publishing vulnerability disclosure information to improve transparency and security posture.

C

common verlagsgenossenschaft eG

oxiblog.de

48

OXI Blog is a German media publication focused on alternative economic perspectives, operated by common verlagsgenossenschaft eG. The website offers articles, digital and print subscriptions, and a newsletter targeting a general audience interested in economic and social topics. The business model relies on content publication supported by subscriptions and donations, positioning itself as a niche media outlet in Germany. Technically, the site is built on WordPress with a modern tech stack including Yoast SEO, GDPR-compliant cookie consent via ShapePress DSGVO, and analytics through Matomo and WP Statistics. Hosting is provided by Hetzner, a reputable German provider, ensuring reliable infrastructure. Security posture is strong with HTTPS enforced, use of reCAPTCHA for forms, and cookie consent mechanisms, though some security headers and explicit incident response contacts are missing. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with no signs of content blocking or WAF interference.

The Rosa-Luxemburg-Stiftung is a well-established non-profit political education foundation affiliated with the German Left Party. The website serves as a comprehensive platform for political education, events, publications, and scholarship information targeting politically engaged individuals and activists. The organization maintains a strong presence with consistent branding and a broad range of services focused on social justice and left-wing political discourse. Technically, the website is built on TYPO3 CMS with Elasticsearch for search functionality and uses Matomo for analytics, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and well-structured, providing an excellent user experience. Security posture is solid with HTTPS and secure form handling, though improvements can be made by adding security headers and explicit incident response information. Privacy compliance is good with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a minor gap. Overall, the site is trustworthy, professional, and safe for general audiences.

N

nd - Journalismus von links

neues-deutschland.de

49

nd - Journalismus von links is a German left-wing news media outlet providing political, cultural, and social news and analysis. The website offers multiple subscription models, podcasts, newsletters, and voluntary donation options, reflecting a cooperative ownership business model. It targets a general audience interested in leftist perspectives on current affairs. The site is well-branded and professionally maintained with consistent content quality and clear navigation.

The Projektnetzwerk Ländliche Räume Niedersachsen website serves as an official regional government platform aimed at consolidating and promoting projects in rural areas of Lower Saxony, Germany. It provides categorized project listings, information on regional development programs, and facilitates project visibility for stakeholders such as municipalities and project managers. The platform is supported by various ministries and government entities, reinforcing its authoritative position in the regional development sector. Technically, the website is built on the connectiv! WebCMS 6 platform, employs standard web technologies including JavaScript and YouTube APIs, and uses etracker for analytics with respect for user privacy. While the site is accessible and well-structured, it lacks some modern security headers and explicit cookie consent mechanisms, which are areas for improvement. The security posture is generally good with HTTPS enforced and no visible vulnerabilities, but could benefit from enhanced security policies and incident response disclosures. Overall, the website is trustworthy, professionally maintained, and serves its target audience effectively with a moderate technical maturity level.

N

Startseite - NIEDERSACHSEN PACKT AN

niedersachsen-packt-an.de

44

The website 'niedersachsen-packt-an.de' appears to be a regional government or public initiative site focused on the Niedersachsen (Lower Saxony) region in Germany. The site uses WordPress CMS with performance optimization via WPRocket and includes custom fonts and scripts. The content is primarily in German and targets the general public in the region. The site design and navigation are good, with mobile optimization present. However, there is a lack of explicit privacy, cookie, and terms of service policies, as well as no visible contact information, which impacts compliance and trust. Security posture is minimal with no detected security headers or incident response contacts. The domain uses official Niedersachsen name servers, indicating legitimacy, but WHOIS data is limited. Overall, the site is functional and professional but could improve in privacy and security transparency.

N

Niedersächsische Staatskanzlei

verkuendung-niedersachsen.de

62

The website 'Verkündungsplattform Niedersachsen' is an official government platform operated by the Niedersächsische Staatskanzlei, providing free access to the official legal publications of the state of Niedersachsen, Germany. It serves as a digital replacement for printed legal gazettes, offering PDFs and archives of laws and ministerial bulletins. The platform targets citizens, legal professionals, and institutions requiring access to up-to-date legal documents. The business model is public service with no commercial intent, positioning it as a trusted government resource. Technically, the site is built using modern web technologies including React and Material-UI, ensuring a responsive and accessible user experience. The site demonstrates good mobile optimization and accessibility compliance, though SEO optimization is basic. No third-party analytics or advertising scripts were detected, indicating a privacy-conscious design. From a security perspective, the site uses HTTPS with excellent SSL configuration, but lacks explicit security headers and cookie consent mechanisms. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data confirms the domain is legitimately registered under official Niedersachsen name servers, reinforcing trust. Overall, the website presents a secure, professional, and trustworthy government service platform with minor improvements recommended in privacy compliance and security headers to enhance protection and user trust.

N

Niedersächsischer Integrationspreis

niedersaechsischer-integrationspreis.de

52

The Niedersächsischer Integrationspreis website serves as an official platform for a regional government-supported integration award in Lower Saxony, Germany. It targets organizations and the general public interested in integration initiatives, providing information about the award, past winners, news, and related events. The site is built on TYPO3 CMS and features a professional design with consistent branding and clear navigation, supporting a good user experience. The content is primarily in German and focuses on non-profit and governmental activities related to integration.

W

WInTO GmbH

winto-gmbh.de

46

WInTO GmbH is a regional economic development company operating under the Landkreis Oberhavel in Germany. The company focuses on improving the economic structure of the region by providing comprehensive services including project development, business support, and networking. Their website reflects a professional and consistent brand image targeting businesses, investors, and regional partners. Technically, the site uses modern frontend technologies and privacy-conscious analytics with Matomo and Cookiebot. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are absent. Overall, the site is trustworthy and well-positioned as a government-related economic development entity.

M

Main-Echo

main-echo.de

60

Main-Echo is a regional news media company serving Aschaffenburg and surrounding areas in Germany. The website provides news, event information, and local announcements targeting a general audience interested in regional developments. The business model is focused on regional news publishing with digital services including newsletters and push notifications. Technically, the site uses a modern CMS (fidion fCMS), integrates Google Tag Manager, Facebook SDK, and other analytics and advertising technologies, and is optimized for mobile devices with good SEO practices. Security posture is adequate with HTTPS enforced and consent management implemented, but lacks explicit security headers and published security policies. Privacy compliance is basic, with no explicit privacy or cookie policy pages found in the provided content. Overall, the site is professional, trustworthy, and aligned with its business purpose, but could improve transparency and security documentation.

K

Klinikum Saarbrücken gGmbH

klinikum-saarbruecken.de

49

Klinikum Saarbrücken gGmbH operates a large, modern hospital facility located in Saarbrücken, Germany, providing comprehensive medical services across 17 specialized departments and 18 interdisciplinary centers. The institution positions itself as a regional maximal care provider with a strong emphasis on quality, patient safety, and community engagement. The website serves multiple audiences including patients, visitors, healthcare professionals, and prospective employees, offering detailed information about medical services, educational programs, and career opportunities. The presence of certifications and compliance information underscores its commitment to healthcare standards and regulatory adherence. Technically, the website is built on the TYPO3 CMS platform, leveraging a modern technology stack including jQuery, Bootstrap, and Matomo analytics for privacy-conscious user tracking. The site demonstrates good mobile optimization, accessibility features, and SEO practices. The cookie consent mechanism and privacy policy are well implemented, reflecting GDPR compliance. The site integrates multiple social media channels and provides a newsletter signup, enhancing user engagement. From a security perspective, the site enforces HTTPS and employs cookie consent management. No critical vulnerabilities or exposed sensitive data were detected in the content. However, there is room for improvement in publishing explicit incident response policies, security headers, and vulnerability disclosure mechanisms. The WHOIS data aligns with the website's claims, indicating a legitimate and professionally managed domain. Overall, Klinikum Saarbrücken's website reflects a mature digital presence with strong business credibility and privacy compliance. Strategic enhancements in security transparency and incident response readiness would further strengthen its posture.

S

Saarländisches Staatstheater

staatstheater.saarland

58

The Saarländisches Staatstheater is a prominent cultural institution in Saarland, Germany, offering high-quality performances in music theater, drama, ballet, and concerts. It serves a broad audience interested in the arts and culture, with a business model centered on ticket sales, subscriptions, and cultural events. The website reflects a well-established organization with a strong regional presence and professional digital representation. Technically, the website is built on TYPO3 CMS, leveraging modern frontend technologies such as Bootstrap and FontAwesome. It employs Matomo analytics configured for privacy-conscious tracking without cookies. The site is mobile-optimized, well-structured, and SEO-friendly, indicating a mature digital infrastructure. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms aligned with GDPR. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced security posture. No critical vulnerabilities or suspicious content were detected. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations, making it a reliable digital presence for the institution.

S

Stadtwerke Saarbrücken Bäder GmbH

saarbruecker-baeder.de

49

Saarbrücker Bäder is a municipal swimming pool and fitness service provider operated by Stadtwerke Saarbrücken Bäder GmbH, serving the local community in Saarbrücken, Germany. The website offers information on swimming pools, aqua courses, fitness and relaxation programs, family activities, and an online ticketing platform. It positions itself as a local public service provider focused on wellness and recreational activities. Technically, the site uses a modern JavaScript stack including jQuery, Owl Carousel, and the Foundation framework, with TYPO3 CMS likely powering the backend. The site is mobile-optimized and provides basic accessibility features. Security-wise, HTTPS is used, and cookie consent mechanisms are in place, but explicit security headers and incident response policies are not publicly documented. The domain registration data aligns well with the website's municipal nature, indicating legitimacy and trustworthiness.

I

Immobiliengruppe Saarbrücken

sib-saarbruecken.de

48

Immobiliengruppe Saarbrücken is a regional real estate service provider focused on housing rentals, commercial spaces, property management, parking, and insurance services primarily serving the Saarbrücken area. The website reflects a municipal or public service affiliation, offering information on housing, job opportunities, and community projects. Technically, the site uses modern JavaScript libraries and the Foundation framework, likely powered by TYPO3 CMS, delivering a responsive and accessible user experience. Security posture is moderate with HTTPS usage and no exposed sensitive data, but lacks explicit security headers and cookie consent mechanisms. Tracking is performed via etracker with respect for Do Not Track settings. Overall, the site is professional, trustworthy, and safe for general audiences, though improvements in privacy compliance and security policies are recommended.

S

Stadtwerke Saarbrücken

saarbruecker-stadtwerke.de

42

Stadtwerke Saarbrücken is a large municipal utility company serving the Saarbrücken region in Germany, providing energy, water, and public transport services. The website reflects a professional and regionally focused business with a strong market position as a key regional employer and service provider. The technical infrastructure uses modern JavaScript libraries and a TYPO3 CMS backend, indicating moderate digital maturity. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit privacy and cookie policies. Tracking is done via eTracker without visible consent mechanisms, indicating room for privacy compliance improvement. Overall, the website is trustworthy and well-maintained but could enhance security and privacy transparency.

Z

Zentraler Kommunaler Entsorgungsbetrieb

zke-sb.de

53

The Zentraler Kommunaler Entsorgungsbetrieb (ZKE) website serves as the official municipal platform for waste disposal, sewage management, and city cleaning services in Saarbrücken, Germany. The site targets local residents and businesses, providing environmental and municipal service information. The business operates as a government entity with a medium-sized operational scope. The website promotes the official Saarbrücken city app and uses modern web technologies such as jQuery, Foundation framework, and accessibility tools like ReadSpeaker. However, the site lacks visible privacy and cookie policies, which are critical for GDPR compliance, and does not provide explicit contact information or incident response channels. Security posture is moderate with HTTPS enabled and no obvious vulnerabilities, but security headers and advanced protections are missing. Overall, the website is functional and trustworthy as a municipal service portal but requires improvements in privacy compliance and user contact transparency.

S

Saarbahn GmbH

saarbahn.de

42

Saarbahn GmbH is a regional public transportation provider serving the Saarbrücken area in Germany. The company operates local transit services including trams and buses, offering timetable information, ticket sales, and subscription services to its customers. It is a subsidiary of Stadtwerke Saarbrücken GmbH, a major regional utility and service provider. The website provides comprehensive service information, customer support, and news updates relevant to its target audience of local commuters and travelers. Technically, the website employs a modern technology stack including jQuery, Owl Carousel, Foundation framework, and accessibility tools like ReadSpeaker. The site is mobile-optimized and structured for good user experience and SEO. The CMS appears to be TYPO3, indicating a professional content management approach. Performance is moderate with good mobile and accessibility features. From a security perspective, the site uses HTTPS and secure form submissions but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. Tracking is done via etracker, with moderate user tracking levels. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable security posture. Overall, Saarbahn GmbH's website is a trustworthy and professional platform for regional public transport services, though it would benefit from enhanced privacy compliance and security header implementation to align with best practices and regulatory requirements.

I

internett GmbH

internett.de

46

internett GmbH is a German IT services company specializing in designing, building, and operating reliable IT systems, hosting, virtual office solutions, and data center services. With over 25 years of experience, they focus on free and open hardware and software, serving businesses that require distributed IT infrastructure and modern IT management platforms. The company maintains a professional and consistent online presence with a well-structured website built on WordPress and Elementor, indicating a mature digital infrastructure. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though improvements in security headers and vulnerability disclosure policies are recommended. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks cookie consent mechanisms. Overall, the website reflects a trustworthy and credible business with moderate to good technical and security maturity.

J

JK.works mediatec

jk-works.de

55

JK.works mediatec is a small, established German IT service provider specializing in system administration, cloud and backup solutions, server maintenance, and web design/development. With over 20 years of experience and a Microsoft Silver Partner certification, the company targets businesses primarily in the Bremen, Wildeshausen, and Oldenburg regions. Their website reflects a professional and consistent brand image, offering clear service descriptions and accessible contact information. Technically, the site is built on OctoberCMS with a modern tech stack including Bootstrap and jQuery, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. Overall, the website is trustworthy, compliant with GDPR, and free from suspicious or adult content.

E

Euro Akademie

euroakademie.de

52

Euro Akademie is a well-established educational institution in Germany offering a wide range of vocational training, further education, and degree programs. The website is professionally designed using TYPO3 CMS and provides detailed information about courses and locations, targeting students and professionals seeking education and training. The institution is part of the ESO Education Group, enhancing its market position and trustworthiness. Technically, the website employs modern technologies including Google Tag Manager and Usercentrics for GDPR-compliant consent management. Security posture is good with HTTPS enforced and privacy-conscious tracking defaults, though some security headers and explicit policies are missing. Overall, the site is safe, accessible, and trustworthy with no adult or questionable content detected.

H

Hallesche Wohnungsgenossenschaft FREIHEIT eG

wgfreiheit.de

50

Hallesche Wohnungsgenossenschaft FREIHEIT eG is a well-established housing cooperative based in Halle (Saale), Germany, with a history spanning over 70 years. The organization provides affordable, modern housing solutions with a strong emphasis on community engagement, social responsibility, and cultural sponsorship. Their target audience includes families, seniors, students, and local residents. The website reflects a mature digital presence with comprehensive content, clear navigation, and active social media integration. Technically, the site is built on TYPO3 CMS, uses modern JavaScript libraries, and integrates Google Analytics with privacy-conscious settings. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. WHOIS data confirms domain legitimacy and consistency with the business profile.

S

Stadtwerke Halle GmbH

swh.de

62

Stadtwerke Halle GmbH is a large municipal utility company serving the city of Halle (Saale) and surrounding region in Germany. The company provides a broad range of essential services including electricity, natural gas, district heating, water supply, waste management, public transportation, and leisure facilities. It operates through multiple subsidiaries and partner organizations, reflecting a diversified municipal service portfolio. The website presents these services clearly and professionally, targeting local residents and businesses. Technically, the website uses a modern technology stack including jQuery, Slick Carousel, FontAwesome, and a consent management platform (Usercentrics) alongside Matomo analytics for privacy-conscious user tracking. The site is mobile optimized and structured for good SEO and accessibility, though some accessibility features could be enhanced. Hosting and CMS appear stable and appropriate for the business scale. From a security perspective, the site enforces HTTPS and uses consent management for cookies, indicating good privacy practices. However, no explicit security policy, incident response contacts, or vulnerability disclosure mechanisms are publicly available, which could be improved. No vulnerabilities or suspicious content were detected in the analysis. Overall, the website is trustworthy, professionally maintained, and aligned with the business's public utility role. Strategic improvements in transparency around security policies and GDPR compliance documentation would enhance trust and compliance posture.

H

Hallotta – deine Assistentin für Mikroabenteuer in Halle an der Saale!

hallotta.app

57

Hallotta.app is a German-language digital assistant platform focused on promoting and facilitating micro-adventures in the city of Halle an der Saale. The website presents a clean, modern Angular-based single-page application with localized content aimed at residents and visitors interested in local outdoor activities and small adventures. The business model appears to be service-oriented, providing guidance and assistance for local experiences. However, the website lacks critical compliance and trust elements such as privacy policies, cookie consent mechanisms, terms of service, and contact information, which limits its credibility and user trust. Technically, the site uses modern web technologies but does not demonstrate advanced SEO or accessibility features. Security posture is minimal with no visible security headers or incident response information.

A

AV-Studio Kommunikationsmedien GmbH Halle

av-studio.de

60

AV-Studio GmbH is a well-established full-service digital agency based in Germany, specializing in strategy, design, system development, online marketing, and content creation with over 25 years of experience. The company targets businesses and organizations seeking comprehensive digital solutions, positioning itself as a trusted regional player with a strong portfolio of audiovisual and multimedia projects. Technically, the website is built on Drupal CMS, employs Matomo for analytics with privacy-conscious configurations, and uses modern frontend technologies ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in implementing security headers and explicit security policies. Overall, the website is professional, trustworthy, and compliant with GDPR, providing clear contact information and privacy documentation.

C

Carlsen Verlag

carlsen.de

51

Carlsen Verlag is a well-established German publishing company specializing in children's books, young adult literature, manga, and comics. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to its target audience of children, young adults, educators, and fans of comics and manga. The company operates under the Bonnier Group umbrella and maintains subsidiaries such as Lappan Verlag and Carlsen K. Technically, the site is built on Drupal CMS, uses modern JavaScript libraries like Swiper.js, and integrates Google Tag Manager for analytics and marketing. The site is mobile-optimized and accessible, with good SEO practices.

T

Typolexikon.de | Das Lexikon der Typografie

typolexikon.de

63

Typolexikon.de is a specialized online lexicon and encyclopedia dedicated to typography, fonts, and visual design, curated and edited by Wolfgang Beinert since 2001. It serves a niche audience of typography enthusiasts, graphic designers, and students by providing comprehensive, well-structured educational content and a searchable glossary. The website demonstrates a mature digital presence with professional design, good SEO, and accessibility features, built on WordPress with modern technologies. Security posture is solid with HTTPS and secure form practices, though it lacks published privacy and cookie policies, which are compliance gaps. Contact is available via an external contact form, and no analytics or advertising scripts are detected, indicating a privacy-conscious approach. Overall, the site is trustworthy and authoritative within its domain but should improve privacy compliance documentation.

Ä

Ärzte ohne Grenzen

aerzte-ohne-grenzen.de

74

Ärzte ohne Grenzen is a well-established international humanitarian medical aid organization operating in Germany with a large-scale presence. The website effectively communicates its mission to provide independent, impartial, and neutral medical emergency assistance. The organization targets a broad audience including donors, volunteers, and medical professionals. The business model is donation-funded non-profit humanitarian aid. The website is professionally designed, well-structured, and optimized for mobile devices, reflecting a mature digital presence. Technically, the site uses Drupal 11 CMS, integrates Matomo analytics with consent management via OneTrust, and is hosted with Cloudflare DNS services, ensuring good performance and security. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response information are not published. Privacy compliance is robust with comprehensive cookie consent and GDPR-aligned policies. WHOIS data confirms domain legitimacy and consistency with the organization's identity. Overall, the site is trustworthy, secure, and professionally maintained.

S

Stadt Frankfurt am Main

kufti.de

48

KUFTI is a cultural and leisure ticket initiative operated by the Stadt Frankfurt am Main, targeting children and youth under 18 years old. The website provides information about free or low-cost access to museums, the zoo, and cultural highlights in Frankfurt. It offers multilingual support and a newsletter subscription to keep the audience informed. The business model is a public service promoting cultural engagement among young residents and students in Frankfurt. Technically, the site is built on WordPress with modern plugins such as Yoast SEO, WPML for multilingual support, and Borlabs Cookie for privacy compliance. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are absent. Overall, the site is trustworthy, professional, and compliant with GDPR requirements, serving as a reliable government cultural resource.