Germany security reports

U

Union Investment

finanzagenda.de

56

FinanzAgenda is a digital platform operated by Union Investment, providing transparent and comprehensive information about the political and public affairs activities of the Union Investment Group. The website targets institutional and private investors interested in financial and political transparency. The platform is well-branded and professionally designed, reflecting a strong market position within the German financial services sector. Technically, the site employs modern JavaScript frameworks, a proprietary CMS, and integrates consent management and analytics tools, indicating a mature digital infrastructure. Security posture is solid with HTTPS and consent mechanisms, though explicit security policies and contact information for incident response are absent, representing areas for improvement. Overall, the site is trustworthy and professionally maintained, with recommendations to enhance privacy disclosures and security transparency.

H

Holidays.ch

upholidays.de

64

The website www.upholidays.de is a professional online travel booking platform primarily targeting German-speaking customers interested in package holidays, flights, and hotel bookings. It offers a variety of travel destinations including beach and city vacations, integrating multiple tour operators and airlines. The platform demonstrates a solid market position within the regional travel industry, focusing on convenience and comprehensive travel options. Technically, the site leverages modern web technologies such as React, Google Tag Manager, and Usercentrics for consent management, ensuring a good user experience and compliance with privacy regulations. The use of HTTPS and nonce-based CSP scripts indicates a good security posture, although some improvements in HTTP security headers and incident response transparency are recommended. Overall, the site is trustworthy, well-branded, and compliant with GDPR, with clear contact information and legal documentation. No adult or NSFW content is present, making it suitable for general audiences.

M

Münchener Hypothekenbank eG

muenchenerhyp-karriere.de

56

Münchener Hypothekenbank eG operates a professional career portal showcasing a wide range of job opportunities primarily in banking, IT, real estate valuation, compliance, and risk management. The company holds a solid market position as a regional mortgage bank in Germany, supported by its subsidiary M-Wert GmbH specializing in real estate valuation. The website demonstrates a moderate level of digital maturity, utilizing AngularJS and a specialized job widget for dynamic content delivery. While the site is well-structured and mobile-optimized, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but the absence of security headers and incident response contacts suggests room for improvement. Overall, the domain and website appear legitimate and trustworthy, with clear business credibility and professional presentation.

M

Münchener Hypothekenbank eG

mhbplus.de

55

Münchener Hypothekenbank eG operates the website mhb-plus.de to promote its Mitglieder-Plus membership program, offering cashback and insurance benefits primarily through partnerships with R+V Versicherung. The site targets members and potential members of the bank, providing clear information on benefits and contact options. Technically, the site is built on Drupal 11 with Bootstrap Barrio theme, uses Matomo for analytics, and Cookiebot for GDPR-compliant cookie consent management. The hosting infrastructure is likely provided by Deutsche Telekom, inferred from the nameservers. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and incident response policies are not explicitly published. Privacy compliance is supported by Cookiebot's comprehensive privacy policy, though no direct privacy policy page on the domain was found. Contact information includes a phone number and a contact form, but no direct email addresses or social media links were detected. Overall, the website is professional, trustworthy, and well-structured, suitable for its financial services audience.

M

Münchener Hypothekenbank eG

meindarlehen.de

50

Münchener Hypothekenbank eG operates the website www.meindarlehen.de as a digital customer portal for mortgage loan management. The portal offers services such as personal data updates, payout requests, repayment options, contract adjustments, and membership management, targeting loan customers primarily in Germany. The website reflects an established financial institution with a medium-sized market presence and a focus on customer self-service through a modern web interface. Technically, the site is built on Drupal CMS, utilizing common libraries such as jQuery, Bootstrap, FontAwesome, and Slick Carousel for UI components. The site is mobile-optimized and accessible, with moderate performance characteristics. Security posture is good with HTTPS enforced and cookie consent managed via Cookiebot, but lacks explicit security headers and published security policies. Analytics are handled via Matomo, indicating a privacy-conscious approach. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

D

DZ BANK AG

dzbank.com

66

DZ BANK AG is a leading German corporate and investment bank serving cooperative banks and their clients. The website demonstrates a mature digital presence with comprehensive information on corporate governance, compliance, sustainability, investor relations, and client services. The technical infrastructure leverages Adobe Experience Manager CMS, modern JavaScript libraries, and privacy-conscious analytics tools such as Matomo and Usercentrics. Security posture is strong with HTTPS enforcement, security headers, and consent management, though the absence of a public security.txt and incident response contacts suggests room for improvement. The missing WHOIS data is a notable anomaly but does not detract from the professional and trustworthy nature of the website content. Overall, DZ BANK's website reflects a well-established financial institution with a strong emphasis on compliance and sustainability.

D

DZ PRIVATBANK

sogehtassetservicing.com

72

DZ PRIVATBANK, together with its subsidiary IPConcept, operates the website 'So geht Asset Servicing!' offering modular and full-service asset servicing solutions for the entire fund lifecycle. The company targets fund initiators and institutional investors primarily in Germany, Luxembourg, and Switzerland. The website presents a professional and comprehensive overview of services including custodian, transfer agent, central administration, and AIFM/KVG services, supported by a well-structured team section and multiple contact options. Technically, the site is built on WordPress with modern integrations such as Google Tag Manager and consent management tools, ensuring GDPR compliance and good user experience across devices. Security posture is strong with HTTPS enforcement and security headers, though the absence of a public security policy and incident response details is noted. The WHOIS data is missing, which raises some concerns about domain registration transparency, but the overall branding and external references support legitimacy. Strategic recommendations include publishing security and incident response policies and enhancing transparency around domain registration.

IPConcept is a specialized financial services company focused on fund administration and management solutions, operating primarily in Germany, Luxembourg, and Switzerland. It is a 100% subsidiary of DZ PRIVATBANK, providing services such as private label funds, alternative investment funds, risk management, order management, performance analysis, and reporting. The company targets asset managers, institutional clients, and banks, positioning itself as a reliable partner with a strong backing from a major bank. The website content is professional, well-structured, and GDPR compliant, reflecting a mature digital presence.

WInTO GmbH is a regional government-related company focused on economic, innovation, and tourism promotion in the Oberhavel region of Germany. The website primarily serves as an imprint (Impressum) page providing legal and contact information. The business operates in the government sector with a small organizational size and targets local businesses and stakeholders interested in regional development. The website content is minimal and professional but lacks comprehensive privacy, cookie, and security policies, which are important for compliance and trust. Technically, the website uses basic HTML and CSS with no detected CMS or advanced frameworks. Hosting appears to be on generic servers indicated by the nameservers. The site shows basic mobile optimization and accessibility but lacks SEO optimization and security headers. No analytics or tracking scripts are present, indicating minimal user tracking. From a security perspective, the site uses HTTPS (assumed but not explicitly confirmed), but no security headers or incident response contacts are provided. There are no forms or user input fields, reducing attack surface. However, the absence of privacy and cookie policies is a compliance gap under GDPR. WHOIS data is partially consistent but lacks detailed registrant information, slightly reducing trustworthiness. Overall, the website is safe and professional but basic in content and technical sophistication. Strategic improvements in privacy compliance, security headers, and SEO would enhance trust and digital maturity.

S

Stadtwerke Göttingen AG

stadtwerke-goettingen.de

55

Stadtwerke Göttingen AG is a regional energy utility company serving Göttingen and its surrounding areas with electricity, gas, district heating, and water services. The company emphasizes sustainability and innovation, offering additional services such as photovoltaic systems and e-mobility solutions under its brand neuwerk. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to residential and commercial customers. Technically, the site is built on TYPO3 CMS and integrates modern analytics and marketing tools with a strong focus on GDPR compliance through a consent management platform. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy and trustworthiness of the site.

Wir-e.de is a German-language platform dedicated to enabling institutions, communities, and individuals within the church context to create, discover, and subscribe to websites quickly and free of charge. The platform serves a niche market focused on church-related digital presence, providing a valuable service to non-profit and community organizations. Technically, the website is built on a modern Ruby on Rails stack, utilizing Bootstrap and Font Awesome for UI components, and includes a custom CMS for content management. The site is mobile responsive and implements basic accessibility and SEO features. Security-wise, the site enforces HTTPS, includes standard security headers, and uses CSRF tokens in forms, reflecting a good security posture. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, indicating GDPR awareness. Overall, the website is trustworthy, professional, and well-suited for its target audience, though it could improve transparency and contactability.

R

Romantik Hotel Gebhards

gebhardshotel.de

43

Romantik Hotel Gebhards is a historic hospitality business located in Göttingen, Germany, offering accommodation, event hosting, and dining services. The website reflects a well-established brand with a focus on guest experience and local tourism. The business targets tourists, business travelers, and event organizers, positioning itself as a premium local hotel with a strong reputation. Technically, the site is built on Silverstripe CMS and integrates multiple booking engines, showing a moderate level of digital maturity. The site is mobile optimized and uses modern tracking and consent tools such as Google Tag Manager and Cookiebot. Security posture is adequate with HTTPS and consent mechanisms in place, but lacks explicit security headers and published security policies. Privacy compliance is partial, with cookie consent but no visible privacy or terms pages. Overall, the site is professional and trustworthy with room for improvement in security and compliance documentation.

S

Sparkasse Göttingen

spk-goettingen.de

67

Sparkasse Göttingen is a regional financial institution providing a broad range of banking and financial services including online banking, loans, credit cards, investments, insurance, and real estate services. The website targets both private and corporate customers with a strong emphasis on secure and user-friendly online banking experiences. The bank maintains a solid market position within the Göttingen region, supported by comprehensive service offerings and a professional digital presence. Technically, the website is built on a modern infrastructure likely powered by Adobe Experience Manager CMS, utilizing JavaScript, CSS, and React components for dynamic content. The site is well-optimized for mobile devices and accessibility, featuring clear navigation and SEO best practices. The presence of cookie consent mechanisms and privacy policies indicates a mature approach to data protection and compliance. From a security perspective, the website enforces HTTPS and includes session management features such as session timeout warnings. While explicit security headers are not fully confirmed, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy or incident response contact suggests room for improvement in transparency and readiness. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR requirements. It demonstrates a high level of digital maturity suitable for a financial institution, with recommendations focusing on enhancing security disclosures and incident response transparency.

R

Ristorante Fellini

fellini-goettingen.de

66

Ristorante Fellini is a family-run Italian restaurant based in Göttingen, Germany, offering traditional Italian pizzas and dishes with an online ordering platform powered by Shopify. The website targets local customers seeking authentic Italian cuisine with convenient online access. The business operates in the hospitality sector with a small-sized footprint and a focus on community engagement. Technically, the website leverages modern web technologies including Shopify's e-commerce platform, jQuery, Font Awesome for icons, and Cookiebot for cookie consent management, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website uses HTTPS and implements cookie consent, but lacks explicit security headers and formal privacy or terms of service documentation, which are areas for improvement. No WAF or blocking mechanisms were detected, and the WHOIS data is minimal but not suspicious. Overall, the website is functional and trustworthy for its business purpose but would benefit from enhanced security and compliance documentation.

V

Velo Voss

velo-voss.de

43

Velo Voss is a small, established bicycle retailer located in Göttingen, Germany, specializing in high-quality e-bikes and bicycles. The company offers personalized consultation, repair services, bike leasing options, and training opportunities. They are a Bosch-certified eBike expert, which enhances their credibility and market position. The website is professionally designed with good content quality, clear navigation, and mobile optimization. Technically, it is built on WordPress with modern plugins and SEO tools, hosted on a German hosting provider. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the website reflects a trustworthy and professional local business with a clear focus on customer service and quality products.

H

Hogrefe Verlag GmbH & Co. KG

hogrefe.de

67

Hogrefe Verlag GmbH & Co. KG is a well-established German publishing company specializing in psychology, healthcare, and related educational materials. Founded in 1949 and headquartered in Göttingen, Germany, the company offers a broad portfolio including books, psychological tests, journals, eTesting platforms, and continuing education services. The website reflects a mature digital presence with multilingual support and a focus on professional and academic audiences. Technically, the site is built on TYPO3 CMS, employs modern frontend technologies like Tailwind CSS, and integrates Google Tag Manager and a consent management platform to ensure GDPR compliance. Security posture is good with HTTPS enforced and secure login forms, though explicit security headers and incident response information are not publicly documented. The absence of WHOIS data limits domain registration trust verification, but the website's professional presentation and clear business information support its legitimacy. Overall, Hogrefe demonstrates a strong market position in educational publishing with a solid digital infrastructure and compliance awareness.

G

Göttinger Kulturstiftung

kulturstiftung-goettingen.de

57

The Göttinger Kulturstiftung is a small non-profit cultural foundation affiliated with the city of Göttingen, Germany. It focuses on supporting cultural activities through funding and public information. The website serves as an informational portal for cultural funding opportunities and donation options, targeting local cultural organizations and citizens. The business model is centered on non-profit cultural promotion with a clear local focus. Technically, the website is built on a custom CMS platform (NOLIS) using standard web technologies such as JavaScript and CSS. It features a responsive design with accessibility options like font resizing and contrast toggling. The site is well-structured with clear navigation and SEO-friendly metadata. Performance is moderate with no major issues detected. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks advanced security headers and does not publish explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were found. The WHOIS data confirms domain legitimacy and consistency with the organization's identity. Overall, the website is professional, trustworthy, and suitable for its target audience. Strategic improvements could include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to strengthen security posture and user trust.

A

AKB Stiftung

akb-stiftung.de

42

The AKB Stiftung website represents a small, regional non-profit foundation with a family heritage focus. The site content is minimal but clearly communicates the foundation's regional engagement and mission. The business model is typical for a non-profit foundation, relying on regional initiatives and likely donations or grants. The market position is niche and localized, with no evident commercial activities or services offered online. Technically, the website is built on WordPress using the Enfold theme and several plugins including Slider Revolution and MediaElement.js. The site is served over HTTPS, indicating a basic level of security. However, the technical implementation is basic with limited mobile optimization and no advanced SEO or accessibility features detected. The site lacks privacy and cookie policies, which is a compliance gap. From a security perspective, the site has HTTPS enabled but lacks security headers and does not disclose any security or incident response policies. There are no visible vulnerabilities or exposed sensitive data, but the absence of security best practices and policies suggests room for improvement. No analytics or tracking scripts are present, indicating minimal user tracking. Overall, the website is safe and appropriate for a general audience, with no adult or questionable content. The lack of contact information and compliance documentation reduces trust and business credibility. Strategic improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and compliance.

V

VGH Stiftung

vgh-stiftung.de

44

VGH Stiftung is a medium-sized non-profit foundation based in Germany, focusing on cultural education, literature, monument preservation, and scientific research. The foundation supports various projects and events primarily in northern Germany, including literary festivals, educational workshops, and scientific awards. The website reflects a professional and consistent brand image with a clear focus on its cultural mission. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Borlabs Cookie for cookie consent management. The site is mobile-optimized and uses HTTPS, ensuring secure communications. However, there is a lack of explicit privacy policy and terms of service pages, which impacts privacy compliance ratings. Security headers are not detected, suggesting room for improvement in security hardening. No direct contact information or incident response contacts are visible, which could affect user trust and compliance. Overall, the website is well-structured and trustworthy but would benefit from enhanced privacy and security disclosures.

S

Stiftung Niedersachsen

stnds.de

54

Stiftung Niedersachsen is a regional cultural foundation dedicated to promoting and funding cultural projects throughout the German state of Niedersachsen. The foundation operates as a non-profit entity, supporting a wide range of cultural sectors including music, theater, museums, literature, and social culture. Their website reflects a professional and well-structured digital presence, targeting cultural institutions, artists, and non-profit projects within the region. The foundation's market position is that of a key regional cultural supporter with a clear focus on fostering cultural diversity and sustainability.

Landschaftsverband Südniedersachsen is a regional non-profit association based in southern Lower Saxony, Germany, dedicated to supporting cultural heritage, museum consulting, and funding regional projects. The website serves as an informational portal offering access to funding opportunities, museum advisory services, provenance research, and cultural project updates. The organization targets local governments, cultural institutions, and the general public interested in regional culture. Technically, the website is built on the Contao CMS platform, uses modern JavaScript libraries such as jQuery and Mmenu.js, and employs Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized and accessible, with a clear navigation structure and consistent branding. Security-wise, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and explicit security headers, representing areas for improvement. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional, trustworthy, and well-suited for its audience, with moderate technical maturity and a solid security posture.

The website www.niedersachsen.de is the official portal of the Lower Saxony state government in Germany. It serves as a comprehensive information hub for residents, government officials, and other stakeholders, providing detailed content on politics, state administration, culture, energy, emergency monitoring, integration, and public services. The site is well-structured, multilingual, and professionally designed, reflecting its authoritative government status. The business model is purely informational and service-oriented, targeting the general public and specific groups such as refugees and local citizens. Technically, the site uses a mature technology stack including jQuery, Video.js, FancyBox, Slick Carousel, DataTables, and Matomo analytics, managed via the Powerslave Liveserver CMS. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and explicit cookie consent mechanisms. Overall, the security posture is good with no detected vulnerabilities or suspicious content. The domain WHOIS data is privacy-protected as per DENIC policies, consistent with a government domain. The site lacks explicit security policies or incident response contacts, which could be improved. Privacy compliance is generally good, though cookie consent mechanisms should be enhanced. The risk assessment is low, with recommendations focusing on improving security headers, cookie consent, and publishing security policies to enhance trust and compliance. The site is trustworthy, professional, and safe for general audiences.

B

Büchergilde Gutenberg

buechergilde.de

53

Büchergilde Gutenberg is a well-established German book community and cooperative founded in 1924, offering curated book subscription boxes, an online bookshop, and literary events. The website reflects a professional and consistent brand presence targeting German-speaking book lovers and literature enthusiasts. Technically, the site uses modern frameworks such as Next.js and React, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled but lacks visible security headers and formal privacy or cookie policies. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. Overall, the domain and website appear legitimate and consistent with the business history and sector.

Arbeit und Kultur Saarland gGmbH is a well-established non-profit organization dedicated to supporting cultural actors and projects in the Saarland region of Germany. The organization provides advisory services, project initiation, funding, and networking opportunities to foster a vibrant cultural scene. Their website reflects a professional and consistent brand presence with a focus on cultural events and community engagement. Technically, the site is built on the ProcessWire CMS with modern frameworks like UIkit and includes cookie consent mechanisms to comply with GDPR. Security posture is moderate with HTTPS usage and cookie consent but lacks visible advanced security headers or incident response policies. The domain registration data is minimal but consistent with a non-profit hosted on generic servers. Overall, the website is trustworthy, safe, and well-suited for its target audience.

E

Eugen Pfeifer GmbH

klimapfeifer.de

56

Eugen Pfeifer GmbH is a medium-sized German company specializing in climate technology, including planning, installation, and operation of climate, air, and refrigeration systems. The company targets both industrial and private customers, emphasizing tailored solutions for air conditioning and industrial refrigeration. Their market position is that of an experienced regional specialist with a focus on quality and customer service. Technically, the website is built on Joomla CMS with Bootstrap and jQuery, offering a modern and responsive user experience, though some accessibility and SEO improvements are possible. Security posture is solid with HTTPS and cookie consent mechanisms, but lacks advanced security headers and incident response information. Overall, the site is professional and trustworthy, though contact information is not explicitly presented on the homepage, which could be improved for better business credibility.

The Gesellschaft für Medienförderung Saarland – Saarland Medien – mbH is a regional media promotion company based in Saarland, Germany, focusing on supporting film, games, and media location development. The website clearly communicates its business focus and upcoming liquidation status effective January 1, 2025. The target audience includes media professionals, filmmakers, game developers, and regional stakeholders. The business operates primarily as a public sector entity providing funding, networking, and promotional services within the media industry. Technically, the website is built on WordPress using Visual Composer, Bootstrap 4, and several common plugins such as Events Manager and Contact Form 7. The site is served over HTTPS with good SSL configuration, though it lacks advanced security headers and cookie consent mechanisms. Performance and mobile optimization are moderate to good, with basic accessibility and SEO features. From a security perspective, the site employs HTTPS and some security plugins but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy present but no cookie consent banner. Overall, the website is professional, trustworthy, and suitable for its business purpose, though improvements in security headers, privacy compliance, and incident response transparency are recommended to enhance its security posture and regulatory adherence.

S

Südwestrundfunk

swr.de

59

Südwestrundfunk (SWR) is a large regional public broadcasting organization serving the German states of Baden-Württemberg and Rheinland-Pfalz. The website www.swr.de serves as a comprehensive portal for news, radio, television, and online media content including live streams and event calendars. The site targets a general audience interested in regional and national news, culture, sports, and lifestyle content. Technically, the website employs modern web technologies such as ES6 JavaScript modules, lazy loading, and integrates analytics tools like Chartbeat and Piano Analytics, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible sensitive data exposure, though explicit security headers and vulnerability disclosures are not evident. Privacy compliance is limited in the visible content, lacking explicit privacy and cookie policies or consent mechanisms. Overall, the site is professional, trustworthy, and well-branded, consistent with a public media entity.

P

PFPRO IT Services

pfproit.de

60

PFPRO IT Services is a small German IT company based in Saarbrücken, specializing in professional web development, IT consulting, and support services. Founded in 2008, the company offers a range of services including consulting, custom web application development, IT support, remote maintenance, and emergency IT services. They also provide a cloud-based industry solution called PFPRO Cloud R6 targeting sectors like gastronomy and entertainment. The website is well-structured, professionally designed, and targets both businesses and private users in the local region. The company maintains an active presence on LinkedIn, Xing, and GitHub, enhancing its professional credibility. Technically, the website employs a modern technology stack including Bootstrap, FontAwesome, jQuery, Owl Carousel, and Matomo for analytics, combined with Usercentrics for GDPR-compliant cookie consent management. The site is mobile-optimized and uses HTTPS with good SSL configuration. However, explicit security headers are not detected, and no dedicated security policy or incident response information is provided. The website demonstrates good privacy compliance and moderate user tracking through Matomo. From a security perspective, the site shows a solid baseline with HTTPS and consent management but lacks advanced security headers and documented incident response processes. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns well with the website's business claims, showing consistent registration information and domain age appropriate for the company's founding date. Overall, PFPRO IT Services presents a trustworthy and professional online presence with good technical implementation and privacy compliance. Strategic improvements could include enhancing security headers, publishing a security policy, and providing incident response contacts to further strengthen trust and security posture.

Z

Zweckverband eGo-Saar

vergabe.saarland

57

The website vergabe.saarland serves as the official electronic procurement platform for the Saarland region in Germany, operated by Zweckverband eGo-Saar. It provides public sector entities such as cities, municipalities, and state administration with a centralized platform to publish tenders and manage electronic submissions. The platform targets businesses and contractors interested in public procurement within Saarland, offering services like digital download of tender documents and electronic bid submission. The site is well-branded with official logos and maintains a professional appearance consistent with government standards. Technically, the website is built on WordPress 6.8.3 with common web technologies such as jQuery and Slick Carousel for UI components. Hosting is provided by plusserver.com, and the site uses HTTPS with a valid SSL certificate. Cookie consent is implemented with an opt-in mechanism for Google Analytics and Facebook Ads, reflecting a good level of privacy compliance. However, some security headers are missing or misconfigured, such as an empty Content-Security-Policy and lack of DNSSEC, which slightly reduce the security posture. From a security perspective, the site enforces HTTPS and uses clientTransferProhibited status on the domain to prevent unauthorized transfers. The WHOIS data aligns well with the website's governmental purpose, showing consistent registration details. No signs of malware, phishing, or suspicious activity were detected. The cookie consent mechanism and privacy policy indicate GDPR compliance, but no explicit security policy or incident response information is published. Overall, vergabe.saarland is a legitimate, regionally focused government procurement platform with good content quality and business credibility. Security practices are adequate but could be improved by enabling DNSSEC, configuring security headers properly, and publishing security policies. The site is safe for general audiences and does not contain any adult or questionable content.

The website www.saarland.de is currently inaccessible due to a 403 Forbidden error page indicating that a security service or WAF is blocking access. The page content is minimal and only displays a block message without any business or contact information. The domain appears to be a legitimate German government domain based on its .de TLD and nameservers pointing to teresto.net, likely a hosting or DNS provider. However, the lack of accessible content prevents a full assessment of the website's business model, services, or compliance posture. Technically, the site uses basic CSS and font resources but no advanced frameworks or analytics are detected. Security headers and SSL configuration cannot be evaluated due to the block. Overall, the site’s security posture is unclear but the presence of a WAF indicates some level of protection. Privacy and compliance documentation are absent from the accessible content.

F

FITKO

115.de

62

The website www.115.de serves as the official German government service portal providing citizens with a centralized phone number (115) to access administrative information and services from federal, state, and local authorities. It targets the general public in Germany, offering comprehensive support for a wide range of administrative topics. The site is well-positioned as a trusted, nationwide service with over 71 million reachable citizens and multiple service centers. The content is professionally curated, accessible, and includes features for easy language and sign language support. Technically, the site is built on the TYPO3 CMS platform, leveraging modern web technologies such as Matomo for privacy-compliant analytics and Cookiebot for consent management. The site demonstrates good mobile optimization, accessibility, and SEO practices. The use of consent-based tracking and blocking mechanisms reflects a mature approach to privacy compliance. From a security perspective, the site enforces HTTPS and integrates cookie consent mechanisms to manage user privacy. While explicit security headers are not fully visible in the provided data, the overall posture is good with no evident vulnerabilities or exposed sensitive data. However, the site lacks publicly available security policies or incident response contacts, which could be improved. Overall, www.115.de is a high-quality, trustworthy government service website with strong privacy and usability features. It is recommended to enhance security transparency by publishing security policies and implementing comprehensive security headers to further strengthen its security posture.

A

Antares Project GmbH

antares.net

55

Antares Project GmbH is a German company specializing in advancing digital education through its Edupool platform, which facilitates easy and fast lesson planning and a marketplace for educational media and apps. The company has a strong presence across all German federal states and is used by a majority of schools in Germany. Supported by partnerships with major educational publishers and Deutsche Telekom AG, as well as funding from the EU and regional government, Antares positions itself as a key player in the digital education sector. Technically, the website is built on modern web technologies using Webflow CMS and includes minimal but effective analytics via Plausible, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS implied, but lacks advanced security headers and explicit policies. Privacy compliance is reasonable with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with its business goals.

M

Medienberatung NRW

bildungsmediathek-nrw.de

59

Bildungsmediathek NRW is a regional educational media platform serving schools and educators in North Rhine-Westphalia, Germany. It offers a wide range of educational media, apps, and materials to support teaching and learning. The platform is supported by governmental and regional bodies, ensuring a trusted and authoritative source of educational content. The website is professionally designed with clear navigation and a strong focus on accessibility and user experience. Technically, it employs modern web technologies including JavaScript frameworks and privacy-focused analytics, hosted likely on specialized educational cloud infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong with clear privacy and terms policies, but lacks a cookie consent mechanism. Overall, the site is trustworthy, well-maintained, and serves its educational mission effectively.

G

GEOMAR Helmholtz-Zentrum für Ozeanforschung Kiel

geomar.de

50

GEOMAR Helmholtz-Zentrum für Ozeanforschung Kiel is a prominent German research institution specializing in oceanographic and climate research. The website serves as a comprehensive platform for scientific information, research programs, expeditions, and public outreach. It targets researchers, students, policymakers, and the general public interested in marine and climate sciences. Affiliated with the Helmholtz Association, GEOMAR holds a strong market position in the education and government research sectors. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries such as jQuery and Slick Slider, providing a responsive and accessible user experience. The site demonstrates good SEO practices and mobile optimization, though performance is moderate. Security posture is solid with HTTPS enforced and some security headers present, but could be improved by adding more comprehensive headers and visible incident response policies. Overall, the site is trustworthy and professional, with clear branding and consistent content quality. However, it lacks a visible cookie consent mechanism and explicit security contact information, which are areas for improvement. The domain registration data aligns well with the website content, reinforcing legitimacy and trustworthiness.

F

Fressnapf

fressnapf.com

53

Fressnapf is a large retail company specializing in pet supplies, serving primarily the German market. The website presents a professional design with good mobile optimization and moderate performance. The technical infrastructure includes Adobe Tag Manager for marketing and analytics purposes, and the domain is hosted with EuroDNS, indicating a stable hosting environment. However, the website lacks visible privacy and cookie policies, security headers, and explicit contact information, which are critical for compliance and trust. The WHOIS data is consistent with a legitimate business, showing no privacy protection or suspicious registration patterns. Overall, the site demonstrates a moderate digital maturity but requires improvements in security and privacy compliance to enhance trust and regulatory adherence.

U

Universitätsklinikum Leipzig

wirsindukl.de

47

The website 'wirsindukl.de' serves as the official recruitment portal for Universitätsklinikum Leipzig, the largest hospital in Leipzig, Germany. It provides comprehensive information about job opportunities, benefits, career development, and international recruitment. The site targets healthcare professionals and applicants seeking employment or training in medical and administrative fields. The business is well-positioned in the healthcare sector with recognized certifications and a strong employer brand. Technically, the site is built on GravCMS, uses modern JavaScript libraries like jQuery and Swiper.js, and implements GDPR-compliant cookie consent mechanisms. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS enforced and secure forms, though it lacks explicit security policy and incident response information. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable resource for prospective employees.

V

Vautron Rechenzentrum AG (Registrar)

die-zukunft.eu

51

Die-zukunft.eu is a German-language political media platform focused on fostering debates about the future of Europe and the European Union. It operates as a non-profit media outlet providing blog articles, podcasts, e-papers, and event information primarily targeting German-speaking European citizens interested in left-wing political discourse. The platform is positioned as a niche player in the political media landscape with a consistent brand and good content quality. Technically, the website is built on WordPress with modern plugins for SEO, page building, and privacy-respecting analytics (Matomo). The site is hosted by a reputable provider and uses HTTPS with a cookie consent mechanism compliant with GDPR. Security posture is good but could be improved by adding more HTTP security headers and a vulnerability disclosure mechanism. Overall, the website is safe, professional, and trustworthy with no adult or explicit content detected.

N

nd - Journalismus von links

dasnd.de

49

nd-aktuell.de is a German left-wing political news media website operated under a cooperative business model. It offers news articles, podcasts, newsletters, and subscription services targeting politically engaged readers interested in progressive perspectives on politics, society, culture, and sports. The website is well-branded, professionally designed, and provides rich content with clear navigation and multiple engagement channels including social media and donation options. Technically, the site runs on a custom CMS (KONTEXT-CMS) with legacy jQuery and modern consent management tools, hosted by SINMA. It uses Matomo analytics for privacy-friendly tracking and implements GDPR-compliant cookie consent. Security posture is good with HTTPS enforced, but lacks explicit security headers and published security policies. Contact information is primarily via web forms and cooperative site links, with no direct emails or phone numbers found. Advertising is present but limited to programmatic ads and Facebook Pixel tracking. Overall, the site is trustworthy, safe, and well-positioned in its niche media market.

D

Deniz, Gebauer, Junk, Langhammer GbR

warenform.de

51

WARENFORM GbR is a small, established German agency founded in 2001 specializing in communication solutions, design, and custom software development primarily for NGOs, political entities, unions, and media organizations. Their service offerings include consulting, corporate design, website development, print materials, event communication, and bespoke software applications. The company maintains a professional online presence with a well-structured website built on the KONTEXT-CMS platform, leveraging modern JavaScript libraries and Matomo analytics with privacy-conscious configurations. Security posture is solid with HTTPS and Content-Security-Policy headers, though improvements are recommended in cookie consent and formal security policies. Contact information is transparent and complete, including a published PGP key for secure communication. Overall, the website reflects a trustworthy and credible business with a moderate technical maturity and good compliance with privacy regulations.

T

troet.cafe

troet.cafe

73

troet.cafe operates as the largest German-speaking Mastodon instance, providing a federated social networking platform for users to connect, share, and explore content within the Fediverse. The platform emphasizes community engagement and social interaction without advertising or algorithmic interference. Technically, the site is built on Mastodon version 4.3.8, leveraging modern web technologies including React and WebSockets for real-time communication. The site is mobile-optimized and presents a consistent, professional design with good navigation and content relevance. Security-wise, the site enforces HTTPS and uses script integrity attributes, but lacks some advanced security headers and explicit incident response policies. Privacy compliance is partially met with a privacy policy present, but no cookie consent mechanism is detected. Overall, the domain is privacy protected in WHOIS, which is typical for such platforms, and the site shows no signs of blocking or WAF interference, indicating good accessibility and trustworthiness.

S

sinma GmbH

sinma.de

60

sinma GmbH is a small German telecommunications company specializing in providing full-service internet solutions tailored for business customers. Their offerings include fiber optic leased lines, DSL with fixed IPs, web hosting, server housing, virtual servers, backup solutions, VPN networks, and related services such as domain management and firewalls. The company emphasizes high availability and security in their network solutions and has been operating since 1991, indicating a long-standing presence in the market. The website reflects a professional and consistent brand image with clear navigation and relevant business content targeting German business clients. From a technical perspective, the website employs basic web technologies including JavaScript and CSS without modern frameworks or CMS detected. The site is moderately optimized for performance and accessibility but lacks advanced mobile optimization. There is no evidence of analytics or tracking scripts, which suggests minimal user tracking. However, the absence of security headers and explicit SSL/TLS information indicates room for improvement in technical security measures. Security posture evaluation reveals gaps such as missing privacy and cookie policies, lack of security headers, and limited contact information. No incident response or vulnerability disclosure information is provided, which could impact trust and compliance. The WHOIS data shows partial consistency with the website's claims but lacks detailed registrant information, limiting full legitimacy verification. Overall, the site is accessible without WAF or blocking mechanisms, and content safety is rated safe with no adult or questionable content. The overall risk assessment suggests the company maintains a moderate security and compliance posture suitable for its business scale but should prioritize implementing privacy policies, enhancing security headers, and expanding contact information to improve trust and regulatory compliance. Strategic recommendations include publishing comprehensive privacy and cookie policies with consent mechanisms, enforcing HTTPS with proper security headers, and establishing clear incident response and vulnerability disclosure channels.

D

Deniz, Gebauer, Junk, Langhammer GbR

warenform.net

10

WARENFORM GbR is a small German agency founded in 2001 specializing in communication solutions, design, and custom software development. Their client base includes political representatives, NGOs, unions, media, and companies, positioning them as a niche provider with a strong portfolio and trusted reputation. The website reflects a professional and consistent brand image with comprehensive service descriptions and client references. Technically, the site uses a custom CMS (KONTEXT-CMS) with a modern but somewhat dated JavaScript stack including jQuery and various plugins. Hosting appears to be managed by a partner IT company, o.open.de. Security posture is strong with HTTPS, Content-Security-Policy headers, and privacy-conscious Matomo analytics implementation. However, the site lacks an explicit cookie consent mechanism and formal incident response contact details. Overall, the site is well-maintained, trustworthy, and compliant with GDPR requirements.

B

BioCologne e.V.

biocologne.de

58

BioCologne e.V. is a specialized network organization based in Cologne, Germany, focused on fostering the biotechnology and life sciences sector through technology transfer, startup support, and industry networking. The website positions BioCologne as a central hub connecting companies, research institutions, investors, and other stakeholders to promote innovation and economic growth in the region. The business model centers on facilitating collaboration and providing resources such as job boards and events to support career development and entrepreneurship in biotech. Technically, the website is built on the Webflow platform, leveraging modern web technologies including jQuery, Google Fonts, and Google reCAPTCHA for form security. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. The technical infrastructure is suitable for a small to medium-sized organization with a focus on content delivery and user engagement. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks visible security headers and explicit security or incident response policies. Privacy compliance is partially addressed with a privacy policy present, but no cookie consent mechanism was detected, which may pose GDPR compliance risks. Contact information is clearly provided, enhancing trustworthiness. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission. Security and privacy practices could be improved to enhance compliance and resilience. The domain appears legitimate and consistent with the business claims, though WHOIS data is limited. Strategic recommendations include implementing cookie consent, adding security headers, and publishing incident response contacts to strengthen security posture and compliance.

B

BioCampus Cologne & RTZ Köln

rtz.de

59

BioCampus Cologne & RTZ Köln operate as high-tech innovation hubs and incubators located in Cologne, Germany, providing infrastructure and community support for startups, scaleups, and corporates in DeepTech, HighTech, and STEM fields. The website reflects a medium-sized organization focused on fostering a vibrant ecosystem with over 70 knowledge-based companies. Their services include office spaces, laboratories, workshops, and event areas, supporting growth and networking. Technically, the website is built on Webflow CMS with modern web technologies such as jQuery and Google reCAPTCHA, hosted on a CDN with HTTPS enforced. Security posture is solid with encrypted connections and bot protection but lacks some advanced security headers and explicit incident response information. Privacy compliance is partially met with a comprehensive privacy policy but missing cookie consent mechanisms. Overall, the site is professional, well-branded, and trustworthy with active community engagement through events and job postings.

B

BioCampus Cologne & RTZ Köln

biocampus-rtz.de

52

BioCampus Cologne & RTZ Köln operates as a regional technology park and incubator hub in Cologne, Germany, providing infrastructure and community support for over 70 innovative companies primarily in DeepTech, HighTech, and STEM fields. The website reflects a medium-sized, well-branded organization focused on fostering startup growth and corporate innovation through office, lab, and event spaces. Technically, the site is built on Webflow with modern web technologies including jQuery and Google services, offering a good user experience and mobile optimization. Security posture is solid with HTTPS and reCAPTCHA integration, though improvements in security headers and cookie consent mechanisms are recommended. Overall, the site is professional, trustworthy, and serves its target audience effectively.

B

Berlin Buch

berlin-buch.com

57

Berlin Buch is a well-established biomedical and healthcare cluster located in Berlin, Germany, with a history dating back over 100 years in medical research and clinical care. The website serves as a portal to the cluster's institutes, companies, and services, targeting healthcare professionals, researchers, and the general public interested in health and biomedical innovation. The business model focuses on fostering collaboration and innovation within the life sciences sector, supported by reputable partners and EU funding. Technically, the website uses a modern but traditional tech stack including jQuery, Bootstrap, and Matomo analytics configured for privacy. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and security headers, and does not provide explicit security or incident response policies. Privacy compliance is partially met with a privacy policy and GDPR-respecting analytics, but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and serves its audience well, though improvements in security headers and privacy transparency are recommended.

Z

Zukunftsorte Berlin

zukunftsorte.berlin

71

Zukunftsorte Berlin is a well-established platform founded in 2014 that connects economic and scientific stakeholders across 11 innovation locations in Berlin. The website serves as an informational and networking hub, showcasing companies, research institutes, and events that drive Berlin's future-oriented economy. Technically, the site is built on WordPress with a modern tech stack including accessibility and multilingual support, and uses Matomo for analytics, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and employs domain transfer protections, but could improve by enabling DNSSEC and adding advanced security headers. Privacy compliance is strong with a comprehensive privacy and cookie policy and consent mechanisms in place. Overall, the website is professional, trustworthy, and well-positioned as a regional innovation promoter.

C

Cluster Gesundheitswirtschaft Berlin-Brandenburg

healthcapital.de

58

HealthCapital is a regional cluster organization representing the healthcare and life sciences sector in the Berlin-Brandenburg area of Germany. The website serves as a platform to promote networking, innovation, and business development within this sector, targeting industry stakeholders, startups, researchers, and investors. It provides resources such as reports, event calendars, and newsletters to support its community. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes a GDPR-compliant consent management system. Security posture is solid with HTTPS enforced and minimal tracking, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

B

Berlin Partner

berlin-partner.de

47

Berlin Partner is a government-affiliated economic and technology promotion agency focused on supporting business growth, innovation, and investment in Berlin. The organization provides tailored business services, networking opportunities, and consulting to companies, investors, and scientific institutions in one of Germany's most dynamic economic regions. The website reflects a professional and consistent brand presence with multilingual support and a focus on accessibility and user experience. Technically, the site is built on TYPO3 CMS, hosted on Colt infrastructure, and employs modern frontend technologies including jQuery and Flexslider. Privacy compliance is addressed through an embedded consent manager and a comprehensive privacy policy. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though additional security headers and published policies could enhance trust. Overall, the website is well-maintained, trustworthy, and serves its target audience effectively.

C

Campus Berlin-Buch GmbH

berlinbiocube.de

57

BerlinBioCube is a specialized startup center focused on providing modern laboratory and office spaces for biotech and medtech companies within the Campus Berlin-Buch ecosystem. The website presents a professional image with clear business offerings, including event series to foster collaboration between science and industry. The technical infrastructure is modern, leveraging Bootstrap, jQuery, Video.js, and a privacy-conscious analytics solution (Matomo). Security posture is adequate with HTTPS and cookie consent implemented, though additional security headers and policies could enhance protection. Overall, the website is trustworthy, well-branded, and serves its target audience effectively.