Germany security reports

H

Hochschulallianz für den Mittelstand

hochschulallianz.de

45

Hochschulallianz für den Mittelstand is a German nationwide alliance of application-oriented universities focused on supporting small and medium-sized enterprises (SMEs). The organization facilitates networking, research collaboration, and knowledge exchange among universities and the Mittelstand sector. The website reflects a professional and consistent brand presence, targeting educational institutions and SMEs in Germany. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and WPBakery Page Builder, ensuring good SEO and user experience. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, GDPR compliant, and well-structured, serving its educational and networking mission effectively.

C

Carl von Ossietzky Universität Oldenburg

uni-oldenburg.de

62

Carl von Ossietzky Universität Oldenburg is a well-established public university in Germany, founded in 1973, offering a broad range of academic programs and research activities. The website serves as an information portal for students, researchers, staff, and international visitors, providing access to study programs, research news, events, and administrative resources. The university emphasizes research excellence, international cooperation, and lifelong learning. Technically, the site is built on TYPO3 CMS with modern frontend libraries and is served securely over HTTPS. The site is well-structured, mobile-optimized, and accessible, with good SEO practices. However, explicit privacy and cookie policies are not clearly presented, and no incident response or vulnerability disclosure information is available, which are areas for improvement. Overall, the site reflects a professional and trustworthy academic institution with a solid digital presence.

H

Hanse Werbeshop

hanse-werbeshop.com

49

Hanse Werbeshop is a small German e-commerce retailer specializing in advertising and promotional products such as signs, stickers, stamps, textile advertising, business prints, and banners. The website is built on the Shopware 6 platform and integrates PayPal for payment processing and Matomo for analytics. The technical infrastructure is modern and moderately optimized for performance and mobile use, with good accessibility features. However, the site lacks explicit privacy and cookie policies, contact information, and security headers, which are important for compliance and trust. The domain registration is consistent with the business profile, indicating legitimacy. Overall, the site presents a basic but functional online retail presence with room for improvement in privacy and security compliance.

U

Unglaublich wichtig

unglaublich-wichtig.de

42

Unglaublich wichtig is an informational platform highlighting the contributions of German Universities of Applied Sciences (HAWs) in various sectors such as energy, mobility, healthcare, and digital innovation. The website serves as a knowledge hub providing educational content, news, and insights into applied sciences research and practical solutions. It targets a general audience interested in the future of technology and society, emphasizing the importance of HAWs in addressing contemporary challenges. Technically, the website is built on WordPress using the Enfold theme, leveraging modern web technologies including jQuery, FontAwesome, and Borlabs Cookie for consent management. The site is mobile-optimized with good SEO practices and moderate performance. It integrates marketing tools like CleverReach for newsletter management but avoids intrusive tracking or advertising. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy and cookie management in place. Overall, Unglaublich wichtig presents a professional, trustworthy, and well-maintained digital presence with a clear educational mission. Strategic improvements in security headers, incident response policies, and accessibility could further enhance its posture and user trust.

Campus Halensis serves as the official news and information portal for Martin-Luther-Universität Halle-Wittenberg, providing timely updates on academic events, research, and campus life primarily targeting students, faculty, and researchers. The website is well-branded and consistent with the university's identity, offering content in German with an English language option. It functions as a communication channel to keep the university community informed and engaged. Technically, the site uses a moderate technology stack including jQuery, Magnific Popup, Slick Carousel, and Piwik/Matomo for analytics, hosted likely on university infrastructure. The site is mobile-optimized with good navigation and content structure, though accessibility features are basic. Performance is moderate, and SEO practices are adequately implemented. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, with a clear privacy policy and cookie banner. The WHOIS data aligns well with the university's domain infrastructure, indicating legitimacy and trustworthiness. Overall, the website is a professional, trustworthy academic portal with good content quality and privacy practices. However, improvements could be made in security header implementation, incident response transparency, and accessibility compliance to enhance the security posture and user experience.

A

AUC - Akademie der Unfallchirurgie GmbH

auc-online.de

72

AUC - Akademie der Unfallchirurgie GmbH is a well-established healthcare service provider specializing in medical education, certification, and management of medical registers primarily in the field of trauma surgery. The company operates under the auspices of the Deutsche Gesellschaft für Unfallchirurgie (DGU) and offers a broad range of services including continuing education for medical professionals, certification of clinics, and support for scientific studies. Their market position is strong within Germany and Europe, targeting medical professionals and institutions. The website reflects a professional and consistent brand image with clear navigation and relevant content.

The QS-Akademie website serves as a specialized educational platform offering training and continuing education for companies involved in the fresh food supply chain, including sectors such as feed production, animal husbandry, meat processing, trade, and the fruit and vegetable industry. The platform targets professionals and businesses seeking sector-specific knowledge and certification. Technically, the site is built on the ILIAS LMS platform, utilizing a modern tech stack including jQuery, Bootstrap, and various UI and calendar libraries, hosted by Schlund Technologies. The website is well-structured, mobile-optimized, and includes essential privacy and cookie consent mechanisms, reflecting a moderate to high level of digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Overall, the site presents a professional and trustworthy educational service with room for improvement in security transparency and accessibility.

M

MTM ASSOCIATION e.V.

mtm.org

69

MTM ASSOCIATION e.V. is an established organization founded in 1997, specializing in training, consulting, software, and research focused on human work design. The website presents a professional image with consistent branding and targets businesses and professionals interested in productivity and work design standards. Technically, the site is built on TYPO3 CMS, employs modern web technologies, and integrates comprehensive cookie consent management via Cookiebot, alongside analytics and marketing tools from Google, Facebook, LinkedIn, and YouTube. Security posture is solid with HTTPS enforced and domain registration consistent with a legitimate business, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is well addressed through detailed cookie declarations and GDPR-aligned consent mechanisms. Overall, the website is trustworthy, professional, and safe for general audiences.

T

TOTAL E-QUALITY Deutschland e.V.

total-e-quality.de

50

TOTAL E-QUALITY Deutschland e.V. is a German non-profit organization dedicated to promoting equal opportunities across genders in business, science, and government sectors. The organization offers an award recognizing commitment to equal opportunity policies and provides membership and informational services to interested parties. The website is professionally designed, multilingual, and includes clear navigation and relevant content targeted at organizations and individuals interested in gender equality advocacy. Technically, the website is built on Django CMS with modern frontend technologies including jQuery, Bootstrap, and FontAwesome. It employs Matomo analytics for user tracking, reflecting a privacy-conscious approach. The site is mobile-optimized and accessible, with good SEO practices. However, some security best practices such as security headers and cookie consent mechanisms are missing. From a security perspective, the site uses HTTPS with excellent SSL configuration and no visible vulnerabilities or exposed sensitive data. The absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in security transparency and readiness. Overall, the website is trustworthy and professional, with a solid business credibility score. The main risks relate to privacy compliance gaps and missing security headers. Strategic improvements in these areas would enhance the site's security posture and regulatory compliance.

The website internationale-hochschulkooperationen.de is an official information portal managed by the Stiftung zur Förderung der Hochschulrektorenkonferenz (HRK), providing comprehensive data on international university cooperation involving German higher education institutions. It serves as a trusted resource for students, academics, and institutional partners, offering detailed insights into over 37,000 agreements with partners in more than 150 countries. The platform supports the internationalization of German universities by facilitating transparency and access to cooperation data. Technically, the site is built on TYPO3 CMS, leveraging common web technologies such as jQuery and Bootstrap for responsive design and user experience. The website demonstrates good mobile optimization and SEO practices, although some improvements in accessibility and security headers could enhance its technical maturity. The cookie consent mechanism is robust and GDPR-compliant, reflecting a strong commitment to privacy. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit published security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for transparency and trust. No signs of WAF or blocking mechanisms were detected, allowing full content access. Overall, the website presents a professional, trustworthy, and well-maintained digital presence aligned with its educational mission. Strategic enhancements in security policy transparency and accessibility would further strengthen its posture.

L

Landesregierung Brandenburg

brandenburg.de

10

The website is the official online portal of the Landesregierung Brandenburg, the state government of Brandenburg, Germany. It serves as a comprehensive information hub for citizens and stakeholders, providing access to government news, services, and thematic content related to the state's administration and public affairs. The site is well-branded, consistent, and targets a broad audience including residents, businesses, and government officials. The business model is that of a government information and service portal, with no commercial intent. Technically, the site uses a custom CMS with a modern tech stack including HTML5, CSS3, JavaScript, jQuery, and Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized and accessible, with good SEO practices. Hosting details are not explicit but the domain uses a nameserver consistent with the Brandenburg region. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms aligned with GDPR. However, no explicit security headers were detected in the HTML content, and no published security policies or incident response contacts were found. The site does not expose sensitive data or use vulnerable libraries visibly. Overall, the security posture is good but could be improved by adding security headers and formal vulnerability disclosure information. Overall, the website is trustworthy, professional, and compliant with privacy regulations. It poses low risk and serves its purpose effectively as a government portal. Strategic recommendations include enhancing security headers, publishing security policies, and improving contact transparency for incident response.

M

Musikkultur Rheinsberg gGmbH

schlosstheater-rheinsberg.de

10

Musikkultur Rheinsberg gGmbH operates the Schlosstheater Rheinsberg, a year-round cultural venue offering concerts, theater, dance, film, and opera in Rheinsberg, Germany. The organization targets a broad audience including families and culture enthusiasts, providing diverse programming and venue rental services. The website reflects a well-established regional cultural institution with a professional online presence and clear event information. Technically, the website is built on WordPress with modern plugins and libraries such as jQuery, Slick Slider, and Yoast SEO, indicating a mature digital infrastructure. The site is mobile-optimized and uses HTTPS with good SEO practices, although some accessibility features could be improved. Cookie consent is managed via Borlabs Cookie, showing attention to privacy compliance. From a security perspective, the site uses HTTPS and nonce tokens for AJAX calls but lacks visible security headers and a published security policy or incident response contacts. No vulnerabilities or suspicious content were detected. The absence of a privacy policy page is a notable compliance gap. Overall, the security posture is solid but could be enhanced with additional headers and transparency. The risk assessment is low given the site's cultural and non-profit nature, absence of sensitive data exposure, and legitimate domain registration. Strategic recommendations include publishing a comprehensive privacy policy, implementing security headers, and adding vulnerability disclosure information to improve trust and compliance.

S

schmidtroeder

schmidtroeder.de

9

schmidtroeder is a small, agile cross-media agency based in Stuttgart, Germany, specializing in concept, design, print, and online media services. The company targets a diverse clientele ranging from regional businesses to international corporations, emphasizing flexible and cost-effective solutions. Their website reflects a professional but basic digital presence with a portfolio of client references and clear contact information. Technically, the site uses older JavaScript libraries and lacks modern security headers and cookie consent mechanisms, which could expose it to vulnerabilities and compliance risks. Analytics are handled via a self-hosted Piwik (Matomo) instance, indicating some level of privacy awareness but missing full GDPR cookie compliance. Overall, the security posture is moderate with room for improvement in library updates, HTTPS verification, and security best practices. The domain WHOIS data is consistent but limited, with no privacy protection or suspicious patterns detected.

F

Familienpark Schwäbische Alb in Westerheim

familienpark-westerheim.de

9

Familienpark Schwäbische Alb in Westerheim operates a small leisure and family park located in Germany, offering attractions such as a fun park, museum, safari bobbahn, gastronomy, and a traffic school. The website is built on WordPress with Yoast SEO plugin, indicating a moderate level of digital maturity. The site is primarily targeted at families and local visitors interested in recreational activities. Technically, the site uses standard web technologies including jQuery and is hosted via domaincontrol.com nameservers, likely GoDaddy. The website performance and mobile optimization are basic but functional. Security posture is moderate with HTTPS enabled but lacking important security headers and cookie consent mechanisms. No explicit contact emails or phone numbers are present on the homepage, though a contact page exists. Overall, the site is safe, family-friendly, and compliant with basic privacy policies but lacks advanced security and privacy features.

BANTLEON is a German-based company specializing in high-performance lubricants and industrial services tailored to meet demanding production processes. Their website reflects a professional B2B supplier model targeting industrial and manufacturing sectors with a comprehensive range of products including lubricants, oils, cooling lubricants, corrosion protection, and related services. The company positions itself as a specialized provider with a focus on quality and integration into industrial workflows. Technically, the website is built on the webEdition CMS platform, utilizing modern JavaScript libraries such as jQuery and third-party services like Cookiebot for cookie consent and TrustCaptcha for bot protection. The site is hosted with domaincontrol.com name servers, indicating a standard commercial hosting setup. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit security or incident response policies. No privacy policy or terms of service pages were detected in the provided content, which is a compliance gap. Overall, the website is well-designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content. The absence of direct contact information and detailed business registration data slightly reduces business credibility. No WAF or blocking mechanisms were detected, and the content is safe for general audiences.

K

KESLAR

keslar.de

9

KESLAR is a German energy supplier specializing in heating oil, fuels, lubricants, natural gas, electricity, and AVIA pellets, targeting private individuals, agriculture, and commercial sectors. The company operates a professional website built on WordPress with the Divi theme, enhanced by SEO and accessibility tools. The technical infrastructure is modern and moderately optimized for performance and mobile use. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and formal security policies. Privacy compliance is partial due to missing privacy and terms of service pages. Overall, the business appears legitimate and regionally focused with room for improvement in transparency and security practices.

Alb-Werbung GmbH is a small, family-owned business established in 1999 and located in Westerheim, Germany. The company specializes in lettershop services, printing (digital and offset), graphic design, manual packaging, and full-service advertising solutions. The website reflects a well-established regional player with a clear focus on quality and customer service. The target audience primarily consists of businesses and organizations seeking comprehensive printing and advertising services. The company emphasizes flexibility, quality, and reliability, supported by over 26 years of experience.

M

McDonald's Gerhard Schmid

mcdonalds-ulm.de

57

McDonald's Gerhard Schmid operates a regional franchise network of McDonald's restaurants across multiple towns in Germany. The website serves as an informational and promotional platform for the franchise, offering details on locations, job opportunities, delivery services, and current offers. The site is built on the Squarespace platform, leveraging its CMS and hosting capabilities, with a moderate level of technical sophistication and mobile optimization. Security posture is strong with HTTPS and HSTS enabled, though cookie consent mechanisms and detailed security policies are lacking. Overall, the site reflects a professional local franchise business with consistent branding and good user experience.

B

Brauerei Gold Ochsen Ulm

goldochsen.de

9

Brauerei Gold Ochsen Ulm is a regional brewery based in Ulm, Germany, specializing in brewing and selling beer. The website serves as a digital presence showcasing their products and services, targeting beer consumers and the hospitality sector. The site is built on WordPress with WooCommerce integration, indicating e-commerce capabilities. Technical infrastructure includes performance optimizations via WP Rocket and SEO enhancements through Yoast SEO and Google Site Kit. Security posture is moderate with HTTPS enabled and some security best practices observed, but lacks comprehensive security headers and explicit privacy and cookie policies. The absence of contact information and privacy compliance elements reduces trust and compliance scores. Overall, the website is functional and professional but requires improvements in privacy compliance and security transparency.

K

Kirsamers-Backstube GmbH

kirsamers-backstube.de

53

Kirsamers-Backstube GmbH is a regional German bakery business established in 1927, specializing in fresh, handmade bakery products including spelt (Dinkel) breads, rolls, and cakes. The company emphasizes quality, regional ingredients, and traditional craftsmanship, targeting general consumers seeking healthy and artisanal baked goods. The website reflects a medium-sized retail bakery with consistent branding and a clear business model focused on quality and regionality. Technically, the site is built on WordPress using modern plugins such as WPBakery Page Builder and Slider Revolution, hosted on rzone.de servers. The site is mobile optimized and performs moderately well with good SEO and accessibility basics. Security posture is adequate with HTTPS enabled and GDPR-compliant cookie consent mechanisms, though explicit security policies and incident response contacts are not present. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting the company's credibility and customer engagement.

A

acht.neun

acht-neun.de

51

acht.neun is a regional city magazine serving Ulm, Neu-Ulm, and the surrounding region, offering monthly publications and online content focused on lifestyle, culture, gastronomy, and local events. The website is built on WordPress using the Divi theme, enhanced with SEO tools like Yoast and a cookie consent mechanism via Usercentrics, reflecting a moderate to good level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and policies could improve resilience. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, targeting local residents and visitors with engaging editorial content.

S

Südwest Presse

swp.de

9

Südwest Presse operates a professional regional news website (swp.de) serving the German market, primarily Baden-Württemberg. The platform offers news and current affairs content with a focus on regional relevance. The website demonstrates a good level of digital maturity, employing modern JavaScript libraries, asynchronous script loading, and responsive design principles. However, explicit privacy and cookie policies are not detected in the provided content, which may impact compliance with GDPR requirements. Security posture is adequate with HTTPS enforced but lacks visible security headers and formal security policies. Overall, the site is trustworthy and professionally maintained but could improve privacy transparency and security hardening.

R

Regio TV

regio-tv.de

58

Regio TV is a regional digital media company focused on delivering news and media content primarily to audiences in Baden-Württemberg and Mecklenburg-Vorpommern, Germany. The website serves as a platform for regional news broadcasting, digital media services, and production of various media content including image films and commercials. The company positions itself as a local media provider with a focus on community engagement through multiple digital channels. Technically, the website employs modern video playback technology (Video.js), analytics (Matomo and Google Tag Manager), and bot protection (hCaptcha), indicating a moderate level of digital maturity. However, the absence of explicit privacy and cookie policies, as well as lack of visible contact information, suggests gaps in compliance and user transparency. Security posture is moderate with HTTPS enforced but missing security headers and incident response details. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and clearer contact and security policies.

S

Schwäbische Zeitung

schwaebische.de

62

Schwäbische.de is a well-established regional news portal serving Baden-Württemberg and adjacent regions in Germany. It offers comprehensive local news coverage, digital newspapers, job listings, event calendars, and advertising services. The website is professionally designed with a consistent brand presence and targets residents interested in regional news and information. The business operates under the media sector with a large audience and is part of the Südwestdeutsche Medien Holding GmbH group. Technically, the site uses modern web technologies including React and Next.js, with integrated consent management and analytics tools. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Privacy compliance is good, with cookie consent mechanisms and GDPR-aligned policies. Overall, the website is trustworthy, user-friendly, and well-optimized for SEO and mobile devices.

R

Reservix GmbH

reservix.de

68

Reservix GmbH operates a well-established online ticketing platform primarily serving the German market. The website offers a broad range of event tickets including concerts, sports, musicals, and family events. The platform targets general consumers seeking convenient online ticket purchases and event information. The business model is e-commerce focused, with additional services such as voucher sales and event promotion. The company demonstrates consistent branding and maintains a professional online presence with good content quality and user experience. Technically, the website leverages modern JavaScript frameworks including React and Swiper.js for UI components, and integrates Google Tag Manager and Usercentrics for marketing and consent management. Hosting is provided via Amazon AWS, indicated by the DNS infrastructure. The site is mobile optimized and accessible, with good SEO practices and structured data for enhanced search engine visibility. From a security perspective, the site enforces HTTPS and uses a consent management platform to comply with GDPR. However, explicit security headers are not evident in the HTML content, and no published security or incident response policies were found. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with a legitimate business, showing no privacy protection and consistent domain registration. Overall, Reservix.de presents a secure, professional, and user-friendly ticketing portal with strong compliance and marketing practices. Strategic improvements could include publishing explicit security policies and enhancing HTTP security headers to further strengthen the security posture.

K

Konzeptwerk Neue Ökonomie

konzeptwerk-neue-oekonomie.org

11

Konzeptwerk Neue Ökonomie is a German non-profit thinktank and educational organization founded in 2012, focusing on social-ecological transformation, climate justice, and transformative education. The organization targets social movements, educators, activists, and the general public interested in sustainable societal change. Their offerings include research, educational workshops, publications, podcasts, and consulting services. The website is professionally designed, content-rich, and well-structured, supporting multiple languages and providing clear navigation and user engagement features such as newsletters and contact forms. Technically, the site is built on WordPress with modern plugins and technologies, hosted by a reputable provider, and optimized for performance and mobile devices. Security posture is strong with HTTPS, privacy-conscious analytics (Matomo) with explicit consent, and cookie management, though some security headers could be improved. WHOIS data confirms domain legitimacy and consistency with the organization's history. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

S

Statistisches Landesamt Baden-Württemberg

statistik-bw.de

58

The Statistisches Landesamt Baden-Württemberg is a major public sector entity providing comprehensive statistical data and consulting services related to the economic and social development of the Baden-Württemberg region in Germany. The website serves a broad audience including researchers, policymakers, and the general public, offering structured and detailed statistical information. Technically, the site is built on the TYPO3 CMS platform with modern web technologies such as Bootstrap and Font Awesome, and it employs Matomo analytics configured to disable cookies, reflecting a privacy-conscious approach. The site is mobile optimized and demonstrates good accessibility and SEO practices. Security-wise, the site uses HTTPS and disables cookies in analytics, but lacks explicit security headers and published security policies or incident response contacts, which are areas for improvement. Overall, the domain appears legitimate and consistent with a government entity, with no signs of blocking or WAF interference. The website is safe, professional, and trustworthy, though it would benefit from enhanced privacy and security disclosures.

O

openPetition gGmbH

openpetition.eu

10

openPetition gGmbH operates a politically neutral, non-profit online platform that enables citizens to start, sign, and promote petitions across the European Union and other countries. With a user base of approximately 15 million people, the platform facilitates grassroots democracy and political participation by providing tools and guidelines for effective petitioning. The website is professionally designed, multilingual, and offers a clear user experience focused on civic engagement and transparency.

O

openPetition

openpetition.de

62

openPetition is a reputable German-based online platform that empowers citizens to create, support, and promote petitions and initiatives. It serves as a bridge between the public and political institutions by forwarding petitions that reach quorum to relevant parliaments. The platform targets a broad audience of citizens interested in civic engagement and political participation, offering multilingual support and a user-friendly interface. Technically, the website employs modern web standards, uses self-hosted analytics for privacy, and maintains good performance and accessibility standards. Security-wise, the site enforces HTTPS and follows several best practices but could enhance its posture by implementing additional security headers and providing explicit incident response contacts. Overall, the domain registration data aligns well with the website's claims, supporting its legitimacy and trustworthiness.

H

Hostsharing eG

hs.coop

56

Hostsharing eG operates hostsharing.coop, a Mastodon instance dedicated to members of their cooperative hosting community. The website serves as a social networking platform within the Fediverse, enabling decentralized communication. The business is positioned as a niche cooperative provider in the technology sector, focusing on privacy-respecting social media hosting since 2018. The site content is primarily in German, targeting cooperative members and Fediverse users. Technically, the platform uses Mastodon version 4.4.8 with modern web technologies including React and ES modules, providing a responsive and user-friendly experience. Security posture is generally good with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and security headers are not evident. Privacy compliance is basic, with a privacy policy present but no cookie consent or terms of service pages found. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

M

Mitteldorf Catering Leipzig

mitteldorf.de

51

Mitteldorf Catering Leipzig is a family-run catering business specializing in providing high-quality catering services for events ranging from small gatherings of 30 guests to large events with up to 3,000 attendees. The company emphasizes fresh, regional ingredients and offers a variety of buffet options tailored to diverse tastes. Their market position is that of a reliable local catering partner in Leipzig, serving both private and corporate clients. Technically, the website is built on WordPress using the Divi theme, enhanced with modern tools such as Google Analytics, Google Maps, and reCAPTCHA to ensure usability and security. The hosting is provided by RZone, a reputable German hosting provider. Security posture is strong with HTTPS enforced, cookie consent mechanisms in place, and no visible vulnerabilities. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent banner. Overall, the website reflects a professional and trustworthy business presence with good technical implementation and compliance.

B

Berlin Phil Media GmbH

berliner-philharmoniker-recordings.com

60

Berliner Philharmoniker Recordings is an e-commerce platform dedicated to selling classical music albums and recordings associated with the prestigious Berliner Philharmoniker orchestra. The website offers products in multiple formats including CD, vinyl, and digital downloads, targeting classical music enthusiasts and collectors worldwide. The site is branded consistently with the official Berliner Philharmoniker identity and partners with related entities such as the Digital Concert Hall. Technically, the website is built on the Magento e-commerce platform, utilizing modern JavaScript libraries and search technologies like Algolia, and incorporates FriendlyCaptcha for form security. The site is accessible, mobile-optimized, and provides a professional user experience with clear navigation and relevant content. Security posture is good with HTTPS enforced and CAPTCHA protections, though some security headers are missing and no explicit cookie consent mechanism was detected. The WHOIS data for the domain is unavailable, which raises some concerns about domain registration legitimacy, but the website content and branding strongly suggest it is a legitimate official site. Overall, the site presents a low risk but would benefit from improved transparency in domain registration and enhanced privacy compliance features.

B

Berliner Philharmoniker

digitalconcerthall.com

67

The Digital Concert Hall is a specialized streaming platform operated under the brand of the Berliner Philharmoniker, a world-renowned classical orchestra based in Germany. The platform offers live and on-demand streaming of concerts, films, interviews, and other classical music content, targeting classical music enthusiasts globally. The business model is subscription-based, with options for monthly or annual access, positioning it as a niche leader in classical music digital media. Technically, the website leverages modern web technologies including React and Theoplayer for video streaming, with good mobile optimization and accessibility features. The presence of structured data and SEO best practices enhances discoverability. Security posture is strong with HTTPS enforced and multiple security headers present, though the absence of a visible cookie consent mechanism and published security policies are areas for improvement. The lack of WHOIS data is a notable anomaly, potentially indicating privacy protection or a recent domain registration, which slightly reduces trustworthiness. Overall, the site is professional, trustworthy, and well-positioned in its market segment.

P

Paulbergman GmbH

alumnii.de

49

Alumnii, operated by Paulbergman GmbH, is a specialized SaaS platform focused on providing comprehensive alumni network management solutions primarily for educational institutions, companies, foundations, and associations in Germany. The platform offers integrated services including member management, newsletters, payment processing, event management, job boards, and mentoring functionalities. The company positions itself as a niche provider with a strong emphasis on GDPR compliance and German-based hosting. Technically, the website is built using modern web technologies such as Jekyll for static site generation, Bootstrap for responsive design, and integrates analytics via Matomo. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security measures include HTTPS with strong encryption and Google reCAPTCHA to protect forms, although additional security headers and explicit cookie consent mechanisms are absent. From a security perspective, the site demonstrates good practices with encrypted communications and data protection aligned with GDPR. However, the absence of published incident response contacts and vulnerability disclosure policies suggests room for improvement in transparency and readiness. The WHOIS data aligns well with the website's claims, showing consistent domain registration and hosting in Germany without privacy protection, enhancing trustworthiness. Overall, Alumnii presents a professional, trustworthy, and well-structured online presence suitable for its target audience. Strategic enhancements in security policies and privacy mechanisms would further strengthen its compliance and user trust.

R

Rechtsanwaltskanzlei Nolte › ‹ Pustejovsky

np-recht.de

44

Rechtsanwaltskanzlei Nolte › ‹ Pustejovsky is a specialized law firm based in Freiburg, Germany, offering expert legal services in areas such as corporate law, labor law, inheritance law including business succession, family law, data protection, IT law, and intellectual property law. The firm targets both companies and private individuals, positioning itself as a boutique legal service provider with a strong focus on specialized legal fields. Their website reflects a professional and consistent brand image with comprehensive service descriptions and regular legal updates via their blog and social media channels. Technically, the website is built on WordPress with modern SEO and caching plugins, ensuring moderate performance and good mobile optimization. The hosting is managed via kasserver.com, and the site uses HTTPS with a good SSL configuration. However, some security best practices such as security headers and incident response disclosures are missing, which could be improved to enhance the security posture. From a security perspective, the site shows no signs of vulnerabilities or exposed sensitive data. The absence of a cookie consent mechanism and security headers are minor gaps in GDPR compliance and security hardening. The WHOIS data aligns well with the website content, showing consistent domain registration and no privacy protection, which supports the legitimacy of the business. Overall, the website is trustworthy, professionally maintained, and suitable for its target audience. Strategic improvements in privacy compliance and security policies would further strengthen its position and user trust.

M

MINT-Campus Alte Schmelz e.V.

mintcampus.de

55

MINT-Campus Alte Schmelz e.V. is a small, regional non-profit organization based in Germany focused on engaging youth in STEM education and sustainable development. The organization operates a student research and technology center and an open youth workshop, offering educational courses, workshops, and projects such as the EU-funded CERTEB_OPT energy management initiative. The website reflects a professional and consistent brand presence with clear contact information and partnership acknowledgments. Technically, the site is built on the cm4all CMS platform, hosted by Strato, and uses older JavaScript libraries which may pose security risks. The site implements GDPR-compliant privacy and cookie policies with user consent mechanisms. However, no explicit security or incident response policies are published. Overall, the website is accessible, content-rich, and trustworthy, but could improve its security posture by updating libraries and adding security headers.

A

AQAS e.V.

aqas.de

66

AQAS e.V. is a German accreditation agency specializing in quality assurance for higher education institutions through program and system accreditation. The organization holds recognized certifications from European and international accreditation bodies, positioning it as a reputable entity in the education sector. The website presents clear service offerings including accreditation procedures, consulting, workshops, and international accreditation services, targeting academic institutions and stakeholders. Technically, the website is built on WordPress with modern plugins and a professional theme, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and some obfuscation of emails, but lacks explicit security headers and cookie consent mechanisms. No forms or direct contact details are visible on the homepage, suggesting contact information is provided on dedicated pages. Overall, the site is professional, trustworthy, and compliant with GDPR, though improvements in security policies and transparency are recommended.

H

Hochschule für Technik und Wirtschaft des Saarlandes

htwsaar.de

67

The Hochschule für Technik und Wirtschaft des Saarlandes (htw saar) is a public university in Germany specializing in technology and economics education. It offers a broad range of bachelor and master degree programs, including dual and international studies, supported by strong research activities and partnerships. The website reflects a mature digital presence with a professional design, clear navigation, and multilingual support, targeting students, researchers, and academic partners. Technically, the site is built on TYPO3 CMS with Matomo analytics, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS enabled, but lacks explicit security headers and formal privacy/cookie policies, indicating room for compliance improvement. WHOIS data confirms domain legitimacy and alignment with the institution's identity. Overall, the site is trustworthy and professional but should enhance privacy and security disclosures to meet modern compliance standards.

R

RegioHelden GmbH

herofil.es

64

RegioHelden GmbH is a German online marketing agency established in 2010, specializing in digital marketing services such as SEO, content management, and web design. The company positions itself as a creative and authentic partner for businesses seeking digital visibility and success, while also emphasizing a strong internal culture and career opportunities. Their website is built on WordPress, hosted on bunny.net infrastructure, and employs modern web technologies including Matomo analytics and Google Maps embeds. The site is well-optimized for mobile and accessibility, with a professional design and clear navigation. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, though some security headers could be improved. Privacy compliance is strong, with a detailed privacy policy and GDPR-aligned consent management. No critical vulnerabilities or suspicious patterns were detected. Overall, the website reflects a credible, professional digital marketing agency with a good balance of business and technical maturity.

Rheinische Post Events operates as a regional event ticketing platform affiliated with the Rheinische Post media group, focusing on event promotion and ticket sales primarily in Germany. The website offers a professional and user-friendly interface for purchasing tickets to events such as the Halloween Party 2025 in Düsseldorf. The platform leverages modern web technologies including Vue.js and Vuetify, integrating third-party services like Google Maps and Mapbox for enhanced user experience. Consent management and GDPR compliance are well implemented, reflecting a mature approach to privacy and user data protection. However, the absence of publicly available WHOIS data for the domain raises concerns about registration transparency, although the website's branding and technical setup suggest legitimate business operations. Security posture is strong with HTTPS enforced and no visible vulnerabilities, but security headers could be improved. Overall, the site presents a trustworthy and professional front for event ticketing with room for enhanced security practices and WHOIS transparency.

R

RPM Invest

rpm-invest.de

41

RPM Invest operates as the strategic investment unit of the Rheinische Post Mediengruppe, focusing on fast-growing technology and digital media companies with proven business models. The company provides capital, expertise, and a broad network to support founders and entrepreneurs through long-term partnerships and flexible investment structures. The website reflects a professional and consistent brand presence, showcasing portfolio companies and investment criteria. Technically, the site is built on WordPress using Elementor and Gravity Forms, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced, though security headers and explicit privacy policies are missing. No blocking or WAF challenges were detected, allowing full content access and analysis.

F

Fachhochschule Dortmund

fh-dortmund.de

61

Fachhochschule Dortmund is a well-established public university of applied sciences in Germany offering approximately 70 Bachelor and Master degree programs across eight faculties. The institution targets prospective students, current students, academic staff, alumni, and industry partners, positioning itself as a key regional educational and research hub. The website reflects a professional and comprehensive digital presence with clear navigation, multilingual support, and extensive information on academic offerings, research, and career services. Technically, the site is built on the Sitepark CMS platform, employs modern JavaScript and SVG assets, and integrates Matomo analytics with privacy-conscious configurations. Security posture is strong with HTTPS enforcement, privacy-respecting analytics, and cookie consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.

B

Berufsbildende Schulen Cuxhaven

bbs-cux.de

48

Berufsbildende Schulen Cuxhaven is a regional vocational education center in Germany offering a broad spectrum of full-time and dual training programs, international projects such as Erasmus+, and various educational support services. The institution targets students, apprentices, educators, and local businesses, positioning itself as a key regional player in vocational education. The website reflects a well-structured, content-rich platform with consistent branding and clear navigation, supporting its educational mission effectively. Technically, the website is built on WordPress with a modern plugin ecosystem including Smart Slider 3 and Download Manager. It is hosted on a German hosting provider with HTTPS enabled, ensuring secure communication. The site demonstrates good mobile optimization and moderate performance, though accessibility features are basic. No advanced security headers were detected, and no cookie consent mechanism was found, indicating areas for compliance improvement. From a security perspective, the site maintains a good posture with HTTPS and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers, vulnerability disclosure, and incident response information suggests room for enhancement. Privacy compliance is partially met with a comprehensive GDPR privacy policy but lacks cookie consent mechanisms. The WHOIS data aligns well with the website's identity, supporting legitimacy. Overall, the website is professional, trustworthy, and suitable for its educational purpose. Strategic improvements in security headers, cookie consent, and incident response transparency would further strengthen its security and compliance posture.

internetlehrer GmbH is a specialized e-learning service provider based in Germany, operating since 2003. The company focuses on developing learning modules, blended learning scenarios, and virtual classroom integrations, leveraging open source technologies such as ILIAS. Their market position is that of an established niche player and ILIAS Premium Partner, serving education professionals and institutions with tailored e-learning solutions. The website reflects a professional and consistent brand image with clear contact information and relevant content in German. Technically, the website is built on WordPress 6.1.9 with common libraries like jQuery and Cycle2 for slideshows. Hosting appears to be with 1&1 IONOS, indicated by the presence of their WordPress assistant plugin. The site is moderately performant, mobile-optimized, and uses HTTPS with a good SSL configuration. However, it lacks advanced security headers and a cookie consent mechanism, which are important for GDPR compliance. From a security perspective, the site enforces HTTPS and does not expose sensitive data or use vulnerable libraries. There is no evidence of a published security policy or incident response contacts, which could be improved. No WAF or blocking mechanisms are detected, and the WHOIS data is consistent with the business claims, indicating legitimacy. Privacy compliance is partial due to the absence of cookie consent. Overall, the website is trustworthy and professional but could enhance its privacy and security posture by implementing cookie consent, security headers, and publishing security policies. These improvements would strengthen compliance and user trust while maintaining the solid business credibility already established.

E

ELAN e.V.

elan-ev.de

48

ELAN e.V. is a German non-profit organization specializing in the development and support of open source software tailored for higher education institutions. With over 15 years of active involvement in open source communities, ELAN e.V. empowers universities by providing flexible, secure digital teaching and learning tools. Their market position is strengthened by their community engagement and recognized certifications such as the Open EdTech Associate Membership. The organization offers services including software development, consulting, hosting, and support, targeting educators and students in the academic sector. Technically, the website is built on a modern WordPress platform enhanced with plugins like Rank Math PRO for SEO, Matomo for privacy-conscious analytics, and Oxygen Builder for design flexibility. Hosting and DNS services are managed via Cloudflare, ensuring robust performance and security. The site demonstrates good mobile optimization and accessibility, with a professional and consistent branding approach. From a security perspective, the site enforces HTTPS and employs privacy-respecting analytics. However, it lacks visible cookie consent mechanisms and explicit security or incident response policies. No vulnerability disclosure or security.txt files are present, which could be improved to enhance transparency and trust. Overall, the security posture is solid but could benefit from additional compliance features. The overall risk assessment is low, with the website presenting a trustworthy and professional front for ELAN e.V. Strategic recommendations include implementing cookie consent, publishing security policies, and adding vulnerability disclosure information to further strengthen compliance and user trust.

M

Martin-Luther-Universität Halle-Wittenberg

uni-halle.de

53

Martin-Luther-Universität Halle-Wittenberg is a well-established public university in Germany, founded in 1502, offering a broad range of academic programs and research activities. The website serves as an information portal for students, researchers, applicants, and other stakeholders, providing news, study information, and institutional resources. The university maintains a strong academic reputation with international collaborations and prestigious research grants. Technically, the website uses a custom CMS with JavaScript libraries and Piwik/Matomo analytics, hosted on a German academic network. The site is moderately optimized for performance and accessibility but lacks advanced mobile responsiveness and some modern security headers. Security posture is adequate with HTTPS usage but could be improved by adding explicit security policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and content-rich, though some compliance and security best practices could be enhanced.

U

Universität Kassel

uni-kassel.de

66

Universität Kassel is a well-established public university in Germany, founded in 1969, offering a broad range of academic programs and research initiatives with a strong emphasis on sustainability and interdisciplinary collaboration. The website reflects a mature digital presence with comprehensive content targeting students, researchers, and staff, supported by a modern TYPO3 CMS infrastructure and privacy-conscious analytics via Matomo. Security posture is solid with HTTPS and cookie consent mechanisms, though formal security and incident response policies are not explicitly published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR standards.

U

Universität Passau

uni-passau.de

68

Universität Passau is a reputable German university focused on providing excellent research and innovative teaching to approximately 12,000 students from over 100 countries. The website reflects a mature digital presence built on TYPO3 CMS, featuring comprehensive academic and administrative content tailored to diverse target groups including students, researchers, and businesses. The technical infrastructure includes privacy-conscious analytics via Matomo with cookies disabled, indicating a commitment to user privacy. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements can be made by implementing cookie consent mechanisms and publishing explicit security policies. Overall, the site demonstrates high professionalism and trustworthiness appropriate for an academic institution.

H

Hochschule Osnabrück

hs-osnabrueck.de

66

Hochschule Osnabrück is a well-established University of Applied Sciences in Germany providing a broad range of academic programs including Bachelor, Master, dual studies, and continuing education. The institution emphasizes practical learning, internationalization, and research, serving students, academic staff, and partners. The website reflects a professional and comprehensive digital presence with clear navigation, multilingual support, and active social media engagement. Technically, the site is built on TYPO3 CMS, uses modern JavaScript libraries, and integrates privacy-conscious analytics (Matomo). Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response information are not published. Overall, the domain registration and hosting align with the university's official infrastructure, indicating high legitimacy and trustworthiness.

H

Herr Stratmann Gestaltungswesen

herrstratmann.de

53

Herr Stratmann Gestaltungswesen is a small German-based consultancy specializing in marketing concepts, corporate design, brand development, and digital transformation services. Founded in 2008 by Martin Stratmann, the company offers personalized and strategic support to businesses seeking to enhance their marketing and digital presence. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site is built on WordPress using Elementor and Yoast SEO, ensuring a modern and SEO-friendly infrastructure. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though improvements can be made by adding security headers and incident response information. Privacy compliance is basic, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy and well-positioned for its niche market.