Germany security reports

K

Katharineum zu Lübeck

katharineum.de

52

Katharineum zu Lübeck is a historic public gymnasium in Germany, founded in 1531, offering a broad educational program including classical languages and extracurricular activities. The website serves as an official informational portal for students, parents, and staff, providing schedules, news, and organizational details. Technically, the site is built on WordPress with a modern plugin ecosystem including Yoast SEO and Matomo analytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled but lacks some security headers and explicit privacy and cookie policies, which are important for GDPR compliance. Overall, the site is professional and trustworthy but could improve privacy transparency and security hardening.

C

Carl von Ossietzky Universität Oldenburg

uol.de

62

Carl von Ossietzky Universität Oldenburg is a well-established public university in Germany, founded in 1973, offering a broad range of academic programs and research activities. The website serves students, researchers, academic staff, and the general public with comprehensive information about study programs, research, campus life, and international cooperation. The university positions itself as a research-oriented institution with a strong regional and international presence.

H

Hochschule Niederrhein

hs-niederrhein.de

59

Hochschule Niederrhein is a large and reputable University of Applied Sciences in Germany, offering a wide range of Bachelor and Master degree programs with a strong emphasis on applied research and practical education. The institution serves a diverse audience including prospective students, current students, international participants, and academic staff. The website reflects a professional and modern digital presence built on TYPO3 CMS, integrating accessibility tools and comprehensive cookie consent mechanisms. Security measures such as HTTPS and Content Security Policy are implemented, indicating a mature security posture. No critical vulnerabilities or compliance gaps were detected, and the WHOIS data aligns well with the institution's identity, supporting legitimacy. Overall, the website is well-designed, trustworthy, and compliant with GDPR requirements.

F

Flachsland Zukunftsschulen gemeinnützige GmbH

flachsland-zukunftsschulen.de

48

Flachsland Zukunftsschulen gemeinnützige GmbH is a non-profit educational organization based in Hamburg, Germany, operating bilingual and integrative kindergartens, a combined kindergarten and school facility, and a vocational school for social pedagogy. It is a subsidiary of Kinderwelt Hamburg gGmbH, leveraging over 30 years of experience in child and youth education. The website serves as an informational portal for families and stakeholders, providing details about the institutions, donation options, and contact information primarily via email. The organization targets families and educators seeking quality educational services in Hamburg. Technically, the website is built on WordPress using the Elementor page builder, with standard web technologies such as jQuery and Font Awesome. Hosting is provided by netcup, as inferred from the DNS nameservers. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. No advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and cookie consent mechanisms. There is no published security policy or incident response contact, and no vulnerability disclosure information is available. The WHOIS data is consistent and transparent, with no privacy protection or suspicious patterns, supporting the legitimacy of the domain and organization. Overall, the website presents a professional and trustworthy image suitable for its educational mission. However, improvements in security headers, privacy compliance (cookie consent), and transparency around security policies would enhance its security posture and compliance with GDPR requirements.

U

Universität Vechta

uni-vechta.de

60

Universität Vechta is a modern campus university in Germany focusing on education, social services, and interdisciplinary research. It offers a variety of bachelor and master programs, continuing education, and internationalization services. The website reflects a well-established institution with a clear market position in regional higher education. Technically, the site is built on TYPO3 CMS with modern accessibility and tracking tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit incident response policies are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

S

Sächsische Landesbibliothek – Staats- und Universitätsbibliothek Dresden

slub-dresden.de

62

The Sächsische Landesbibliothek – Staats- und Universitätsbibliothek Dresden (SLUB Dresden) operates as a major academic and public library institution in Germany, providing extensive library services, digital collections, research support, and cultural programming. The website reflects a mature digital presence with a comprehensive content offering targeting academic researchers, students, and the general public interested in cultural heritage. The institution's market position is strong within the regional and academic library sector, supported by government funding and a focus on open access and digital innovation. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery, Chartist, and Fancybox. The hosting infrastructure appears to be aligned with German research networks, ensuring reliability and performance. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the website enforces HTTPS and uses secure login mechanisms like Shibboleth SSO. While some security headers are implied, explicit implementation of Content-Security-Policy and other headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear GDPR-aligned privacy and cookie policies. However, the absence of a public security policy or vulnerability disclosure program suggests room for maturity in security governance. Overall, the website is trustworthy, professionally maintained, and aligned with the institution's public service mission. Strategic enhancements in security policy transparency and header implementation would further strengthen its security posture.

A

Abstract-Technology GmbH

abstract-technology.de

52

Abstract-Technology GmbH is a specialized provider of Open Source Learning Management Systems, primarily leveraging the Open edX platform. Positioned as a leading verified Open edX partner in Europe, the company offers tailored digital learning solutions for a diverse clientele including educational institutions, enterprises, and NGOs. Their service portfolio encompasses platform implementation, migration, virtual classrooms, advanced proctoring, and learning design, supported by a professional and content-rich website that reflects their expertise and market position. Technically, the website is built on the Odoo CMS platform, hosted on AWS infrastructure, and integrates modern web technologies such as FontAwesome, Flowbite, and jQuery. The site demonstrates good SEO practices, mobile responsiveness, and includes analytics via Google Analytics, indicating a mature digital presence. Security-wise, the site enforces HTTPS and includes CSRF tokens and cookie consent mechanisms, but lacks explicit security headers and published security policies, suggesting room for improvement in security transparency and incident response readiness. Overall, the website is professional, trustworthy, and compliant with GDPR, with a strong business credibility score and no critical security issues detected.

G

Gesellschaft für wissenschaftliche Datenverarbeitung mbH Göttingen

gwdg.de

61

GWDG is a specialized IT service provider and research support center serving the Georg-August-Universität Göttingen and the Max-Planck-Gesellschaft. It offers a broad range of information and communication services tailored to scientific research and education, supported by its own research in practical and applied computer science. The organization is positioned as a key regional IT competence center with strong institutional affiliations and ISO certifications, reflecting a high level of professionalism and trust. Technically, the website is built using the Hugo static site generator, enhanced with modern JavaScript libraries such as Swiper.js and FontAwesome for UI elements. The site demonstrates excellent performance, mobile optimization, and accessibility, with proper use of HTTPS and resource integrity checks. However, some security headers are missing, and no cookie consent mechanism is present, which are areas for improvement. From a security perspective, the site maintains a strong posture with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The presence of ISO 27001 certification indicates adherence to recognized security standards. Nonetheless, the absence of explicit incident response contacts and vulnerability disclosure mechanisms suggests room to enhance transparency and readiness. Overall, GWDG presents a low-risk profile with a well-maintained digital presence aligned with its institutional mission. Strategic recommendations include implementing cookie consent for GDPR compliance, adding security headers, publishing incident response information, and introducing a security.txt file to facilitate vulnerability reporting.

O

Ostfalia Hochschule für angewandte Wissenschaften

ostfalia.de

56

Ostfalia Hochschule für angewandte Wissenschaften is a German university of applied sciences offering a broad spectrum of academic programs and research opportunities. The website serves as a comprehensive portal for students, faculty, and prospective applicants, providing detailed information on study programs, faculties, research centers, and campus services. The institution positions itself as a regional academic leader with a strong focus on applied sciences and community engagement. Technically, the website is built on TYPO3 CMS, a robust and widely used content management system for academic and institutional websites. The site demonstrates good digital maturity with responsive design, accessibility features, and integration of Matomo analytics for privacy-conscious user tracking. The cookie consent mechanism and privacy policy indicate compliance with GDPR requirements. From a security perspective, the site enforces HTTPS and includes standard security headers, reflecting a solid security posture. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. No critical vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and well-maintained, supporting the university's mission and stakeholder needs. Strategic enhancements in security transparency and contact information could further strengthen trust and compliance.

I

in2code GmbH

in2code.de

62

in2code GmbH is a specialized TYPO3 Platinum Member company based in Germany, offering comprehensive web solutions including TYPO3 CMS development, hosting, marketing automation, and support services primarily targeting universities, higher education institutions, and enterprise businesses. The company holds a strong market position with multiple TYPO3 certifications and awards, reflecting its expertise and community engagement. Technically, the website is built on TYPO3 CMS with modern web technologies, optimized for performance, mobile, and accessibility. The security posture is solid with HTTPS usage and cookie consent mechanisms, though explicit security policies and incident response details are not publicly available. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with GDPR regulations.

H

Hochschule Hannover

hs-hannover.de

67

Hochschule Hannover is a public university of applied sciences and arts located in Germany, offering a variety of Bachelor and Master degree programs focused on practical education and research. The institution targets students and academic professionals seeking career-oriented education and research opportunities. The website is built on TYPO3 CMS with modern frontend technologies and includes a comprehensive cookie consent mechanism via Cookiebot, ensuring GDPR compliance. Social media integration and structured navigation enhance user engagement and accessibility. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security and incident response policies are not publicly available. Overall, the website reflects a mature digital presence suitable for an educational institution with good content quality and technical implementation.

J

Julius-Maximilians-Universität Würzburg

uni-wuerzburg.de

55

The Julius-Maximilians-Universität Würzburg (JMU) is a large, well-established public university in Germany offering a broad spectrum of academic programs and conducting high-level research. The website reflects a mature digital presence with comprehensive content targeting students, researchers, and academic partners. The technical infrastructure is based on TYPO3 CMS with privacy-conscious analytics via Matomo, indicating a modern and responsible approach to web technology. Security posture is good with HTTPS enforced, though additional security headers could enhance protection. Privacy compliance is mostly met with a comprehensive privacy policy, but lacks a visible cookie consent mechanism. Overall, the site is professional, trustworthy, and well-positioned in the education sector.

U

Universität Osnabrück

uni-osnabrueck.de

64

Universität Osnabrück is a well-established public university in Germany offering a broad range of academic programs across multiple disciplines including economics, law, humanities, social sciences, natural sciences, and artificial intelligence. The website serves as an information portal for prospective and current students, providing detailed program descriptions, application guidance, and campus life insights. The university maintains a strong regional presence and is positioned as a reputable educational institution. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and employs privacy-conscious tools such as Matomo analytics with no cookies set by default and tarteaucitron.js for cookie consent management. The site is well-structured, mobile-optimized, and accessible, reflecting a mature digital infrastructure. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The domain registration is consistent with the university's identity, though WHOIS data is limited due to DENIC privacy restrictions. Overall, the website demonstrates a strong security posture and compliance with privacy regulations, providing a trustworthy and professional user experience. Strategic improvements could include enhancing security headers, publishing a security policy, and establishing a vulnerability disclosure process.

U

Universität Bayreuth

uni-bayreuth.de

65

Universität Bayreuth is a well-established German university offering interdisciplinary academic programs and research opportunities. The website serves as an official digital presence, targeting prospective and current students, researchers, and academic collaborators. It emphasizes a livable campus and innovative study options. Technically, the site uses modern web technologies including React and Scrivito CMS, with integration of Usercentrics for cookie consent and Google Tag Manager for analytics. The hosting appears to be managed via academic network name servers, indicating a reliable infrastructure. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, though explicit security headers and policies are not evident in the provided data. Privacy compliance is partially addressed through cookie consent, but no explicit privacy or terms of service pages were found. Overall, the site is professional, trustworthy, and safe for general audiences.

G

Gymnasium Bad Iburg

gymnasium-badiburg.de

55

Gymnasium Bad Iburg is a medium-sized secondary school in Germany serving approximately 1000 students with a focus on community, education, and identity. The school offers a broad range of educational services including specialized programs such as Europaschule and sports-friendly initiatives. The website is well-structured, professionally designed, and provides comprehensive information for students, parents, and staff. The school maintains a strong community presence and demonstrates trustworthiness through certifications and clear contact information. Technically, the site is built on Joomla CMS with modern plugins and is mobile optimized, though performance is moderate. Security posture is good with HTTPS enforced and GDPR-compliant cookie consent mechanisms in place, but lacks published security policies and incident response contacts. Overall, the site is safe, trustworthy, and compliant with privacy regulations.

U

Universität Paderborn

uni-paderborn.de

58

Universität Paderborn is a well-established German university serving approximately 20,000 students, positioned as a strong medium-sized academic institution. The website is built on TYPO3 CMS, reflecting a modern and maintainable technical infrastructure. The site is well-structured, mobile-optimized, and provides content primarily in German with English alternatives, targeting students, researchers, and the academic community. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy and cookie policies. No incident response or vulnerability disclosure information is publicly available, which could be improved to enhance trust and compliance. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

K

Kröpelin Projekt GmbH

kroepelin-projekte.de

64

Kröpelin Projekt GmbH is a small German company specializing in digital education solutions, primarily focused on providing customized ILIAS learning management platforms. Their services include platform operation, technical support, software development, training, content conception, and consulting. The company targets education providers, organizations, project portals, and corporate clients, positioning itself as a niche service provider in the education technology sector. The website is professionally designed using WordPress and Elementor, featuring good mobile optimization and clear navigation. Security posture is strong with HTTPS and cookie consent mechanisms, though lacking explicit security policies or incident response contacts. Overall, the site reflects a trustworthy and GDPR-compliant business with a focus on quality service delivery.

R

Rheinland-Pfalz

bildung-rp.de

51

Bildungsserver Rheinland-Pfalz is an official government-operated educational portal serving the German state of Rheinland-Pfalz. It provides comprehensive educational resources, news, and support services targeted at school leadership, teachers, students, parents, and school authorities. The portal is well-positioned as a trusted source of educational information within the region, supported by partnerships with regional educational institutes. Technically, the website is built on TYPO3 CMS with Bootstrap for responsive design and uses Matomo for privacy-conscious analytics. The site demonstrates good digital maturity with mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and privacy-aware analytics configuration, though it lacks visible security headers and published security policies. Overall, the website is professional, trustworthy, and compliant with GDPR, but could improve cookie consent transparency and security disclosures.

G

Gymnasium Lüchow

gymnasium-luechow.de

46

Gymnasium Lüchow is a medium-sized educational institution in Germany, recognized as an open all-day school and a UNESCO project school. The website provides comprehensive information about the school’s educational offerings, projects, international partnerships (notably Erasmus+), and community engagement. The school targets students, parents, and educators, emphasizing sustainability, cultural education, and social responsibility. Technically, the site is built on TYPO3 CMS, hosted by SchlundTech, and employs modern web technologies with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website reflects a professional and trustworthy educational institution with strong community ties.

D

data-quest Suchi & Berg GmbH

data-quest.de

45

data-quest Suchi & Berg GmbH is a specialized German company providing consulting, development, installation, and support services primarily for educational institutions, especially universities. They focus on open-source learning and campus management software, notably the Stud.IP system, which they co-develop and support. Their market position is that of a niche full-service provider with over 20 years of experience, serving a targeted audience of educational and administrative organizations. The website content is professional, well-structured, and clearly communicates their services and expertise. Technically, the site is built on WordPress with modern plugins and themes, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements are possible in security headers and incident response transparency. Privacy compliance is good with a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, the site is trustworthy and credible, reflecting a mature business with strong industry ties.

Hochschule Ruhr West is a public university of applied sciences located in the Ruhr region of Germany, with campuses in Mülheim an der Ruhr and Bottrop. The institution offers a variety of academic programs focused on practical and applied education, targeting students and academic professionals in the region. The website reflects a medium-sized educational institution with a clear focus on regional engagement and academic excellence. Technically, the website employs modern JavaScript technologies, including Cookiebot for cookie consent management and Google Tag Manager for analytics, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices and a professional design. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. However, there is room for improvement in implementing additional security headers and publishing explicit security policies. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations, supporting the institution's credibility and user trust.

Universität zu Lübeck is a medium-sized public university in Germany specializing in medicine, computer science, and biomedical engineering. It offers academic programs, conducts research, and facilitates technology transfer. The university maintains a strong regional and academic presence with multiple partnerships and certifications. The website is professionally designed, content-rich, and well-structured, targeting students, researchers, and academic partners. Technically, the site uses TYPO3 CMS with standard web technologies and moderate performance. Security posture is adequate with HTTPS and secure form handling but lacks explicit security headers and vulnerability disclosure policies. Privacy compliance is mostly met with a comprehensive privacy policy but lacks cookie consent mechanisms. Overall, the site is trustworthy and safe for general audiences.

FernUniversität in Hagen is Germany's only state distance university, offering a wide range of Bachelor and Master degree programs, continuing education, and academy studies. It serves a broad audience including prospective students, current students, alumni, researchers, and academic staff. The university maintains multiple campus locations across Germany and abroad, emphasizing accessibility and flexibility in education. The website reflects a professional and comprehensive digital presence aligned with its educational mission. Technically, the website employs modern web technologies such as Bootstrap 5 for responsive design, Matomo for privacy-conscious analytics, and SVG graphics for scalable visuals. Hosting appears to be managed via the German Research Network (DFN), supporting reliability and security. The site is well-optimized for mobile devices and accessibility, with clear navigation and rich content. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks some advanced HTTP security headers and a cookie consent mechanism, which are recommended for enhanced protection and compliance. No vulnerabilities or suspicious content were detected. Privacy compliance is strong, with a comprehensive privacy policy and a designated data protection officer contact. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity, suitable for a large public educational institution. Strategic improvements in security headers and cookie consent would further strengthen its posture.

C

CampusSource e.V.

campussource.de

62

CampusSource e.V. is a non-profit organization focused on promoting and supporting open source software solutions for higher education institutions in Germany. The website serves as a community and information hub, offering resources, news, and collaboration opportunities related to open source software in academia. The organization targets universities and related stakeholders, positioning itself as a niche player in the education technology sector. The business model revolves around community engagement and software development support rather than commercial sales. Technically, the website is built on WordPress 6.8.3, utilizing popular plugins such as Yoast SEO for search engine optimization and Real Cookie Banner for GDPR-compliant cookie consent management. Matomo analytics is employed for privacy-conscious user tracking. The site demonstrates good mobile optimization and basic accessibility features, with moderate performance. Hosting details are not explicitly disclosed but the domain uses multiple name servers under ui-dns, indicating a stable DNS setup. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism. However, no explicit security headers were detected, and there is no published security or incident response policy. No vulnerabilities or exposed sensitive data were found in the analysis. The WHOIS data is consistent and trustworthy, with no privacy protection or suspicious registration patterns. Overall, the security posture is solid but could be improved by adding security headers and formal policies. The overall risk assessment is low, with no critical issues detected. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility compliance. The website is professional, trustworthy, and compliant with GDPR requirements, making it a reliable resource for its target audience.

Hochschulforum Digitalisierung is a German nationwide think-and-do tank initiative focused on shaping the future of higher education through digital transformation. It operates as a non-profit entity affiliated with prominent organizations such as the Stifterverband, CHE, and HRK. The website serves as a comprehensive platform offering networking, consulting, innovation, qualification, and information services targeted at higher education institutions, staff, and students. The initiative maintains a strong market position within the German education sector, emphasizing collaboration and strategic digital development. Technically, the website is built on WordPress with modern plugins including Yoast SEO, WPBakery Page Builder, and Everest Forms, ensuring a robust and user-friendly digital presence. The site is well-optimized for mobile devices, fast loading, and incorporates SEO best practices. Cookie consent is managed via Borlabs Cookie, reflecting attention to privacy compliance, although explicit privacy and terms of service pages are not detected in the provided content. From a security perspective, the site enforces HTTPS and employs standard security practices, but lacks published security policies, incident response contacts, or vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site demonstrates a mature security posture appropriate for its non-profit educational focus. The overall risk assessment is low, with recommendations to enhance transparency by publishing privacy policies, terms of service, and incident response information. Strengthening security headers and adding a vulnerability disclosure policy would further improve trust and compliance. The website is professional, trustworthy, and well-aligned with its mission to support digital transformation in higher education.

M

Moodle an Hochschulen e.V.

moodle-an-hochschulen.de

62

Moodle an Hochschulen e.V. is a German non-profit association founded in 2021, representing the Moodle community across more than 200 German universities with over 1.7 million students. The organization focuses on coordinating Moodle development, fostering networking, knowledge transfer, and organizing community events such as workshops and expert panels. The website is built on WordPress with modern plugins and demonstrates good content quality and professional design tailored to its educational audience. Technically, the site uses WordPress CMS with plugins like RevSlider and WPBakery, hosted on domaincontrol.com nameservers, and employs HTTPS with good SSL configuration. However, explicit privacy and terms of service policies are missing, and security headers are not detected, indicating room for improvement in security posture and privacy compliance. Contact information is clearly provided via email and social media, supporting business credibility. Overall, the site is trustworthy, safe, and well-positioned within its niche community.

S

Stud.IP e. V.

studip.de

41

Stud.IP e. V. operates a modern open-source learning management system primarily targeting educational institutions such as universities, authorities, associations, and companies. The platform serves as a central component of digital education concepts, offering services in teaching, learning, administration, and integration via interfaces. The website is professionally designed, content-rich, and clearly structured, supporting a German-speaking audience with a focus on education and technology sectors. The business model revolves around providing an open-source LMS solution with community and event engagement to foster adoption and development. Technically, the website is built on WordPress with modern front-end technologies including JavaScript and CSS, enhanced by SEO tools like Yoast and analytics via Koko Analytics. Hosting is provided by Cloudpit, a reputable provider, ensuring reliable infrastructure. The site demonstrates good mobile optimization and accessibility features, although SEO optimization is basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS with excellent SSL configuration but lacks explicit security headers and published security policies. Forms are secured with required fields, and no sensitive data exposure or vulnerable libraries were found. Privacy compliance is partial; while a privacy policy is present and GDPR compliance is implied, no cookie consent mechanism or detailed data retention policies are visible. Contact information is limited to a postal address without direct emails or phone numbers, and no incident response or vulnerability disclosure information is provided. Overall, the website presents a trustworthy and professional front for an established educational technology entity. Strategic improvements in privacy compliance, security policy transparency, and user data consent mechanisms would enhance trust and regulatory adherence.

K

Kompetenzzentrum Technik-Diversity-Chancengleichheit e. V.

kompetenzz.de

50

Kompetenzzentrum Technik-Diversity-Chancengleichheit e. V. is Germany's largest network dedicated to technology, diversity, and equal opportunity. The organization operates as a non-profit entity focusing on educational activities, networking, and advocacy to promote equal opportunities in technical and social fields. Their website reflects a mature and professional presence with a comprehensive range of services including data tools, workshops, and seminars aimed at various stakeholders such as educational institutions and policymakers. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Matomo analytics, and Google reCAPTCHA, ensuring a secure and user-friendly experience. The site is mobile-optimized, accessible, and SEO-friendly, with a custom CMS indicated. Hosting and DNS are managed via GoDaddy's DomainControl, a reputable provider. From a security perspective, the site enforces HTTPS, integrates reCAPTCHA on forms, and manages cookie consent effectively. However, it lacks explicit security policies and incident response information publicly available, and security headers are not detected, which could be improved. No vulnerabilities or suspicious activities were found. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR. Strategic recommendations include publishing a security policy, enhancing security headers, and adding a vulnerability disclosure mechanism to further strengthen the security posture.

The Gesellschaft für Pädagogik, Information und Medien "Johann Amos Comenius" - GPI e.V. is a well-established scientific society focused on digital media, media didactics, and educational technology. The organization operates primarily in Germany and Europe, offering scientific symposia, awards such as the Comenius EduMedia Awards, and collaborative educational projects with European partners. Their website reflects a professional and consistent brand image, targeting educators, researchers, and digital media professionals in education. Technically, the site is built on WordPress using the Avada theme, with privacy-conscious analytics via Matomo and a moderate performance profile. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and cookie consent mechanisms are recommended. Overall, the site is trustworthy and credible, though WHOIS data is unavailable due to privacy protections common for .eu domains.

D

Deutsche Leasing AG

deutsche-leasing.de

66

Deutsche Leasing AG operates as a leading asset finance partner primarily serving the German Mittelstand (SMEs). The company offers a broad portfolio of leasing and financing solutions including machinery, mobility, IT leasing, and sustainable financing options. The website reflects a mature enterprise with a strong market position and international presence through subsidiaries. Technically, the site employs a modern tech stack with jQuery, Google Tag Manager, and Cookiebot for consent management, ensuring compliance with GDPR and privacy standards. Security posture is robust with HTTPS, security headers, and secure login forms, although explicit security policies and incident response details are not published. The absence of WHOIS data reduces transparency but the professional presentation and comprehensive contact information support legitimacy. Overall, the site is well-designed, user-friendly, and trustworthy, targeting business customers in finance and leasing sectors.

D

DL-Serviceshop

dl-serviceshop.de

62

DL-Serviceshop is a German finance-focused procurement and financing portal targeting True-Lease-Rahmenvertragskunden, offering asset-based financing solutions. The website is professionally designed with consistent branding and clear navigation, supporting a medium-sized business model in the finance sector. Technically, the site uses a modern tech stack including jQuery, Bootstrap, and INTERSHOP platform components, with moderate performance and good mobile optimization. Security posture is solid with HTTPS, CSRF protection, and input validation, though explicit security headers are missing. Privacy compliance is well addressed with a cookie consent mechanism and a GDPR-compliant privacy policy. Overall, the domain and website content align well, indicating legitimacy and trustworthiness.

Zusteller gesucht - Mergelsberg Verlag operates as a local media company focused on recruiting newspaper delivery personnel for publications such as the Borkener Zeitung and Stadtanzeiger. The website targets individuals seeking flexible, part-time, or full-time delivery jobs, offering personal onboarding and fair compensation. The business model centers on employment recruitment within the media sector in Germany, serving a small regional market. Technically, the website is built on the memeSYS CMS platform, leveraging Bootstrap and jQuery for frontend functionality. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate; while HTTPS is presumably enabled, no explicit security headers were detected, and no advanced security policies are published. Privacy compliance is good, with a clear cookie consent mechanism and a GDPR-compliant privacy policy. Contact information is transparent and complete, enhancing business credibility. Overall, the website is professional, trustworthy, and safe for general audiences.

B

Bundespräsidialamt

bundespraesident.de

64

The website www.bundespraesident.de is the official online presence of the German Federal President's office, providing authoritative information about the president, official duties, speeches, news, and events. It serves a broad audience including German citizens and international visitors interested in the presidency. The site is built on the Government Site Builder CMS and hosted likely by ITZBund, the IT service provider for the German federal government. It employs Matomo analytics for visitor statistics with a GDPR-compliant cookie consent mechanism. Technically, the website demonstrates a mature infrastructure with good mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS enforced and standard security headers present. No vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not published, which could be improved. Overall, the site is professional, trustworthy, and compliant with privacy regulations. It lacks some business contact details and terms of service, which is typical for government sites. The domain WHOIS data is limited but consistent with official use. No WAF or blocking mechanisms interfere with content access. Strategic recommendations include publishing a dedicated security policy, incident response information, and a vulnerability disclosure policy to enhance transparency and trust.

D

Das offizielles Stadtportal der Stadt Dortmund

dortmund.de

62

The website www.dortmund.de serves as the official city portal for Dortmund, Germany, providing comprehensive information about city administration, services, local politics, economy, leisure, tourism, and public events. It targets residents, visitors, and businesses in Dortmund, offering key services such as online appointments, event calendars, news updates, and career opportunities. The site is well-established, with a founding date of 1995, and presents itself as a large government entity with a professional and consistent brand image. Technically, the website employs modern web technologies including JavaScript, custom web components, and the Splide.js carousel library. It uses HTTPS with good SSL configuration and integrates Piwik (Matomo) for analytics, indicating a moderate level of digital maturity. The site is mobile-optimized and accessible, with good SEO practices observed. From a security perspective, the site enforces HTTPS and shows signs of good security practices, although explicit security headers and policies are not visible in the provided content. There is no evidence of a published security policy or incident response contact, which could be improved. No vulnerabilities or suspicious domains were detected, and no WAF or blocking mechanisms interfere with access. Overall, the website is trustworthy and professional, but it lacks explicit privacy and cookie policies, which impacts its privacy compliance score. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing security headers, and providing clear incident response contacts to enhance trust and compliance.

D

domicil gGmbH

domicil-dortmund.de

47

domicil gGmbH operates a well-established live music and cultural venue in Dortmund, Germany, specializing in jazz and creative music since 1969. The organization hosts a variety of events including the notable Jazztage Dortmund festival, offers event space rentals, gastronomy services, and a fan merchandise shop. The website reflects a medium-sized non-profit cultural institution with a strong community focus and recognized awards, positioning it as a trusted local cultural hub. Technically, the website is built on the Contao Open Source CMS platform and utilizes common JavaScript libraries such as jQuery, Swiper.js, and Colorbox. The site is moderately performant, mobile-optimized, and has basic accessibility and SEO features. Hosting is provided by a regional hosting provider indicated by the nameservers. While HTTPS is enabled, the site lacks advanced security headers and cookie consent mechanisms, which are recommended for improved security and compliance. From a security perspective, the site shows no signs of vulnerabilities or exposed sensitive data. However, it lacks published security policies, incident response contacts, and a cookie consent banner, which are important for GDPR compliance and user trust. The domain WHOIS data is consistent with the business claims, showing no privacy protection and a legitimate registration history. Overall, domicil-dortmund.de is a credible and professionally maintained cultural website with good content quality and business credibility. Strategic improvements in privacy compliance and security posture would enhance trust and regulatory adherence.

Fritz-Henßler-Haus is a youth center operated by the City of Dortmund's Youth Office, providing cultural events, workshops, and spaces for youth engagement. The website serves as an information portal for upcoming events and general contact information, targeting youth and community members in Dortmund. Technically, the site is built on the Contao CMS platform, utilizing jQuery and a slider plugin for interactive content presentation. Hosting is provided by Hetzner, a reputable German hosting provider, ensuring stable infrastructure. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professionally maintained, suitable for its public sector role.

H

Helvetas Germany

helvetas.de

10

Helvetas Germany is a well-established independent development organization focused on capacity building and humanitarian aid across Africa, Asia, and Latin America. The organization operates as a medium-sized non-profit entity with a strong presence in Germany and international subsidiaries, including the USA. Their key services include emergency response, water and sanitation, agriculture, vocational training, and climate action. The website reflects a professional and consistent brand image with comprehensive content targeting donors, partners, and development professionals. Technically, the website employs modern frameworks such as Bootstrap and integrates Google Tag Manager and OneTrust for analytics and cookie consent, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance, although there is room for improvement in incident response transparency and vulnerability disclosure. Overall, the website is trustworthy, well-optimized for SEO and mobile, and compliant with GDPR regulations.

T

The Good Media Network GMN GmbH

thegoodmedia.net

63

The Good Media Network GMN GmbH operates a professional and well-designed website focused on promoting impactful non-fiction storytelling through films. Their business model centers on organizing events such as conferences and festivals, consulting on impact-driven campaigns, and producing media content aimed at social change. The website targets storytellers, academics, grassroots organizations, and foundations interested in social justice and sustainability. Technically, the site is built on TYPO3 CMS with Bootstrap and integrates privacy-conscious analytics via Matomo and Usercentrics consent management. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though the absence of security headers and explicit security policies suggests room for improvement. The lack of WHOIS data is a notable anomaly that slightly reduces trust but does not overshadow the professional presentation and content quality. Overall, the site demonstrates a mature digital presence aligned with its mission and audience.

D

DGRV – Deutscher Genossenschafts- und Raiffeisenverband e. V.

dgrv.de

52

The website www.dgrv.de represents a German organization likely related to cooperatives or non-profit sectors, as inferred from the domain and content language. The site uses modern frontend technologies such as Bootstrap 4 and Font Awesome 6, indicating a moderate level of technical maturity. Hosting is provided by Pironet NDH, a known German hosting provider. The website content is accessible without any WAF or security challenge blocking access. However, the site lacks explicit privacy and cookie policies, as well as clear contact information, which are important for compliance and user trust. Security posture is moderate with a Content-Security-Policy header present and HTTPS enforced, but additional security headers and policies would improve the overall security stance. The domain WHOIS data shows standard hosting name servers but lacks detailed registrant information, limiting full trust assessment. Overall, the website is safe for general audiences and professionally designed but would benefit from enhanced privacy compliance and clearer business contact details.

W

Werbekomplizen

andreassaulig.com

65

Werbekomplizen is a small, established German media agency specializing in branding, web design, print design, e-commerce, and digital marketing services. With over 16 years of experience, the company targets businesses seeking comprehensive marketing and design solutions. The website is professionally designed, mobile-optimized, and presents a clear portfolio of projects, reinforcing its market position as a trusted regional agency. Technically, the website leverages modern web technologies including Webflow CMS, GSAP for animations, jQuery, and smooth scrolling libraries. Hosting appears stable with dedicated nameservers. Performance and mobile responsiveness are excellent, though accessibility features are basic. SEO is adequately addressed through meta tags and structured content. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers and cookie consent mechanisms. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. No suspicious or vulnerable libraries were detected, and no sensitive data exposure was found. Overall, the website is safe, professional, and trustworthy with minor gaps in privacy compliance and security best practices. Strategic improvements in cookie consent, security headers, and incident response documentation would elevate the security posture and regulatory compliance.

N

NABU

nabu-netz.de

59

NABU-Netz is a digital collaboration platform operated by NABU, a well-established German non-profit environmental organization. The website serves as a hub for information, communication, and resource sharing among NABU volunteers and staff. It offers multiple integrated services such as a Wiki, Chat, Media Library, Publishing tools, E-Learning, and an Education Calendar, all aimed at supporting the organization's mission and community engagement. The platform emphasizes ease of access through a centralized NABU-Login system, enhancing user experience and security. Technically, the website is built on modern web technologies including Laravel Livewire and Alpine.js, with a focus on responsive design and moderate performance. It employs Matomo analytics for privacy-conscious user tracking and integrates third-party services like CleverReach for newsletter management. The site uses HTTPS with proper CSRF protections and demonstrates good security hygiene, although explicit security headers and incident response policies are not publicly documented. From a security perspective, the site shows a mature posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with comprehensive privacy and cookie policies in place, aligned with GDPR requirements. However, the absence of a dedicated security policy or vulnerability disclosure program suggests room for improvement in transparency and incident readiness. Overall, NABU-Netz presents a trustworthy, professional, and well-maintained digital presence for a non-profit organization. The platform effectively supports its community with relevant services and maintains a good balance between usability, privacy, and security. Strategic enhancements in security documentation and header implementation could further strengthen its security posture and user trust.

N

NABU

nabu-shop.de

69

The NABU-Shop website is an e-commerce platform operated by NABU, a prominent German non-profit organization dedicated to nature conservation. The site offers a wide range of products related to bird feeding, nesting aids, nature observation, books, and gifts, targeting nature enthusiasts and supporters of environmental protection. The platform leverages Magento 2 technology, integrating modern JavaScript libraries and Google services for analytics and tag management. The website demonstrates a good level of digital maturity with responsive design, clear navigation, and GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and secure form handling, though some security headers could be improved. Overall, the site reflects a trustworthy and professional online presence aligned with NABU's mission.

NABU Landesverband Bremen e.V. is a well-established non-profit environmental organization active since 1995, focusing on nature conservation, environmental education, and community engagement in Bremen, Germany. The website serves as a comprehensive platform for information dissemination, volunteer coordination, event promotion, and fundraising. It targets nature enthusiasts, families, children, and volunteers, positioning itself as a leading regional environmental advocate with nearly 10,000 members. Technically, the site is built on the IMPERIA CMS platform, utilizing modern JavaScript libraries and analytics tools such as Matomo and Google Tag Manager, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent management implemented, though some security headers could be enhanced. Privacy compliance is strong, with clear policies and GDPR adherence. Overall, the website reflects a professional, trustworthy, and user-friendly digital presence supporting the organization's mission.

L

Landesbund für Vogel- und Naturschutz in Bayern e.V.

lbv.de

57

The Landesbund für Vogel- und Naturschutz in Bayern e.V. (LBV) is a well-established non-profit organization dedicated to nature conservation, particularly bird and habitat protection in Bavaria, Germany. Founded in 1909, LBV operates a comprehensive website that serves as a hub for environmental education, conservation projects, membership engagement, and fundraising. The site targets a broad audience including environmental enthusiasts, schools, volunteers, and corporate partners. The organization maintains a strong market position as a leading conservation entity in the region, supported by a consistent brand and extensive content offerings.

The website naturwaehler.de is operated by NABU Sachsen, a regional branch of the German non-profit nature conservation organization NABU. It serves as an informational platform focused on nature conservation politics in Saxony, providing detailed political party responses to environmental questions related to state elections. The site targets environmentally conscious citizens and stakeholders interested in transparency and political engagement on ecological issues. Technically, the site uses a traditional Bootstrap 3 framework with jQuery and standard HTML/CSS. It lacks modern CMS or advanced analytics and does not implement privacy or cookie policies, which is a compliance gap. Security posture is basic with no evident security headers or HTTPS information in the provided data. Contact information is clearly presented, enhancing trust. Overall, the site is professional and content-rich but would benefit from improved security and privacy compliance.

N

NABU Sachsen

lebendige-luppe.de

59

Lebendige Luppe is a German non-profit environmental project focused on the revitalization of the Elster-Luppe floodplain area from Leipzig to Schkeuditz. The project involves ecological restoration, environmental education, and scientific research, led by the City of Leipzig, the City of Schkeuditz, and NABU Sachsen. Although the project officially ended in 2023, the website remains active to provide ongoing information and resources. The site is well-structured, content-rich, and targets environmentally conscious citizens, educators, and researchers. Technically, the website uses a REDAXO CMS with common frontend libraries such as Bootstrap and jQuery, providing good mobile responsiveness and user experience. Security posture is moderate with some gaps such as missing security headers and no visible incident response contacts. Privacy compliance is good with cookie consent and obfuscated emails. Overall, the website is trustworthy and professionally maintained, serving as an informational hub for the project and its stakeholders.

N

Home | NAJU Sachsen

naju-sachsen.de

56

NAJU Sachsen is a regional organization focused on youth and nature activities in Saxony, Germany. The website is primarily informational with content in German and uses Bootstrap 4.5.2 for its front-end framework. The site appears to be small-scale and non-commercial, targeting a general audience interested in environmental and youth engagement. Technical infrastructure is basic but functional, with no detected advanced CMS or analytics tools. Security posture is moderate with HTTPS likely enabled (not explicitly confirmed), but lacks security headers and privacy compliance documentation. No contact or incident response information is provided, limiting user trust and compliance with GDPR. Overall, the site is safe and appropriate for general audiences but would benefit from enhanced security and privacy features.

NABU - Naturschutzbund Deutschland e.V. is a well-established German non-profit organization dedicated to nature conservation and environmental protection. With a history spanning over 125 years, NABU engages a broad audience through campaigns, education, membership, and fundraising. Their website reflects a professional and comprehensive digital presence, emphasizing transparency, community involvement, and environmental advocacy. The organization leverages modern web technologies and analytics while maintaining strong privacy and cookie consent compliance. Contact information and multiple engagement channels are clearly provided, enhancing user trust and accessibility. Technically, the website is built on the IMPERIA CMS platform and integrates advanced analytics tools such as Matomo and Google Tag Manager, alongside marketing pixels from Facebook and TikTok. The site is mobile-optimized, accessible, and SEO-friendly, though some security headers could be explicitly declared to enhance security posture. HTTPS is enforced, and no critical vulnerabilities or exposed sensitive data were detected. From a security perspective, NABU demonstrates good practices including bot detection on forms and cookie consent management. However, the absence of a public security policy or incident response contact is noted. The WHOIS data aligns well with the organization's identity, showing a consistent and trustworthy domain registration. Overall, the website scores highly on content quality, technical implementation, privacy compliance, and business credibility, making it a reliable and professional platform for environmental advocacy. Recommendations include enhancing security headers, publishing a security policy, and continuous monitoring of third-party scripts to maintain privacy and security standards. These steps will further solidify NABU's digital trustworthiness and compliance in an evolving regulatory landscape.

L

Löwen Apotheke

loewen-apotheke24.com

61

Löwen Apotheke24 is a specialized online pharmacy based in Baden-Baden, Germany, focusing on natural medicine and offering worldwide shipping. The website presents a professional e-commerce platform with a broad product range including vitamins, cosmetics, and individual prescription preparations. It supports multilingual content and integrates modern digital services such as electronic prescriptions and COVID-19 testing. Technically, the site is built on WordPress with WooCommerce, enhanced by SEO and performance plugins, and uses Google Analytics for tracking. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response information are not publicly available. The absence of WHOIS data is a notable gap, reducing domain trustworthiness, but the presence of certifications and clear contact details supports business legitimacy. Overall, the site is well-positioned in the healthcare e-commerce sector with good digital maturity and user experience.

M

medi now Apotheke

medi-now.de

63

medi now Apotheke operates as a German online pharmacy offering a broad range of pharmaceutical products, including prescription and non-prescription medicines. The website supports local pharmacy selection, prescription fulfillment including electronic prescriptions (E-Rezept), and provides delivery or pickup options. The business targets consumers in Germany seeking convenient access to medications and health products. The site is positioned as a regional/local pharmacy network with a strong online presence and app integration to enhance customer engagement. Technically, the website employs modern JavaScript frameworks such as Alpine.js, uses Swiper.js for interactive sliders, and integrates Usercentrics for cookie consent management. Google Tag Manager and Google Analytics are used for analytics and event tracking. The site is mobile optimized with good SEO practices and structured data markup, indicating a mature digital infrastructure. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data shows a professional DNS setup but lacks detailed registrant information, slightly reducing trustworthiness. No privacy policy or terms of service were found in the analyzed content, which is a compliance gap. Overall, the website is professional, trustworthy, and well-suited for its healthcare e-commerce purpose. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, providing clear contact information for data protection officers, and improving accessibility compliance to strengthen trust and compliance posture.