Germany security reports

G

gesund.de GmbH & Co. KG

gesund.de

68

gesund.de GmbH & Co. KG operates a German-language online platform specializing in health-related products and pharmacy services. The website serves as a marketplace and facilitates pharmacy-related transactions, targeting German consumers interested in healthcare products. The company maintains a consistent brand presence with social media links to Facebook and Instagram and uses modern cookie consent management to comply with privacy regulations. Technically, the site employs JavaScript-based tracking and marketing tools including Google Tag Manager, TikTok Pixel, and Taboola, indicating a mature digital marketing infrastructure. Security posture is solid with HTTPS enabled and no visible critical vulnerabilities, though security headers are not explicitly present. Privacy compliance is moderate, with a cookie consent mechanism but no explicit privacy policy or terms of service found in the analyzed content. Contact information is not directly visible, which may impact user trust and compliance. Overall, the site is professional and functional but could improve transparency and security practices.

E

easyApotheke Hildesheim Versandhandel

easyapotheke.de

59

easyApotheke.de is a German online pharmacy specializing in affordable pharmaceutical products and health-related goods. The company offers a broad range of medications and health products with convenient online ordering and free shipping for orders over 39€. Positioned as a trusted and customer-focused online retailer, easyApotheke targets consumers in Germany seeking cost-effective and reliable pharmacy services. The website features clear contact information, including a physical address in Hildesheim and a dedicated customer service phone number, enhancing business credibility. Technically, the website is built on the Mauve Webshopsystem 3 platform and integrates modern analytics and consent management tools such as Google Tag Manager, Microsoft Clarity, and Consentmanager.net. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Hosting is managed via domaincontrol.com, a GoDaddy service, indicating a standard and reliable infrastructure. From a security perspective, the site employs HTTPS and secure form handling, with a consent mechanism for cookies, reflecting compliance with GDPR requirements. However, explicit security headers like Content-Security-Policy and X-Content-Type-Options are not evident, and no formal security policy or incident response contact is published. No vulnerabilities or suspicious patterns were detected, and the WHOIS data aligns reasonably with the business claims, supporting legitimacy. Overall, easyApotheke.de presents a professional, secure, and compliant online pharmacy platform with strong business credibility and a solid technical foundation. Strategic improvements in security header implementation and publishing a security policy could further enhance trust and security posture.

B

Bodfeld Apotheke

bodfeld-apotheke.de

63

Bodfeld Apotheke operates as a professional online pharmacy based in Germany, offering a wide range of pharmaceutical products, cosmetics, and healthcare items. The website targets general consumers seeking convenient and secure online access to medicines and related products. The business model focuses on e-commerce retail with additional services such as electronic prescription fulfillment and customer account management. The company maintains a medium-sized market presence supported by trusted certifications and partnerships with recognized price comparison and review platforms.

apo.com is an established German online pharmacy specializing in medications and services for chronically ill patients. The website offers consultation, e-prescription processing, and shipping pharmacy services, positioning itself as a key player in the German healthcare e-commerce market. The site is well-branded, professionally designed, and targets a German-speaking audience with a focus on healthcare and wellness products. Technically, the site employs modern technologies such as Algolia for search and recommendations, Google Tag Manager for analytics, and Dynamic Yield for personalization, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible sensitive data exposure, though security headers and explicit privacy policies are lacking. The absence of WHOIS data for the domain is a notable anomaly, potentially indicating privacy protection or registry restrictions, which slightly impacts trustworthiness. Overall, the site is professional, secure, and user-friendly, but would benefit from enhanced privacy compliance and transparency.

V

Volksversand Versandapotheke

volksversand.de

63

Volksversand Versandapotheke operates as a large-scale online pharmacy based in Germany, offering a wide range of health, wellness, beauty, baby, and pet products. The website targets general consumers seeking affordable and convenient pharmaceutical products with benefits such as discounts, free shipping, and a bonus points program. The business is well-positioned in the e-commerce healthcare sector with a strong customer base and trust indicators like Trusted Shops certification. Technically, the website is built on the Shopware CMS platform, utilizing modern web technologies including JavaScript, CSS, and integration with Google Tag Manager and Trusted Shops widgets. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in loading speed and technical modernization. From a security perspective, the site employs HTTPS with excellent SSL configuration and secure form handling. However, it lacks visible security headers and explicit security or incident response policies. Privacy compliance is partial, with a comprehensive privacy policy but no visible cookie consent mechanism. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, Volksversand.de presents a trustworthy and professional online pharmacy platform with solid business credibility and technical implementation. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance its security posture and regulatory adherence.

B

Bad-Apotheke Versandapotheke

apotal.de

61

Bad-Apotheke Versandapotheke operates as a German online pharmacy offering a wide range of pharmaceutical and health-related products including prescription and non-prescription medicines, supplements, and cosmetics. The business targets the general German public seeking convenient and cost-effective medication delivery services. The website demonstrates a solid market position with competitive pricing, promotions, and a comprehensive product catalog. Contact channels include phone, email, and a contact form, supporting customer engagement and service. Technically, the website employs modern JavaScript frameworks such as Vue.js, integrates third-party services like eKomi for customer reviews and eTracker for analytics, and uses cookie consent mechanisms aligned with GDPR requirements. The site is mobile-optimized and accessible, with good SEO practices evident. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses secure form submissions. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, representing an area for improvement. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and cookie consent are comprehensive and GDPR-compliant, though no dedicated security policy or incident response information is published. Overall, the website is professional, trustworthy, and compliant with relevant privacy regulations. Strategic recommendations include enhancing security headers, publishing a security policy, and implementing a vulnerability disclosure mechanism to further strengthen security posture and customer trust.

A

Aponeo Versandapotheke

aponeo.de

60

Aponeo.de is a well-established German online pharmacy offering a wide range of pharmaceutical and health-related products. The website targets German-speaking consumers seeking convenient and cost-effective access to medications and wellness products, featuring services such as electronic prescription redemption and a customer loyalty program (APO Cash). The site demonstrates a mature e-commerce business model with strong market positioning in the German healthcare retail sector. Technically, the website employs modern web technologies including responsive design, lazy loading, and Google Tag Manager for analytics and marketing. The infrastructure is hosted via domaincontrol.com nameservers, indicating professional hosting arrangements. Security posture is solid with HTTPS enforced and secure login mechanisms, though some security headers could be enhanced for better protection. Privacy compliance is robust, with clear GDPR-aligned privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and user-friendly, with no indications of malicious content or security risks.

apodiscounter.de is a well-established German online pharmacy operating for approximately 20 years and part of the apo.com Group, a pan-European health tech company. The website offers a comprehensive range of pharmaceutical products, including e-prescription redemption and subscription services, targeting general consumers primarily in Germany and neighboring countries. The business model focuses on direct-to-consumer e-commerce with a strong customer base exceeding 4 million users. Technically, the site leverages modern search and recommendation technologies such as Algolia, integrates cookie consent management via Usercentrics, and uses Cloudflare for DNS and likely CDN services, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and secure login forms, although some security headers could be explicitly verified and enhanced. Privacy compliance is supported by cookie consent mechanisms but lacks visible privacy policy and terms of service links in the provided content. Overall, the site demonstrates high professionalism, good user experience, and trustworthy business credibility.

DocMorris operates as a leading online pharmacy in Germany, providing a wide range of pharmaceutical products and services including E-Rezept processing, pharmaceutical consultation, and fast delivery. The website is professionally designed with excellent content quality and clear navigation, targeting consumers seeking convenient access to medicines and health products. The company maintains a strong market position in the healthcare e-commerce sector with a large customer base and comprehensive digital services. Technically, the site leverages modern frameworks such as Next.js and React, hosted behind Cloudflare DNS and CDN services, ensuring fast performance and mobile optimization. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with GDPR, making it a reliable platform for online pharmaceutical purchases.

S

Shop-Apotheke

shop-apotheke.com

73

Shop Apotheke is a prominent online pharmacy serving the German market, offering a wide range of pharmaceutical products, health and wellness items, and additional services such as electronic prescription processing and online doctor consultations. The company positions itself as a customer-centric, innovative e-commerce platform with a strong focus on convenience, competitive pricing, and fast delivery. The website demonstrates a high level of digital maturity, leveraging modern web technologies including React and Next.js, and integrates performance monitoring via Elastic APM. Security posture is robust, with HTTPS enforced, comprehensive security headers, and certifications such as TÜV ISO 27001 and Trusted Shops, reflecting a commitment to data protection and service quality. However, the absence of WHOIS registration details introduces a minor trust concern that should be monitored. Overall, the site is professional, user-friendly, and compliant with GDPR requirements.

medikamente-per-klick.de is a German online pharmacy operated by Luitpold Apotheke Bad Steben, offering a wide range of pharmaceutical products, cosmetics, and nutritional supplements with free shipping for orders over 15 euros within Germany. The website targets end consumers seeking convenient and cost-effective access to medications and health products. The business model is e-commerce retail with a focus on pharmaceutical compliance and customer service, including individual prescription fulfillment. The site is positioned as a competitive player in the German online pharmacy market with user reviews and discount offers enhancing trust.

H

Heel GmbH

heel-academy.de

46

Heel Academy is a professional healthcare education platform operated by Heel GmbH, targeting medical professionals such as doctors, veterinarians, pharmacists, midwives, and alternative practitioners. The platform offers a variety of educational content including live webinars, CME courses, videos, and practice materials to support healthcare professionals in their daily work. The website is well-branded, consistent, and provides clear contact information, reinforcing its credibility in the healthcare sector. Technically, the site is built on the Weblication® CMS platform, uses modern JavaScript libraries, and integrates a GDPR-compliant cookie consent mechanism via Usercentrics. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable resource for its target audience.

S

SUN Sportmanagement GmbH

illerlauf-senden.de

46

Iller-Lauf Senden is a regional running event organized by SUN Sportmanagement GmbH, targeting runners of all ages and fitness levels in Germany. The event features multiple race categories including a 10-km main run, youth and kids runs, and walking events, complemented by local markets and a consumer fair. The website is built on WordPress using Elementor and integrates modern web technologies and SEO best practices, hosted likely by a partner domain einsteinmarathon.de. Security posture is good with HTTPS and no exposed sensitive data, though improvements are recommended in security headers and cookie consent mechanisms. Contact information and business details are clearly presented, enhancing business credibility. Overall, the site is professional, trustworthy, and well-structured for its purpose.

R

RideBee

stuttgart-faehrt-mit.de

48

The website "Stuttgart fährt mit" is a German-language platform focused on facilitating carpooling and ride-sharing for commuters in Stuttgart. It targets employees of companies, universities, hospitals, and event attendees, offering a sustainable and cost-effective alternative to solo commuting. The platform is supported by the German Federal Ministry for Digital and Transport (BMDV), enhancing its credibility and market position. Key services include ride matching, chat functionality, calendar integration, and digital payment options. The business model is based on cooperation agreements with companies, providing the service free to end users. Technically, the site is a modern Angular 13 single-page application, hosted with Google Domains DNS, and integrates analytics tools such as Google Tag Manager and Hotjar. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and no exposed sensitive data, though security headers could be improved. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Contact information is comprehensive, including email, phone, physical address, and a contact form. Overall, the site is trustworthy and professionally maintained, with room for enhancements in privacy and security transparency.

L

LimoBee

limobee.com

53

LimoBee is a German-based digital platform specializing in chauffeur and limousine transport services. The company offers a native app and web platform enabling passengers to book transfer rides with professional limousine services across multiple German cities. Their business model focuses on streamlining the booking, offer acceptance, payment, and management processes for both passengers and service providers. The website reflects a mature business with a domain registered since 2007 and a clear regional market presence. Technically, the site is built on Angular 14, leveraging modern web technologies and integrations such as Google Maps API and Hotjar for analytics and user experience insights. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in DNS security and security headers. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-positioned in the transportation sector in Germany.

P

PEPPERONIDESIGN

pepperonidesign.de

66

PEPPERONIDESIGN is a small, regional full service advertising and web design agency based in Weißenhorn, Germany. The company offers tailored marketing solutions including web design, print materials, social media management, and branding services primarily targeting small to medium businesses in the Ulm and surrounding regions. The website is professionally designed, mobile-optimized, and uses modern web technologies such as RapidWeaver CMS, jQuery, and Usercentrics for consent management. Security posture is good with HTTPS enabled and consent mechanisms in place, though some security headers could be improved. The site is GDPR compliant with a comprehensive privacy policy and cookie consent. Contact information is clearly presented with multiple channels including phone, email, and a contact form. Social media presence on Facebook, Instagram, and YouTube supports marketing efforts. Overall, the website reflects a credible and professional business with a strong regional market position.

G

Große Kreisstadt Annaberg-Buchholz

annabergerweihnachtsmarkt.de

67

The Annaberger Weihnachtsmarkt website represents the official online presence of the Annaberg-Buchholz Christmas market, a culturally significant and family-friendly event in Germany. The site effectively promotes the event with rich content including program overviews, vendor information, and service offerings. It targets tourists, families, and local visitors, positioning itself as one of Germany's most beautiful Christmas markets with strong municipal backing. Technically, the site uses the Sitepark CMS platform with modern JavaScript libraries and is hosted on rzone.de servers. The website is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks explicit security policies and incident response contacts. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the site is trustworthy, professional, and well-maintained, supporting the event's reputation and visitor engagement.

K

kdvz Rhein-Erft-Rur

kdvz.nrw

63

kdvz Rhein-Erft-Rur is a regional IT service provider supporting public administrations in the Rhein-Erft-Rur area of Germany. Founded in 2019 and operated by 'Der Verbandsvorsteher', it offers a broad portfolio including IT infrastructure, digitalization services, specialized applications, and training. The website reflects a professional and well-established organization with strong regional ties and partnerships with key municipal IT associations such as vitako and KDN. The technical infrastructure is based on the Sitepark CMS platform with modern web technologies and good mobile optimization. Security posture is robust, evidenced by ISO 27001 certification and HTTPS enforcement, though DNSSEC is not enabled. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. No critical vulnerabilities or suspicious activities were detected, and the domain registration data aligns well with the business identity, supporting high legitimacy.

S

Sächsische Staatskanzlei

sachsen.de

62

The website www.sachsen.de serves as the official digital portal for the Free State of Saxony, Germany. It provides comprehensive information about the state government, public services, economic sectors, culture, and citizen engagement. The portal targets residents, businesses, and visitors, offering access to e-government services and up-to-date news from the state administration. The site is well-positioned as the authoritative source for Saxony's governmental information and services. Technically, the website employs a modern and responsive design with technologies such as jQuery, Bootstrap-like frameworks, and custom navigation components. It is hosted likely by Deutsche Telekom, indicated by the nameservers, and uses HTTPS with good SSL configuration. The site includes accessibility features and SEO optimizations, ensuring a positive user experience across devices. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms compliant with GDPR, and avoids exposing sensitive data. However, explicit security headers are not detected, and there is no public security policy or incident response information. Analytics are performed via etracker with moderate user tracking. Overall, the security posture is solid but could be enhanced with additional headers and published policies. The domain WHOIS data aligns with the official government entity, showing consistent registration since 2005, supporting the site's legitimacy. No suspicious or malicious indicators are present. The site is safe for general audiences, with no adult or questionable content. Strategically, the site effectively serves its governmental role with strong content quality and user trust. Enhancements in security transparency and incident response readiness would further strengthen its posture.

The Corrie-ten-Boom-Schule is a small, state-recognized private secondary school located in Berlin-Prenzlauer Berg, operated under the Christburg Campus umbrella. It offers integrated secondary education culminating in the Mittlerer Schulabschluss and Abitur, with a Christian pedagogical perspective. The website reflects a well-structured, content-rich platform targeting students, parents, and educators in the local community. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes a cookie consent mechanism and Matomo analytics for user tracking. Security posture is good with HTTPS enforced, but lacks visible security headers and explicit security policies. No privacy policy or terms of service pages were detected, indicating room for compliance improvement. Social media integration is strong, enhancing community engagement. WHOIS data aligns well with the website's claims, indicating legitimacy and stable domain registration.

Kita Bunte Burg is a small, Christian-oriented childcare provider in Berlin, operating since 2013 under the parent organization Christburg Campus. The website is professionally built using TYPO3 CMS and modern JavaScript libraries, providing good user experience and mobile optimization. The site includes social media integration and a cookie consent mechanism, but lacks explicit privacy and terms of service pages. Security posture is adequate with HTTPS and no visible vulnerabilities, though security headers could be improved. Overall, the site is trustworthy and well-positioned for its niche audience.

Elisabeth-Abegg-Grundschule is a private primary school in Berlin offering education for grades 1 to 6 with a Christian perspective. The website is built on TYPO3 CMS and integrates modern frontend technologies such as jQuery and Parsley.js for form validation. It features a clean, professional design with good navigation and mobile optimization. Social media presence and testimonials enhance trustworthiness. However, the site lacks explicit privacy policy, terms of service, and direct contact information, which are important for compliance and user trust. Security posture is good with HTTPS and no visible vulnerabilities, but security headers and incident response details are missing. Overall, the site is suitable for its educational audience and demonstrates moderate to good digital maturity.

Kita Helles Nest is a small, modern childcare facility in Germany focused on providing early childhood education with Christian values. The website is built on TYPO3 CMS and features a professional design with good navigation and mobile optimization. It integrates Matomo analytics and includes a cookie consent mechanism, though lacks explicit privacy and terms of service pages. Social media presence is strong, enhancing community engagement. Security posture is good with HTTPS enabled but could be improved by adding security headers and explicit security policies. No contact emails or phone numbers were found in the provided content, which may impact user trust and compliance. Overall, the site is trustworthy and well-positioned in its niche market.

The Sabine-Ball-Grundschule website represents a small private primary school in Germany with a Christian educational perspective. The site provides comprehensive information about the school, its pedagogical approach, enrollment procedures, and after-school care (Hort). The school targets parents and guardians of primary school children and positions itself as a nurturing and family-oriented institution. The website is built on TYPO3 CMS and uses modern web technologies including jQuery and Parsley for form validation, with Matomo for analytics, indicating a moderate level of digital maturity. The site is well-structured, mobile-optimized, and includes social media integration to engage the community. Security posture is adequate with HTTPS usage and no visible vulnerabilities, though security headers and explicit policies could be improved. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the website is professional, trustworthy, and safe for general audiences.

Immanuel-Kita is a small, specialized childcare provider in Germany focusing on Christian early childhood education. The website is professionally designed using TYPO3 CMS and integrates modern web technologies such as jQuery and Parsley.js for form validation. The site includes a cookie consent mechanism and uses Matomo for analytics, reflecting a moderate level of user tracking with privacy considerations. Social media integration is strong, linking to Facebook, Instagram, and YouTube, enhancing community engagement. However, explicit privacy policies and terms of service pages are not found, which could be improved for compliance and transparency. Security posture is good with HTTPS enforced but lacks advanced security headers and a public security policy or incident response contact. Overall, the website is trustworthy, content-rich, and well-positioned within its niche educational sector.

Immanuel-Grundschule is a small, private primary school in Germany with a Christian educational perspective. The website is built on TYPO3 CMS and integrates modern JavaScript libraries and Matomo analytics for user tracking. It offers detailed information about the school, its pedagogical approach, and related services such as after-school care (Hort). Social media presence is active with links to Facebook, Instagram, and YouTube. The site lacks an explicit privacy policy and visible contact emails or phone numbers, which are areas for improvement. Security posture is moderate with HTTPS enabled but missing security headers and no published security or incident response policies. Overall, the website is professional, trustworthy, and well-structured for its audience.

K

KINDERVEREINIGUNG® LEIPZIG e. V.

spielmobilprojekt.de

53

Spielmobilprojekt is a non-profit initiative under KINDERVEREINIGUNG® LEIPZIG e. V., providing mobile play services with their Spielmobile vehicles in various Leipzig neighborhoods. Their focus is on open, generational, and pedagogical play activities, supporting community engagement and youth work. The website is well-structured, informative, and targets families, children, and educators in Leipzig. Technically, the site is built on WordPress with modern plugins and includes cookie consent mechanisms, indicating a good level of digital maturity. Security posture is adequate with HTTPS and reCAPTCHA usage, though it lacks some advanced security headers and explicit security policies. Overall, the site is legitimate, trustworthy, and compliant with GDPR, with clear contact information and partner affiliations.

K

Kulturwerkstatt KAOS

kaos-leipzig.de

53

Kulturwerkstatt KAOS is a well-established non-profit cultural center based in Leipzig, Germany, focused on providing artistic and educational programs for children, youth, and young adults. Operating since 1992 under the KINDERVEREINIGUNG® Leipzig e.V., it offers a diverse range of courses, workshops, events, and community engagement activities. The organization enjoys strong local support from city and state cultural offices and maintains a clear digital presence with comprehensive content and contact information. Technically, the website is built on WordPress with modern plugins and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected, and privacy compliance is well addressed with GDPR-aligned policies. Overall, KAOS presents a trustworthy and professional online presence aligned with its community-focused mission.

K

Kompetenzzentrum Internationale Jugendarbeit und non-formale Bildung

kvleipzig-international.de

44

The Kompetenzzentrum Internationale Jugendarbeit und non-formale Bildung is a small non-profit organization based in Leipzig, Germany, focused on international youth work and non-formal education. The website presents a professional and consistent brand image, offering services such as youth exchanges, training seminars, and workshops. It targets youth and professionals in the youth work sector, supported by local and EU funding partners. Technically, the site is built on WordPress using modern themes and plugins, with good SEO and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is trustworthy and well-maintained, reflecting the organization's mission and activities effectively.

W

Wonderlink

wonderlink.de

58

Wonderlink is a German-based SaaS platform offering a GDPR-compliant 'Link in Bio' solution tailored for influencers, artists, entrepreneurs, and commercial social media users. It positions itself as a privacy-first alternative to competitors like Linktree by eliminating tracking and cookies and hosting exclusively on German servers. The platform supports legal compliance by integrating mandatory legal texts such as Impressum, Datenschutz, and AGB, appealing to commercial users concerned about regulatory adherence. With over 75,000 customers and endorsements from legal partners and media, Wonderlink holds a strong market position in the privacy-conscious segment of link management services. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and Lottie animations, delivering a fast, mobile-optimized, and accessible user experience. Hosting is managed via German-based DNS and servers, reinforcing its privacy claims. The site lacks some advanced security headers and a public vulnerability disclosure policy but maintains excellent SSL configuration and no tracking mechanisms, enhancing its security posture. From a security perspective, Wonderlink demonstrates strong GDPR compliance, no user tracking, and transparent privacy policies, making it suitable for privacy-sensitive users. However, the absence of incident response contacts and vulnerability disclosure mechanisms suggests room for improvement in security transparency and readiness. Overall, the site is professional, trustworthy, and well-aligned with its privacy-centric business model. The overall risk assessment is low, with no critical vulnerabilities or suspicious indicators detected. Strategic recommendations include publishing a security.txt file, enhancing security headers, and providing incident response contact details to further strengthen trust and security posture.

N

NEW WORK SE

onlyfy.jobs

70

onlyfy.io is a recruiting software platform operated by NEW WORK SE, a German technology company. The platform offers a SaaS solution enabling recruiters to post jobs to over 200 boards and manage candidate applications online. The website is professionally designed, integrates with the XING ecosystem, and uses modern analytics and engagement tools such as Matomo and Braze. The technical infrastructure is hosted on AWS with DNS managed via Amazon's DNS services. Security posture is moderate with HTTPS enforced and CSRF tokens in forms, but lacks DNSSEC and explicit security headers. Privacy and cookie policies are not publicly visible on the login page, indicating room for compliance improvement. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

O

OPUS Fashion

opus-fashion.com

50

OPUS Fashion is a well-established European women's fashion brand offering a wide range of casual and feminine clothing through its e-commerce platform. The company emphasizes sustainability, fair working conditions, and provides a seamless shopping experience with multiple payment options and international shipping. Technically, the website is built on modern frameworks such as Spryker and uses Storyblok CMS, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and security headers, though explicit security policies and incident response information are absent. The lack of WHOIS domain registration data is a concern but does not detract significantly from the professional presentation and trustworthiness of the site. Overall, the site is safe, compliant with GDPR, and targets a general audience interested in fashion.

Y

yomma GmbH

sqat.eu

55

SQAT is a service product of yomma GmbH focused on providing a barrier-free feedback mechanism for websites by translating German Sign Language videos into written language and vice versa. The service targets both website operators seeking to enhance accessibility and deaf users who prefer sign language communication. The website is professionally designed, uses modern WordPress infrastructure, and complies with GDPR and cookie consent regulations. It features partnerships with reputable German government and non-profit organizations, enhancing its credibility. Technically, the site employs common plugins and SEO tools, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent, though explicit security headers and incident response policies are not published. WHOIS data is unavailable due to privacy protection, but the domain and business information align with the website content and market positioning. Overall, SQAT presents a trustworthy and professional digital presence in the niche of accessibility services.

F

FH Münster

fh.ms

10

FH Münster is a well-established university of applied sciences in Germany, providing a range of degree programs and educational services primarily targeting students and the academic community. The website reflects a professional educational institution with a clear focus on higher education. The site offers key services such as course listings and a student portal (myFH-Portal), positioning itself as a regional higher education provider. The content is primarily in German with an option for English, catering to a broad academic audience. Technically, the website uses modern web technologies including JavaScript ES modules and CSS, with SVG graphics for branding. The site is moderately performant and optimized for mobile devices, though accessibility features are basic. Security is addressed with HTTPS and a Content-Security-Policy header, but additional security headers and policies are lacking. There is no evidence of analytics or advertising scripts, indicating a focus on privacy and minimal tracking. From a security perspective, the site demonstrates a good baseline with HTTPS and CSP but lacks comprehensive privacy policies, cookie consent mechanisms, and incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns well with the academic nature of the institution, showing consistent domain registration with German academic network name servers, supporting legitimacy. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, additional security headers, and published policies to improve user trust and regulatory adherence.

G

gastroevents GmbH & Co. KG

ulmmesse-catering.de

41

The website www.ulmmesse-catering.de represents gastroevents GmbH & Co. KG, a small hospitality business specializing in catering services for the Ulm Messe trade fair. The site provides information about catering offerings, job opportunities, and accommodation partnerships, targeting event organizers and visitors. The business operates locally with a clear focus on event catering and hospitality services. Technically, the website is built on WordPress using the Divi theme, with jQuery and a cookie consent plugin. Hosting is provided by cloudpit, as indicated by the nameservers. The site is moderately performant, mobile-optimized, and has basic accessibility and SEO features. Security posture is good with HTTPS enforced and a cookie consent mechanism, but lacks security headers and explicit security policies. Privacy compliance is strong with a clear privacy policy and GDPR-compliant cookie consent. Contact information is available with a physical address and company email. No social media or phone contact is explicitly provided. Overall, the site is professional, trustworthy, and safe for general audiences.

S

servier.bar - Self Ordering

servier.bar

67

servier.bar is a German-based digital ordering and payment platform tailored for the hospitality industry. The company offers self-ordering, kiosk, and webshop solutions that enable guests to order and pay via smartphones, aiming to reduce staff workload, minimize errors, and increase revenue. The website is professionally designed using WordPress with modern SEO and analytics integrations, targeting hospitality businesses in Germany. The technical infrastructure includes WordPress CMS, WPBakery Page Builder, Usercentrics for cookie consent, and analytics tools such as Matomo and Facebook Pixel. Security posture is moderate with HTTPS enabled and cookie consent implemented; however, the absence of security headers and explicit privacy and terms policies indicates room for improvement. Overall, the website is trustworthy and functional but lacks some compliance and security best practices.

The website 'Parken in Ulm' serves as an informational platform providing live updates on parking availability across multiple parking facilities in Ulm, Germany. It targets drivers and cyclists looking for parking options, offering real-time data, route guidance, and facility details. The business behind the site appears to be the Ulmer Parkbetriebs-GmbH, a local parking management entity. The site is well-branded, consistent, and provides clear contact information, enhancing its credibility. Technically, the site is built on the Odoo CMS platform and leverages modern web technologies including MapLibre GL for interactive maps and FontAwesome for icons. The site is mobile-optimized with good navigation and SEO practices. Hosting is managed via the d9t.de infrastructure, consistent with the domain's nameservers. Performance is moderate with no major technical issues detected. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks visible HTTP security headers and a cookie consent mechanism, which are areas for improvement. No forms or data collection points are present on the main page, reducing immediate data exposure risks. No incident response or security policies are published, which could be enhanced to improve trust. Overall, the website is safe, professional, and trustworthy with a solid business focus on transportation services. Strategic improvements in privacy compliance and security headers would elevate its security posture and regulatory adherence.

E

Evangelische Gesamtkirchengemeinde Ulm

ulmer-muenster.de

57

The Evangelische Gesamtkirchengemeinde Ulm operates the Ulmer Münster, serving as a religious and community organization in Ulm, Germany. The website provides comprehensive information about visiting hours, tours, church services, music ensembles, and community activities. It targets local residents, visitors, and church members, positioning itself as a key cultural and religious institution in the region. The business model is non-profit, focusing on community engagement and cultural preservation. Technically, the website is built on the ChurchDesk CMS platform, which is tailored for church organizations. It uses modern web technologies including JavaScript and jQuery, and integrates Cookiebot for GDPR-compliant cookie consent management. The site is hosted on servers associated with kasserver.com, with good mobile optimization and accessibility features. Performance is moderate, with a well-structured navigation system and SEO-friendly metadata. From a security perspective, the site enforces HTTPS and employs a robust cookie consent mechanism. However, explicit security headers are not detected, and no dedicated security policy or incident response information is published. There are no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with clear privacy and cookie policies in German, reflecting GDPR adherence. Overall, the website presents a low-risk profile with a professional and trustworthy online presence. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen security posture and trust.

D

DONAU 3 FM

donau3fm.de

58

DONAU 3 FM is a regional radio station serving the Schwaben region in Germany, providing music and important local news from cities such as Ulm, Neu-Ulm, Biberach, Günzburg, and Heidenheim. The website is professionally designed with consistent branding and targets local residents and listeners interested in regional content. The business model focuses on radio broadcasting and news dissemination, positioning itself as a key media outlet in its region. Technically, the website uses a modern technology stack including Google Tag Manager, Matomo Analytics, Google Adsense for advertising, and hCaptcha for bot protection. It is hosted on Hetzner servers, a reputable German hosting provider. The site is mobile optimized and SEO friendly, with structured data implemented for better search engine understanding. From a security perspective, the site enforces HTTPS and uses bot protection mechanisms. However, it lacks explicit security headers and does not provide visible security or incident response policies. Privacy compliance is basic, with no clear privacy or cookie policy pages found, although a cookie consent mechanism is present. No contact information for security or data protection officers is available. Overall, the website is safe, professional, and trustworthy for general audiences, with no adult or explicit content. The main risks relate to privacy compliance and security policy transparency, which could be improved to enhance user trust and regulatory adherence.

R

RADIO 7 Hörfunk GmbH & Co. KG

radio7.de

60

RADIO 7 is a regional private radio broadcaster based in Ulm, Germany, offering a variety of services including live radio streaming, podcasts, regional news, entertainment, and event ticketing. The website reflects a strong local media presence with multiple regional studios and a broad content offering targeting general audiences in southern Germany. The business model centers on media broadcasting and advertising, supported by partnerships with ticketing and advertising platforms. The site is professionally designed, mobile-optimized, and provides clear contact channels and social media integration. Technically, the website leverages modern JavaScript frameworks (Nuxt.js/Vue.js), integrates a consent management platform (Usercentrics), and uses Google Analytics and Tag Manager for analytics. Hosting and media assets are served via Amazon AWS infrastructure, ensuring good performance and scalability. The site demonstrates good SEO and accessibility practices. From a security perspective, the site enforces HTTPS, employs standard security headers, and anonymizes IP addresses in analytics. Consent mechanisms for cookies and privacy are implemented, aligning with GDPR requirements. However, no explicit security policy or incident response information is publicly available, and no vulnerability disclosure policy is found. The WHOIS data is minimal, lacking detailed registrant information, which slightly reduces trust but is not uncommon for media companies using managed DNS services. Overall, RADIO 7's website is a well-maintained, secure, and privacy-conscious platform that effectively serves its regional audience. Strategic improvements could include publishing dedicated security and incident response policies and enhancing transparency around vulnerability disclosures.

U

Ulmer City Marketing e.V.

ulmercity.de

61

Ulmer City Marketing e.V. is a local economic association dedicated to supporting and promoting the retail, service, hospitality, and gastronomy sectors in Ulm, Germany. The organization focuses on marketing the city center, organizing events, and managing voucher programs to enhance the local business environment. The website reflects a professional and consistent brand image, targeting local businesses and consumers with relevant content and services. Technically, the site is built on Webflow with modern animation libraries and includes cookie consent mechanisms, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and incident response information. Privacy compliance is partial due to missing explicit privacy and terms of service pages. Overall, the site is trustworthy and functional but could improve in compliance and security transparency.

V

VMV GmbH

vmvgmbh.com

10

VMV GmbH is a specialized event management company focused on organizing and marketing Volksfeste, markets, and related events primarily in the Ulm region of Germany. With nearly two decades of experience, the company positions itself as a trusted partner for municipalities and event organizers, offering comprehensive services from concept development to execution and marketing. The website reflects a professional and consistent brand image, emphasizing their expertise and long-standing event references. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Cookiebot for GDPR-compliant cookie management. Hosting is provided by Hetzner Online GmbH, a reputable German hosting provider. The site is mobile-optimized and performs moderately well, with room for improvement in accessibility and security headers. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Cookie consent is implemented thoroughly, reflecting good privacy compliance. However, the site lacks explicit security policies or incident response contacts, which could enhance trust further. Overall, VMV GmbH presents a credible and professional online presence with strong compliance and a clear business focus. Strategic improvements in security headers and incident response transparency are recommended to further strengthen their security posture and trustworthiness.

U

Ulm-Messe GmbH

ulm-messe.de

10

Ulm-Messe GmbH is a regional event venue and event management company based in Ulm, Germany. The company offers a wide range of event spaces and professional services for trade fairs, congresses, open-air events, and seasonal markets such as the Ulm Christmas market. Their strong local partnerships and comprehensive service offerings position them as a key player in the hospitality and event sector in southern Germany. The website is well-structured, professionally designed, and targets event organizers and businesses seeking venue rental and event coordination services. Technically, the site is built on RapidWeaver CMS using the Foundation framework and includes modern JavaScript libraries and a consent management platform, reflecting a moderate to advanced digital maturity. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are lacking. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information, supporting a positive business credibility profile.

B

BlaBlaCar

blablacar.de

11

BlaBlaCar is a leading European transportation platform specializing in ridesharing and long-distance bus travel. The website www.blablacar.de offers users a comprehensive and user-friendly interface to find and book affordable travel options across Europe, primarily targeting German-speaking customers. The platform emphasizes trust and safety through member verification and ratings, supported by modern identity verification technologies such as Onfido. The company maintains a strong digital presence with mobile apps and active social media channels. Technically, the site leverages modern web frameworks, cloud hosting, and integrates analytics and marketing tools to optimize user experience and business insights. Security posture is robust with HTTPS, CSP, and secure data handling practices, though explicit security policies and incident response contacts are not publicly detailed. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy business with a mature digital infrastructure.

Y

Your-Run GmbH

your-run.com

10

Your-Run GmbH operates a specialized community app focused on running and triathlon sports, offering a comprehensive event calendar, social community features, and detailed competition statistics. The business targets active runners and triathletes primarily in Germany but with a global event database. The company uses a freemium business model with a premium subscription unlocking advanced features. The website is professionally designed, mobile-optimized, and integrates modern SEO and performance tools.

R

RideBee

ridebee.com

10

RideBee is a German-based platform founded in 2012 that facilitates ride-sharing and sustainable commuting solutions primarily targeting commuters, companies, universities, and event organizers. The platform offers services including carpooling, bike-sharing, shuttle services, and features such as intelligent matching, digital payments, and in-app communication. The company positions itself as a niche player in the sustainable transportation sector within Germany, emphasizing environmental benefits and cost savings for users. Technically, the website is built on Angular 13 with integrations for Google Tag Manager and Hotjar for analytics and user behavior tracking. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the domain is secured with HTTPS, and domain registration is stable and consistent with the business history. However, the site lacks visible privacy and cookie policies, security.txt, and explicit contact information, which are areas for improvement. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security disclosures.

A

ASC Ulm/Neu-Ulm

asc-ulm-neu-ulm.de

10

ASC Ulm/Neu-Ulm is a well-established German sports club founded in 2011, focusing on running, swimming, and cycling training courses primarily to prepare participants for the Einstein-Marathon. The club offers a variety of courses and community events, serving approximately 2,000 members as of 2016. The website is professionally designed using WordPress and Elementor, providing rich content about training programs, events, and membership details. It integrates with partner event sites and promotes sustainability initiatives. Technically, the site uses modern web technologies and SEO tools but lacks explicit privacy and cookie policies, which are compliance gaps. Security posture is adequate with HTTPS but could be improved by adding security headers and formal policies. Overall, the site is trustworthy and serves its community well but should enhance privacy compliance and security best practices.

B

Bernd Hummel

eurotour25-28.de

10

EuroTour25–28 is a multi-year endurance and climate awareness project led by Ulm-based extreme athlete Bernd Hummel, aiming to connect key European regions through sporting challenges and sustainability advocacy from 2025 to 2028. The project is positioned as a niche initiative promoting European unity and environmental responsibility, supported by partners such as the Einstein-Marathon and Technische Hochschule Ulm. The website is built on WordPress using modern tools like Elementor and Yoast SEO, providing a good user experience with mobile optimization and clear navigation. However, it lacks critical compliance elements such as privacy and cookie policies, and no direct contact information is provided, which limits user trust and GDPR compliance. Security posture is generally good with HTTPS and no visible vulnerabilities, but the absence of security headers and incident response details are areas for improvement.

X-treme Battle is a small-scale event organizer specializing in obstacle and cross runs in Heroldstatt, Germany. The website provides detailed event information, registration links via a trusted third-party platform (Datasport), and multimedia content to engage participants. The site is built on WordPress using Themify Ultra theme and includes modern web technologies such as lazy loading and video embedding. Security posture is adequate with HTTPS and cookie consent, but lacks comprehensive security headers and formal privacy or terms policies. Contact information is limited to an email address, with no phone or physical address provided. Overall, the site is functional and professional for its niche audience but could improve compliance and security transparency.