Germany security reports

S

SUN Sportmanagement GmbH

ulmer-klimalauf.de

46

Ulmer Klimalauf is a virtual running event organized by SUN Sportmanagement GmbH, focused on climate protection through community participation. The event encourages participants to collect kilometers by running, walking, or hiking, supporting climate-related projects such as water supply initiatives in Uganda. The website is well-branded, professionally designed, and provides comprehensive information about the event, partners, and sustainability efforts. Technically, the site is built on WordPress with Elementor and uses Cloudflare DNS for performance and security. Security posture is good with HTTPS and no visible vulnerabilities, though security headers and cookie consent mechanisms could be improved. Contact information and privacy policies are clearly presented, supporting GDPR compliance. Overall, the site is trustworthy and serves its target audience effectively.

Y

yorkwachter

ulmer-muensterturmlauf.de

52

Ulmer Münsterturmlauf is a specialized event website promoting the annual tower running race held in Ulm, Germany. The site provides detailed event information, registration links, news updates, and partner information, targeting runners and sports enthusiasts. The business operates as a small, niche event organizer with a focus on local and regional participants, emphasizing sustainability and community engagement. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and SEO best practices. The site is hosted with Cloudflare DNS and uses HTTPS, ensuring secure connections. Security posture is good but could be improved with additional security headers and explicit privacy and cookie policies. No direct contact emails or phone numbers are published, relying on contact forms and newsletter signups. Overall, the website is professional, trustworthy, and safe for general audiences.

U

Ulmer Frauenlauf

ulmer-frauenlauf.de

54

Ulmer Frauenlauf is a regional event organizer focused on women's running events in southern Germany. The website provides comprehensive event information, partner promotion, and registration details, targeting female runners and sports enthusiasts. The site is built on WordPress with Elementor and uses modern SEO practices including structured data. Hosting and DNS are managed via Cloudflare, ensuring good performance and security at the infrastructure level. However, the site lacks explicit privacy and cookie policies, and no consent mechanisms are detected, which may pose compliance risks under GDPR. Security posture is moderate with HTTPS enforced but missing security headers and vulnerability disclosure. Overall, the site is professional and trustworthy but could improve privacy compliance and security transparency.

U

Ulmer Firmenlauf

firmenlauf-ulm-neu-ulm.de

53

The Ulmer Firmenlauf website represents a regional corporate running event organizer in southern Germany, focusing on the popular AOK Firmenlauf event. The site provides event information and branding but lacks comprehensive business and contact details. Technically, the website is built on WordPress with Elementor and uses Cloudflare DNS for performance and security. SEO is supported by Rank Math, and analytics are implemented via WordPress.com Stats. Security posture is moderate with HTTPS enabled but missing advanced security headers and policies. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is functional and professional but could improve transparency and security practices.

Datasport Germany GmbH operates a professional website focused on sports event timing and registration services, primarily targeting event organizers and participants in Germany. The company offers key services including event timing, registration management, live result publishing, and event organization support. The website is well-branded and consistent with the company's identity, reflecting a medium-sized business with a solid market position in the sports event sector. Technically, the website employs modern frameworks such as Bootstrap and Material Design Bootstrap, uses jQuery for interactivity, and leverages Cloudflare for DNS and CDN services. Analytics are handled via Matomo, indicating a moderate level of user tracking. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and uses Cloudflare services, but lacks explicit security headers and published security policies. Privacy compliance is addressed with clear privacy and cookie policies, though a cookie consent mechanism is absent. No incident response or vulnerability disclosure information is provided, which could be improved. Overall, the website is trustworthy, professional, and safe for general audiences, with no adult or questionable content. The domain registration data aligns with the business identity, supporting legitimacy. Strategic improvements in security policy transparency and privacy consent mechanisms would enhance compliance and trust.

anonystats.de is a small-scale, internal-use web analytics service focused on anonymous and GDPR-compliant web logging. The website content is minimal, indicating the service is not publicly marketed but used internally. The technical infrastructure is simple, leveraging Bootstrap for styling and a custom JavaScript analytics script. There is no evidence of complex CMS or third-party analytics services, reflecting a lightweight and privacy-conscious approach. Security posture is moderate; while no security headers or cookie consent mechanisms are detected, the absence of forms and minimal external dependencies reduce attack surface. The WHOIS data shows consistent domain registration and legitimate name servers, supporting the domain's trustworthiness. Overall, the website is safe, with no adult or questionable content, but lacks public business and contact information, limiting external trust signals.

S

SoftTec GmbH

softtec.de

63

SoftTec GmbH operates a professional website offering hotel software and cloud-based hotel management solutions primarily targeting the hospitality sector in Germany. The website is built on WordPress using Elementor and incorporates modern web technologies such as jQuery and WPRocket for performance optimization. The site is accessible without any WAF or security challenges, indicating a stable hosting environment. However, the website lacks explicit privacy and cookie policies, as well as clear contact information for security incidents or data protection officers, which are critical for GDPR compliance and user trust. Security best practices such as security headers are not evident, suggesting room for improvement in the security posture. Overall, the website presents a good business credibility and technical foundation but requires enhancements in privacy compliance and security transparency.

B

Bundesverband Deutscher Finanzberater e.V.

bdf24.de

54

The Bundesverband Deutscher Finanzberater e.V. (BDF) is a professional association representing financial advisors, investment consultants, insurance brokers, and related experts in Germany. The organization offers membership benefits including certifications, professional development, and a rating system to enhance the credibility and market position of its members. The website targets both finance professionals seeking membership and consumers looking for qualified advisors. Technically, the website employs a modern JavaScript stack with user consent management and Google Tag Manager for analytics, indicating a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements in security headers and incident response transparency are recommended. Overall, the site is professional, well-structured, and compliant with GDPR, supporting a trustworthy online presence for the association.

N

NOZ/mh:n MEDIEN

noz-mhn.de

44

NOZ/mh:n MEDIEN is a large regional media group in Germany offering a diverse portfolio of print and digital media products including newspapers, magazines, and audio content. The company positions itself as a leading regional news provider with a focus on delivering timely and valuable information to its audience. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. The technical infrastructure includes modern plugins and analytics via Matomo, hosted on servers associated with basecom.de. Security posture is solid with HTTPS and cookie consent mechanisms in place, though explicit security policies and incident response information are not published. Overall, the site is trustworthy and compliant with GDPR requirements.

R

Rheinische Post Mediengruppe

rheinischepostmediengruppe.de

59

Rheinische Post Mediengruppe is a major German media company ranked among the top five newspaper publishers in Germany. The company operates a broad portfolio including daily newspapers, advertising papers, digital media, radio, and specialized media, employing approximately 3,000 staff domestically and internationally. Their business model centers on regional and national media production and distribution, supported by various service offerings such as call centers, printing, IT, and logistics. The website reflects a professional corporate presence with consistent branding and comprehensive business information. Technically, the site is built on TYPO3 CMS with modern web technologies and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enabled and secure form handling, though some improvements are recommended in security headers and cookie consent mechanisms. Overall, the site is trustworthy and well-maintained, supporting the company's strong market position.

W

webbar GmbH

webbar.dev

58

webbar GmbH is a small technology company specializing in digital transformation services delivered as SaaS, focusing on empowering developers and CTOs within small to medium-sized businesses. Their offerings include CTO fellowship programs, DevOps and cloud-native consulting, and educational content via blogs and videos. The company positions itself as a niche provider in the German market, emphasizing cloud-native methodologies and digital innovation. Technically, the website is built using modern frameworks such as Next.js and React, with a clean, professional design optimized for mobile devices. The site loads with moderate performance and includes standard SEO meta tags and Open Graph data. However, no CMS or hosting provider details are explicitly detected. The site lacks visible analytics or tracking scripts, indicating a privacy-conscious approach. From a security perspective, the site enforces HTTPS but lacks several recommended security headers and does not provide explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service found. Overall, the website presents a professional and trustworthy front with room for improvement in security best practices and privacy compliance. Strategic enhancements in these areas would strengthen the company's digital trust and regulatory adherence.

N

netzwerk n e.V.

plattform-n.org

49

netzwerk n e.V. operates plattform n, a specialized online community platform dedicated to sustainability initiatives at German higher education institutions. The platform offers a comprehensive suite of collaboration and networking tools including real-time chat, document collaboration, file storage, event management, and a marketplace, all integrated within a user-friendly and open source environment. The organization positions itself as a non-profit entity focused on fostering sustainable development through digital community engagement. Technically, the website is built on WordPress with modern plugins and integrates open source tools like Rocket.Chat and Nextcloud, reflecting a mature and well-maintained infrastructure. Security posture is solid with HTTPS and reCAPTCHA usage, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is strong with clear policies and GDPR adherence, though cookie consent mechanisms could be enhanced. Overall, the platform demonstrates high professionalism, trustworthiness, and a clear mission aligned with its target audience of sustainability-focused academic groups.

A

ASW gGmbH

asw-berufsakademie.de

45

ASW gGmbH is a well-established educational institution based in Saarland, Germany, specializing in dual study programs and professional continuing education. The organization offers state-recognized and accredited bachelor degrees with a strong emphasis on practical and scientific learning. Their market position is supported by accreditations such as AQAS and recognition in the CHE ranking, positioning them as a reputable player in the education sector. The website targets prospective students and professionals seeking advanced training, providing comprehensive information and personalized counseling services. Technically, the website is built on TYPO3 CMS with Bootstrap 5, leveraging modern web technologies including jQuery and Leaflet.js for interactive maps. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience. Hosting is managed via DomainControl, and the site uses HTTPS with a cookie consent mechanism to comply with privacy regulations. From a security perspective, the site enforces HTTPS and includes cookie consent management, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Tracking is limited and consent-based, primarily using Google Tag Manager and OnSite tracking. Overall, the security posture is solid but could be enhanced by implementing additional security headers and formalizing incident response disclosures. The overall risk assessment is low, with the website presenting a professional, trustworthy, and compliant digital presence. Strategic recommendations include adding security headers, publishing a security policy, and introducing a vulnerability disclosure program to further strengthen trust and security culture.

The Justus-Liebig-Universität Gießen (JLU) is a large, well-established public university in Germany, offering a broad range of academic programs and conducting internationally recognized research. The website reflects a professional and comprehensive digital presence, targeting students, researchers, and academic partners. It leverages the Plone CMS platform with modern web technologies and integrates Matomo analytics for user tracking. Security posture is solid with HTTPS and secure forms, though improvements in security headers and published policies are recommended. Privacy compliance is partially met with a comprehensive privacy policy but lacks explicit cookie consent mechanisms. Overall, the site is trustworthy and well-maintained, supporting the university's strong market position in education and research.

V

Vitos GmbH

vitos.de

53

Vitos GmbH is a large, publicly supported healthcare and social services provider in Germany, specializing in psychiatric care, psychosomatics, neurology, orthopedics, and youth and disability assistance. The organization operates multiple subsidiaries and clinics, offering comprehensive treatment and support services. Their website is built on TYPO3 CMS and demonstrates a mature digital infrastructure with modern technologies such as jQuery, Matomo analytics, and Usercentrics for consent management. Security posture is strong with HTTPS enforcement and privacy compliance, although some security headers could be improved. Overall, the website reflects a professional and trustworthy organization with a clear focus on healthcare and social welfare. No critical vulnerabilities or suspicious activities were detected.

D

Databay AG

seminarcatalog.de

64

Databay AG operates the SeminarCatalog platform, a comprehensive seminar and e-learning management software tailored for educational providers in Germany. The platform integrates booking management, participant administration, CRM and payment interfaces, and offers a professional online shop experience. The company positions itself as a specialized provider in the education sector, focusing on seamless integration with ILIAS LMS and blended learning scenarios. The website is professionally designed, content-rich, and targets educational institutions and training providers seeking unified seminar management solutions. Technically, the site is built on TYPO3 CMS with Bootstrap, delivering a responsive and accessible user experience with moderate performance. Security posture is solid with HTTPS, captcha protection on forms, and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the domain registration aligns well with the company identity, indicating legitimacy and trustworthiness.

B

Berliner Philharmoniker

berliner-philharmoniker.de

59

The Berliner Philharmoniker website represents a prestigious cultural institution focused on classical music performances, education, and digital streaming services. The site offers comprehensive information about concerts, ticketing, educational programs, and related media, targeting a broad audience including families, youth, and classical music enthusiasts. The business model centers on live event ticket sales, digital content distribution, and educational outreach, supported by strong partnerships such as Deutsche Bank and dedicated streaming platforms. Technically, the website is built on TYPO3 CMS with modern JavaScript integrations, including Vimeo for video content and Usercentrics for GDPR-compliant consent management. The site is well-optimized for mobile and accessibility, with good SEO practices and a professional design. Security posture is solid with HTTPS and consent management, though explicit security headers and incident response policies are absent. Overall, the site is trustworthy, professional, and compliant with privacy regulations, though it lacks explicit privacy and terms of service pages in the analyzed content. Recommendations include enhancing security headers, publishing security policies, and providing clearer contact information for security and privacy concerns.

D

Deutscher Musikrat gGmbH / Bundesjugendorchester

bjo-alumni.de

54

The Bundesjugendorchester Alumni website serves as a dedicated networking and information platform for former members of the Federal Youth Orchestra in Germany. It provides alumni with tools to connect, access event information, subscribe to newsletters, and purchase merchandise. The platform is supported by the Deutscher Musikrat gGmbH and leverages a specialized CMS by Paulbergman GmbH (Alumnii). The site is well-structured, mobile-optimized, and integrates modern web technologies including Bootstrap, jQuery, and Matomo analytics. Security measures include HTTPS, CAPTCHA protection, and a comprehensive cookie consent mechanism. Privacy policies are detailed and GDPR compliant, with clear data protection officer contact information. However, no explicit terms of service or security policy pages were found.

DIE VIELEN is a German non-profit organization dedicated to promoting an open, solidaric, diverse, and democratic society. The website serves as a platform to present their advocacy campaigns, cultural projects, event calendar, and press resources. The organization targets a general audience interested in social justice and anti-right-wing extremism initiatives. The website is built on WordPress with modern frontend technologies such as Vue.js, indicating a moderate level of digital maturity. Hosting is managed via domaincontrol.com name servers, commonly associated with GoDaddy. From a security perspective, the website enforces HTTPS and uses secure form submission endpoints, but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No incident response or vulnerability disclosure information is provided. The site does not appear to use analytics or tracking services, suggesting minimal user tracking. Overall, the security posture is adequate but could be improved with additional headers and compliance documentation. The website content is safe for general audiences with no adult or questionable content detected. Navigation and design quality are good, providing a professional user experience. Contact options are limited to forms without direct email or phone contacts. The WHOIS data is minimal but consistent with a legitimate domain registration. No WAF or blocking mechanisms were detected, allowing full content access for analysis.

M

MITTELDORF CATERING LEIPZIG e. Kfm. Inh. Karsten Mitteldorf

mitteldorf-catering.de

51

Mitteldorf Catering Leipzig is a family-run catering business specializing in providing high-quality catering services for events ranging from small gatherings of 30 guests to large events with up to 3,000 attendees. The company emphasizes fresh, regional ingredients and offers a variety of buffet options tailored to customer preferences. Their market position is that of a reliable local catering partner in Leipzig, serving both private and corporate clients. Technically, the website is built on WordPress using the Divi theme and integrates several Google services such as Analytics, Maps, Fonts, and reCAPTCHA, indicating a mature digital infrastructure. Security measures include HTTPS, GDPR-compliant cookie consent, and spam protection on forms. However, explicit security policies and incident response contacts are not published. Overall, the website is professional, secure, and compliant with privacy regulations, supporting the company's credibility and trustworthiness.

R

RAIDBOXES GmbH

raidboxes.io

70

RAIDBOXES GmbH operates a professional managed WordPress hosting platform based in Germany, serving over 17,000 customers including notable brands. Their offerings include managed WordPress hosting, WooCommerce hosting, and high-traffic solutions, complemented by innovative features like an AI Site Assistant. The company demonstrates a strong market position with consistent branding and a comprehensive digital presence. Technically, the website is built on WordPress with modern Gutenberg blocks, integrates reputable third-party services for analytics and cookie compliance, and shows good performance and mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is well addressed with clear cookie consent and privacy policy. Overall, RAIDBOXES presents a trustworthy and mature business with a professional online presence.

K

KCWA

kcwa.de

65

KCWA is a small German-based communication agency specializing in marketing and communication services for technical products and brands. The company positions itself as a niche service provider helping technical brands achieve their goals in a connected world. The website is built on WordPress using a commercial Brooklyn theme, indicating a moderate level of digital maturity with a focus on professional presentation and usability. The technical infrastructure includes modern web technologies such as HTTPS, jQuery, and Google Fonts, hosted likely via GoDaddy's domain control services. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a compliance risk under GDPR. Overall, the website is professional and safe but would benefit from enhanced security and privacy measures.

R

RAIDBOXES GmbH

raidboxes.de

70

RAIDBOXES GmbH operates a professional WordPress hosting service based in Germany, targeting website creators, agencies, and WooCommerce users. The company offers managed hosting solutions optimized for WordPress performance, security, and sustainability, serving over 17,000 customers including notable brands. Their business model is subscription-based with tiered hosting plans and value-added services such as AI-assisted site creation. Technically, the website is built on WordPress with modern Gutenberg blocks, integrates SEO and cookie compliance tools, and uses Cloudflare DNS. The site is fast, mobile-optimized, and well-structured, reflecting a mature digital presence. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and vulnerability disclosures are absent. The domain registration data is consistent with the business claims, enhancing trustworthiness. Overall, the website demonstrates high professionalism, good privacy compliance, and a strong market position in the German WordPress hosting sector.

Bestattungen Hackmann is a small, family-owned funeral service provider based in Ibbenbüren, Germany, with a long tradition dating back to 1924. The company offers a comprehensive range of funeral-related services including hygienic care of the deceased, traditional and modern burial options, a dedicated farewell house, and funeral pre-planning. The website reflects a professional local business with clear service offerings targeted at residents of the Tecklenburger Land region. Technically, the site is built on the Contao CMS platform, utilizing common JavaScript libraries such as jQuery and Colorbox, hosted by Schlund Technologies. The website is mobile-optimized and provides a good user experience with clear navigation and contact options. Security posture is adequate with HTTPS enforced and a cookie consent mechanism in place, though security headers are missing and no explicit security or incident response policies are published. Overall, the site is trustworthy and compliant with GDPR requirements, but could improve in security best practices and transparency.

D

Deutscher Spendenrat e.V.

spendenrat.de

63

Deutscher Spendenrat e.V. is a well-established German non-profit umbrella organization focused on promoting trust and transparency in the donation sector. With over 70 member organizations and a recognized donation certification process audited by independent accountants, it serves as a key trust intermediary between donors and charitable organizations. The website reflects a mature digital presence built on WordPress, optimized for mobile and SEO, and includes comprehensive content about membership, certification, and reports. Technically, the site uses modern web technologies and implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and no exposed sensitive data, though some security headers and explicit security policies are absent. Overall, the domain registration data aligns well with the organization's history and legitimacy, supporting a high trust rating.

H

Hostsharing eG

hostsharing.net

59

Hostsharing eG is a German cooperative hosting provider established in 2000, specializing in community-owned cloud infrastructure and managed hosting services. The company emphasizes sustainability, digital sovereignty, and the use of free software, targeting organizations, businesses, freelancers, and associations seeking ethical and cooperative IT solutions. Their offerings include cloud servers, private clouds, managed webspace, container servers, and comprehensive IT consulting and operations services. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site is built using the Hugo static site generator with Bootstrap for responsive design and includes modern SEO and accessibility features. The infrastructure is supported by a Tier 3 data center with ISO certifications (9001, 27001, 50001), indicating a strong commitment to quality and security standards. The website uses HTTPS exclusively, but lacks some advanced security headers and a cookie consent mechanism, which are recommended for enhanced security and compliance. Security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and registration transparency. Despite this, the business information and contact details are clear and trustworthy, supported by certifications and detailed legal documentation. Overall, the site demonstrates a high level of professionalism and trustworthiness, though domain registration verification is advised. Strategic recommendations include implementing explicit security headers, adding a cookie consent banner to improve GDPR compliance, publishing a security policy and incident response information, and establishing a vulnerability disclosure program to enhance security transparency and user trust.

T

Transparency Deutschland

hochschulwatch.de

26

Hochschulwatch is a transparency-focused website operated under the auspices of Transparency Deutschland, a non-profit organization dedicated to exposing and preventing corruption, particularly in the context of German higher education institutions. The site currently serves as an informational resource highlighting the interconnections between business and academia in Germany. The homepage indicates the site is undergoing reconstruction and updates, limiting available content. Contact information is clearly provided, reinforcing organizational legitimacy. Technically, the website employs a simple and common technology stack including Bootstrap, jQuery, and LESS for styling. The site is mobile responsive and moderately performant but lacks advanced technical features such as CMS integration or analytics. No security headers or advanced security configurations are detected, and the site does not currently provide privacy or cookie policies, which impacts compliance and user trust. From a security perspective, the site uses HTTPS (assumed from URL scheme though not explicitly confirmed), but lacks security headers and formal policies related to privacy and incident response. No forms or data collection mechanisms are present, reducing immediate risk exposure. The WHOIS data is minimal but consistent with a legitimate small non-profit project. No WAF or blocking mechanisms are detected, and the content is safe for general audiences. Overall, the site scores moderately on AI evaluation due to limited content and missing compliance documentation. Strategic improvements in privacy policy publication, security header implementation, and enhanced content will improve trust and compliance posture.

S

Studentischer Akkreditierungspool

studentischer-pool.de

42

The Studentischer Akkreditierungspool website serves as an educational and organizational platform dedicated to involving students in accreditation processes within higher education in Germany. It offers seminars, workshops, and networking events targeted at politically active students interested in quality assurance and accreditation. The site is built on a WordPress CMS with a professional theme and uses modern web technologies such as Bootstrap and jQuery, providing a good user experience and mobile optimization. However, it lacks visible privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate with HTTPS enabled but missing key security headers and incident response information. Contact is available via a form but no direct emails or phone numbers are published. Overall, the site is legitimate and trustworthy but could improve compliance and security transparency.

B

BAS e.V.

bas-ev.de

56

BAS e.V. is a German non-profit organization dedicated to representing the interests of foreign and stateless students nationwide. The organization advocates for equal educational opportunities, organizes seminars, campaigns against tuition fees, and fosters solidarity among international students. Their market position is that of a national umbrella organization focused on education and student rights within Germany. The website is professionally maintained using WordPress with a modern tech stack and includes multilingual support, active content updates, and social media integration. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site is trustworthy, compliant with GDPR, and serves its target audience effectively.

A

Aktionsbündnis gegen Bildungs- und Studiengebühren

abs-bund.de

50

Aktionsbündnis gegen Bildungs- und Studiengebühren is a German non-profit advocacy organization focused on abolishing tuition fees for international and second-time students in Baden-Württemberg. The website serves as a platform for publishing position papers, press releases, and petitions to influence education policy. The organization targets students, policymakers, and activists interested in education equity. Technically, the site is built on WordPress using the Courage theme, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and content-rich, supporting its advocacy mission effectively.

L

Lernfabriken ...meutern

lernfabriken-meutern.de

53

Lernfabriken ...meutern is a German non-profit educational alliance focused on addressing systemic issues in education through campaigns, events, and political networking. The website serves as a platform to disseminate information, organize events such as Summer Schools, and engage a broad audience including students, educators, and social workers. Technically, the site is built on WordPress with modern front-end technologies and plugins, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled, but lacks important security headers and visible privacy compliance mechanisms. Contact information is limited to email, with active social media channels enhancing outreach. Overall, the site is legitimate and consistent with its mission but would benefit from improved privacy and security practices.

F

freie zusammenschluss von student*innenschaften (fzs) e.V.

contre-le-racisme.de

48

Festival contre le Racisme is a German non-profit campaign platform organized by recognized student organizations (fzs and BAS) to facilitate anti-racism events and activism within university communities. The website serves as a hub for event organization, resource sharing, and networking, targeting students and academic institutions. Technically, the site is built on WordPress with standard plugins and hosted by Manitu, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS and email obfuscation, but lacks advanced security headers and incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professionally maintained but could improve in security and privacy transparency.

E

EWIVS Certification

ewivs.com

38

EWIVS Certification is a specialized certification provider focusing on person certifications according to ISO 17024, targeting experts and assessors primarily in Germany and Europe. The company offers transparent, practice-oriented certification processes with personal support and a money-back guarantee for pre-checks, positioning itself as a trusted niche player in the certification market. Technically, the website is built on WordPress using the Divi theme, with modern SEO and cookie consent implementations, and moderate performance and mobile optimization. Security posture is good with HTTPS and cookie consent but lacks some advanced security headers and explicit incident response information. The absence of WHOIS registration data raises legitimacy concerns, though the professional website content and structured data suggest a legitimate business. Overall, the site scores well on content quality and technical implementation but could improve business credibility and security transparency.

C

Cronon GmbH

cronon.net

52

Cronon GmbH is a well-established German company specializing in managed cloud and hosting services, offering tailored IT solutions including managed business and private clouds, container services, and managed security. The company positions itself as a trusted technology and service partner for enterprises undergoing IT transformation, emphasizing personalized support and ISO 27001 certified infrastructure. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service descriptions targeting business customers in Germany. Technically, the site is built on WordPress with modern plugins and uses Matomo for privacy-conscious analytics. Security posture is solid with HTTPS and certified data centers, though improvements like DNSSEC and security headers are recommended. Privacy compliance is generally good but lacks a cookie consent mechanism, which is a notable gap. Overall, the site is credible, professional, and trustworthy, supporting Cronon's market position as a specialist in enterprise IT services.

B

Bundesverband Deutscher Finanzberater e.V.

bundesverband-deutscher-finanzberater.de

58

The Bundesverband Deutscher Finanzberater e.V. (BDF) is a professional association representing financial, asset, and investment advisors in Germany. It acts as a political and professional voice for its members, providing certification, rating services, and continuing education. The website serves multiple audiences including financial experts seeking certification, consumers looking for certified advisors, and media professionals. The organization positions itself as a leading association in the German finance advisory sector with a focus on independence and quality standards. Technically, the website is built on the IONOS MyWebsite platform, using standard JavaScript libraries and CDNs, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response disclosures. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

K

Key-Systems GmbH

key-systems.net

60

Key-Systems GmbH is a German-based company specializing in domain registration and management services. The company operates multiple portals including domaindiscount24 for end customers, CentralNic Reseller for ISPs and domain investors, and BrandShelter for corporate domain management. The website is professionally designed, targeting domain investors, ISPs, and corporate clients, positioning itself as a trusted domain expert in the technology sector. The company maintains a consistent brand presence and offers comprehensive product offerings in the domain services market. Technically, the website runs on WordPress with modern plugins and themes, ensuring good mobile optimization and SEO practices. Security posture is solid with HTTPS enabled and secure form handling, though it lacks some advanced security headers and explicit incident response information. Privacy compliance is addressed with detailed privacy and cookie policies, though no explicit cookie consent mechanism is detected. The absence of WHOIS data for the domain is a notable anomaly that reduces trustworthiness, though the website content and branding strongly indicate a legitimate business. Overall, the site scores well on content quality, technical implementation, and business credibility, with room for improvement in security headers and privacy consent mechanisms.

K

KielRegion GmbH

mokwi.de

48

KielRegion GmbH operates the MokWi platform, a regional government-backed initiative focused on providing free, sustainable, and community-oriented digital collaboration tools for projects in the KielRegion of Germany. The platform facilitates project management, networking, and visibility for local initiatives, emphasizing non-profit and sustainable development. The website is professionally designed, well-structured, and targets community groups and organizations within the region. Technically, the site is built on WordPress with modern plugins for SEO, cookie consent, and analytics, hosted on Dogado servers. Security posture is strong with HTTPS, cookie consent management, and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is robust, with clear privacy and cookie policies and GDPR adherence. Overall, the site reflects a trustworthy, professional regional government initiative with good digital maturity and community focus.

Mergelsberg Media is a small digital media and advertising agency based in the Westmünsterland region of Germany. The company focuses on providing digital marketing and media services to local businesses and clients. The website is professionally designed using WordPress CMS and integrates modern tools such as Google Tag Manager and Cookiebot for consent management. The content is primarily in German and targets regional audiences seeking digital advertising solutions. Technically, the site uses standard WordPress plugins and frameworks, with moderate performance and basic accessibility features. Security practices include cookie consent management and Google Consent Mode, but lack explicit security headers and incident response information. The WHOIS data is privacy protected, which is typical for small businesses, and no suspicious patterns were detected. Overall, the website presents a trustworthy and professional digital media agency with room for technical and security improvements.

I

Interdependence GmbH

hotelshop.one

51

HOTELSHOP.one is a German-based e-commerce platform operated by Interdependence GmbH, specializing in selling high-quality hotel products such as beds, mattresses, bedding, and care products for home use. The business targets consumers seeking premium hotel-quality items and also offers B2B services. The website is built on the Shopware CMS platform and integrates modern e-commerce technologies including Google Tag Manager, reCAPTCHA v3, and Trusted Shops certification to enhance trust and security. The site is mobile-optimized with good navigation and user experience, supporting a medium-sized retail operation founded in 2016. Security posture is generally good with HTTPS and anti-bot measures, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is limited due to the absence of explicit privacy and cookie policies in the provided content. Overall, the domain registration is consistent and trustworthy, matching the business entity and country.

B

BWH Hotels Central Europe GmbH

bestwestern.de

72

Best Western Hotels & Resorts Germany (operated by BWH Hotels Central Europe GmbH) is a large hospitality company offering online booking for over 200 hotels across Germany, Austria, Switzerland, and Luxembourg. The website provides detailed hotel information, booking capabilities, and loyalty program access, targeting travelers in Central Europe. Technically, the site uses a custom CMS with modern JavaScript libraries, Google reCAPTCHA for bot protection, and consent management tools to comply with GDPR. Accessibility is a strong focus, with an extensive accessibility tool integrated. Security posture is good with HTTPS and consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

S

SoftTec GmbH

hotels-online-buchen.de

62

SoftTec GmbH operates a professional website offering hotel software and cloud hotel program solutions targeted at the hospitality industry in Germany. The website is built on WordPress using Elementor and jQuery, indicating a modern and maintainable technical infrastructure. The site is accessible without any WAF or security challenges, and the content is relevant and professionally presented. However, the website lacks explicit privacy, cookie, and terms of service policies, which are critical for GDPR compliance and user trust. Security headers and incident response information are also missing, which could be improved to enhance the security posture. Overall, the website demonstrates a moderate level of digital maturity with room for improvement in privacy and security compliance.

D

Donaubüro gemeinnützige GmbH

donaufest.de

49

The Donaufest website represents a well-established international cultural festival organized by the Donaubüro gemeinnützige GmbH in Germany. It showcases a rich program of cultural events spanning ten days and involving ten countries along the Danube River. The festival emphasizes cultural exchange, artistic performances, and family-friendly activities, positioning itself as a significant cultural event in the region with recognition such as the EFFE Label. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and Cloudflare for DNS and CDN services. The site is mobile-optimized and presents good design and navigation, although accessibility could be improved. Security posture is strong with HTTPS and security headers in place, but lacks visible cookie consent and formal security policies. Overall, the site is trustworthy and professional, though it would benefit from enhanced privacy compliance and clearer contact information.

U

Ulmer Volksfest | Das Familien-Volksfest

ulmer-volksfest.de

48

Ulmer Volksfest is a German family festival event website providing information about the Ulmer Volksfest, a traditional family-oriented festival. The site targets local families and visitors interested in festival events. It is built on WordPress and uses modern tools such as Cookiebot for cookie consent management and Google Analytics for visitor tracking. The website demonstrates good technical maturity with responsive design and SEO optimization, although some security headers are missing. The security posture is solid with HTTPS enabled and no visible vulnerabilities, but could be improved by adding security headers and explicit privacy and terms of service pages. Overall, the website is trustworthy and professional, serving its purpose effectively as an event information portal.

The website www.schwoermontag.com serves as an informational portal dedicated to the Ulmer Schwörmontag and the associated Schwörwoche events. It provides visitors with event details, historical context, and multimedia content to engage local residents and tourists interested in these cultural festivities. The site monetizes primarily through advertising and affiliate ticket sales, positioning itself as a niche local event information provider. Technically, the site employs a standard web stack including Bootstrap and jQuery, with Google Adsense and other ad networks integrated alongside a consent management platform to ensure GDPR compliance. Security posture is moderate, with HTTPS implied but lacking explicit security headers and documented incident response channels. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content appears legitimate and professional. Overall, the site offers a good user experience with clear navigation and relevant content but would benefit from enhanced security practices and verified domain registration.

U

Ulmer Zelt

ulmerzelt.de

46

Ulmer Zelt is a regional cultural event organizer based in Germany, hosting summer music and cultural festivals near the Ausee and Donau rivers. The website serves as an information hub for event programs, ticket sales, and visitor information, targeting a general audience including families and music enthusiasts. The business operates primarily as an event organizer with a focus on community engagement and cultural experiences. Technically, the website is built on WordPress with modern plugins such as Modern Events Calendar and Easy Video Player, and uses the Astra theme with SEO optimization via Rank Math. The site is mobile-optimized and performs moderately well, though some accessibility features could be improved. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks security headers and formal security policies. Privacy compliance is minimal, with no visible privacy or cookie policies, which is a notable gap. Overall, the site is professional and trustworthy for its purpose but would benefit from enhanced privacy and security measures.

Ulmer Weihnachtscircus is a small regional event organizer specializing in an annual Christmas circus show in Ulm, Germany. The website provides detailed information about the event schedule, ticket sales, and partners, targeting families and local visitors. The business has a solid regional presence with longstanding tradition and partnerships with local media and sponsors. Technically, the website uses outdated technologies such as jQuery 1.2.3 and Flash, lacks HTTPS enforcement, and does not implement modern privacy or security standards. Security posture is weak due to missing HTTPS, lack of security headers, and use of deprecated libraries. Privacy compliance is minimal with no cookie consent or GDPR indicators. Overall, the site is functional but requires modernization and security improvements to meet current standards.

U

Ulm-Messe GmbH

ulmer-weihnachtsmarkt.de

66

The Ulmer Weihnachtsmarkt website represents a traditional and well-established Christmas market event in Ulm, Germany, organized by Ulm-Messe GmbH. The site provides comprehensive information about the event, including vendor details, tourist information, and partner links, targeting families, tourists, and local visitors. The business model focuses on event hosting and local commerce promotion, positioning itself as a notable cultural and seasonal attraction in the region. Technically, the website is built on RapidWeaver CMS using the Foundation framework, integrating modern technologies such as Usercentrics for GDPR-compliant cookie consent and Google Analytics 4 for visitor tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses consent-based analytics loading but lacks explicit security headers and a vulnerability disclosure policy. Overall, the domain registration data aligns with the website content, indicating legitimacy and transparency. The website is safe for general audiences with no adult or questionable content detected.

E

Einstein-Marathon

einsteinmarathon.de

55

Einstein-Marathon is a well-established sports event organizer focusing on one of the largest running events in southern Germany, attracting over 15,000 participants. The website provides comprehensive information about the event, including registration, race details, results, and partner collaborations. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and Cloudflare DNS for performance and security. The security posture is adequate with HTTPS and no visible sensitive data exposure, but lacks advanced security headers and formal privacy and cookie policies, which are critical for GDPR compliance. Overall, the site is professional and trustworthy but should improve privacy compliance and security disclosures to enhance user trust and regulatory adherence.

The website kulturnacht-ulm.de serves as the official portal for the Kulturnacht Ulm/Neu-Ulm 2025 cultural event, providing visitors with information about the event's schedule, partners, and participation opportunities. The site targets a broad audience including families and culture enthusiasts in the Ulm and Neu-Ulm region. The business model centers on event organization and cultural promotion, positioning itself as a regional cultural event organizer. Technically, the site uses traditional web technologies including JavaScript and CSS with custom scripts for image galleries and UI elements. The site lacks modern CMS or frameworks and shows basic mobile and accessibility support. Security posture is limited with no detected security headers or cookie consent mechanisms, and no explicit contact or incident response information is available on the main page. The domain's WHOIS data and name servers indicate local institutional hosting, supporting legitimacy. Overall, the site is functional and content-rich but would benefit from enhanced security and privacy compliance measures.