Germany security reports

D

D+H Verwertung Gmbh

dh-verwertung.de

50

D+H Verwertung Gmbh is a German company specializing in waste management, recycling, and container rental services. The company targets businesses and individuals in the Kamp-Lintfort region and offers a range of services including acceptance and delivery catalogs, container ordering, and environmental protection consulting. The website presents a professional and consistent brand image with clear contact information and legal documentation, supporting its credibility in the regional market. Technically, the website employs modern frontend technologies such as Alpine.js and Tailwind CSS, hosted on Strato servers. The site is mobile-optimized and uses HTTPS with appropriate security headers, indicating a good level of digital maturity. However, there is no visible cookie consent mechanism or advanced analytics, suggesting room for improvement in privacy compliance and data transparency. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and CSRF token usage, but lacks published security policies or incident response contacts. No vulnerabilities or suspicious patterns were detected in the provided content. Overall, the security posture is solid but could be enhanced by formalizing policies and improving user privacy controls. The overall risk assessment is moderate with a recommendation to implement cookie consent, publish security and incident response policies, and consider adding a vulnerability disclosure framework. These steps would improve compliance, user trust, and security readiness, aligning the company with best practices in digital governance.

CURANTO is a German container rental service specializing in providing containers for construction debris, bulky waste, and garden waste. The company targets both private and business customers, positioning itself as a reliable and cost-effective service provider with TÜV certification enhancing its trustworthiness. The website is professionally designed using modern web technologies such as Nuxt.js and Vue.js, hosted on maxcluster infrastructure, and optimized for mobile devices. Tracking and analytics tools like eTracker and Google Tag Manager are implemented with a cookie consent mechanism via Cookiebot, indicating basic privacy compliance. Security posture is adequate with HTTPS enabled, but lacks explicit security policies and some security headers. Overall, the domain registration and website content are consistent and legitimate, reflecting a medium-sized transportation sector business.

The website at egn-eanv.de currently serves as a simple directory listing with minimal content and no visible business or policy information. The lack of privacy, cookie, or terms of service policies, as well as absence of contact details, indicates a very basic web presence likely intended for internal or limited use. The domain is hosted on Vodafone IP name servers in Germany, suggesting a legitimate hosting environment but no further business identity is discernible from the site content or WHOIS data. Technically, the site exposes directory listings which pose a security risk by revealing internal folder structures. There is no evidence of HTTPS enforcement or security headers, and no analytics or tracking technologies are detected. Overall, the site demonstrates poor content quality, minimal technical sophistication, and weak security posture.

D

designverign GmbH

designverign.de

61

designverign GmbH is a well-established marketing and design agency based in Düsseldorf, Germany, operating since 1996. The company specializes in strategy, corporate design, e-commerce solutions including Onlineshop development, and performance marketing services targeting B2B clients and manufacturers. Their market position is solid within the German E-commerce and marketing sectors, offering comprehensive digital and offline branding solutions. The website reflects a professional and consistent brand image with clear service offerings and client references.

F

FORTYEIGHT

fortyeight.agency

70

FORTYEIGHT is a professional marketing agency based in Münster, Germany, specializing in brand identity, web design, and performance marketing tailored for medium-sized businesses in the Münsterland region. The company positions itself as a trusted partner with over 150 clients served in the past decade, emphasizing authentic communication and transparent collaboration. Their service offerings include brand development, website creation, and targeted online campaigns, focusing on delivering measurable results for their clients. Technically, the website is built on the Webflow platform, leveraging modern technologies such as Matomo for analytics and CookieFirst for consent management, ensuring a privacy-conscious and performant user experience. The site is well-optimized for mobile devices and demonstrates excellent design and navigation clarity. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms but lacks some recommended security headers and does not publicly disclose incident response or security policies. The WHOIS data is malformed and unavailable, which slightly reduces domain trustworthiness, but the professional presentation and certifications mitigate this concern. Overall, the website reflects a mature digital presence with room for improvement in security transparency and domain registration clarity.

D

Digital Hub münsterLAND e.V.

muensterland.digital

53

Digital Hub münsterLAND e.V. is a regional digital innovation community based in Münster, Germany, focused on fostering collaboration between SMEs, startups, and tech professionals. The organization offers a variety of services including startup matching, accelerator programs, coworking spaces, and events to support digital business model development and innovation in the Münsterland region. The website reflects a well-established community hub with active engagement through events, stories, and newsletters. Technically, the website employs modern web technologies such as Bootstrap, Font Awesome, and Matomo analytics, ensuring a responsive and user-friendly experience. Security posture is moderate with cookie consent and CSRF tokens implemented, but lacks explicit security headers and public incident response policies. WHOIS data is unavailable, which slightly impacts domain trustworthiness, but the professional presentation and active social presence support legitimacy. Overall, the site is well-designed, content-rich, and serves its target audience effectively.

The Oskar-Patzelt-Stiftung operates the website mittelstandspreis.com, which promotes and manages the "Großer Preis des Mittelstandes," Germany's premier economic award for medium-sized enterprises. The foundation focuses on recognizing outstanding achievements of the Mittelstand, fostering regional marketing, and building a strong network of nominated and awarded companies. The website is well-structured, content-rich, and targets medium-sized businesses and economic stakeholders in Germany. The business model is non-profit, emphasizing economic development and recognition rather than commercial sales. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies including jQuery, Bootstrap, and Google Analytics with privacy-conscious configurations such as IP anonymization. The site is mobile-optimized and includes GDPR-compliant cookie consent mechanisms. However, some security best practices like security headers and published incident response policies are missing, which could be improved. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent, but lacks visible security headers and formal security policies. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional and consistent website content. Overall, the site presents a moderate security posture with room for improvement. Strategically, the foundation should address the WHOIS inconsistency, enhance security headers, and publish clear security and incident response policies to improve trust and compliance. The website is a credible and professional platform for its purpose but would benefit from technical and security enhancements to align with best practices.

Z

Zeppelin Rental

zeppelin-rental.de

65

Zeppelin Rental is a large German company specializing in the rental of machinery, equipment, and temporary infrastructure solutions primarily for business customers in the construction and transportation sectors. The website presents a professional and well-structured digital presence, offering detailed product categories and rental assistance tools. The technical infrastructure is based on Drupal CMS with modern JavaScript libraries and includes compliance with GDPR through cookie consent mechanisms. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not published. Overall, the website is trustworthy and well-positioned in its market segment.

V

Viega

viega.de

72

Viega Deutschland operates a professional and comprehensive website focused on plumbing, heating, and building technology products and services. The company positions itself as an established leader in energy-efficient and hygienic building solutions, targeting professionals and businesses in the construction and building services sector. The website is built on a mature technical infrastructure leveraging Adobe Experience Manager and Adobe Analytics, with GDPR-compliant consent management via Usercentrics. Security posture is good with HTTPS and tracking controls, though explicit security policies and contact information for incidents are not publicly visible. Overall, the site is well-designed, user-friendly, and trustworthy, supporting Viega's market position as a quality manufacturer and service provider in the energy and manufacturing sectors.

F

Finow Automotive Eberswalde GmbH

finowautomotive.de

47

Finow Automotive Eberswalde GmbH is a medium-sized German manufacturing company specializing in the production of chassis and structural components for the automotive and supplier industry. Founded in 1999 and based in Eberswalde near Berlin, the company operates as a Tier I and Tier II supplier, offering advanced manufacturing technologies such as laser cutting, hydroforming, and various welding techniques. The website reflects a professional and consistent brand image targeting automotive industry clients. Technically, the site uses modern frameworks like Foundation and integrates privacy-conscious analytics via Matomo alongside a Usercentrics consent manager, indicating a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent but lacks advanced security headers and explicit incident response information. Overall, the site is trustworthy, well-structured, and compliant with GDPR, though it could improve transparency around security policies and vulnerability disclosures.

E

egeplast international GmbH

egeplast.de

50

egeplast international GmbH is a medium-sized German manufacturer specializing in innovative plastic piping systems for the transport of water, gases, data, and electricity. With a presence in over 30 countries, the company serves industrial and infrastructure clients, positioning itself as a reliable and innovative player in the energy and transportation sectors. The website reflects a professional and well-branded digital presence, supporting multiple languages and optimized for SEO and mobile devices. Technically, the site is built on WordPress with modern plugins and frameworks, hosted by a reputable provider, and implements HTTPS with good security practices including reCAPTCHA and cookie consent mechanisms. However, it lacks a dedicated security policy or vulnerability disclosure page, which could improve transparency and incident response readiness. Overall, the domain registration and WHOIS data align well with the company's profile, indicating legitimacy and trustworthiness.

E

ETAPART AG

etapart.com

63

ETAPART AG is a specialized company focused on providing innovative and energy-efficient hall heating solutions primarily for industrial, sports, and workshop halls. With over 30 years of experience, the company offers services including planning, installation, renovation, and maintenance of decentralized heating systems. The website is professionally designed, content-rich, and targets B2B customers in the energy sector within Germany. Technically, the site is built on TYPO3 CMS and integrates modern tools such as Google Tag Manager and reCAPTCHA for analytics and bot protection. Security posture is good with HTTPS enabled, but lacks some security headers and explicit privacy and cookie policies. WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy despite the professional online presence. Overall, the site is trustworthy and well-positioned in its niche but should address privacy compliance and domain registration transparency to enhance trust.

F

FMF-WWF Werkzeug- und Prototypenbau GmbH

fmf-wwf.de

40

FMF-WWF Werkzeug- und Prototypenbau GmbH is a medium-sized German manufacturing company specializing in automotive prototyping, tooling, and mechanical processing. The company serves automotive manufacturers with a range of services including development, construction, prototype and tool building, model and fixture construction, and quality assurance. Their market position is that of an established partner in the automotive supply chain, emphasizing precision and quality. Technically, the website is built on WordPress with Bootstrap and jQuery, featuring responsive design and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy with clear contact information and partner references.

D

Delfi Group

delfigroup.de

41

Delfi Group is a medium-sized manufacturing and technology company specializing in Electronics Manufacturing Services (EMS) and product development. They operate production and development sites across Europe and Asia, focusing on high-quality system development, mechanical and electronic manufacturing, and after-sales services. The company emphasizes ecological footprint and local production strategies, serving primarily small and medium enterprises. The website is built on WordPress with Elementor, featuring a professional design and good user experience, though lacking visible contact details and cookie consent mechanisms. Security posture is adequate with HTTPS enabled but could be improved with additional security headers and incident response information. Overall, the site reflects a credible and established business with strong quality certifications but has room for enhanced privacy compliance and security transparency.

B

Bernd Münstermann GmbH & Co. KG

muenstermann.com

50

Bernd Münstermann GmbH & Co. KG is a well-established German manufacturer specializing in custom machinery and solutions for thermoprocess technology, material handling, air purification, automation, and robotics. The company serves industrial clients across various sectors including insulation materials, catalysts, steel processing, and cable manufacturing. With a domain age dating back to 1997 and a subsidiary in the USA, Münstermann holds a strong market position as a leading German special machinery provider. The website reflects a professional and consistent brand image with comprehensive business information and reference projects. Technically, the site is built on Joomla CMS, uses modern JavaScript libraries like GLightbox, and integrates Matomo analytics for privacy-conscious user tracking. However, it lacks some security headers and a cookie consent mechanism, which are areas for improvement. The security posture is solid with HTTPS and domain transfer protection, but DNSSEC is not enabled. Overall, the site is accessible, well-structured, and trustworthy, supporting the company's credibility and business operations.

O

Olsberg GmbH

olsberg.com

57

Olsberg GmbH is a historic German family-owned manufacturing company with over 440 years of history, specializing in three main business units: casting technology, heating technology, and fine sheet metal technology. The company offers customized, high-precision products and solutions serving various industrial sectors. The website reflects a professional and consistent brand image, supported by multiple subsidiary domains and active social media presence. Technically, the site is built on WordPress with modern libraries and frameworks, providing a good user experience and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. The lack of WHOIS transparency slightly reduces trust but does not outweigh the strong business signals and compliance with GDPR. Overall, the site is well-maintained and credible.

P

PRÄZI GROUP

praeziflachstahl.de

54

PRÄZI GROUP is a well-established manufacturing company specializing in precision flat steel products since 1904. The website reflects a professional B2B industrial focus with multilingual support and modern digital infrastructure. The company maintains a consistent brand presence and targets industrial clients primarily in Germany and possibly broader European markets. Technically, the site is built on WordPress with contemporary plugins such as Cookiebot for consent management and Weglot for translations, indicating a mature digital presence. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published security policies. Privacy compliance is partially met with cookie consent but no visible privacy policy or terms of service on the homepage. Overall, the website is trustworthy and professional but could improve transparency and security documentation.

V

Viessmann

viessmann.de

51

Viessmann is a well-established German company specializing in energy-efficient heating, cooling, and ventilation systems with a strong emphasis on renewable energy and sustainability. The website demonstrates a mature digital presence with comprehensive product and service information targeting both private customers and professional clients. Technically, the site uses modern web technologies including Adobe Experience Manager CMS, Google Tag Manager, and Usercentrics for consent management, indicating a high level of digital maturity. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security policies and vulnerability disclosures are absent. Overall, the site is professional, trustworthy, and aligned with industry best practices, supporting Viessmann's market position as a leader in climate and energy solutions.

A

Ambros Schmelzer & Sohn GmbH

a-schmelzer.com

51

Ambros Schmelzer & Sohn GmbH is a medium-sized German manufacturing company specializing in metal processing and the production of modular pipe systems, agricultural technology, plant construction, assembly, and related services. The company targets industrial clients and operates a professional e-commerce platform to support its business-to-business model. The website reflects a well-established business with consistent branding and comprehensive service offerings. Technically, the website is built on WordPress with WooCommerce, enhanced by modern performance and privacy tools such as WP Rocket and Usercentrics CMP. Analytics are implemented via Google Analytics and Matomo, indicating a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although there is room for improvement in public security policy disclosures and incident response information. The WHOIS data is missing or inaccessible, which slightly reduces trust but does not negate the professional presentation and business legitimacy. Overall, the website is secure, compliant with GDPR, and professionally maintained.

T

Terrascope

terra-scope.de

41

Terrascope is a German-based company specializing in national infrastructure expansion, particularly in broadband and telecommunications sectors. The company offers comprehensive project management services including turn-key solutions, vendor management, B2B agency services, IT solutions, and fleet management. Their website reflects a professional and consistent brand image, targeting businesses and municipalities involved in infrastructure projects. Technically, the website is built on WordPress using Elementor and Yoast SEO, hosted likely on netcup servers, and employs HTTPS with a valid SSL certificate. The site is mobile-optimized and has good SEO practices but lacks some accessibility features. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but no privacy or terms of service pages found. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

V

VWH GmbH

vwh.de

44

VWH GmbH is a German-based medium-sized manufacturing company specializing in automation technology, custom special machines, assembly systems, and mold and tool making. The company positions itself as a global player from the Westerwald region, offering comprehensive engineering and production services to industrial clients both nationally and internationally. Their website is built on TYPO3 CMS and employs modern web technologies including jQuery and Bootstrap, with a focus on responsive design and user-friendly navigation. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism via Cookiebot. Security posture is moderate with HTTPS enabled and some best practices observed, but lacks explicit security headers and incident response information. Overall, the website is professional, trustworthy, and business-focused with no signs of malicious or suspicious activity.

K

KBB – Kulturveranstaltungen des Bundes in Berlin GmbH

kbb.eu

71

KBB – Kulturveranstaltungen des Bundes in Berlin GmbH is a prominent German cultural organization that manages and organizes major cultural events and festivals including the Berlinale, Berliner Festspiele with the Gropius Bau, and the Haus der Kulturen der Welt. The organization serves as a key cultural facilitator and partner, promoting arts and culture with a strong government affiliation. The website reflects a mature digital presence with a modern tech stack based on Next.js and Magnolia CMS, providing a rich user experience with detailed event information and multimedia content. Security posture is strong with HTTPS and cookie consent mechanisms in place, though some security headers could be enhanced. Privacy compliance is well addressed with comprehensive policies and GDPR adherence. Overall, the site is professional, trustworthy, and well-positioned in the cultural sector.

B

Berlinale Talents

berlinale-talents.de

63

Berlinale Talents is a well-established annual summit and networking platform affiliated with the Berlin International Film Festival, targeting creatives in film and drama series. The website effectively communicates its mission, upcoming events, and partner collaborations, positioning itself as a key player in the international film talent development space. The technical infrastructure leverages modern JavaScript libraries and Cloudflare DNS, ensuring reliable delivery and moderate performance. Security posture is solid with HTTPS and Cloudflare usage, though improvements in security headers and explicit privacy mechanisms are recommended. Overall, the site presents a professional and trustworthy digital presence with room for enhanced privacy compliance and security transparency.

I

Internationale Filmfestspiele Berlin

efm-berlinale.de

68

The European Film Market (EFM) is a premier international film and media industry event closely affiliated with the Berlinale film festival. It serves as a major marketplace and networking hub for film professionals, exhibitors, producers, startups, and industry stakeholders. The website reflects a mature digital presence with comprehensive content about market screenings, industry sessions, exhibitor services, and related programs. The site is well-branded, professionally designed, and offers clear navigation and mobile optimization. Technically, it employs modern JavaScript libraries and asynchronous loading to enhance performance and user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Privacy compliance is robust with a clear privacy policy hosted on a related domain and a detailed cookie consent banner. No critical vulnerabilities or suspicious content were detected, and the WHOIS data supports the legitimacy of the domain. Overall, the EFM website is a trustworthy, professional platform serving the media industry effectively.

J

Johner Institut

johner-institut.de

67

Johner Institut is a specialized consulting and software provider focused on medical technology manufacturers, helping them navigate complex regulatory environments to bring products to market efficiently. Their offerings include consulting, training, product testing, outsourcing services, and RegTech software solutions. The website is professionally designed, well-structured, and optimized for both desktop and mobile users, reflecting a mature digital presence. Technically, the site uses TYPO3 CMS with modern libraries like Bootstrap and jQuery, and is hosted behind Cloudflare for performance and security. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the domain and website content are consistent and trustworthy, with no blocking or suspicious elements detected.

W

WIKA Alexander Wiegand SE & Co. KG

wika.com

79

WIKA Alexander Wiegand SE & Co. KG is a well-established German company specializing in industrial measurement technology, offering a wide range of products including pressure gauges, temperature sensors, level and flow measurement devices, and calibration services. The company targets industrial sectors such as energy and manufacturing, providing both products and comprehensive services including IIoT solutions. The website reflects a mature digital presence with professional design, clear navigation, and extensive product and service information. Technically, the site uses modern frameworks like Bulma CSS, FontAwesome icons, and integrates Google Tag Manager and Consentmanager for analytics and privacy compliance. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security policy or incident response page is found. WHOIS data is unavailable, which slightly reduces transparency but the overall trustworthiness remains high based on website content and branding. Strategic recommendations include enhancing security headers, publishing a security policy, and verifying domain registration details for full trust assurance.

P

Peter Kaiser

peter-kaiser.com

63

Peter Kaiser is a historic and established European women's shoe brand with a strong online presence through its e-commerce platform. The website offers a wide range of women's shoes and bags, emphasizing quality, style, and fast delivery. The brand leverages modern digital tools including Shopware CMS, Google Tag Manager, and Usercentrics for consent management, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and secure form handling, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The lack of WHOIS data reduces domain trustworthiness but the website content and branding strongly indicate a legitimate business. Overall, the site is professional, user-friendly, and trustworthy for its target audience.

Turbine Kreuzberg is a technology consultancy and software development company founded in 2017, specializing in high-performance enterprise applications including commerce platforms, PIM, CMS, middleware, and search solutions. The company targets B2B clients seeking digital transformation and technology consulting services. Their market position is that of an established mid-sized technology service provider with a strong portfolio of clients and case studies. Technically, the website is built on modern frameworks such as Next.js and React, with a well-implemented cookie consent mechanism and integration of analytics tools like Google Tag Manager and HubSpot. Security posture is solid with HTTPS enforced, domain locks in place, and no evident vulnerabilities, though DNSSEC is not enabled and explicit security policies are not published. Overall, the site is professional, well-structured, and compliant with GDPR, with comprehensive privacy and legal documentation. The risk level is low, but improvements in security transparency and DNS security are recommended.

Museum Utopie und Alltag Digital is a German non-profit digital museum platform that collects and showcases personal stories, comments, and photographs related to museum objects, initially focusing on the theme of travel. The platform encourages community engagement and collective memory creation through user-generated content. The website is bilingual (English and German) and provides educational and cultural content aimed at a general audience interested in heritage and history. Technically, the website is built using modern web technologies including React and Next.js, with a WordPress backend serving content via API. It is hosted on Amazon AWS infrastructure, uses Matomo for privacy-conscious analytics, and implements GDPR-compliant cookie consent mechanisms. The site is mobile-optimized and has good SEO and accessibility basics. From a security perspective, the website enforces HTTPS, includes standard security headers, and does not expose sensitive data or use vulnerable libraries. However, it lacks explicit security or incident response policies and does not provide vulnerability disclosure information. Privacy compliance is strong with a clear privacy policy and cookie consent. Overall, the website presents a trustworthy, professional, and secure platform for cultural heritage engagement. Recommendations include adding terms of service, security policies, and a vulnerability disclosure page to enhance transparency and trust further.

A

Alamode Film

alamodefilm.de

66

Alamode Film is a specialized film production and distribution company focusing on sophisticated cinema and film re-releases. Their website showcases current and upcoming films, home entertainment releases, news, trailers, and company information, targeting film enthusiasts and media professionals primarily in Germany. The company maintains a professional digital presence with active social media channels and a modern WordPress-based website. Technically, the site uses contemporary plugins and libraries, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers and incident response details are missing. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management. Overall, the website reflects a trustworthy and professional business with room for enhanced security practices and transparency in incident handling.

Neue Pierrot le Fou operates as a specialized film distribution company focusing on DVD and Blu-Ray releases, primarily targeting German-speaking film enthusiasts and collectors. The website presents a professional and consistent brand image with clear navigation and relevant content about upcoming and available films. The company maintains an active presence on major social media platforms to engage its audience. Technically, the website employs a traditional HTML5 and CSS3 structure enhanced with JavaScript libraries such as jQuery and Video.js for media playback. The site is responsive and includes a comprehensive cookie consent mechanism compliant with GDPR, indicating a mature approach to privacy. However, some modern security headers and updated libraries could improve the technical posture. Security-wise, the site uses HTTPS and provides cookie consent with granular controls, but lacks explicit security policies or incident response contacts. No critical vulnerabilities or blocking mechanisms were detected, suggesting a stable but improvable security environment. Overall, the website scores well in content quality, business credibility, and privacy compliance, with moderate technical and security scores. Strategic improvements in security headers, updated libraries, and explicit security documentation would enhance trust and resilience.

K

Katholisches Filmwerk GmbH

filmwerk.de

46

Katholisches Filmwerk GmbH operates a specialized media platform focused on the distribution and licensing of educational and cultural films primarily targeting schools, media centers, and parish communities in Germany. The website provides film catalogs, didactic materials, and informational content to support educational use. The company maintains a professional online presence with clear contact information and legal disclosures, positioning itself as a niche player in the German educational media market. Technically, the site is built on WordPress with Bootstrap and uses standard plugins, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit incident response policies. Privacy compliance is mostly met with a comprehensive privacy policy, though no cookie consent mechanism is present. Overall, the site is trustworthy and professionally maintained, with room for improvement in security and privacy features.

The website www.videoload.de is currently inaccessible, returning a 403 Forbidden error page with no visible content. This prevents extraction of any meaningful metadata, business information, or security policies. The domain is hosted on nameservers associated with Deutsche Telekom AG, suggesting a legitimate infrastructure backing. However, the lack of accessible content severely limits the ability to assess the company's business model, services, or compliance posture. From a technical perspective, the site appears to be either restricted or protected by access controls, which may be intentional or due to misconfiguration. Security posture cannot be evaluated due to absence of headers, scripts, or forms. Overall, the site is currently non-functional for external users, resulting in a very low AI score and limited insights.

V

videociety GmbH

maxdome.de

63

maxdome, operated by videociety GmbH, is a prominent German online video rental and purchase platform offering a wide range of movies and TV series in HD and 3D formats. Positioned as one of the largest streaming services in Germany, maxdome targets a broad audience including families and general viewers, providing content without monthly subscription fees. The platform leverages modern streaming technology such as the Bitmovin Player to deliver high-quality video experiences across multiple devices including Smart TVs, computers, and mobile devices. The website demonstrates good digital maturity with responsive design, clear navigation, and comprehensive metadata for SEO and social media integration. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, although there is room for improvement in publishing explicit security policies and incident response contacts. Overall, maxdome presents a trustworthy and professional service with a strong market presence in the German media streaming sector.

W

Wortmann Group

wortmann-group.com

64

The Wortmann Group is a well-established European footwear manufacturer and distributor, operating since 2001. The company manages a portfolio of strong shoe brands including Tamaris, s.Oliver Shoes, Marco Tozzi, Jana, Caprice, and Peter Kaiser, serving a global market with localized sales support. Their website reflects a professional and consistent brand image with multilingual support and clear navigation. Technically, the site is built on the Contao CMS platform using jQuery and related libraries, delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, though DNSSEC is not enabled and security headers are not evident. Privacy compliance is basic but present, with privacy and cookie policies accessible. No direct contact emails or phone numbers are visible on the homepage, but contact forms are provided. Overall, the site is trustworthy and professionally maintained.

W

Wortmann Group

wortmann.com

64

Wortmann Group is a large European footwear manufacturing and distribution company with a strong portfolio of brands including Tamaris, s.Oliver Shoes, Marco Tozzi, Jana, Caprice, and Peter Kaiser. The company targets retailers, distributors, and consumers interested in quality footwear. Their website is professionally designed, multilingual, and built on the Contao CMS platform, indicating a moderate level of digital maturity. The technical infrastructure uses common JavaScript libraries and provides a responsive user experience. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and advanced security headers. Privacy compliance is addressed with a privacy and cookie policy, though no explicit security or incident response policies are published. Overall, the website is trustworthy and professionally maintained, supporting the company's market position as a leading footwear group in Europe.

D

Deutsche Kinderschutzstiftung Hänsel + Gretel

haensel-gretel.de

58

Deutsche Kinderschutzstiftung Hänsel + Gretel is a well-established German non-profit foundation dedicated to protecting and empowering children against physical, emotional, and sexual violence. Founded in 1997, the foundation operates numerous projects across Germany, targeting children, youth, parents, schools, and childcare professionals. The website reflects a professional and consistent brand presence with clear contact information and active social media engagement. Technically, the site is built on TYPO3 CMS, hosted on nroute.de nameservers, and employs modern web practices including HTTPS and Google Tag Manager for analytics. Security posture is solid with no critical vulnerabilities detected, though improvements could be made by adding security headers and formal security policies. Privacy compliance is moderate due to the absence of explicit privacy and cookie policies. Overall, the site is trustworthy, safe, and well-suited for its target audience.

Freunde der Eisenbahn Krefeld e.V. is a small non-profit organization dedicated to preserving and promoting historical railway heritage in Krefeld, Germany. Their key activities include operating the historic steam train 'Schluff', managing the SWK-Verkehrsmuseum, and organizing related events and excursions. The website serves as an informational portal for enthusiasts and the local community, providing updates, contact information, and downloadable resources. The organization holds membership in the Deutsche Gesellschaft für Eisenbahngeschichte (DGEG), enhancing its credibility within the railway heritage sector. Technically, the website is built on the cm4all CMS platform and hosted by Strato. It uses older JavaScript libraries such as jQuery 1.7 and Prototype 1.7.3, which may present security risks. The site implements HTTPS and a cookie consent mechanism, indicating awareness of privacy compliance, including GDPR. However, the absence of modern security headers and outdated libraries suggests room for improvement in security posture. The website is moderately optimized for performance and mobile use, with basic accessibility features. From a security perspective, the site benefits from HTTPS and cookie consent but lacks explicit security policies and incident response information. The use of outdated libraries and missing security headers could expose the site to vulnerabilities. No signs of malware, phishing, or WAF blocking were detected. Privacy compliance is supported by a GDPR-aligned privacy policy and cookie consent, but no terms of service or vulnerability disclosure policies are present. Overall, the website is trustworthy and professional for its niche audience but would benefit from technical and security updates to enhance protection and compliance. Strategic recommendations include updating JavaScript libraries, implementing security headers, and publishing clear security and incident response policies to strengthen user trust and resilience against threats.

Z

Zebralog GmbH

meinungfuer.koeln

53

The website meinungfuer.koeln is an official public participation portal for the city of Cologne, operated by Zebralog GmbH. It serves as a platform for citizens to engage in city planning and local projects, offering information on ongoing and past participations, events, and news. The site targets residents of Cologne and promotes transparent civic engagement. Technically, it is built on Drupal 10 with modern frontend libraries and uses Matomo Analytics respecting user privacy. The site is well-structured, mobile-optimized, and accessible, reflecting a mature digital infrastructure for a government service. Security posture is solid with HTTPS, security headers, and domain transfer protections, though DNSSEC is not enabled and no explicit security policies are published. Privacy compliance is strong with clear cookie consent and GDPR-aligned policies. Overall, the site is trustworthy, professional, and safe for general audiences.

K

Koeln.Business

koeln.business

60

Koeln.Business is a regional economic development agency focused on supporting businesses, startups, and investors in Cologne, Germany. The website provides comprehensive information and services related to investment, business establishment, funding consultation, and networking opportunities. It positions itself as a key facilitator for economic growth in the Cologne region, targeting entrepreneurs and startups primarily. The technical infrastructure is built on TYPO3 CMS, leveraging modern JavaScript libraries such as Slick Slider and Owl Carousel for enhanced user experience. The site is well-optimized for mobile devices and accessibility, with a clear navigation structure and professional design. Cookie consent and privacy compliance are robustly implemented using Cookiebot, ensuring GDPR adherence. From a security perspective, the website enforces HTTPS and employs cookie consent mechanisms but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The domain WHOIS data is privacy protected, which is common and acceptable for this type of public-facing business support entity. Overall, Koeln.Business presents a trustworthy and professional digital presence with moderate to good security posture and strong privacy compliance. Strategic recommendations include enhancing security headers, publishing security policies, and establishing incident response contacts to further strengthen trust and compliance.

Kölnmagazin.net is a media-focused website targeting audiences interested in Cologne, Germany. The site is currently in maintenance mode, displaying a placeholder page with no active content or business details. The domain is well-established, registered since 2010 with IONOS SE, indicating a stable presence. The website uses WordPress CMS with jQuery and Open Sans font, reflecting a standard technical setup for small media sites. However, the lack of active content, privacy policies, and contact information limits its current business visibility and user engagement. From a technical perspective, the site shows basic implementation with HTTPS enabled but lacks advanced security headers and DNSSEC, which are recommended for improved security posture. The presence of a login form on the maintenance page could pose security risks if not properly protected. No analytics or advertising technologies were detected, suggesting minimal tracking or marketing activities at this time. Security-wise, the site benefits from domain transfer protection but misses DNSSEC and security headers, which are important for preventing DNS spoofing and clickjacking attacks. The absence of privacy and cookie policies indicates non-compliance with GDPR and related regulations, which is a critical gap for websites operating in the EU. Overall, the security posture is moderate but requires improvements to meet best practices. Given the current maintenance status and limited content, the overall risk is low but the site lacks transparency and compliance features expected from a professional media outlet. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing privacy and cookie policies, securing the login form, and enhancing content and contact information to improve trust and user experience.

S

Sächsische Landesstiftung Natur und Umwelt

lanu.de

51

The Sächsische Landesstiftung Natur und Umwelt (LaNU) is a government-affiliated foundation focused on the protection, preservation, and education related to nature and the environment within the Free State of Saxony, Germany. The website serves as a comprehensive portal for environmental education, nature conservation projects, funding opportunities, and volunteer engagement programs. It targets citizens, educational institutions, and environmental stakeholders in the region. The foundation positions itself as a key regional player in environmental protection and education, leveraging digital channels and social media to engage its audience. Technically, the website employs a modern tech stack including jQuery, Materialize CSS, Froala Editor, and SystemJS modules, indicating a custom CMS or framework. The site is mobile-optimized, accessible, and SEO-friendly with proper meta tags and structured navigation. Performance is moderate, with room for optimization. Privacy compliance is strong, featuring a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent for tracking technologies like Google Analytics. However, it lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The WHOIS data is minimal but consistent with the website's regional and governmental nature, supporting legitimacy. Overall, the website presents a professional, trustworthy, and compliant digital presence for a regional environmental foundation. Strategic improvements in security headers, incident response transparency, and contact information visibility could further enhance trust and security posture.

M

Modernisierungsberater.de

modernisierungsberater.de

46

Modernisierungsberater.de is a German-based platform providing certified modernization consulting services primarily focused on energy-efficient building modernization and financing advice. The website serves as a hub for a large network of certified advisors across Germany, offering free initial consultations and detailed advisor profiles. The platform is positioned as a trusted intermediary between homeowners and modernization experts, certified by the Bundesverband Gebäudemodernisierung e.V. Technically, the website is built on WordPress with WooCommerce and several plugins supporting forms, subscriptions, and location services. It uses modern web technologies including Bootstrap and FontAwesome, and is hosted on a German hosting provider indicated by its nameservers. Security posture is good with HTTPS enforced and some security plugins in place, though there is room for improvement in security headers and vulnerability disclosure. Privacy compliance is strong with GDPR-aligned privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-structured for its target audience.

M

manitu GmbH

manitu.de

59

manitu GmbH is a well-established German hosting provider offering professional webhosting, dedicated root servers, and domain registration services. With 28 years of experience and an own data center in Germany, the company emphasizes high-quality service, German data protection compliance, and climate-neutral operations. Their target audience includes private users, companies, and organizations seeking reliable hosting solutions. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive business information. Technically, the site uses modern frontend technologies such as Bootstrap and jQuery, hosted on their own infrastructure, ensuring fast performance and good SEO. Security posture is solid with HTTPS and no exposed sensitive data, though explicit security policies and incident response contacts are not publicly detailed. Overall, the domain registration data aligns well with the business claims, supporting high legitimacy and trustworthiness.

B

Bergische VHS

bergische-vhs.de

51

Bergische VHS is a regional adult education institution serving the Bergische region, specifically the cities of Solingen and Wuppertal in Germany. The organization offers a broad range of educational courses, seminars, workshops, and events both in-person and online, targeting the general public interested in lifelong learning and community engagement. The website reflects a well-structured, professionally designed platform that supports course search, registration, and information dissemination. Social media integration and clear contact channels enhance user engagement and trust. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as jQuery, Bootstrap, and FontAwesome. The site is mobile-optimized and accessible, with a cookie consent mechanism implemented via Klaro, indicating attention to privacy compliance. However, explicit security headers and incident response information are not evident, suggesting areas for improvement in security posture. From a security perspective, the site is accessible without WAF or blocking challenges, uses HTTPS (implied though not confirmed by headers), and does not expose sensitive data in the HTML. Privacy policies and terms of service are present and linked, supporting GDPR compliance. The WHOIS data aligns with the public institution nature of the site, reinforcing legitimacy. Overall, Bergische VHS presents a credible, trustworthy, and user-friendly online presence suitable for its educational mission. Strategic enhancements in security headers, incident response transparency, and analytics integration could further strengthen its digital maturity and security posture.

S

Standortfaktor D

standortfaktor-d.de

43

Standortfaktor D is a German business alliance advocating for democracy as a foundational element for economic strength and social stability. The website serves as a platform to communicate the importance of democratic values to entrepreneurs, employees, and the wider public, featuring testimonials from business leaders and partner organizations. The alliance emphasizes openness, diversity, and tolerance as key to securing Germany's future. Technically, the website is built on WordPress using the Divi theme, with standard web technologies and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced compliance and security measures.

A

aachen tourist service e.v.

aachen-tourismus.de

54

Aachen tourist service e.v. operates a professional tourism website focused on promoting the city of Aachen, Germany. The site offers information on city tours, accommodations, events, and cultural highlights, targeting tourists and visitors interested in exploring Aachen and its surroundings. The business is positioned as a regional tourism service provider with a medium-sized organizational profile. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Borlabs Cookie for SEO and privacy compliance. Accessibility features and mobile optimization are well implemented, contributing to a good user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and policies are not published. Overall, the site is trustworthy and professionally maintained, but lacks some compliance documentation such as privacy and terms of service pages.

R

RIS GmbH

gem2go.de

52

GEM2GO is a mobile application platform designed to provide municipalities in Austria and Germany with a comprehensive digital service and information tool for their citizens. The platform offers features such as digital bulletin boards, news feeds, push notifications, and personalized user profiles to enhance community engagement and streamline communication between local governments and residents. The website positions GEM2GO as a popular and expanding solution in the municipal service app market, supported by RIS GmbH, a recognized company in this domain. Technically, the website employs modern web technologies including React, integrates multiple analytics and tracking tools such as Google Analytics, Facebook Pixel, and Matomo, and uses accessibility tools like eyeAble. The site is mobile-optimized and provides links to major app stores, indicating a mature digital presence. Performance is moderate with good SEO and accessibility practices, though some security headers are missing. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security policies, incident response contacts, and vulnerability disclosure information. The WHOIS data is minimal and shows an unusual domain status, which slightly reduces trust but is mitigated by consistent business information and professional website content. Overall, GEM2GO presents a credible and professional municipal service platform with a solid technical foundation and good privacy compliance. Strategic improvements in security transparency and WHOIS data clarity would enhance trust and security posture further.

E

Erenja AG & Co. KG

erenja.de

57

Erenja AG & Co. KG is a German energy provider specializing in supplying 100% renewable electricity, natural gas, and eco-friendly heating and charging electricity to private and business customers. As a subsidiary of GELSENWASSER AG, Erenja positions itself as a regional yet expanding nationwide supplier emphasizing sustainability, customer service, and digital convenience. The website offers interactive tariff calculators, an online customer portal, and comprehensive service information, reflecting a customer-centric business model focused on transparency and ease of use. Technically, the site employs modern JavaScript frameworks, consent management via Usercentrics, and integrates analytics and marketing tools such as Google Tag Manager and HubSpot, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement and consent-based tracking, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

Z

Zwergenwiese Naturkost GmbH

zwergenwiese.de

49

Zwergenwiese Naturkost GmbH is a well-established German company specializing in organic, vegan, and vegetarian food products, primarily known for their market-leading bread spreads. Founded in 1979, the company operates in the retail and manufacturing sectors, producing a wide range of high-quality bio-certified products made in Schleswig-Holstein. Their digital presence is professional and content-rich, targeting health-conscious consumers interested in sustainable and organic food options. Technically, the website is built on WordPress with Elementor and uses modern web technologies, offering good performance and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements could be made in cookie consent and security headers. Overall, the company demonstrates strong business credibility and trustworthiness with transparent contact information and certifications.