Germany security reports

R

Rapunzel Naturkost GmbH

rapunzelwelt.de

56

Rapunzel Welt is a German visitor attraction centered on organic food, sustainability, and cultural experiences. The website showcases museums, events, a bio-market, café, bakery, and group offerings, targeting a general audience interested in organic and sustainable lifestyles. The business positions itself as a niche regional attraction with strong branding and certifications such as Bioland-Partner. Technically, the site is built on Drupal 10 with modern libraries and frameworks, including Usercentrics for consent management and Google Tag Manager for analytics. The site is mobile-optimized, accessible, and well-structured, providing a good user experience. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Overall, the domain registration aligns well with the business, indicating legitimacy and trustworthiness.

F

FondConsult Research GmbH

fondsconsult.de

61

FondsConsult Research GmbH is a well-established independent advisory firm specializing in investment fund analysis and selection, serving a professional audience including banks, insurance companies, and fund distributors. The company leverages a blend of proven and innovative methodologies, emphasizing independence, transparency, and traceability. Their services include comprehensive fund studies, a proprietary database with smart benchmarking, and expert analyst support. The website reflects a mature digital presence built on modern technologies such as React and integrates GDPR-compliant cookie consent via Cookiebot. Security posture is solid with HTTPS and cookie management, though explicit security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

B

Börsenmedien AG

finanzenverlag.de

59

Börsenmedien AG is a leading German media company specializing in financial and investment publishing targeted at retail investors. The company operates multiple well-known print titles and digital platforms, positioning itself as a market leader in the German-speaking financial media sector. The website content reflects a professional and comprehensive media presence with a strong focus on delivering value to private investors. Technically, the website is built with modern web standards, is mobile optimized, and provides a good user experience with clear navigation and structured data for SEO. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although security headers and explicit security policies could be improved. The WHOIS data is incomplete or privacy protected, which slightly reduces trust but does not outweigh the professional presentation and business legitimacy. Overall, the website is safe, trustworthy, and well-maintained.

K

K-TEL Communications GmbH

ktel.cloud

43

K-TEL Communications GmbH is a medium-sized telecommunications company based in Germany, operating since 2016. The company provides telecommunications services and a cloud-based dashboard platform for customer account management. Their website serves primarily as a login portal for their cloud services, targeting business and individual customers in the German market. The company maintains a professional online presence with consistent branding and active social media channels. Technically, the website uses common web technologies such as jQuery, FontAwesome, and Leaflet.js for mapping features, hosted on infrastructure linked to their registrar and DNS providers. The site is mobile-optimized and provides a user-friendly experience with clear navigation and relevant content.

I

Institut Arbeit und Technik

iat.eu

59

Institut Arbeit und Technik (IAT) is a research institute affiliated with the Westfälische Hochschule in Germany, focusing on sustainable innovation, work organization, and social-ecological transformation. It collaborates with regional and international partners including Ruhr-Universität Bochum. The website presents comprehensive research topics, publications, projects, and events, targeting academics, students, and policy makers. Technically, the site uses modern web technologies including jQuery and Matomo analytics, with good mobile optimization and accessibility. Security posture is solid with HTTPS and privacy-respecting analytics, though some security headers and cookie consent mechanisms are missing. WHOIS data is privacy protected, typical for .eu domains, and does not raise trust concerns given the professional nature of the site.

L

Landesregierung Nordrhein-Westfalen

land.nrw

67

The website www.land.nrw is the official online presence of the State Government of North Rhine-Westphalia, Germany. It serves as a comprehensive portal for government news, press releases, public service information, and event announcements targeted at residents, journalists, and government officials. The site demonstrates a high level of professionalism, consistent branding, and excellent content quality, reflecting its authoritative government status. Technically, the site is built on the Drupal CMS platform, utilizing modern web technologies including jQuery UI and a privacy-focused Matomo analytics implementation. The website is well-optimized for mobile devices and accessibility, with clear navigation and structured content. Privacy compliance is robust, featuring detailed privacy and cookie policies with user consent mechanisms aligned with GDPR requirements. From a security perspective, the site enforces HTTPS and employs cookie consent best practices. While explicit security headers are not fully visible in the provided data, the overall security posture is strong with no detected vulnerabilities or exposed sensitive information. The WHOIS data is privacy-protected, which is justified given the governmental nature of the domain, and no suspicious patterns are detected. Overall, the website presents a low risk profile with strong trust indicators and a mature digital infrastructure. Strategic recommendations include enhancing explicit security header implementation and ongoing monitoring of third-party scripts to maintain security integrity.

S

Stadtwerke Münster

netzplan-muenster.de

49

Netzplan Münster is an interactive public transportation network map and journey planner service provided by Stadtwerke Münster, the municipal utility company. The website targets residents and visitors of Münster, Germany, offering detailed transit information, downloadable network plans, and mobility services. The platform leverages modern web technologies including AngularJS and Leaflet for map rendering and user interaction. The site is well-branded, consistent, and professionally designed with good user experience and mobile optimization. Security posture is solid with HTTPS, security headers, and CSRF protection, though explicit security policies and incident response contacts are not published. Privacy compliance is basic, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy and serves its public transportation information purpose effectively.

B

Bernhard Remmers Institut für Analytik GmbH (BRIfA)

brifa.de

71

Bernhard Remmers Institut für Analytik GmbH (BRIfA) is an independent, accredited laboratory specializing in analytical building material testing and analysis. Founded in 2015 and backed by over 35 years of experience, BRIfA serves a diverse clientele including private customers, architects, and public institutes. The company emphasizes scientific rigor, neutrality, and quality assurance, holding accreditations such as DIN EN ISO/IEC 17025 and DAkkS. The website reflects a professional and trustworthy business with clear contact channels and compliance with GDPR and cookie consent regulations. Technically, the site uses modern JavaScript libraries and a modular architecture, likely built on SAP Commerce Cloud (Hybris). Security posture is good with HTTPS and CSRF protections, though explicit security headers and incident response information are absent. Overall, the site is well-structured, content-rich, and suitable for its target audience in the construction and building materials sector.

R

Remmers

remmers.com

73

Remmers GmbH is a well-established German family-owned company specializing in innovative system solutions for the construction and woodworking industries. With over 75 years of tradition, the company offers a broad portfolio including building protection, wood coatings, and floor protection products. The website is professionally designed, multilingual, and targets a diverse audience including construction professionals, architects, investors, and end consumers. Technically, the site uses modern JavaScript frameworks, SAP Commerce as CMS, and integrates consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, secure login forms, and cookie consent mechanisms, though explicit security headers could be improved. The absence of WHOIS data for the domain is a notable anomaly but does not detract from the overall legitimacy indicated by the website content and business information.

R

RAL GmbH

ral-umwelt.de

73

RAL GmbH operates as the central awarding body for environmental labels such as the Blauer Engel and EU Ecolabel, providing independent and transparent certification services. Positioned as a trusted authority in Germany, RAL GmbH targets businesses and organizations seeking recognized environmental certifications to demonstrate sustainability and compliance. The website reflects a mature digital presence with a professional design, clear navigation, and multilingual support, enhancing accessibility and user experience. Technically, the site is built on WordPress with modern SEO and consent management tools, hosted by Schlundtech, ensuring reliable performance and compliance with privacy regulations. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the domain registration data aligns well with the business history and legitimacy, supporting a high trust score.

T

Tierpark Chemnitz

tierpark-chemnitz.de

49

Tierpark Chemnitz operates a zoological park and wildlife enclosure in Chemnitz, Germany, serving approximately 180,000 visitors annually. The organization focuses on animal conservation, education, and providing natural habitats for both exotic and native species. The website is built on TYPO3 CMS, hosted by netcup, and features a modern, responsive design with clear navigation and content relevant to visitors and supporters. Security posture is adequate with HTTPS and cookie consent implemented, though additional security headers and explicit policies could enhance protection. Contact information is transparent and consistent with the business identity, supporting trustworthiness.

W

Online Wunschliste erstellen • Wunschzettel ohne Registrierung

wishsite.de

60

wishsite.de is a German-language online wishlist platform that enables users to create and share wishlists for various occasions such as weddings, birthdays, Christmas, and baby parties. The service emphasizes ease of use, no registration requirement, and free access, targeting individuals who want a simple and effective way to communicate gift wishes. The platform enjoys a strong market presence with over one million fulfilled wishes and a high user recommendation rate, supported by user testimonials and a demo wishlist feature. Technically, the website leverages modern web technologies including JavaScript, jQuery, Google Tag Manager, and Bing Ads, hosted behind Cloudflare DNS services. The site is mobile-optimized and designed with accessibility and SEO best practices in mind. Security-wise, the site enforces HTTPS, uses CSRF tokens, and includes CAPTCHA challenges to prevent spam, but lacks visible security headers and published security policies. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, wishsite.de presents a professional, trustworthy, and user-friendly service with moderate to strong security posture and good privacy practices.

H

Heise Medien GmbH & Co. KG

ct.de

73

Heise Medien GmbH & Co. KG operates the website www.heise.de/ct, a leading German technology media portal focused on IT news, hardware and software reviews, and educational content. The site targets IT professionals and technology enthusiasts, offering a subscription-based magazine, podcasts, and video channels. The company holds a strong market position in the German media landscape with a consistent and professional brand presence. Technically, the website employs modern web technologies including InterRed CMS, advanced JavaScript frameworks, and content delivery networks to ensure fast performance and excellent mobile optimization. Security posture is robust with HTTPS enforcement, multiple security headers, and a consent management platform for GDPR compliance. However, explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

D

Deutsche Bundesstiftung Umwelt

dbu.de

56

The Deutsche Bundesstiftung Umwelt (DBU) is a prominent German environmental foundation focused on funding innovative and sustainable projects primarily targeting the medium-sized business sector. Established in 1990, DBU has a strong market position as one of Europe's largest environmental foundations, offering project funding, scholarships, and fellowships. The website reflects this mission with comprehensive content, clear navigation, and a professional design that supports its credibility and outreach. Technically, the website is built on WordPress with modern JavaScript libraries and multilingual support via WPML. Hosting is managed through Deutsche Telekom's name servers, indicating a reliable infrastructure. The site is mobile-optimized and performs moderately well, with good SEO and accessibility features. Analytics are handled via Plausible, a privacy-focused service, indicating a moderate user tracking level with good privacy compliance. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security or incident response policies, which are areas for improvement. No vulnerabilities or suspicious activities were detected. Privacy compliance is generally good, with a comprehensive privacy policy present, but the absence of a cookie consent mechanism is a minor gap. Overall, the DBU website is a trustworthy, professional, and well-maintained platform that effectively supports the foundation's mission. Strategic enhancements in security policies and privacy mechanisms would further strengthen its posture and user trust.

T

TIPADA-Shop

tipada-shop.de

55

TIPADA-Shop is a German-based e-commerce retailer specializing in plush toys, school articles, and gift items targeting families, children, and animal lovers. The website presents a professional and consistent brand image with a clear focus on providing themed gift ideas and accessories. The business model centers on online retail with free shipping offers and fast delivery from Germany, positioning itself as a niche player in the gift and toy market. The site integrates modern marketing and analytics tools such as Google Analytics 4, Google Ads, and Brevo, while maintaining GDPR compliance through a comprehensive consent management system. Technical infrastructure is based on the JTL Shop system, hosted on netcup servers, and employs standard web technologies including jQuery and Bootstrap.

P

Phönix FM

phoenix-fm.de

43

Phönix FM is a medium-sized German facility and property management company, part of the CLEES Unternehmensgruppe. They provide comprehensive building technology, maintenance, and property management services primarily in residential and commercial real estate sectors. The website is built on TYPO3 CMS and uses standard web technologies such as jQuery and Bootstrap. While the site is professionally designed and content-rich, it lacks explicit privacy, cookie, and security policies, which are critical for GDPR compliance and user trust. No security headers or incident response information were found, indicating room for improvement in security posture. The domain WHOIS data is minimal but consistent with a legitimate business operation. Overall, the website is functional and business-focused but would benefit from enhanced privacy and security features.

C

Currenta GmbH & Co. OHG

currenta.de

68

Currenta GmbH & Co. OHG is a large German company specializing in the supply, disposal, and safety management of the CHEMPARK industrial complex. The company offers tailored solutions ranging from material and energy supply to the development of disposal and safety concepts, as well as support in regulatory approval processes. Positioned as an important regional player in the energy and chemical park management sector, Currenta serves industrial customers with comprehensive services. The website reflects a mature digital presence built on WordPress with Elementor and Yoast SEO, supported by Cloudflare for security and performance. The site is well-optimized for mobile and SEO, featuring a cookie consent mechanism and comprehensive privacy policies, demonstrating good compliance with GDPR requirements. Security posture is strong, leveraging Wordfence and Cloudflare protections, though no dedicated security policy or incident response page is published. Overall, the site is professional, trustworthy, and technically sound.

I

ITB Consulting GmbH

itb-consulting.de

71

ITB Consulting GmbH is a German-based HR consulting firm specializing in aptitude and management diagnostics, personnel development, and strategic HR consulting for universities and companies. The company offers a broad portfolio of services including assessment centers, development centers, leadership training, and online tests tailored for various professional levels. Their market position is supported by a professional website showcasing client logos and a consistent brand presence. Technically, the website is built on WordPress using modern plugins such as Elementor and Yoast SEO, hosted with Cloudflare DNS for performance and security. The site is mobile-optimized and SEO-friendly. Security posture is solid with HTTPS enforced and cookie consent managed via Borlabs Cookie, though explicit security headers and policies are not published. No blocking or WAF challenges were detected, allowing full content access. Overall, the website reflects a mature digital presence with room for improvement in privacy and security policy transparency.

S

Stadt Köln

stadt-koeln.de

62

The website www.stadt-koeln.de is the official digital presence of the city administration of Cologne, Germany. It serves as a comprehensive portal for residents and visitors to access municipal services, news, event information, and contact details. The site is well-structured, multilingual, and provides key functionalities such as online appointment booking and access to various public service departments. The target audience primarily includes local citizens, businesses, and visitors seeking official information and services. Technically, the website employs a mature technology stack including jQuery, Bootstrap, and Modernizr, with analytics powered by Matomo and eTracker. The site is hosted on German infrastructure with anycast DNS servers, ensuring reliable access. Mobile optimization and accessibility features are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and includes standard security headers, reflecting good security hygiene. However, there is no visible cookie consent mechanism, and no explicit security or incident response policies are published, which are areas for improvement to enhance compliance and transparency. The use of an outdated jQuery version may pose potential risks if not regularly patched. Overall, the website is trustworthy, professional, and serves its governmental function effectively. Strategic recommendations include implementing a cookie consent banner, publishing security policies, updating JavaScript libraries, and adding a vulnerability disclosure channel to strengthen security posture and regulatory compliance.

B

Berlin International Film Festival

berlinale.de

73

The Berlin International Film Festival website serves as the official digital presence for one of the world's leading film festivals. It provides comprehensive information about the festival's profile, programming, awards, partners, and news, targeting film professionals, media, and enthusiasts globally. The site is well-funded by government bodies and principal partners, reflecting its cultural significance and large-scale operations. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and VideoJS for media playback, with a focus on responsive design and accessibility. Analytics are handled via Etracker, with a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved and formal security policies published. Overall, the site demonstrates high professionalism, trustworthiness, and content quality, supporting the festival's prestigious market position.

A

Alamode Film

bachmannfilm.com

55

Alamode Film is a specialized film distribution and production company focused on high-quality and sophisticated cinema releases, primarily serving German-speaking audiences. The company maintains a professional online presence with detailed film promotion, social media engagement, and a dedicated e-commerce platform for DVD sales. Their market position is niche but well-defined, targeting cinephiles and cultural film enthusiasts. Technically, the website is built on WordPress with modern plugins and APIs, offering a responsive and content-rich experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some advanced security headers and policies could be improved. Overall, the site is trustworthy, compliant with GDPR, and free from suspicious content or vulnerabilities.

N

novomind

novomind.com

65

novomind AG is a technology company specializing in software solutions for digital commerce and customer service. Their portfolio includes products for digital commerce platforms, customer service software, AI agents, and data platforms, targeting businesses seeking to enhance their digital sales and customer interaction capabilities. The company positions itself as a comprehensive provider offering both software products and professional services such as integration, long-term support, and custom software development. The website reflects a professional and modern digital presence, indicating a medium-sized enterprise based in Germany with a clear B2B focus. Technically, the website is built on WordPress using the Elementor page builder, incorporating modern web technologies such as jQuery and Google Tag Manager for analytics and marketing. The site is mobile-optimized and includes GDPR-compliant cookie consent management via Usercentrics. Performance is moderate with good SEO and accessibility basics, though some improvements in accessibility could be made. From a security perspective, the site enforces HTTPS and uses consent management for tracking scripts, but lacks explicit published security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain reduces the overall trust score, as it prevents verification of domain ownership and age, which is unusual for a professional business domain. Overall, novomind AG presents a trustworthy and professional digital commerce software provider with a solid technical foundation and good privacy compliance. Strategic recommendations include enhancing security transparency, publishing incident response and vulnerability disclosure policies, and improving WHOIS data transparency to strengthen trust and compliance posture.

B

BVMW - Bundesverband mittelständische Wirtschaft

bvmw.de

56

BVMW (Bundesverband mittelständische Wirtschaft) is a prominent German association representing small and medium-sized enterprises (SMEs) and self-employed professionals. The organization focuses on networking, advocacy, and providing support services to the Mittelstand sector in Germany. Their website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored to their target audience of SMEs. The business model centers on membership services, events, and industry representation, positioning BVMW as a leading voice for the German Mittelstand.

E

ECON TEL GmbH

econ-tel.de

67

ECON TEL GmbH is a well-established German company specializing in sales outsourcing and customer acquisition services primarily for the technical and construction-related industries. With over 30 years of experience, they provide tailored solutions including telephone acquisition, LinkedIn networking, market analysis, and customer management to help SMEs and mid-sized companies expand their market reach and increase sales. The company positions itself as a trusted partner with a strong focus on transparency, real-time reporting, and personalized service teams. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies such as jQuery and embedded Vimeo videos. The site is well-optimized for mobile devices, offers good accessibility features, and includes a robust cookie consent mechanism via CookieFirst. Hosting is managed through Webflow's CDN, ensuring fast load times and reliable performance. From a security perspective, the site enforces HTTPS and employs cookie consent management, but lacks explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data indicates consistent domain registration practices with no privacy protection, supporting the legitimacy of the business. Overall, ECON TEL's digital presence reflects a professional, trustworthy, and mature business with strong compliance to privacy regulations and a solid technical foundation. Strategic improvements could include publishing a formal security policy, adding vulnerability disclosure information, and enhancing security headers to further strengthen their security posture.

K

Kanne Brottrunk

kanne-brottrunk.de

42

Kanne Brottrunk is a German company specializing in the production and sale of organic fermented bread drink products, with a history spanning approximately 35 years. The website targets health-conscious consumers interested in vegan and organic beverages. The business operates primarily in the retail sector, emphasizing natural and alcohol-free products. The website demonstrates consistent branding and good content quality, supporting its market position as an established organic health beverage provider. Technically, the website employs modern technologies including Google Tag Manager, Cookiebot for GDPR-compliant cookie management, and Google reCAPTCHA for bot protection. The site is served over HTTPS, ensuring secure communication. While no explicit CMS or hosting provider is identified, the site shows moderate performance and good mobile optimization. SEO and accessibility features are basic to good. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms aligned with GDPR. However, some common security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected, representing an area for improvement. No vulnerabilities or exposed sensitive data were found. The site lacks a published security policy or incident response contact, which could enhance trust and compliance. Overall, the website is safe, professional, and trustworthy, with no adult or questionable content. The domain registration data is consistent with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and providing clearer contact information to improve user trust and compliance.

O

OFFICE Partner

office-partner.de

68

OFFICE Partner is a German-based e-commerce retailer specializing in office technology and supplies, including printers, monitors, and consumables. The website targets business customers and office supply purchasers within Germany, offering convenient payment options such as invoice and installment purchases. The company appears to have been established around 2014 and maintains a consistent brand presence with integration of trusted third-party services like Trusted Shops and Amazon Payments. Technically, the website is built on the Shopware CMS platform and utilizes modern JavaScript libraries and analytics tools including Google Tag Manager, econda, and Microsoft UET. The site demonstrates good mobile optimization and accessibility features, with a moderate performance profile. Hosting is provided via Creoline Server, as indicated by the nameservers. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is partial, with cookie consent present but no visible privacy or terms of service pages. Overall, OFFICE Partner presents a professional and trustworthy e-commerce platform with room for improvement in privacy disclosures and security transparency. Strategic enhancements in these areas would strengthen compliance and customer trust.

H

Hohenzollern Apotheke

hohenzollern-apotheke.de

50

Hohenzollern Apotheke operates as a local pharmacy business with three physical locations in Münster, Germany, providing retail pharmacy services and customer consultation. The website targets local customers seeking pharmaceutical products and services, emphasizing extended opening hours and good customer service. The business model is retail-focused with a clear local market presence. Technically, the website employs modern web technologies such as Google Tag Manager, Cookiebot for cookie consent management, and Google reCAPTCHA for bot protection. The CMS appears to be ProcessWire, and hosting is managed via DomainControl nameservers, likely GoDaddy. The website is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies are missing. Privacy compliance is partial, with a cookie consent banner but no visible privacy policy or terms of service pages. No contact information or data protection officer details are found, which limits transparency. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

S

Stadtwerke Münster

stadtwerke-muenster.de

64

Stadtwerke Münster is a large regional public utility provider based in Münster, Germany, offering essential services such as energy supply, public transportation, water, and waste management. The company positions itself as a local solution provider addressing global challenges, targeting residents and businesses within the Münster region. The website reflects a professional and consistent brand image with good content quality and user experience tailored for its audience. Technically, the site leverages modern technologies including Pimcore CMS, Google Tag Manager, and Cookiebot for consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive cookie policy and GDPR-aligned consent management. Overall, the site demonstrates high trustworthiness and business credibility, with room for enhancements in security policy transparency and incident response disclosures.

L

lanius.com

lanius.com

73

lanius.com is a professional e-commerce website specializing in sustainable and fair fashion since 1999. The company positions itself as a medium-sized retailer focused on organic and ethically produced clothing, targeting environmentally conscious consumers. The website is built on the Shopify platform, leveraging modern web technologies and integrations with marketing and analytics tools such as Klaviyo and Facebook Pixel. The site demonstrates strong digital maturity with excellent design, mobile optimization, and user experience. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response contacts are not found. The absence of WHOIS data for the domain reduces trustworthiness slightly but does not detract significantly from the professional presentation and compliance indicators. Overall, the website is a credible and well-maintained online retail platform with a focus on sustainability.

R

Remmers

remmers.de

71

Remmers GmbH is a well-established family-owned manufacturing company specializing in innovative system solutions for the construction and woodworking industries. With over 75 years of tradition, the company offers a broad portfolio including building protection, wood coatings, flat roof solutions, and tools. The website reflects a mature digital presence with comprehensive product information, strong branding, and multi-language support across 21 countries. Technically, the site leverages modern JavaScript libraries, SAP Commerce platform, and cloud hosting, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, secure login forms, and consent management, though explicit security headers could be improved. The absence of WHOIS data is a minor concern but does not detract significantly from the overall trustworthiness given the professional content and certifications. Strategic recommendations include enhancing security headers, publishing incident response contacts, and establishing a vulnerability disclosure policy.

R

Rapunzel Naturkost GmbH

rapunzel.de

46

Rapunzel Naturkost GmbH is a well-established German company specializing in the production and retail of organic and fair trade food products since 1974. The company operates both B2B and B2C channels, including a webshop and a visitor center called Rapunzel Welt. Their market position is strong within the organic food sector, supported by certifications such as Bio and Demeter, and a dedicated fair trade program called HAND IN HAND. The website reflects a mature digital presence with comprehensive product information, recipes, and sustainability initiatives targeting consumers interested in organic lifestyles. Technically, the website uses a modern tech stack including Bootstrap, jQuery, Font Awesome, and integrates a consent management platform (Usercentrics) alongside Google Tag Manager for analytics. The site is mobile optimized, accessible, and SEO friendly, though performance is moderate. Security posture is good with HTTPS enforced and privacy compliance mechanisms in place, but lacks explicit security policies or vulnerability disclosure channels. Overall, the security posture is solid with no visible vulnerabilities or exposed sensitive data. The WHOIS data aligns with the business claims, showing a consistent and legitimate domain registration. The website is safe for general audiences with no adult or questionable content detected. Strategically, Rapunzel Naturkost should enhance its security transparency by publishing a security policy and incident response contacts, implement security headers, and consider a vulnerability disclosure program to further strengthen trust and compliance.

I

ibau GmbH

ibau.de

55

ibau GmbH operates a specialized information service focused on tenders and contracts within the construction industry in Germany. The company provides subscription-based access to relevant business opportunities, targeting decision makers in the construction sector. The website is professionally designed, with good content quality and clear navigation, catering to business professionals seeking procurement information. Technically, the site employs modern JavaScript libraries, Google Tag Manager, Cookiebot for consent management, and integrates marketing and analytics tools such as HubSpot and Hotjar. The site is mobile optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response information are not published. The domain registration uses privacy and brand protection name servers, which is typical for such businesses and does not raise concerns. Overall, the website is trustworthy, compliant with GDPR, and provides a professional user experience.

E

EGN Entsorgungsgesellschaft Niederrhein mbH

entsorgung-niederrhein.de

60

EGN Entsorgungsgesellschaft Niederrhein mbH is a regional full-service provider specializing in waste disposal and recycling services for commercial, industrial, municipal, and private sectors. The company emphasizes sustainable and resource-efficient circular economy solutions, offering a broad range of services including container rental, construction site services, hazardous waste disposal, and event services. Their market position is strong within the Niederrhein region, supported by a network of subsidiaries and partners that enhance their service offerings. Technically, the website is built on modern frameworks such as React and Next.js, ensuring fast performance, mobile optimization, and good SEO practices. The infrastructure appears professionally managed with no signs of blocking or WAF interference, and the site includes a cookie consent mechanism compliant with GDPR requirements. From a security perspective, the site enforces HTTPS, includes standard security headers, and avoids exposing sensitive data. However, explicit security policies and incident response information are not published, representing an area for improvement. The absence of a vulnerability disclosure or security.txt file also suggests opportunities to enhance transparency and trust. Overall, the website presents a professional, trustworthy, and well-maintained digital presence aligned with the company's business objectives. Strategic recommendations include publishing detailed security and incident response policies, adding vulnerability disclosure mechanisms, and explicitly listing data protection officer contacts to strengthen compliance and user trust.

E

Entsorgungsgesellschaft Krefeld GmbH & Co. KG

egk.de

62

The Entsorgungsgesellschaft Krefeld GmbH & Co. KG (EGK) is a regional municipal waste management and environmental services company based in Krefeld, Germany. The company operates a unique combination of waste incineration and sewage treatment plants, generating electricity and district heating for thousands of households. Additionally, EGK maintains an accredited laboratory for water and waste analysis and serves as a significant local employer with approximately 250 staff members. The website reflects a well-structured and professional digital presence, targeting local residents, businesses, and potential employees. It emphasizes environmental responsibility, energy production, and community engagement. Technically, the site is built on modern frameworks such as Next.js and React, with integrations for cookie consent (Usercentrics) and analytics (Google Tag Manager, Microsoft Application Insights). Security best practices are observed with HTTPS enforcement and security headers, although explicit security policies and incident response information are not published. Overall, the site is trustworthy, compliant with GDPR, and provides clear information about services and career opportunities.

D

Digital Campus Zollverein

campus-zollverein.de

47

Digital Campus Zollverein is an educational and innovation hub based in Germany, focusing on digital transformation and technology development. The website presents a professional and well-structured platform built on WordPress with the Divi theme, targeting students, researchers, and digital professionals. The business model revolves around providing digital education, innovation projects, and community engagement at the Zollverein site. Technically, the site uses modern web technologies and plugins, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is credible and trustworthy but would benefit from enhanced privacy and security measures.

W

Westfälische Hochschule

w-hs.de

60

Westfälische Hochschule is a German university of applied sciences with campuses in Gelsenkirchen, Bocholt, and Recklinghausen. The institution focuses on practical education in engineering, business, and natural sciences, offering degree programs, research, and cooperation with industry partners. The website is built on TYPO3 CMS and features a modern, accessible design with active news and event updates. Security posture is adequate with HTTPS enabled but lacks visible security headers and explicit privacy or cookie policies. No contact emails or phone numbers were found in the provided content, which may impact user trust and compliance. WHOIS data confirms the domain's legitimacy and institutional affiliation. Overall, the website is professional and trustworthy but could improve privacy compliance and security best practices.

S

Stadt Gelsenkirchen

gelsenkirchen.de

70

The website www.gelsenkirchen.de serves as the official digital portal for the city government of Gelsenkirchen, Germany. It provides extensive information and services related to municipal administration, education, culture, tourism, social services, and citizen engagement. The site targets residents, businesses, and visitors, offering a comprehensive range of online services and up-to-date news. The business model is that of a public sector entity focused on transparent communication and service delivery to its community. The website demonstrates consistent branding and high content quality, reflecting its authoritative position as a government resource. Technically, the site is built on ASP.NET WebForms with a modern frontend leveraging jQuery, Leaflet for mapping, Bootstrap grid for layout, and Klaro for cookie consent management. The infrastructure appears stable and moderately performant, with good mobile optimization and accessibility features. The use of HTTPS and cookie consent mechanisms indicates a mature approach to privacy and security compliance. From a security perspective, the site enforces HTTPS and employs secure form handling via ASP.NET viewstate. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident and should be implemented to enhance protection. No vulnerabilities or exposed sensitive data were detected. Privacy policies and terms of service are clearly linked and comprehensive, supporting GDPR compliance. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and maintaining up-to-date third-party libraries to sustain security posture and trustworthiness.

V

VEXO Lichttechnik GmbH & Co. KG

vexo-licht.de

42

VEXO Lichttechnik GmbH & Co. KG is a German company specializing in manufacturing and designing outdoor lighting solutions, including object lighting, park and square lighting, and municipal lighting concepts. The company targets public and municipal sectors primarily within Germany, positioning itself as a regional and national supplier of high-quality outdoor lighting products. The website content is primarily in German and focuses on showcasing their lighting products and services with a basic but functional design. Technically, the website employs older JavaScript libraries such as jQuery 1.10.0, along with Slick Carousel and Fancybox for UI elements. The site shows basic mobile optimization and moderate performance but lacks modern CMS identification or advanced frameworks. There is no evidence of analytics or tracking tools, and no social media integration is visible. The hosting appears to be managed via servers indicated by the domain's nameservers. From a security perspective, the site lacks visible HTTPS confirmation and security headers, which lowers its security posture. The use of outdated JavaScript libraries may expose it to vulnerabilities. Privacy compliance is minimal, with a privacy policy page present but no cookie consent mechanism or terms of service found. Contact information is not directly visible on the homepage, which may affect user trust and compliance. Overall, the website is functional but basic, with moderate business credibility but room for improvement in security, privacy compliance, and technical modernization. Strategic recommendations include implementing HTTPS, updating libraries, adding cookie consent, and improving contact transparency to enhance trust and compliance.

S

Stackbox GmbH

stackbox.co

71

Stackbox GmbH is a specialized software solutions and consulting company focused on the eMobility sector, primarily serving businesses in energy and transportation. The company offers tailored services including business process design, IT solution architecture, system integrations, and operations support. Their market position is strengthened by a decade of experience and notable clients such as IONITY and Hubject. The website reflects a professional and consistent brand image with clear communication of services and team expertise. Technically, the website employs modern frameworks like Bootstrap and integrates analytics tools such as Amplitude with session replay capabilities, indicating a mature digital infrastructure. The site is mobile-optimized and well-structured, though some accessibility features could be enhanced. Performance is moderate with good SEO practices. From a security perspective, the site uses HTTPS and cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or sensitive data exposures were detected. Privacy compliance is strong with a comprehensive GDPR-aligned privacy policy. Overall, the website presents a low-risk profile with strong business credibility and good privacy practices. Strategic improvements in security headers, incident response transparency, and accessibility would further enhance trust and compliance.

O

Okeanos Smart Data Solutions GmbH

okeanos.ai

55

Okeanos Smart Data Solutions GmbH is a small German company specializing in water and environmental data solutions aimed at climate adaptation and hydrological hazard management. Their services include consulting, research collaboration, and tailored technological solutions for water cycle understanding, early detection of natural hazards, blue-green infrastructure monitoring, and wastewater treatment optimization. The company targets water management professionals, municipalities, and research institutions. The website is professionally designed with clear navigation and mobile optimization, reflecting a moderate level of digital maturity. The technical stack includes Bootstrap and several JavaScript libraries, but no CMS or advanced analytics tools were detected. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is clearly presented, enhancing business credibility. Overall, the website is trustworthy and functional but would benefit from improved privacy and security practices.

K

K-TEL Communications GmbH

ktel.de

49

K-TEL Communications GmbH is a German telecommunications consulting and service company with over 20 years of experience. They specialize in providing independent advice and transparent brokerage for business IT and telecommunications infrastructure, targeting a broad range of clients from global enterprises to regional startups. Their key services include strategic consulting, contract management, cloud solutions, mobile services, and smart IoT and 5G network deployments. The company positions itself as a trusted partner for modern, secure, and scalable communication solutions. Technically, the website is built on WordPress with a modern tech stack including jQuery and various plugins for user interaction, cookie compliance, and content management. Hosting appears to be with a German provider, and the site demonstrates good mobile optimization and SEO practices. The site uses HTTPS with strong SSL configuration and implements GDPR-compliant cookie consent mechanisms, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses cookie consent management but lacks explicit security headers and a public incident response or vulnerability disclosure policy. No vulnerabilities or exposed sensitive data were detected. WHOIS data is consistent with the business claims, and no privacy protection obscures registrant information, supporting legitimacy. Overall, the website is professional, secure, and compliant with privacy regulations, making it a trustworthy digital presence for K-TEL Communications GmbH. Strategic improvements could include adding security headers, publishing an incident response contact, and establishing a vulnerability disclosure policy to enhance security posture further.

G

GELSENWASSER AG

gelsenwasser.de

65

Gelsenwasser AG is a large German infrastructure company specializing in sustainable water supply, wastewater management, energy procurement and distribution, digital infrastructure, and circular economy solutions. The company targets municipalities, businesses, and consumers primarily in Germany, positioning itself as a regional leader with a strong sustainability focus. The website is professionally designed, mobile-optimized, and provides comprehensive information about the company's business fields, services, and customer offerings. Technically, the site uses TYPO3 CMS, integrates Google Tag Manager for analytics, and employs a robust cookie consent mechanism ensuring GDPR compliance. Accessibility features such as Eye-Able tools enhance usability. Security posture is good with HTTPS enforced and no visible vulnerabilities, though the site lacks a dedicated security policy or incident response information. Overall, the website reflects a mature digital presence with strong business credibility and compliance adherence.

A

Aachen-Termine

aachen-kalender.de

59

Aachen-Kalender.de is a localized event calendar platform focused on providing comprehensive listings of cultural, sports, and community events in Aachen and its surrounding region. The website targets residents and visitors interested in staying informed about local happenings. It leverages WordPress CMS with popular plugins such as The Events Calendar and Yoast SEO to deliver structured event data and optimized search engine presence. The platform offers event search, filtering, and calendar export features, enhancing user engagement and utility. Technically, the website is built on a modern WordPress infrastructure with Elementor for design and jQuery for interactivity. It employs HTTPS with proper security headers, ensuring secure data transmission and basic protection against common web threats. The site is mobile-optimized and provides good accessibility and SEO features, although some accessibility enhancements could be beneficial. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and security headers but lacks explicit privacy and cookie policies, as well as incident response contact information. No vulnerabilities or suspicious activities were detected in the provided content. The absence of cookie consent mechanisms and privacy documentation represents compliance gaps, particularly under GDPR regulations. Overall, Aachen-Kalender.de is a trustworthy and professionally maintained local event platform with solid technical foundations. To enhance its security posture and regulatory compliance, it should implement comprehensive privacy and cookie policies, introduce consent mechanisms, and provide clear incident response contacts.

S

Senckenberg Gesellschaft für Naturforschung

senckenberg.de

61

Senckenberg Gesellschaft für Naturforschung is a well-established non-profit research institute founded in 1817, specializing in biodiversity and natural sciences. It holds a strong market position as a leading research entity in Germany and internationally. The website reflects a mature digital infrastructure built on WordPress with comprehensive multilingual support and integration of various media and social platforms. Security measures include HTTPS, Wordfence, Google reCAPTCHA, and a robust cookie consent mechanism, indicating a strong security posture. No critical vulnerabilities or compliance gaps were detected. Overall, the website demonstrates professionalism, trustworthiness, and compliance with GDPR requirements.

itrium is a small German software development company specializing in custom software solutions to support organizational processes across various industries. The company emphasizes combining IT and business expertise to improve workflow efficiency and has been active for approximately 15 years with a stable team based in Wuppertal. The website is built on the Contao CMS platform and uses modern JavaScript libraries like Isotope for UI enhancements. While the site is accessible and professionally designed with clear navigation, it lacks visible contact information and advanced privacy or security features. No forms or data collection mechanisms are evident on the main page, and no social media presence is linked. Security posture is moderate but could be improved by implementing HTTPS verification, security headers, and cookie consent mechanisms. The WHOIS data aligns well with the website's claims, showing consistent domain ownership and appropriate domain age.

The website represents the 39th International A+A Congress 2025 organized by the Bundesarbeitsgemeinschaft für Sicherheit und Gesundheit bei der Arbeit e. V. (Basi), a German non-profit focused on occupational safety and health. The site serves as a portal for conference participants to manage their accounts and access event information. The technical infrastructure is based on the Converia conference management system hosted on Schlundtech servers, with a modern but basic tech stack including JavaScript and CSS. Accessibility and mobile optimization are good, though SEO is basic. Security posture is moderate with CSRF protection on login forms but lacks visible security headers and cookie consent mechanisms. The site is fully accessible with no WAF or blocking detected. Contact information is clearly provided, enhancing business credibility.

M

meinebghm.de

meinebghm.de

57

The website meinebghm.de appears to be a digital portal for a statutory accident insurance institution in Germany, providing services such as insurance account management, seminar booking, and administrative functions for insured persons and companies. The site is built using modern web technologies including React and Next.js, indicating a contemporary technical infrastructure. However, the visible content is minimal, with no user-facing text or metadata such as privacy or cookie policies, contact information, or terms of service. Security posture is moderate but lacks visible security headers and explicit SSL/TLS configuration details. No signs of WAF or blocking mechanisms were detected, and the site appears accessible. Overall, the site demonstrates basic digital maturity but requires improvements in content completeness, privacy compliance, and security best practices to enhance trust and usability.

The BGHM Magazin website serves as an informational platform for the Berufsgenossenschaft Holz und Metall, a German statutory accident insurance institution focused on occupational safety and health in the wood and metal sectors. The site provides news, research, and educational content aimed at employees, employers, and safety professionals. The organization is well-established with a history dating back to 1925, positioning itself as a trusted authority in workplace safety within Germany. Technically, the website is built on TYPO3 CMS, leveraging modern frontend technologies such as Bootstrap and jQuery. It integrates Matomo for analytics and includes accessibility features like ReadSpeaker. The site is mobile-optimized and demonstrates good SEO practices. Hosting appears stable with domain control via GoDaddy DNS services. From a security perspective, the site enforces HTTPS and implements a GDPR-compliant cookie consent mechanism. While no advanced security headers were detected in the provided data, no vulnerabilities or exposed sensitive data were found. The absence of a published security policy or incident response contact is noted as an area for improvement. Overall, the website is professional, trustworthy, and compliant with privacy regulations. It effectively serves its target audience with relevant content and maintains a solid security posture. Strategic enhancements in security transparency and legal documentation could further strengthen its position.

F

Fairtrade Deutschland

fairtrade-deutschland.de

65

Fairtrade Deutschland operates as a non-profit organization focused on promoting fair trade principles and products within Germany. The website serves as an educational and advocacy platform, providing detailed information about fair trade standards, products, campaigns, and business engagement opportunities. It targets consumers, businesses, and activists interested in ethical and sustainable trade practices. The organization holds a strong market position in the fair trade sector in Germany, supported by consistent branding and comprehensive content. Technically, the website is built on Adobe Experience Manager, leveraging modern JavaScript libraries and consent management tools such as Usercentrics. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Tracking and analytics are implemented primarily through Google Tag Manager, with user consent mechanisms in place. From a security perspective, the site uses HTTPS and includes consent management but lacks visible security headers and explicit security policies or incident response contacts. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and branding strongly suggest legitimacy. No critical vulnerabilities or adult content were detected. Overall, the website is professional and trustworthy but would benefit from improved transparency in domain registration, explicit privacy and security policies, and clearer contact information to enhance user trust and compliance.

The website www.kaiserwagenticket.de is operated by Wuppertal Marketing GmbH and serves as a ticketing and information platform for cultural and historical tours in Wuppertal, Germany. It offers services such as historic Kaiserwagen rides, city tours, and guided walks, targeting tourists and local visitors interested in cultural experiences. The site is well-branded, with consistent design and good content quality focused on its niche market. Technically, the site uses a CMS called itrium .datentechnik, with client-side technologies including jQuery 1.11.0 and a comprehensive accessibility tool from digiAccess, enhancing usability for users with disabilities. Hosting is provided via rzone.de nameservers, indicating a stable infrastructure. Security posture is moderate with HTTPS enabled and secure login forms, but the use of an outdated jQuery version and lack of security headers present potential vulnerabilities. Privacy compliance is basic, with a privacy policy and terms of service present but no visible cookie consent mechanism. Overall, the site is functional, accessible, and trustworthy but could improve security and privacy features.