Germany security reports

P

plus B GmbH

plusb.de

56

plus B GmbH is a Berlin-based digital service provider specializing in TYPO3 CMS development, app creation, consulting, and e-commerce solutions. With over 20 years of experience, the company serves agencies, medium-sized businesses, NGOs, and public institutions, emphasizing accessibility, 3D visualization, and AI integration. The website reflects a professional and consistent brand image, targeting a broad digital services market in Germany. Technically, the site is built on TYPO3 CMS, leveraging modern JavaScript modules and Matomo for analytics with a cookie consent mechanism ensuring GDPR compliance. The hosting uses domaincontrol.com name servers, indicating professional domain management. The site is mobile-optimized, accessible, and SEO-friendly, though some security headers could be improved. Security posture is solid with HTTPS enforced and no exposed sensitive data, but lacks explicit security policies or incident response information. No vulnerabilities or suspicious patterns were detected. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Overall, the website and business present a low-risk profile with a high degree of professionalism and trustworthiness. Strategic improvements in security headers and vulnerability disclosure would further enhance their security maturity.

G

GEISTER MEDIZINTECHNIK GMBH

geister.com

54

GEISTER MEDIZINTECHNIK GMBH is a German-based manufacturer specializing in premium reusable surgical instruments, including titanium instruments and various clamps for cardiovascular and thoracic surgery. The company emphasizes German craftsmanship, precision, and sustainability, targeting medical professionals and OEM partners globally. Their website reflects a mature digital presence with multilingual support and detailed product highlights. Technically, the site uses modern JavaScript frameworks such as Vue.js and integrates Google Tag Manager for analytics, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though the absence of explicit security headers and incident response information suggests room for improvement. The WHOIS data is notably missing, which raises some concerns about domain registration transparency but does not directly contradict the professional business presence. Overall, the website is trustworthy and well-maintained but would benefit from enhanced security disclosures and contact transparency.

F

Fumedica Deutschland

fumedica.de

45

Fumedica Deutschland operates in the healthcare sector, providing medical-related products or services primarily targeted at the German market. The website presents basic information with limited interactive features and lacks comprehensive privacy, cookie, or terms of service policies. The technical infrastructure relies on older technologies such as jQuery 2.2.4 and Font Awesome 6 Pro, hosted on servers associated with kreativmedia.ch. Security posture is minimal with no evident security headers or advanced protections, and no contact or incident response information is available. Overall, the website serves as a basic informational platform with moderate digital maturity but requires improvements in security, privacy compliance, and user engagement features.

The website kh-berlin.de represents Weißensee Kunsthochschule Berlin, a specialized public art university in Germany offering various art and design degree programs. The site is well-structured with detailed academic and institutional information targeting students, academics, and art professionals. The technical infrastructure is based on TYPO3 CMS with jQuery and Matomo analytics, indicating a moderate level of digital maturity. The site is mobile optimized and provides good navigation clarity. Security posture is moderate with HTTPS implied but lacking visible security headers and updated libraries. Privacy and cookie policies are not found, indicating compliance gaps. Overall, the site is professional but could improve in privacy compliance and security best practices.

The Universität der Künste Berlin (UdK Berlin) is a large, well-established public university in Germany specializing in artistic education, research, and cultural activities. It offers over 70 study programs to approximately 4,000 students, covering all artistic disciplines and related sciences. The university has a strong market position with a history spanning over 50 years in its current form and roots extending over three centuries. The website reflects a professional and comprehensive digital presence, targeting students, staff, alumni, and partners. It provides extensive information about faculties, events, news, and services.

K

KHSB

khsb-berlin.de

60

KHSB is an educational institution based in Germany, providing higher education services primarily targeting students and the academic community. The website is built on TYPO3 CMS and demonstrates a moderate level of digital maturity with modern technologies and a responsive design. The presence of Cookiebot for cookie consent and Matomo for analytics reflects a commitment to privacy and GDPR compliance, although explicit privacy and terms of service pages are not detected in the provided content. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but could be improved with additional security headers and published policies. Overall, the website is professional and trustworthy, serving its educational purpose effectively.

I

Internationale Psychoanalytische Universität Berlin

ipu-berlin.de

51

The Internationale Psychoanalytische Universität Berlin (IPU) is a private, state-recognized university specializing in psychoanalytic psychology and psychotherapy education. Founded in 2009, it offers unique bachelor and master programs with a strong psychoanalytic focus, supported by interdisciplinary research and international partnerships. The website reflects a mature academic institution with comprehensive content, clear navigation, and professional branding. Technically, the site is built on TYPO3 CMS, uses modern web technologies, and integrates Google Analytics and Tag Manager for analytics. Security practices include HTTPS, CSRF protection, and a robust cookie consent mechanism, though some security headers and explicit incident response policies are absent. Overall, the domain and website are consistent with the institution's identity and demonstrate a high level of trustworthiness and compliance with GDPR.

H

Humboldt-Universität zu Berlin

hu-berlin.de

70

Humboldt-Universität zu Berlin is a prominent German university offering a wide range of academic programs and research initiatives. The website reflects its role as a leading educational institution with a strong emphasis on interdisciplinary research and social cohesion. It targets students, researchers, academic staff, and the general public interested in academic content. The university maintains a large-scale presence with consistent branding and professional content quality. Technically, the website is built on the Plone CMS platform, utilizing modern JavaScript libraries such as jQuery and bxSlider for interactive elements. It employs Matomo analytics with user consent mechanisms, indicating a mature approach to privacy. The site is hosted likely within academic networks in Germany, ensuring reliability and performance rated as moderate to good. Mobile optimization and accessibility features are well implemented. From a security perspective, the site enforces HTTPS and uses script integrity attributes, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear cookie consent and a comprehensive privacy policy. Business credibility is high, supported by certifications and trust signals. Overall, the website is professional, secure, and compliant, with minor recommendations to enhance security headers and publish vulnerability disclosure information to further strengthen trust and security posture.

H

Hochschule für Wirtschaft und Recht Berlin

hwr-berlin.de

54

Hochschule für Wirtschaft und Recht Berlin (HWR Berlin) is a large public university in Germany specializing in economics, law, and administration. The website offers comprehensive information about its 55 degree programs including Bachelor, Master, MBA, and dual study options, targeting students, prospective students, and academic staff. The site is well-structured with extensive navigation and content in German and English, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS and uses a self-hosted Matomo analytics platform, indicating a focus on data control and privacy. Security posture is adequate with HTTPS and asynchronous script loading, but lacks visible security headers and explicit privacy or cookie policies. No contact emails or phone numbers were found in the provided content, which may impact user support and trust. Overall, the site is professional, safe, and trustworthy but could improve privacy compliance and security transparency.

H

Hochschule für Technik und Wirtschaft Berlin

htw-berlin.de

63

HTW Berlin is a prominent University of Applied Sciences located in Germany, offering a wide range of Bachelor, Master, and MBA programs across multiple disciplines including engineering, business, design, and health. The institution is well-ranked nationally and provides extensive research and continuing education services. The website reflects a mature digital presence with clear navigation, multilingual support, and active engagement with its target audiences such as prospective students, current students, alumni, and industry partners. Technically, the site uses modern web standards, integrates Matomo analytics with user consent, and maintains good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved and explicit security policies are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

H

Hochschule für Schauspielkunst Ernst Busch

hfs-berlin.de

60

Hochschule für Schauspielkunst Ernst Busch is a prestigious German higher education institution specializing in performing arts education, offering six specialized degree programs including acting, directing, dramaturgy, puppetry, play and object, and choreography. The institution enjoys a strong international reputation and serves students, faculty, and theater enthusiasts primarily in Germany. The website is well-structured, professionally designed, and rich in relevant content, supporting the institution's educational mission and community engagement. Technically, the site is built on TYPO3 CMS, uses privacy-conscious Matomo analytics, and integrates partner and donation widgets, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and no exposed sensitive data, though improvements are recommended in cookie consent and security headers. Overall, the website demonstrates high business credibility and trustworthiness with clear contact information and social media presence.

H

Hochschule für Musik Hanns Eisler Berlin

hfm-berlin.de

42

Hochschule für Musik Hanns Eisler Berlin is a well-established public music university founded in 1950, recognized as one of Europe's leading music institutions. The website provides comprehensive information about its academic offerings, ensembles, events, and student services, targeting prospective and current students, faculty, and music professionals. Technically, the site is built on TYPO3 CMS and hosted by Hetzner, featuring a well-structured, accessible, and mobile-optimized design. Security posture is solid with HTTPS enabled and secure form handling, but lacks visible security headers and formal privacy or cookie policies. No incident response or vulnerability disclosure mechanisms are evident, which could be improved to enhance trust and compliance. Overall, the site is professional, trustworthy, and content-rich, but would benefit from enhanced privacy and security transparency.

H

Hochschule für soziale Arbeit und Pädagogik (HSAP)

hsap.de

47

Hochschule für soziale Arbeit und Pädagogik (HSAP) is a specialized higher education institution based in Berlin, Germany, focusing on social work, childhood pedagogy, and inclusive education. The institution offers a variety of bachelor and master degree programs, including dual and part-time study formats, often in cooperation with external partners such as the Paritätische Akademie. The website reflects a professional and well-maintained digital presence with clear navigation, relevant content, and active updates on news and publications. Technically, the website is built on TYPO3 CMS, utilizing common JavaScript libraries like jQuery and Slick Carousel for interactive elements. It employs Google Tag Manager for analytics with a strong emphasis on user consent and privacy compliance, including GDPR-aligned cookie management. The site is served over HTTPS with good SSL configuration, although some security headers are missing, which could be improved. From a security perspective, the website demonstrates a solid baseline with encrypted connections and consent management but lacks published security policies or incident response contacts. No vulnerabilities or suspicious activities were detected in the content or WHOIS data. Overall, the site is trustworthy and suitable for its educational audience. Strategically, HSAP should consider enhancing its security posture by implementing recommended HTTP security headers and publishing a formal security policy and incident response information to further build trust and compliance.

H

Hertie School

hertie-school.org

68

The Hertie School is a well-established educational institution based in Berlin, Germany, specializing in governance, public policy, and related social sciences. Founded in 2004 and supported by the Hertie Foundation, it offers a range of graduate and doctoral programs, executive education, and conducts interdisciplinary research. The school is recognized and accredited by reputable bodies, positioning itself as a top-ranked university in its field in Europe. The website reflects a professional and consistent brand image, targeting students, researchers, and professionals seeking advanced education and knowledge in governance and public affairs. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries such as Flickity, Slick Carousel, and Selectize to enhance user experience. It integrates Google Tag Manager for analytics and employs a cookie consent mechanism to comply with privacy regulations. The site is mobile-optimized, accessible, and SEO-friendly, providing a smooth user experience. From a security perspective, the site enforces HTTPS and implements privacy and cookie policies aligned with GDPR requirements. However, it lacks explicit security headers and a public security policy or incident response contact, which are recommended for enhanced security posture. No vulnerabilities or suspicious activities were detected in the content or technical setup. Overall, the Hertie School's website demonstrates a strong digital presence with high content quality, good technical implementation, and solid privacy compliance. The absence of WHOIS data limits domain registration insights, but the professional nature of the site and its consistent branding support its legitimacy. Strategic recommendations include improving security headers and publishing a security policy to further strengthen trust and security.

E

Evangelische Hochschule Berlin

eh-berlin.de

67

The Evangelische Hochschule Berlin (EHB) is a specialized higher education institution based in Germany, focusing on practical degree programs in social work, health, nursing, and education. The website serves as an information portal for prospective and current students, offering detailed navigation through academic programs, research, international opportunities, and continuing education. The institution positions itself as a medium-sized university of applied sciences with a clear focus on social and health sectors. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web standards such as HTML5, CSS, and JavaScript. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The absence of advanced analytics or tracking scripts suggests a privacy-conscious approach or limited digital marketing. From a security perspective, the site lacks visible security headers and explicit security or privacy policies, which lowers its security posture. No blocking mechanisms or WAF challenges were detected, indicating open accessibility. The WHOIS data is minimal, with generic DNS servers and no detailed registrant information, which slightly impacts trust but is not uncommon for educational institutions. Overall, the website is professional and functional but would benefit from enhanced transparency in privacy and security policies, improved security headers, and clearer contact information to strengthen trust and compliance.

D

Deutsche Film- und Fernsehakademie Berlin GmbH

dffb.de

43

The Deutsche Film- und Fernsehakademie Berlin GmbH (DFFB) is a well-established educational institution specializing in film and television training. The website presents a professional and comprehensive digital presence, targeting aspiring filmmakers and media professionals globally. It offers detailed information about its academic programs, events, and film projects, positioning itself as a leading film academy in Germany with international outreach. Technically, the site is built on WordPress with modern SEO and cookie compliance tools, ensuring good performance and user experience across devices. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks some advanced security headers and a public security policy. Overall, the site is trustworthy, compliant with GDPR, and safe for general audiences.

C

Charité – Universitätsmedizin Berlin

charite.de

64

Charité – Universitätsmedizin Berlin is a leading university hospital based in Berlin, Germany, providing comprehensive medical services, research, and education for patients, doctors, scientists, and students. The website serves as an information hub showcasing their healthcare offerings, research activities, career opportunities, and organizational details. The site targets a broad audience including patients seeking treatment, medical professionals, and academic communities. Technically, the website is built on TYPO3 CMS and employs a variety of JavaScript libraries such as jQuery, Modernizr, and FlexSlider to enhance user experience. The site is mobile-optimized and uses HTTPS, ensuring secure communication. However, some modern security best practices like security headers are not evident, and privacy compliance documentation is lacking. From a security perspective, the site benefits from HTTPS and does not expose sensitive data or use vulnerable libraries visibly. Nonetheless, the absence of explicit privacy policies, cookie consent mechanisms, and vulnerability disclosure pages indicates room for improvement in compliance and transparency. No WAF or blocking mechanisms were detected, and the content is fully accessible and safe for general audiences. Overall, the website reflects a professional and trustworthy healthcare institution with good technical implementation but requires enhancements in privacy compliance and security transparency to align with best practices and regulatory requirements.

B

Berliner Hochschule für Technik

beuth-hochschule.de

65

Berliner Hochschule für Technik (BHT) is a public technical university in Berlin offering over 70 Bachelor and Master degree programs in engineering, natural sciences, and economics. The institution emphasizes practical, family-friendly education with strong ties to industry and research. The website is built on TYPO3 CMS and features comprehensive content including study programs, research focus, events, and student services. Technically, the site uses modern web technologies and provides good mobile optimization and accessibility. Security posture is adequate with HTTPS and cookie consent mechanisms, though security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. Overall, the site reflects a professional, trustworthy educational institution with a strong digital presence.

B

Barenboim-Said Akademie

barenboimsaid.de

67

The Barenboim-Said Akademie website represents a well-established educational and cultural institution focused on music education and cultural exchange. The site offers a range of services including masterclasses, concerts, and digital content, targeting students, music professionals, and cultural enthusiasts. The business model is non-profit and niche, with a strong cultural and educational focus primarily in Germany. The website is professionally designed with consistent branding and good content quality, supporting its mission effectively. From a technical perspective, the website employs modern technologies such as Vue.js, integrates with multiple third-party platforms like Vimeo, Google Analytics, Spotify, and Bandcamp, and uses Cookiebot for GDPR-compliant cookie management. Hosting appears to be stable and secure, likely leveraging Cloudflare services. Performance and mobile optimization are good, though accessibility features are basic. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not clearly identified and could be improved. No public security policy or incident response contacts are found, which could enhance trust and preparedness. No vulnerabilities or critical issues were detected. Overall, the website is safe, trustworthy, and compliant with privacy regulations. It does not contain adult or questionable content and is accessible without WAF or security challenges. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility features to further strengthen the site’s security and user experience.

A

Alice Salomon Hochschule Berlin

ash-berlin.eu

66

Alice Salomon Hochschule Berlin (ASH Berlin) is the largest German state university specializing in social work, health, education, and upbringing, offering 20 Bachelor and Master degree programs. The institution targets students, researchers, and continuing education participants, including international students. The website reflects a professional and comprehensive digital presence with rich content about academic programs, research, events, and student support services. The business model is that of a public higher education institution with a strong emphasis on social responsibility and international cooperation. Technically, the website is built on TYPO3 CMS and uses modern web technologies such as jQuery, Bootstrap, and MediaElement.js. It is mobile-optimized, accessible, and SEO-friendly. The site employs Matomo analytics with a cookie consent mechanism, indicating a privacy-conscious approach. No blocking or WAF challenges were detected, and the site is served over HTTPS with good security practices, although some security headers could be improved. Security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the WHOIS data is privacy protected and unavailable, which is common for EU domains but limits transparency. The website maintains GDPR compliance with a comprehensive privacy policy and cookie consent. Overall, the site is trustworthy, professional, and well-maintained. The main risk is the lack of publicly available WHOIS registrant data, but given the institutional nature and consistent content, this is not a significant concern. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and adding a security.txt file to improve vulnerability disclosure transparency.

S

studierendenWERK BERLIN

studierendenbefragung.berlin

54

The website applicants.nqap.de hosts a student survey platform for studierendenWERK BERLIN, a public service organization focused on student welfare in Berlin. The platform collects anonymous feedback from students to improve services and offerings. The site is built with modern Angular technology and hosted on sysEleven infrastructure, indicating a mature technical setup. The content is well-structured, professional, and targeted specifically at students in Berlin, with clear instructions and contact points for data protection and press inquiries. Security posture is adequate with HTTPS implied, but lacks visible security headers and explicit incident response policies. Privacy compliance is supported by a clear privacy policy and data protection officer contact, though cookie consent mechanisms are absent. Overall, the site is trustworthy and professionally maintained, serving its educational and survey purpose effectively.

NETQUES . daten & diagnostik GmbH operates the NQAP platform, a GDPR-compliant online application management system designed primarily for public sector and educational institutions in Germany. The platform digitizes and automates application processes, reducing paperwork and accelerating decision-making. The company positions itself as a niche technology provider with a focus on secure, efficient, and user-friendly application workflows. The website is professionally designed, consistent in branding, and targets organizations requiring compliant digital application solutions. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, and various UI enhancement libraries. Security is well considered with HTTPS, Content Security Policies, and secure form handling including CSRF tokens and honeypot anti-spam measures. However, some security headers could be improved, and no cookie consent mechanism was detected despite GDPR emphasis. The WHOIS data is unavailable due to registry restrictions common for .es domains, but the website content and business information indicate a legitimate and professional operation. Overall, the security posture is strong with good data protection practices and ISO-certified hosting claims. The absence of vulnerability disclosure and incident response contacts are areas for improvement. The website is safe for general audiences, with no adult or questionable content. The business credibility is high, supported by clear contact information and trust signals such as LinkedIn presence and ISO certifications. Strategically, NETQUES should enhance transparency by adding cookie consent, incident response information, and vulnerability disclosure policies. Improving accessibility and adding additional security headers would further strengthen their security posture and compliance. These steps will enhance trust and align with their GDPR-focused business model.

B

Trending - berlin.social

berlin.social

64

berlin.social is an independent Mastodon social networking instance focused on the Berlin community, providing a platform for local discussions and trending posts. It operates on the open-source Mastodon platform version 4.4.7, leveraging modern web technologies including React and ES modules. The site is accessible without WAF or security challenges and presents a good user experience with mobile optimization and clear navigation. Security posture is moderate with HTTPS likely enabled but lacking explicit security headers and cookie consent mechanisms. Privacy policy is present and GDPR compliance appears basic but adequate for the platform type. WHOIS data is unavailable due to TLD restrictions, but the site shows legitimacy through visible admin accounts and active user statistics.

The website represents a small German software provider specializing in solutions for Studentenwerke, offering products such as inventory management, dormitory management, accounting, and cash register systems. The business positions itself as the leading provider in its niche within Germany. The technical infrastructure is basic, relying on legacy HTML standards and a CMS named 'web to date 8.0'. There is no evidence of modern SEO, accessibility, or mobile optimization. Security posture is weak due to lack of HTTPS and security headers, and no visible privacy or cookie consent mechanisms. Contact information and incident response details are absent, limiting trust and compliance. Overall, the site is functional but outdated and lacking in security and privacy best practices.

R

RTL Group

rtl.com

67

RTL Group is a leading European entertainment company operating a broad portfolio of TV channels, streaming services, radio stations, and content production entities. The company holds a strong market position with a diversified media business model and extensive reach across multiple countries. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive corporate information. Technically, the site uses modern frameworks and integrates privacy management tools, indicating a good level of digital maturity. Security posture is solid with HTTPS and consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site is trustworthy and well-maintained, supporting RTL Group's corporate branding and business objectives.

B

Bonial

bonial.com

68

Bonial is a leading digital advertising platform specializing in retail and brand marketing in Germany and France. The company offers innovative solutions such as digital flyer alternatives and location-based marketing to over 1,500 retailers and brands, reaching 14.4 million unique users monthly. Their business model focuses on efficient, relevant, and sustainable advertising to drive retail sales. Technically, the website is built on HubSpot CMS with modern marketing tools and tracking integrations, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and consent management, though improvements in security headers and library updates are recommended. The absence of WHOIS data for the domain introduces some trust concerns, but the professional content and branding mitigate this risk. Overall, Bonial presents a credible and mature digital advertising business with room for technical and security enhancements.

studierendenWERK BERLIN is a large, well-established public service organization dedicated to supporting students in Berlin's universities with a broad range of services including housing, cafeteria (Mensa), financial aid (BAföG), counseling, cultural programs, childcare, and international student support. The website reflects a professional and comprehensive digital presence with clear navigation and rich content tailored to its target audience of students. Technically, the site uses modern frameworks such as Bootstrap and jQuery, integrates privacy-conscious analytics (Matomo), and employs a consent management platform (Usercentrics) to comply with GDPR. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. WHOIS data is privacy protected but consistent with a legitimate entity. Overall, the site demonstrates a mature digital infrastructure and trustworthy business model.

S

SuperOffice

superoffice.de

47

SuperOffice is a well-established European CRM software provider offering cloud-based customer relationship management solutions aimed at helping businesses convert relationships into revenue. The website is professionally designed, mobile-optimized, and integrates modern marketing and analytics tools such as HubSpot, Google Tag Manager, and Microsoft Application Insights. Hosting and infrastructure leverage Microsoft Azure and Cloudflare, ensuring robust performance and security. The security posture is strong with HTTPS enforcement, reCAPTCHA protection, and comprehensive cookie consent mechanisms aligned with GDPR requirements. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the site reflects a mature digital presence with good privacy compliance and trustworthy domain registration.

Hilscher Gesellschaft für Systemautomation mbH is a well-established German company specializing in industrial communication solutions. Their offerings span from communication controllers and embedded modules to cloud-based industrial IoT platforms, positioning them as a market leader with over 35 years of experience. The website reflects a professional B2B technology provider targeting industrial automation professionals, machine builders, and system integrators. Technically, the site is built on TYPO3 CMS, uses modern JavaScript libraries like jQuery, and integrates privacy-conscious analytics tools such as Matomo and etracker. The presence of a comprehensive cookie consent mechanism and multi-language support indicates a mature digital presence. Security-wise, the site enforces HTTPS and uses cookie consent but lacks explicit security headers and a published security policy or incident response contacts. The WHOIS data is missing, which is unusual and slightly reduces trustworthiness, but the website content and business information appear legitimate and professional overall.

T

Tender Service Deutschland

tender-service.de

60

Tender Service Deutschland operates a professional platform offering tailored public tender and procurement services primarily targeting German and international businesses. The company leverages over 20 years of experience to provide smart tools, market insights, and personal consulting to help clients efficiently win tenders. The website is built on a modern Angular framework with integrations for analytics and marketing, demonstrating a mature digital infrastructure. Security posture is good with HTTPS and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is basic with a cookie consent mechanism but no visible privacy policy or terms of service pages. Overall, the site is professional, trustworthy, and well-structured, serving a medium-sized business audience in the government and related sectors.

V

VICTOR Europe GmbH

victor-europe.com

64

VICTOR Europe GmbH operates as a specialist retailer focused on indoor sports equipment, particularly badminton, squash, and tennis products. The company targets sports enthusiasts in Europe, offering rackets, shoes, apparel, and accessories. The website is professionally designed using the Wix platform, providing a good user experience and mobile optimization. However, the absence of WHOIS registration data raises concerns about domain legitimacy. The site lacks critical privacy and cookie policies, which impacts compliance with GDPR and related regulations. Security posture is moderate with HTTPS enabled but missing advanced security headers and policies. Overall, the business appears credible with a clear market focus but would benefit from enhanced transparency and compliance documentation.

C

COSMO

cosmo-info.de

51

COSMO is a German company specializing in heating and ventilation products and services, targeting both end consumers and professional markets. Their website showcases a range of products including solar technology, radiators, underfloor heating, and air ventilation systems, supported by tools like energy saving calculators and floor planners. The company positions itself as a provider of high-quality, innovative heating and ventilation solutions with a focus on comfort and energy efficiency. Technically, the website is built on Drupal 10, leveraging modern front-end libraries such as Swiper.js for interactive elements, and integrates third-party services like Google Maps API and Adobe Launch for analytics and marketing. Usercentrics CMP is implemented for cookie consent, reflecting GDPR compliance efforts. Hosting is provided by Adacor, a reputable German hosting provider. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is partial due to the absence of a visible privacy policy and terms of service. Overall, the website is professional, well-structured, and trustworthy, with good content quality and technical implementation. Strategic improvements include publishing comprehensive privacy and security policies, adding security headers, and providing vulnerability disclosure information to enhance trust and compliance.

I

I love Hummus s.r.o.

ilovekimchi.de

49

I love Hummus s.r.o. operates the website ilovekimchi.de, an e-commerce platform specializing in Korean fermented foods such as Kimchi. The company targets both B2B partners and retail customers, emphasizing certified quality products under strict IFS and BIO standards. The website is professionally designed, multilingual, and offers a range of products with clear pricing and availability. The business maintains a niche market position with a focus on health-conscious consumers and wholesale partnerships. Technically, the website leverages modern e-commerce infrastructure provided by Upgates, integrates multiple analytics and marketing tools including Google Analytics 4, Microsoft Clarity, and Facebook Pixel, and uses standard web technologies such as Bootstrap and jQuery. Hosting is managed via Forpsi nameservers, indicating a reliable hosting environment. The site is mobile-optimized and SEO-friendly, with proper cookie consent mechanisms in place. From a security perspective, the site enforces HTTPS and employs cookie consent management, but lacks explicit security headers and a published security or incident response policy. No vulnerabilities or exposed sensitive data were detected in the analysis. WHOIS data is minimal but consistent with a small business profile. Overall, the security posture is good but could be improved with additional headers and transparency. The overall risk assessment is low, with recommendations to enhance security headers, publish incident response contacts, and maintain regular audits of third-party scripts. The website is trustworthy, compliant with GDPR, and provides clear contact channels, supporting a positive user and business experience.

K

KM2 >>

km2.de

53

KM2 >> is a professional digital agency based in Düsseldorf, Germany, specializing in web development, design, and online marketing services. The company positions itself as a trusted TYPO3 Gold Member and certified Solutions Partner, offering comprehensive digital solutions to businesses seeking enhanced online visibility. Their website reflects a mature digital presence with clear service offerings and client references, targeting businesses aiming to improve their digital footprint. Technically, the site is built on TYPO3 CMS, hosted behind Cloudflare, and integrates modern tracking and consent management tools such as Google Tag Manager and Usercentrics CMP. Security is well-managed with HTTPS, appropriate security headers, and privacy compliance mechanisms in place. No critical vulnerabilities or suspicious patterns were detected. Overall, KM2 >> demonstrates a strong security posture and digital maturity appropriate for a small to medium-sized digital agency.

F

Freie Universität Berlin

fu-berlin.de

50

Freie Universität Berlin is a leading German excellence university established in 1948, offering over 150 academic programs across twelve faculties and three central institutes. The website serves a diverse audience including students, researchers, staff, and international partners, providing comprehensive information on study programs, research, international cooperation, and campus services. The site is well-structured, professionally designed, and supports accessibility and mobile optimization. Technically, it is built on a Ruby on Rails framework with Infopark CMS Fiona, leveraging modern web standards and security best practices such as HTTPS and security headers. However, it lacks a visible cookie consent mechanism and explicit security or incident response policies, which are areas for improvement. Overall, the website demonstrates a strong security posture with no detected vulnerabilities or suspicious content, reflecting the institution's credibility and trustworthiness.

H

Hitzerot Shop

hitzerot.com

72

Hitzerot Shop is a niche e-commerce business based in Berlin specializing in print publications related to graffiti and urban culture. The website offers a curated selection of books, zines, exhibition catalogues, and prints, targeting collectors and enthusiasts of this art form. The business has been active since 2015, aligning with the domain registration date, and maintains a focused market position within the retail and media sectors. The website is professionally designed with consistent branding and good content quality, supporting a positive user experience.

Unlock Book Fair is a niche cultural event organizer specializing in graffiti books and zines, hosting international exhibitors and collaborating with cultural institutions in Germany. The website is built on WordPress with a modern tech stack including Yoast SEO and UIkit, providing a good user experience and mobile optimization. Security posture is moderate with HTTPS enabled but lacking DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security practices.

C

campoint AG

campoint.net

29

Campoint AG is a technology company specializing in e-commerce and digital business process solutions. Positioned as a pioneer and expert in the value chain of online portals, the company offers a comprehensive range of services including software development, design, hosting, payment processing, and customer service. They also operate a training campus to nurture talent, emphasizing innovation and digital freshness. The website reflects a professional and consistent brand image targeting businesses and professionals seeking digital entertainment solutions and e-commerce support. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and GDPR cookie consent mechanisms, ensuring good SEO and privacy compliance. The site is mobile-optimized and uses HTTPS with valid SSL certificates, indicating a mature digital infrastructure. However, the absence of detailed hosting information and some advanced security headers suggests room for technical improvements. From a security perspective, the site enforces HTTPS and cookie consent but lacks visible security policies, incident response information, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected, but the missing WHOIS data raises concerns about domain legitimacy. The company demonstrates good privacy compliance with GDPR and provides clear contact information, enhancing trust. Overall, Campoint AG presents a solid business and technical profile with a professional web presence. The main risk lies in the lack of WHOIS transparency, which should be addressed to improve domain trustworthiness. Strategic recommendations include publishing security policies, implementing security headers, and establishing vulnerability disclosure channels to strengthen security posture and compliance.

E

Energiequelle

energiequelle.com

68

Energiequelle is an established international company specializing in renewable energy project development, focusing on wind, solar, substations, and energy storage since 1997. The company operates across multiple European countries and South Africa, emphasizing partnership and stakeholder participation in the energy transition. The website is built on the Neos CMS platform using the Flow PHP framework, with a moderate technical maturity and good content quality. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks visible security headers and explicit privacy policies. The absence of WHOIS data for the domain reduces trustworthiness, although the professional content and international presence support legitimacy. Overall, the website is professional, safe, and well-structured but would benefit from enhanced transparency and security practices.

E

Energiequelle International

energiequelle-dev.de

46

Energiequelle International is a well-established company specializing in renewable energy project development, focusing on wind, solar, substations, and energy storage systems. Operating since 1997, it serves markets across Europe and South Africa, emphasizing partnership and stakeholder participation. The website reflects a professional and consistent brand presence with clear business descriptions and international reach. Technically, the site is built on the Neos CMS platform using the Flow PHP framework, with jQuery for client-side scripting. The hosting is managed via agenturserver, indicating a German hosting provider. The site implements GDPR-compliant cookie consent mechanisms but lacks visible privacy and terms of service pages. Security posture is moderate with HTTPS enabled but missing key security headers and published security policies. Overall, the site is safe, professional, and business-focused with room for improvement in privacy and security transparency.

P

PROFIBUS Nutzerorganisation e.V. (PNO)

profibus.de

62

PROFIBUS Nutzerorganisation e.V. (PNO) is a leading industrial association based in Germany focused on the development, standardization, and dissemination of industrial communication and automation technologies including PROFIBUS, PROFINET, IO-Link, and others. The organization serves a global community of members and experts, providing certification, training, and technology services to support industrial production sectors. The website reflects a mature digital presence with comprehensive content and professional design. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and implements privacy-conscious analytics and cookie consent mechanisms. Security posture is strong with HTTPS and privacy features, though additional security headers and a security.txt file would enhance trust. Overall, the domain and website present a credible, professional, and trustworthy industrial association with a clear focus on technology standards and community support.

I

IO-Link Community

io-link.com

62

IO-Link Community operates a professional and comprehensive website dedicated to the globally standardized IO-Link technology for industrial automation. The site serves as a central hub for information, training, events, and community engagement focused on sensors, actuators, and communication standards. The business is well-established with a domain age since 2005 and is supported by a reputable registrar. The website is built on TYPO3 CMS with modern front-end technologies and includes GDPR-compliant privacy and cookie policies. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Overall, the site demonstrates high professionalism, trustworthiness, and technical maturity.

A

Admitad

artfut.com

42

Admitad is a German IT company specializing in online advertising and affiliate marketing services, providing a platform for media buying, sales growth, and customer acquisition. The website analyzed is minimalistic, serving primarily as an informational placeholder indicating domain ownership by Admitad. The technical infrastructure is basic, with limited use of modern web technologies and no detected CMS or advanced frameworks. Security posture is moderate but lacks critical elements such as HTTPS verification and security headers. The absence of WHOIS registration data raises concerns about domain legitimacy, although the business information and contact email for abuse reporting lend some credibility. Overall, the site requires enhancements in security, privacy compliance, and content richness to better serve its audience and establish trust.

L

Loxxess AG

loxxess.com

53

Loxxess AG operates as a contract logistics provider specializing in solutions for E-Commerce, Omnichannel, Pharma, and Healthcare sectors. The company positions itself as reliable, efficient, scalable, and transparent, targeting business clients requiring dedicated logistics services. The website is professionally designed, primarily in German, and reflects a mature digital presence with SEO optimization and cookie consent mechanisms in place. Technically, the site runs on WordPress with modern plugins such as Yoast SEO and Cookiebot, and integrates Google Tag Manager and hCaptcha for analytics and security respectively. Security posture is good with HTTPS enforced and consent management implemented, though explicit security headers and incident response information are absent. The WHOIS data is missing, which raises some concerns about domain registration transparency, but the website content and structure suggest a legitimate and established business. Overall, the site is well-maintained, with moderate to good technical and security maturity, but could improve transparency and security best practices.

P

PI International

profinews.com

63

PROFINEWS is a specialized online publication operated by PI International, focusing on industrial communication technologies such as PROFINET, PROFIBUS, IO-Link, and omlox. The website serves a professional audience involved in industrial automation and manufacturing sectors by providing news, product updates, training information, and event announcements. The site is well-established, with a domain age dating back to 2006, reflecting a mature presence in its niche market. The business model centers on media publication and information dissemination, supported by partnerships with technology providers and industry organizations. Technically, the website is built on WordPress using the OceanWP theme and incorporates modern web technologies including jQuery and multiple analytics and marketing tools such as Google Analytics, Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. The site is hosted behind Cloudflare, providing CDN and DNS services, although DNSSEC is not enabled. Performance and mobile optimization are good, with a professional design and clear navigation enhancing user experience. From a security perspective, the site enforces HTTPS and uses domain transfer protection, but lacks advanced security headers and a published security policy or incident response contacts. Cookie consent is implemented, and privacy policies are comprehensive and GDPR compliant. No critical vulnerabilities or exposed sensitive data were detected. The site uses multiple third-party scripts for advertising and tracking, indicating moderate user tracking levels. Overall, PROFINEWS presents a trustworthy and professional online presence with good content quality and business credibility. Security posture is adequate but could be improved by enabling DNSSEC, adding security headers, and publishing a vulnerability disclosure policy. The site is safe for general audiences and does not contain any adult or questionable content.

P

PROFIBUS Nutzerorganisation e.V.

profibus.com

66

PROFIBUS & PROFINET International (PI) is a globally recognized industry association specializing in the development and promotion of industrial communication standards such as PROFIBUS, PROFINET, IO-Link, and others. The organization supports a large community of over 1,800 member companies and more than 10,000 certified experts worldwide, offering comprehensive training, certification, consulting, and software services. PI's market position is strong, serving as a key driver for interoperability and innovation in industrial automation. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and frameworks, including Bootstrap and Matomo analytics for privacy-conscious user tracking. The site is well-optimized for mobile and accessibility, with good SEO practices and a professional design that supports a positive user experience. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, though it lacks explicit HTTP security headers. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is notable but does not detract from the site's legitimacy given the organization's established reputation and comprehensive content. Overall, the website demonstrates a mature digital presence with strong business credibility and good privacy compliance. Strategic recommendations include enhancing HTTP security headers, increasing visibility of incident response contacts, and maintaining regular security audits to ensure ongoing protection.

P

PROFIBUS Nutzerorganisation e.V.

profinet.com

62

PROFINET.com is the official website for PROFINET, the leading Industrial Ethernet protocol used globally in industrial automation systems. The site is operated by PROFIBUS Nutzerorganisation e.V., a recognized standards organization based in Germany. The website serves as a comprehensive resource offering protocol information, certification details, training events, and a vibrant community forum to support industrial automation professionals and technology providers. The site is well-branded, professionally designed, and optimized for multiple languages and devices, reflecting a mature digital presence. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as Swiper.js for interactive content and Matomo for privacy-conscious analytics. The site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR, demonstrating a strong commitment to user privacy and security best practices. However, explicit security policies, incident response contacts, and vulnerability disclosure information are not publicly available, representing areas for improvement. Security posture is solid with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data for the domain is unusual and warrants further verification to confirm domain registration legitimacy. Despite this, the website's content quality, trust signals, and external partnerships strongly support its authenticity and reliability. Overall, PROFINET.com is a high-quality, authoritative resource for industrial Ethernet technology, with recommendations to enhance transparency around security policies and contact information to further strengthen trust and compliance.

A

AUMOVIO SE

continental-mobility-services.com

66

AUMOVIO SE is a German-based technology company specializing in advanced automotive and mobility solutions, including software-defined mobility, electric mobility, vehicle electrical/electronic architectures, safety systems, driver assistance, user experience, and cybersecurity. The company targets automotive manufacturers and industry partners, positioning itself as a medium-sized enterprise with a comprehensive portfolio of services and solutions. The website reflects a professional corporate presence with consistent branding and a clear navigation structure, although the accessed page is a 404 error page indicating missing content at the requested URL. Technically, the website leverages modern web technologies such as Adobe Helix CMS, Google Tag Manager, and LinkedIn Insight Tag for analytics and marketing. The site is mobile optimized and uses SVG graphics for logos and icons. Performance is moderate with basic SEO and accessibility features. Security posture is good with HTTPS enforced, but lacks explicit security headers and incident response information on the site. No critical vulnerabilities or security issues were detected in the analyzed content. Privacy and cookie policies are present and appear comprehensive, indicating GDPR compliance. However, no terms of service or vulnerability disclosure policies were found. Social media presence is active on Facebook, LinkedIn, and YouTube, enhancing trust and engagement. Overall, the website demonstrates a solid business credibility and technical foundation, though improvements in security transparency and content completeness are recommended to enhance user trust and compliance.

ATE is a globally recognized brand specializing in automotive brake technology and aftermarket products. The company offers a wide range of braking components including disc brakes, drum brakes, brake fluids, hydraulic parts, and related services such as partner finder and certified brake centers. The website reflects a mature business with a consistent brand presence and a focus on both B2B and B2C markets. Technically, the website employs modern web technologies including Google Tag Manager, reCAPTCHA Enterprise, and ConsentManager for cookie compliance, indicating a good level of digital maturity. Security posture is solid with HTTPS enforced and bot protection in place, though there is room for improvement in security headers and published security policies. Overall, the site is professional, well-structured, and compliant with GDPR requirements, supporting a trustworthy online presence.

G

German Professional Services Alliance (GPSA) GmbH & Co. KG

gpsa-international.com

59

The German Professional Services Alliance (GPSA) is an international alliance of independent audit and consulting firms providing tailored services in audit, tax consulting, legal advisory, and business process outsourcing. The company targets international businesses seeking professional services worldwide and positions itself as a trusted network of high-quality firms. The website is built using modern Angular technology and hosted on Microsoft Azure DNS, reflecting a moderate level of digital maturity. The site is mobile optimized and presents a professional design with clear navigation. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and cookie consent mechanisms, which are recommended for enhanced compliance and protection. Overall, the domain registration and WHOIS data are consistent with the business claims, indicating legitimacy and trustworthiness.