Germany security reports

E

EUROIMMUN Medizinische Labordiagnostika AG

euroimmun.info

53

Euroimmun Medizinische Labordiagnostika AG is a large, internationally recognized manufacturer of medical diagnostic products, specializing in reagents and test systems for autoimmune, infectious, and allergy diagnostics. The company operates globally with multiple country-specific domains and is part of the Revvity, Inc. portfolio. The website is built on TYPO3 CMS, employs Piwik analytics, and offers a comprehensive product portfolio with a professional and modern design. However, the absence of explicit privacy and cookie policies and lack of WHOIS registration data reduce the overall trust and compliance posture. Security headers are not detected, and incident response information is missing, indicating areas for improvement in security maturity. Overall, the website is well-structured and serves its target audience effectively but would benefit from enhanced transparency and security practices.

G

Gerresheimer

gerresheimer.com

68

Gerresheimer is a global leader in manufacturing pharmaceutical primary packaging and drug delivery systems, serving the pharma, biotech, cosmetics, diagnostics, and medical device industries. The company operates over 40 production sites worldwide and emphasizes sustainability, quality, and innovation. Their website reflects a mature digital presence built on TYPO3 CMS, with modern design and good mobile optimization. The site includes investor relations and compliance information, indicating a transparent corporate posture. Security-wise, the site enforces HTTPS and uses a consent management platform for GDPR compliance, but lacks explicit security headers and a public security policy. The absence of WHOIS data is unusual but the website content and branding strongly support legitimacy. Overall, the site is professional, secure, and compliant with privacy regulations, though improvements in security transparency and WHOIS clarity are recommended.

Landefeld Druckluft und Hydraulik GmbH operates a professional B2B e-commerce platform specializing in pneumatics, hydraulics, and industrial supplies. The company positions itself as a leading Europe-wide wholesaler with a large product catalog and technical consulting services. The website supports multiple languages and offers a comprehensive online shopping experience targeting industrial and commercial customers. Technically, the site uses modern frontend technologies including Vue.js and Bootstrap, integrates Google Tag Manager and consent management tools, and maintains good SEO and mobile optimization standards. Security posture is solid with HTTPS and cookie consent, though explicit security headers and incident response information are absent. The lack of WHOIS data reduces domain trustworthiness, but the website content and business information appear legitimate and professional. Overall, the site is well-designed, user-friendly, and compliant with GDPR requirements, making it a trustworthy platform for its target audience.

E

Energiequelle GmbH

energiequelle.de

69

Energiequelle GmbH is a well-established family-owned company founded in 1997, specializing in the development, construction, and operation of renewable energy projects including wind energy, photovoltaic systems, substations, hybrid solutions, and energy storage. With over 600 employees and international presence across Europe and South Africa, the company positions itself as a reliable partner in the energy transition sector. The website reflects a professional and comprehensive digital presence, leveraging the Neos CMS and modern web technologies to deliver content effectively. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though explicit privacy and security policies are not directly found in the provided content. Overall, the company demonstrates strong business credibility and technical maturity, with room for improvement in transparency of security and privacy documentation.

P

PNE AG

pne-ag.com

54

PNE AG is a German renewable energy company specializing in project development and services related to wind energy (onshore and offshore), photovoltaics, green hydrogen, and other sustainable energy solutions. The company targets investors, landowners, and energy sector stakeholders with a professional and well-structured website that highlights its key services and projects. The website is built on TYPO3 CMS and integrates modern technologies such as Cookiebot for cookie consent management and Google Tag Manager for analytics and marketing. Technically, the website demonstrates a moderate to good performance with mobile optimization and SEO best practices in place. The security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, although some security headers and explicit security policies are missing. Privacy compliance is strong, with a detailed privacy policy and cookie consent banner that aligns with GDPR requirements. The WHOIS data for the domain www.pnegroup.com is missing, which is unusual for a commercial entity and introduces some uncertainty regarding domain registration legitimacy. However, the professional website and privacy compliance mechanisms suggest the business is legitimate. No critical security vulnerabilities or suspicious content were detected. Overall, the website presents a trustworthy and professional digital presence for PNE AG, with room for improvement in transparency around security policies and contact information.

B

BayWa r.e.

baywa-re.com

70

BayWa r.e. is a globally recognized renewable energy company specializing in the development, trading, and servicing of sustainable energy projects including solar, wind, and bioenergy. The company operates under the parent company BayWa AG and maintains a strong market position in the energy sector with a focus on innovation and sustainability. Their website reflects a professional and comprehensive digital presence, targeting investors, industry professionals, and commercial clients. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, with good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS and employs standard security headers, though it lacks a publicly available security policy or incident response details. The absence of WHOIS data for the domain is a notable anomaly that slightly impacts trust but does not overshadow the overall professionalism of the site. Strategic recommendations include publishing detailed security and vulnerability disclosure policies and improving transparency around incident response.

V

Viessmann Generations Group GmbH & Co. KG

viessmann.family

72

Viessmann Generations Group GmbH & Co. KG operates as an impact-driven investment ecosystem focused on sustainable and long-term investments across multiple thematic fields including energy transition, health, education, and democratic values. The company positions itself as a strategic investor with a diversified portfolio of majority, minority, generational, and early-stage innovation investments, complemented by ecosystem partnerships and philanthropic initiatives. Their market position is that of a large, reputable player in the energy and sustainability sectors, with a strong emphasis on systemic change and climate impact. Technically, the website is built on modern web technologies such as Webflow CMS, Google Tag Manager, and Usercentrics for consent management, ensuring a smooth user experience with excellent mobile optimization and accessibility. The site is well-structured, professionally designed, and optimized for SEO, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security policy documentation and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected, indicating a solid security posture, though improvements are recommended in security header implementation and vulnerability disclosure. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. The absence of WHOIS data limits domain registration trust assessment, but the professional presentation and detailed business information support legitimacy. Strategic recommendations include enhancing security transparency, adding incident response information, and improving WHOIS data accessibility.

F

fnordserver.eu

fnordserver.eu

53

fnordserver.eu is a small managed hosting provider based in Germany, offering full-service managed hosting solutions focused on high performance and support for the latest web technologies. The website presents a professional and well-structured digital presence built on modern frameworks such as Vue.js and Nuxt.js, ensuring good performance and mobile optimization. Contact information is clearly provided, including a support email and phone number, enhancing business credibility. However, the site lacks visible privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is moderate with no detected security headers or incident response information, indicating room for improvement in security best practices. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures.

chemeurope.com is a well-established international information portal serving the chemical industry, providing news, product catalogs, white papers, market overviews, and educational resources. The platform targets professionals in industry, research, and science, offering a comprehensive suite of services to facilitate knowledge sharing and procurement processes. The website is operated by LUMITOS AG, a German company, which is reflected in the branding and linked legal documents. Technically, the website employs modern web technologies including jQuery, Bootstrap, Google Tag Manager, and Matomo for analytics, alongside a consent management platform to ensure GDPR compliance. The site is mobile-optimized with good navigation and SEO practices, delivering a positive user experience. However, some improvements in accessibility and security headers could enhance the technical posture. From a security perspective, the site uses HTTPS and secure form submissions, with no visible vulnerabilities or exposed sensitive data. The presence of a consent management platform and clear privacy policies indicates a strong commitment to privacy compliance. The lack of WHOIS registration data is a concern, potentially indicating privacy protection or domain registration issues, which slightly lowers the trust score. Overall, chemeurope.com presents a professional, trustworthy, and content-rich platform with moderate technical and security maturity. Strategic recommendations include enhancing security headers, verifying domain registration details, and improving accessibility features to further strengthen the platform's credibility and compliance.

L

LUMITOS AG

lumitos.com

46

LUMITOS AG operates as a leading B2B online media and marketing service provider focused on sectors including chemistry, life sciences, laboratory, pharmaceuticals, analytics, and food & beverage. The company offers a suite of six market-leading portals and newsletters that inform over 17 million users globally, enabling informed decision-making and business success. Their services encompass online marketing strategies, campaign development, lead generation, SEO/SEA, content marketing, and digital presence creation. The website reflects a mature digital infrastructure built on WordPress with modern analytics and consent management tools, indicating a solid digital maturity level. Security posture is good with HTTPS, CAPTCHA protections, and GDPR compliance, though additional security headers could enhance defenses. The absence of WHOIS data reduces transparency but does not negate the professional and trustworthy appearance of the business. Overall, the site is well-designed, content-rich, and compliant with privacy regulations, supporting a strong market position in the B2B marketing domain.

F

FGTC Investment GmbH

fgtc-investment.com

46

FGTC Investment GmbH is an independent asset management firm based in Germany, specializing in wealth management for affluent private clients, entrepreneurial families, foundations, and conservative institutions. Established in 2011 from the single family office of Silvius Dornier, the company focuses on capital market investments and agrarian/forestry assets, operating independently and free from third-party influences. It is part of the Viessmann Generation Group, emphasizing long-term generational wealth management. The website presents a professional image with clear business descriptions and structured data supporting SEO and accessibility.

E

Encavis

encavis.com

67

Encavis is a large European renewable energy company specializing in solar parks and wind farms, with over 3.8 GW installed capacity. The company targets institutional investors, energy-intensive companies, and partners such as landowners and project developers. The website is professionally designed, mobile-optimized, and provides comprehensive information about their services and recent business activities. Technically, the site uses modern web technologies including JavaScript libraries, consent management, and self-hosted analytics, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though there is room for improvement in publishing dedicated security policies and incident response contacts. WHOIS data is unavailable, which slightly reduces trust but does not outweigh the professional presentation and business legitimacy. Overall, the site is safe, trustworthy, and well-positioned in the renewable energy sector.

Landefeld Druckluft und Hydraulik GmbH operates a leading German B2B e-commerce platform specializing in pneumatic, hydraulic, and industrial supply products, prominently featuring Festo components. The company targets industrial and commercial customers, offering fast, flexible shipping and technical consultation services. Their market position is strong within their niche, supported by a comprehensive product catalog and multilingual website presence. Technically, the website employs modern frameworks such as Vue.js and Bootstrap, hosted on AWS infrastructure, with integrated consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and GDPR compliance, though explicit security headers and incident response policies are not publicly documented. Overall, the website is professional, trustworthy, and well-optimized for its audience.

Etanomics Service GmbH is a German-based energy consulting company specializing in energy efficiency, energy management, and decarbonization services. Founded in 2012, the company has established itself as a leading service provider with over 1000 projects, focusing on helping businesses reduce energy consumption, lower costs, and minimize their carbon footprint. Their service portfolio includes energy audits, feasibility studies, ISO 50001 energy management systems, and funding advisory, targeting companies seeking sustainable and economically viable energy solutions. Technically, the website employs a moderate technology stack including jQuery, Modernizr, Google Analytics, and LinkedIn Insight tags. The site is well-structured with good SEO and mobile optimization, though it lacks advanced CMS indicators and some modern security headers. Performance is moderate, and the site uses HTTPS with anonymized IP tracking for privacy. From a security perspective, the site shows good baseline practices such as HTTPS and cookie consent mechanisms, but lacks explicit security policies, incident response contacts, and DNSSEC. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company’s founding date and no privacy protection, enhancing trustworthiness. Overall, Etanomics.com presents a professional and trustworthy digital presence with solid business credibility and compliance with GDPR. Recommendations include enhancing security headers, enabling DNSSEC, updating legacy libraries, and publishing formal security and incident response policies to further strengthen their security posture and trust.

P

PEWO

pewo.com

63

PEWO is a German company specializing in compact and modular plant technology for the transfer and distribution of building heat, combined with comprehensive network knowledge and service offerings. The website presents a professional and focused business presence targeting B2B customers in the energy and building technology sector. Technically, the site is built using modern frameworks such as Gatsby and Bootstrap, offering a responsive and well-structured user experience. However, the absence of WHOIS domain registration data raises concerns about the domain's legitimacy and registration status. Security posture is moderate with no visible advanced security headers or policies, and privacy compliance is minimal due to the lack of privacy and cookie policies. Overall, the site is functional and professional but requires improvements in transparency, security, and compliance to enhance trust and credibility.

ISOPLUS is a European manufacturer specializing in pre-insulated piping systems that support the energy transition across Europe. The company serves sectors including district heating and cooling, bioenergy, agriculture, solar heating, industry, and carbon capture and storage (CCS). With a presence in over 30 countries and multiple production sites, ISOPLUS offers a comprehensive product portfolio and extensive service support, positioning itself as a key player in sustainable energy infrastructure. Technically, the website is built on TYPO3 CMS and employs modern web technologies including Bootstrap, Google Analytics, and Google Tag Manager. The site is well-optimized for mobile devices, features clear navigation, and implements cookie consent mechanisms aligned with GDPR requirements. Performance is moderate with good accessibility and SEO practices. From a security perspective, the site enforces HTTPS and uses cookie consent to manage tracking. However, explicit security headers are not detected in the HTML, and no public security or incident response policies are published. The WHOIS data is unavailable due to privacy protection, which is justified for a business of this scale. No critical vulnerabilities or exposed sensitive data were found in the site content. Overall, ISOPLUS presents a professional and trustworthy online presence with strong business credibility and compliance posture. Strategic improvements in security header implementation and transparency around security policies could further enhance trust and security maturity.

G

GRITEC GmbH

gritec.com

53

GRITEC GmbH is a well-established German company specializing in technical buildings and metal components for infrastructure sectors such as energy, transport, and telecommunications. With over 60 years of experience and a recent brand relaunch from Betonbau to GRITEC, the company positions itself as a full-service provider offering products like walk-in concrete stations, compact substations, and metal components including doors and ventilation systems. Their business model focuses on manufacturing combined with technical services including planning, testing, logistics, and assembly, targeting infrastructure clients requiring customized technical building solutions. The website reflects a mature digital presence with multilingual support and professional design.

D

DISH Digital Solutions GmbH

eatbu.com

64

DISH Digital Solutions GmbH operates a specialized SaaS platform focused on enabling hospitality businesses such as restaurants, cafes, bars, bakeries, and delivery services to quickly build their own websites without coding knowledge. The platform is integrated with the broader dish.co digital club ecosystem, offering additional community and business improvement resources. The website is professionally designed with good content quality, multi-language support, and clear navigation. Technically, it employs modern web technologies including Google Tag Manager, Adobe DTM, and Usercentrics for cookie consent, ensuring a mature digital infrastructure. Security posture is strong with HTTPS enforced and privacy policies clearly linked, although explicit security policies and incident response contacts are absent. Overall, the site demonstrates high trustworthiness and business credibility with no signs of malicious content or vulnerabilities.

R

Ridgidgear

ridgidgear.eu

57

Ridgidgear is a small-sized e-commerce retailer specializing in branded promotional products, primarily under the RIDGID brand. The website offers a range of products including textiles, giveaways, and accessories targeted at businesses and professionals seeking promotional merchandise. The platform is built on Shopware 6, indicating a modern e-commerce infrastructure with basic to moderate performance and mobile optimization. The site presents a professional design with clear navigation and consistent branding, although some SEO and accessibility features could be improved. Security posture is solid with HTTPS and standard security headers implemented, but lacks published security policies and incident response information. Privacy compliance is partial, with a privacy policy present but no explicit cookie policy or GDPR compliance indicators visible. Contact information is limited to an email address without phone or physical address details. Overall, the site appears legitimate and trustworthy but could enhance transparency and compliance to improve user trust and regulatory adherence.

A

AJ Produkte

ajprodukte.de

69

AJ Produkte is a medium-sized European e-commerce company specializing in office furniture, workshop equipment, and industrial supplies, primarily targeting business customers and general consumers in Germany and neighboring countries. The company emphasizes Swedish design, offering products with a 7-year warranty and a 30-day return policy, positioning itself as a reliable and customer-focused supplier in its market segment. Technically, the website employs modern web technologies including React, Google Tag Manager, Cookiebot for consent management, and Raygun for error monitoring, hosted behind Cloudflare for performance and security. The site is well-structured, mobile-optimized, and integrates multiple marketing and analytics tools, reflecting a mature digital presence. Security-wise, the site uses HTTPS, a strong Content Security Policy, and cookie consent mechanisms, but lacks explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and compliant with basic privacy regulations, though it could improve transparency by publishing privacy and security policies. The domain registration is consistent with the business claims, showing no suspicious patterns or privacy protection that might obscure legitimacy.

M

MEMOIO

memoio.com

64

MEMOIO is a German-based company offering a secure B2B messaging platform designed for businesses to communicate easily and securely across devices. The website positions MEMOIO as a trusted, German-made solution for professional communication between customers, colleagues, and partners. The business appears to be small-sized, founded in 2014, with a focus on technology and secure communication services. Technically, the website uses modern web technologies including JavaScript and Electron for desktop app support, with a moderate performance profile and basic mobile optimization. Security posture is adequate but could be improved by hardening the Content-Security-Policy and adding additional security headers. Privacy compliance is partially addressed with a privacy policy present, but lacks cookie consent mechanisms. WHOIS data is transparent and consistent with the business claims, supporting legitimacy. Overall, the website is professional and trustworthy but has room for improvement in security and privacy compliance.

H

HELU Connectivity Solutions Bielefeld GmbH

sangel.com

47

HELU Connectivity Solutions Bielefeld GmbH, formerly Sangel Systemtechnik GmbH, is a medium-sized manufacturing company specializing in LED industrial lighting and cable assemblies. As part of the HELUKABEL Group, it leverages a global network to provide integrated and holistic solutions to industrial clients. The website reflects a professional B2B focus with clear branding and product offerings in LED luminaires and cable assemblies. Technically, the site is built on WordPress with modern plugins and is mobile optimized, though some security headers are missing. The security posture is adequate with HTTPS enabled and privacy policies in place, but could be improved by adding cookie consent and incident response information. WHOIS data is missing, which raises some concerns about domain registration transparency. Overall, the website is trustworthy and professional but would benefit from enhanced security and compliance disclosures.

C

Cognigy GmbH

cognigy.com

74

Cognigy GmbH is a German-based technology company specializing in Conversational AI solutions designed to automate and enhance customer service experiences. Recognized as a leader in the 2025 Gartner Magic Quadrant for Conversational AI, Cognigy offers a comprehensive AI platform that supports voice and chat AI agents, agent assist tools, and integrations with major contact center platforms. Their business model focuses on B2B SaaS, targeting enterprises seeking to deploy AI-powered customer service automation across multiple channels and languages. The company demonstrates strong market positioning with a professional and content-rich website, consistent branding, and clear trust indicators.

J

Jedox GmbH

jedox.com

75

Jedox GmbH operates a professional website offering AI-driven financial planning and analysis (FP&A) and performance management software. The company targets finance teams and enterprises seeking adaptable, no-code modeling and reporting solutions. The website demonstrates a mature digital presence with comprehensive content, strong SEO, and integrated marketing tools. Technically, the site is built on WordPress with modern frameworks and includes cookie consent and GDPR compliance mechanisms. Security posture is good with HTTPS and security best practices, though explicit security policies and incident response information are not published. WHOIS data is missing, which slightly impacts trust but the overall business credibility remains high due to consistent branding and contact information. Strategic recommendations include publishing security and vulnerability disclosure policies and enhancing transparency around incident response.

E

Exasol

exasol.com

72

Exasol is a technology company specializing in high-performance analytics engines designed to modernize data warehouses, accelerate analytics, and enable governed AI/ML models. The company positions itself as a trusted provider for global enterprises seeking cost-effective and reliable data analytics solutions. Their website reflects a mature digital presence with strong SEO, structured data, and multimedia content to engage their target audience of enterprise data professionals. Technically, the website is built on WordPress with integrations including Google Tag Manager, Cookiebot for consent management, and marketing/analytics tools such as HubSpot and Hotjar. The site is well-optimized for performance, mobile responsiveness, and accessibility, indicating a high level of digital maturity. From a security perspective, the site enforces HTTPS and uses Cloudflare services for bot management. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present, representing areas for improvement. The privacy compliance is good with a cookie consent mechanism, but the absence of a visible privacy policy and terms of service reduces compliance confidence. Overall, the website is professional, secure, and trustworthy with minor gaps in explicit policy disclosures. Strategic enhancements in transparency and security documentation would further strengthen their risk posture and user trust.

V

Viessmann Generations Group GmbH & Co. KG

viessmann.group

70

Viessmann Generations Group GmbH & Co. KG operates as an impact-driven investment ecosystem focused on sustainable and long-term investments across energy, environmental, and social sectors. The company emphasizes co-creating living spheres for future generations by investing in majority, minority, generational, and early-stage innovation ventures. Their portfolio includes companies specializing in grid infrastructure, district heating and cooling, clean cold solutions, renewable energy, and health-related sectors. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content that aligns with their business objectives. Technically, the website is built on Webflow with modern JavaScript libraries such as GSAP and Lenis for smooth animations and scrolling. It integrates Google Tag Manager and Usercentrics CMP for analytics and privacy compliance, respectively. The site is well-optimized for performance and mobile responsiveness, with good accessibility and SEO practices observed. From a security perspective, the site enforces HTTPS and uses privacy-compliant cookie consent mechanisms. While explicit security headers are not fully confirmed, no vulnerabilities or exposed sensitive data were detected. The WHOIS data is limited due to TLD restrictions and privacy protection but does not raise legitimacy concerns. Overall, the security posture is solid but could be enhanced by publishing explicit security policies and incident response contacts. The overall risk assessment is low, with the company demonstrating strong business credibility, compliance with privacy regulations, and a professional online presence. Strategic recommendations include enhancing security header implementation, publishing a security policy, and adding vulnerability disclosure mechanisms to further strengthen trust and resilience.

chemie.de is a leading German-language industry portal serving the chemical sector, providing comprehensive news, product catalogs, company directories, white papers, job listings, and educational resources. The platform targets professionals in chemical manufacturing, laboratory and process technology, research, and science. Operated by LUMITOS AG, the site demonstrates a mature digital presence with consistent branding and high-quality content tailored to industry needs. The business model centers on content aggregation and industry networking, positioning chemie.de as a trusted resource within its niche market. Technically, the website employs modern web technologies including jQuery, Bootstrap, Matomo, and Google Tag Manager, alongside a consent management platform to ensure GDPR compliance. The site is mobile-optimized with good SEO and accessibility basics, although some accessibility enhancements could be considered. Performance is moderate, with no significant technical debt or outdated components detected. From a security perspective, the site enforces HTTPS and uses consent management for cookies, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were found in the analyzed content. The WHOIS data is consistent and transparent, reinforcing the domain's legitimacy. Overall, the security posture is solid but could be improved with additional headers and formal policies. The overall risk assessment is low, with the site presenting a professional, trustworthy, and compliant digital presence. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility features to further strengthen trust and compliance.

O

Online Apotheke Europa B.V.

diskrete-apotheke24.de

49

The website diskrete-apotheke24.de operates as an online pharmacy specializing in the sale of erectile dysfunction medications such as Viagra, Cialis, and Levitra. It targets adult male customers primarily in Germany and Europe, offering discreet, legal, and duty-free pharmaceutical products. The business model is e-commerce focused, with an emphasis on convenience, privacy, and customer satisfaction. The site presents itself professionally with consistent branding and a clear navigation structure. Technically, the website uses modern web technologies including Bootstrap and Google Fonts, and is hosted behind Cloudflare DNS for performance and security. However, there is no evidence of advanced CMS or extensive third-party integrations. Security posture is moderate; while HTTPS is implied, no explicit security headers or incident response policies are visible. Privacy compliance is basic with cookie consent implemented and a privacy policy linked in the impressum page. Overall, the site is functional and trustworthy for its niche but could improve security and compliance transparency.

G

Geiger Edelmetalle

geiger-edelmetalle.de

66

Geiger Edelmetalle operates a professional e-commerce platform specializing in the sale and purchase of precious metals including gold, silver, copper, palladium, and platinum. The company targets investors and collectors seeking high-quality bullion and coins, supported by services such as engraving, storage, and individual minting. The website is TÜV-certified, indicating a commitment to quality and trustworthiness in the precious metals retail market. Technically, the site is built on the Shopware CMS platform, leveraging modern web technologies and analytics tools like Matomo and TikTok Pixel, with a good level of mobile optimization and accessibility. Security posture is strong with HTTPS enforced and nonce usage in scripts, though explicit security headers and policies are absent. Privacy compliance is basic, with cookie consent mechanisms present but no clear privacy or terms of service pages detected. Overall, the site presents a credible and professional digital presence with room for improvement in transparency and security documentation.

S

SuperSaaS

supersaas.de

66

SuperSaaS is a well-established German-based SaaS company specializing in online appointment booking and scheduling solutions. With a mature domain since 2007 and a strong customer base exceeding 205,000 users worldwide, it offers a flexible, multilingual platform that integrates with popular calendars, payment gateways, and communication tools. The website is professionally designed, mobile-optimized, and rich in content, targeting businesses and organizations across various sectors seeking efficient scheduling solutions. The company emphasizes ease of integration, customization, and reliable service delivery.

C

Cirio 1856 Deutschland

cirio1856.de

38

Cirio 1856 Deutschland is a medium-sized retail business specializing in authentic Italian tomatoes and vegetable products, targeting both consumers and B2B clients in Germany. The website presents a well-structured product catalog including tomato varieties, ready meals, and organic and climate-neutral options, reflecting a strong brand heritage dating back to 1856. The company maintains a consistent brand identity and positions itself as a trusted provider of Italian food products in the German market. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Alpine.js, hosted behind Cloudflare DNS and likely CDN services, ensuring good performance and mobile optimization. However, minor backend PHP warnings indicate some code quality issues that should be addressed. Security posture is adequate with HTTPS enabled and Cloudflare protection, but lacks visible security headers and public security policies. Privacy compliance is weak due to absence of privacy and cookie policies and no visible GDPR indicators. Contact information is not explicitly found in the provided content, limiting direct communication channels. Overall, the website is functional and professional but would benefit from improved privacy compliance and backend code hygiene.

P

port-neo.com

port-neo.com

50

port-neo.com is a German digital marketing and customer experience agency specializing in strategic consulting, e-commerce, user experience, and data management services. The website is professionally designed using WordPress and Elementor, targeting German-speaking businesses seeking enhanced customer experience solutions. The technical infrastructure is modern with HTTPS enabled, but lacks visible security headers and comprehensive privacy compliance features. The absence of WHOIS data raises some legitimacy concerns, although the website content appears professional and business-focused. Overall, the security posture is moderate with room for improvement in privacy policies and contact transparency.

E

ExxonMobil

exxonmobil.de

64

ExxonMobil Germany operates as a regional branch of the global ExxonMobil Corporation, providing energy products such as natural gas, oil, lubricants, and chemical products with a focus on sustainability and low carbon solutions. The website targets a German-speaking audience including business partners, customers, and the general public interested in energy and environmental topics. The digital infrastructure is modern, leveraging Akamai CDN for hosting and Google Tag Manager for analytics, with a responsive design optimized for mobile devices. Security posture is strong with HTTPS enforced and cookie consent managed via OneTrust, though explicit security policies and incident response information are not publicly detailed. Overall, the site reflects a mature corporate digital presence with room for enhanced transparency in security and privacy disclosures.

D

Deutsches Zentrum für Luft- und Raumfahrt (DLR)

dlr.de

68

The Deutsches Zentrum für Luft- und Raumfahrt (DLR) is Germany's national research center for aerospace, energy, transportation, and security. It operates as a large, government-affiliated research institution with a strong market position in engineering sciences. The website reflects a mature digital presence with comprehensive content, modern technology stack including React and Plone CMS, and good mobile and accessibility features. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response information are not publicly detailed. Privacy compliance is well addressed with clear privacy and cookie policies including consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness, serving a broad audience including researchers, industry partners, and the public.

G

Gustav Klauke GmbH

klauke.com

68

Gustav Klauke GmbH is a well-established German manufacturer specializing in electrical connection technology and professional tools such as pressing, cutting, and hydraulic safety tools. The company operates globally and is part of the Emerson Electric Co. portfolio, which includes subsidiaries like Greenlee and RIDGID. Their product range exceeds 10,000 items, targeting industrial, commercial, and renewable energy sectors. The website is professionally designed, mobile-optimized, and rich in content, supporting a strong brand presence and customer engagement through multiple channels including social media and detailed product catalogs. Technically, the website employs modern JavaScript frameworks including AngularJS and Vue.js, uses Google Analytics and Tag Manager for tracking, and is built on Orchard CMS. Security best practices are observed with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response contacts are not found. Privacy compliance is robust, with clear links to privacy and cookie policies hosted on the parent company's domain. The security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the WHOIS lookup failed to retrieve domain registration details, which is unusual and lowers the domain legitimacy score. Despite this, the association with Emerson and the professional website content strongly support the site's authenticity. Overall, the site scores well on content quality, technical implementation, security, privacy compliance, and business credibility, making it a trustworthy and professional online presence for Klauke.

A

AsiaBerlin Forum e.V.

asia.berlin

62

AsiaBerlin Forum e.V. operates a professional platform that connects Berlin's innovation ecosystem with Asian startup landscapes through events, summits, and delegation trips. The website showcases a well-structured event-driven business model targeting startups, investors, corporates, and ecosystem builders. Technically, the site is built on WordPress with modern plugins and SEO optimizations, offering good mobile responsiveness and user experience. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced security headers and explicit policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professionally presented, with room for improvement in privacy and security transparency.

E

enpact e.V.

startuphaus.org

64

enpact e.V. is a Berlin-based non-profit organization dedicated to empowering entrepreneurship and ecosystem development, with a regional hub called Startup Haus Cairo established in 2018. The organization supports startups, freelancers, and creative professionals through workspace provision, mentoring, events, and community building. Their market position is that of a key regional enabler in the MENA startup ecosystem, supported by reputable partners such as the Drosos Foundation. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting entrepreneurs and ecosystem stakeholders. Technically, the site is built on WordPress with standard plugins for GDPR compliance and analytics, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and published security policies. No critical vulnerabilities or suspicious elements were detected. Overall, the site is trustworthy and well-maintained, suitable for its non-profit mission.

E

European Molecular Biology Laboratory

embl.org

68

The European Molecular Biology Laboratory (EMBL) is a prestigious intergovernmental research organization headquartered in Heidelberg, Germany, with multiple sites across Europe. Founded in 1974, EMBL focuses on fundamental molecular biology research, scientific services, training, and fostering collaboration across member states. The organization serves a broad audience including scientists, researchers, students, and industry partners, positioning itself as a leading European life sciences laboratory with global impact. Technically, the EMBL website is well-constructed using modern web technologies such as HTML5, CSS3, JavaScript, and Alpine.js. It employs CDNs for efficient content delivery and integrates Google Analytics for user behavior insights. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms, demonstrating compliance with privacy regulations such as GDPR. However, explicit security headers and published security policies or incident response information are absent, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, EMBL's website reflects a high level of professionalism, trustworthiness, and compliance, supporting its reputation as a leading scientific institution. The lack of WHOIS data due to privacy protection is consistent with the organization's profile and does not detract from its legitimacy.

L

Leuchtturm Gruppe

leuchtturmgruppe.com

57

Leuchtturm Gruppe is a large, family-owned premium brand house based in the Hamburg metropolitan region, Germany. It operates internationally with over 500 employees across 10 locations on 4 continents. The company manages a portfolio of eight premium brands specializing in products related to Collecting, Writing, Living, and Giving. The website reflects a strong brand identity with professional design and comprehensive content, targeting a general audience interested in high-quality, real-world products. Technically, the site is built on WordPress using Elementor and Yoast SEO, with modern JavaScript libraries like Swiper and jQuery, delivering a mobile-optimized and SEO-friendly experience. Security posture is good with HTTPS and cookie consent mechanisms, though security headers and explicit security policies are absent. The absence of WHOIS data for the domain reduces transparency and trustworthiness somewhat, but the overall digital presence is professional and consistent with a legitimate business.

B

Bullet Journal by LEUCHTTURM1917

bullet-journal.eu

60

Bullet Journal by LEUCHTTURM1917 operates a professional e-commerce platform focused on premium stationery products, primarily bullet journals and related writing instruments. The company leverages its long-standing brand heritage dating back to 1917 to position itself as a trusted provider within the European market. The website offers a curated shopping experience with clear navigation, product presentation, and customer support channels. Technically, the site employs modern web technologies including Bootstrap and jQuery, integrates Google Analytics and other marketing tools, and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. Overall, the site is trustworthy, well-branded, and compliant with privacy regulations, serving a general audience with safe content.

V

Volvista.cz

volvista.de

46

Volvista.de is a professional automotive sales platform specializing in Volvo vehicles, offering new and used cars, leasing options, and accessories primarily targeting the Czech Republic and German-speaking customers. The website demonstrates a solid market position as the largest Volvo vehicle selection in the Czech Republic. Technically, the site uses modern JavaScript libraries such as Vue.js, jQuery, and Select2, combined with Livewire for dynamic content, hosted on Forpsi servers. Security posture is good with HTTPS and CSRF protections, though improvements in security headers and explicit policies are recommended. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy, well-branded, and professionally maintained.

Ü

Übermedien

uebermedien.de

53

Übermedien is a German media criticism platform founded in 2015, offering ad-free journalistic content including articles, podcasts, and columns aimed at media users and enthusiasts. The website operates on a WordPress CMS hosted by Manitu, leveraging modern web technologies and SEO best practices. It employs a subscription model via Steady for revenue, emphasizing independence and quality content. The site maintains a strong social media presence and complies with GDPR through comprehensive privacy and cookie policies. Security posture is solid with HTTPS, cookie consent, and safe external linking practices, though it lacks explicit security policies and vulnerability disclosure mechanisms. Overall, Übermedien presents a professional, trustworthy, and well-maintained digital presence in the media sector.

82MHz is a personal blog operated by an individual named Andreas, focusing on topics such as retro technology, music, books, and cultural commentary. The website serves a niche audience interested in these subjects and offers blog posts, RSS feeds, and photo sharing links. The domain is relatively new, registered in 2023, and hosted via Manitu DNS servers. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript without a known CMS or advanced frameworks. Security posture is minimal with no detected security headers or privacy policies, and no evidence of HTTPS enforcement was found in the provided data. Contact is primarily via an obfuscated email and a Mastodon social profile link. Overall, the site is safe, with no adult or explicit content, and presents a moderate level of professionalism and trustworthiness.

M

Matthias Ott

matthiasott.com

56

Matthias Ott operates as an independent user experience designer, web design engineer, and educator based in Stuttgart, Germany. The website showcases his professional services including web design engineering, workshops, and a newsletter called 'Own Your Web'. The site targets designers, developers, and web professionals seeking expertise in UX and web accessibility. Matthias maintains a strong personal brand with consistent content updates and active social media engagement. Technically, the site is built on Craft CMS, uses modern web standards, and integrates privacy-respecting analytics (Fathom). The site is performant, mobile-optimized, and accessible, reflecting a mature digital presence. Security posture is good with HTTPS and CSRF protections, though some security headers and DNSSEC are missing. Privacy compliance is strong with a clear privacy policy but lacks a cookie consent mechanism. Overall, the domain registration is consistent and trustworthy, supporting the site's legitimacy.

D

Deutsche Messe AG

messe.de

70

Deutsche Messe AG is a leading organizer of trade fairs and events based in Germany, hosting over 150 events annually both domestically and internationally. The company targets business professionals, exhibitors, and event organizers, providing key services such as event management, venue hosting, and tailored accommodation services through its partner get2fairs. The website reflects a mature digital presence with professional design, multilingual support, and comprehensive event information. Technically, the site employs modern JavaScript frameworks, consent management via Usercentrics, and Google Tag Manager for analytics, hosted on managed infrastructure with good performance and mobile optimization. Security posture is strong with HTTPS enforcement, CSRF protection, and privacy compliance, though explicit security policies and incident response contacts are not published. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

H

Herzog & Adelmann Gruppe

herzogundadelmann.com

60

Herzog & Adelmann Gruppe is a German-based company specializing in benchmarking, quality assurance, mergers and acquisitions, and providing industry-specific analyses, rankings, and certifications. Founded in 2021 and headquartered in Grünwald near Munich, the company positions itself as a leading private organizer of benchmarking projects in the D-A-CH region with a growing international presence. Their business model leverages strategic media partnerships to enhance visibility and trust for excellent companies, supporting marketing, PR, and recruiting efforts. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as Google Fonts, jQuery, and Lenis for smooth scrolling. Hosting is distributed with Amazon S3 for media assets and GoDaddy as the domain registrar. The site demonstrates good mobile optimization and SEO practices, though some accessibility features are basic. Performance is moderate with a professional and consistent design. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and security headers, which are recommended for enhanced protection. The contact form uses the GET method, which is not ideal for privacy. No cookie consent mechanism is present, which may affect GDPR compliance. The WHOIS data aligns well with the business claims, showing a consistent and transparent domain registration. Overall, the website is professional, trustworthy, and well-positioned in its market niche. Strategic improvements in security headers, DNSSEC, form handling, and privacy compliance would further strengthen its security posture and regulatory adherence.

R

Rat für Formgebung – German Design Council

german-brand-award.com

58

The German Brand Award website represents a well-established branding award platform operated by the Rat für Formgebung – German Design Council. It targets marketing professionals and companies seeking recognition for brand excellence. The site offers comprehensive information about the award, jury, events, and participation benefits, positioning itself as a reputable and professional entity in the branding and marketing sector. The business model revolves around organizing award competitions, hosting award shows, and facilitating networking events to promote brand success. Technically, the website is built on the TYPO3 CMS platform, leveraging modern JavaScript libraries such as Swiper.js and integrating analytics and marketing tools including Google Tag Manager, Google Analytics, Hotjar, and Criteo. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. Hosting appears to be supported by Cloudflare as a CDN, enhancing performance and security. From a security perspective, the website enforces HTTPS and employs a cookie consent mechanism compliant with GDPR. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly implemented, and no dedicated security policy or incident response contact information is provided. The absence of WHOIS registration data for the domain is a notable concern, potentially indicating privacy protection or registration issues, which slightly reduces the overall trustworthiness. Overall, the website demonstrates a strong digital presence and business credibility, with room for improvement in security transparency and domain registration clarity. Strategic recommendations include implementing explicit security headers, publishing a security policy, and verifying domain registration details to enhance trust and compliance.

H

Herzog & Adelmann Gruppe

germanwebawards.com

60

German Web Awards is a reputable annual award event recognizing the best web agencies in Germany, focusing on design, know-how, service, and customer satisfaction. The awards have been running for six years and are organized by Herzog & Adelmann Gruppe, a known entity in the German digital agency space. The website is professionally designed, mobile-optimized, and provides clear information about the awards, participation, winners, and evaluation criteria. It targets German web agencies and digital service providers aiming to gain recognition and market differentiation. Technically, the site uses modern web technologies including Webflow CMS, GSAP animations, and hosts multimedia content on Amazon S3. The domain is registered with GoDaddy and shows no privacy protection, aligning with the business's transparency. Security posture is good with HTTPS and domain status protections, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is strong with a comprehensive privacy policy, cookie consent mechanism, and GDPR adherence. Contact information is clearly provided, enhancing business credibility. Overall, the site presents a trustworthy, professional, and well-maintained digital presence.

R

Rat für Formgebung – German Design Council

german-design-award.com

57

The German Design Award website represents a prestigious international design award managed by the Rat für Formgebung – German Design Council. The site showcases award categories, jury members, news, and event information, targeting design professionals globally. The business model revolves around promoting design excellence through competitions, networking, and visibility for winners. Technically, the site is built on TYPO3 CMS, employs modern JavaScript libraries like Swiper.js, and integrates analytics tools such as Google Tag Manager and Hotjar with GDPR-compliant cookie consent mechanisms. The website is well-structured, mobile-optimized, and professionally designed, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. WHOIS data is missing or privacy protected, which slightly reduces transparency but does not detract from the site's legitimacy given the strong brand and organizational backing. Overall, the site is trustworthy, compliant, and professionally maintained.

E

enpact e.V.

enpact.org

67

enpact e.V. is a Berlin-based non-profit organization dedicated to empowering entrepreneurship globally, focusing on emerging markets in Africa, Asia, Eastern Europe, and Latin America. The organization provides financial support, mentoring, business development training, and ecosystem development to entrepreneurs and support organizations. Their market position is solid with a history dating back to 2013 and a broad network of partners and donors. Technically, the website is built on WordPress with modern plugins and scripts, offering a good user experience with mobile optimization and clear navigation. Security posture is good with HTTPS and domain transfer protections, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is well addressed with GDPR cookie consent and a comprehensive privacy policy. Overall, the website reflects a professional and trustworthy organization with a strong focus on social impact.