Germany security reports

K

KISA

zv-kisa.de

50

KISA is a municipal IT service provider based in Saxony, Germany, offering a broad portfolio of IT infrastructure management, software solutions for municipal administration, data protection, IT security, and digitalization consulting. The organization targets public sector entities such as counties, cities, and municipalities, positioning itself as a key regional IT partner. The website reflects a professional and consistent brand image with comprehensive service descriptions and client testimonials, indicating a solid market presence. Technically, the website is built on GeoCMS with modern web technologies including jQuery, Bootstrap 4, and Matomo analytics configured for privacy. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security practices include HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. The security posture is good with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with GDPR-aligned cookie consent and a detailed privacy policy. However, the absence of a terms of service page and vulnerability disclosure reduces transparency. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, KISA's website demonstrates a mature digital presence suitable for its public sector audience, with room for improvement in security transparency and direct contact information for incident response.

J

James Hardie Europe GmbH

jameshardie.eu

66

James Hardie Europe GmbH is a leading manufacturer and marketer of fiber cement cladding and fiber gypsum products in Europe, with a strong market position as the world’s number one producer in its sector. The company offers a range of high-performance building materials including Hardie® Plank and Hardie® Panel products, emphasizing durability, fire protection, and sustainability. Their operations span multiple continents with thousands of employees and several R&D and manufacturing sites. The website reflects a mature digital presence built on ASP.NET Kentico CMS, with modern tracking and cookie consent mechanisms in place. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the site is professional, trustworthy, and well-structured, supporting the company’s strong brand and market leadership.

J

James Hardie Europe GmbH

fermacell.com

57

The website represents James Hardie Europe GmbH's fermacell® brand, a leading manufacturer of gypsum fibreboards and related building materials in Europe. The company has a strong market position as a European market leader with a broad product portfolio targeting construction professionals and distributors. The digital infrastructure is built on ASP.NET with Kentico CMS, supported by Cloudflare DNS and CDN services, and includes modern marketing and consent tools such as Google Tag Manager and OneTrust. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks DNSSEC and explicit security headers. Privacy compliance is partial with cookie consent but no visible privacy or terms policies. Overall, the site is professional, trustworthy, and content-rich, supporting a large enterprise manufacturing business.

F

Friedrich-Schiller-Universität Jena

uni-jena.de

63

Friedrich-Schiller-Universität Jena is a prominent German university focused on education, research, and community engagement. The institution offers a broad spectrum of academic programs and fosters interdisciplinary research under its key profiline themes "Light. Life. Liberty." The university serves approximately 17,000 students and 10,000 staff, positioning itself as a large, internationally connected academic entity. The website reflects this stature with rich content, professional design, and clear navigation tailored to students, researchers, and international audiences. Technically, the website employs modern web standards including HTML5, CSS, and JavaScript, with accessibility features such as ReadSpeaker integration. Hosting appears to be managed by DFN, a German research network, which aligns with the academic nature of the institution. Performance and mobile optimization are good, though no explicit CMS or frameworks were detected. SEO and accessibility are well addressed. From a security perspective, the site uses HTTPS with strong SSL configuration and deferred script loading. However, it lacks visible security headers and does not publish a security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is limited, with no explicit privacy or cookie policies found in the analyzed content, which is a notable gap. Overall, the website is trustworthy, professional, and content-rich, but could improve in privacy transparency and security policy disclosures. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, and establishing a vulnerability disclosure process to enhance trust and compliance.

F

FAU Erlangen-Nürnberg

fau.eu

64

FAU Erlangen-Nürnberg is a large, well-established public research university in Germany, founded in 1743. It offers over 280 degree programs and maintains a strong research profile with international collaborations. The website reflects a mature digital presence with comprehensive content targeting students, researchers, staff, alumni, and corporate partners. Technically, the site is built on WordPress with modern plugins and frameworks, providing good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is robust, with clear policies and GDPR-aligned consent. Overall, the domain and website present a trustworthy and professional institution with no evident security or content risks.

W

Wendt & Kühn

wendt-kuehn.com

48

Wendt & Kühn is a well-established German manufacturer specializing in handcrafted wooden figurines and collectible items, with a heritage dating back to 1915. The company targets collectors and gift buyers globally, offering a diverse assortment of products including seasonal decorations and exclusive editions. Their website is professionally designed using TYPO3 CMS, featuring multilingual support and a customer magazine subscription service. Technically, the site employs modern frontend libraries and implements cookie consent mechanisms, reflecting a moderate to good level of digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The absence of WHOIS data limits domain registration trust verification, but the overall professional presentation and consistent branding support legitimacy. Privacy compliance is well addressed with clear policies and consent management. Overall, the site presents a trustworthy and user-friendly experience aligned with the company's artisanal brand identity.

F

Freiberger Brauhaus

freibergerpils.de

64

Freiberger Brauhaus is a well-established traditional brewery in Germany with a rich heritage spanning approximately 175 years. The company focuses on producing pilsner and other beer varieties, emphasizing authenticity, tradition, and regional pride. Their business model includes beer production, brewery tours, events, and an online merchandise shop, targeting adult consumers interested in quality beer and cultural experiences. The website reflects a consistent brand identity and good content quality, supporting their market position as a reputable regional brewery. Technically, the website employs modern web technologies including Google Tag Manager for analytics and Usercentrics for consent management, ensuring GDPR compliance. The site is mobile-optimized with good SEO practices and a moderate performance profile. However, no explicit CMS or hosting provider information is evident. Security best practices such as HTTPS and cookie consent are implemented, but security headers and incident response policies are not explicitly published. From a security perspective, the site demonstrates a solid baseline with HTTPS and age verification for alcohol-related content, indicating compliance with legal requirements. No vulnerabilities or suspicious content were detected. Privacy compliance is strong with clear privacy and cookie policies. However, the absence of a security policy, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement. Overall, the website is professional, trustworthy, and compliant with relevant regulations. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility features to further strengthen the security posture and user trust.

V

vianovis GmbH - web mapping solutions

vianovis.de

48

vianovis GmbH is a specialized German technology company providing advanced web mapping solutions primarily for municipalities, cities, counties, and regional authorities. With over 30 years of experience, they offer a comprehensive geoportal platform (touvia.MAPS) including data management, interactive maps, citizen participation tools, and full hosting and support services. Their market position is strong within Germany, serving over 200 customers with scalable solutions tailored to different sizes of communities and organizations. The website reflects a professional and trustworthy business with clear pricing and customer testimonials. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Slider Revolution, leveraging HTML5 video and WebGL for interactive content. Hosting is provided by kasserver.com, and the site is well optimized for SEO and mobile devices. Security posture is good with HTTPS, SSL certificates, and hCaptcha for form protection, though some security headers could be improved. Privacy compliance is robust with a clear privacy and cookie policy and GDPR consent mechanisms. Overall, the site and business demonstrate a mature digital presence with strong security and privacy practices, suitable for their target audience. No critical vulnerabilities or blocking mechanisms were detected, indicating a reliable and accessible platform.

3

360GRAD-TEAM

360grad-team.com

60

360GRAD-TEAM is a German-language business website established in 2014, likely offering team-related services or consulting. The website uses WordPress with the Divi theme, indicating a standard CMS infrastructure. The technical setup is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and DNSSEC. No explicit privacy policy, terms of service, or contact information is found, which limits transparency and user trust. The domain registration data is consistent and legitimate, supporting the business's credibility. Overall, the website is functional and professionally designed but could improve in content depth, security posture, and compliance documentation.

V

vianovis GmbH - web mapping solutions

touvia.de

48

vianovis GmbH is a specialized technology company focused on delivering advanced web mapping solutions primarily for municipalities, cities, and regions in Germany. With over 30 years of experience, the company offers a comprehensive suite of geoportal services including touvia.MAPS, touvia.geoCMS, and touvia.komMIT, enabling clients to create interactive, customizable online maps with integrated data management and citizen participation features. The company positions itself as a full-service provider with personalized support and transparent pricing, serving over 200 customers nationwide. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, leveraging WebGL for real-time data visualization. Hosting is likely provided by kasserver.com, and the site employs HTTPS with hCaptcha for form security. The site is well-optimized for SEO and mobile devices, though some security headers could be improved. Security posture is solid with HTTPS and spam protection, but lacks explicit security policies or incident response contacts. Privacy compliance is good, featuring GDPR-compliant cookie consent and a privacy policy. No critical vulnerabilities or suspicious activities were detected. Overall, vianovis GmbH presents a professional, trustworthy, and technically competent online presence aligned with its business focus. Strategic improvements in security headers and formal security policies would enhance its security maturity and trustworthiness further.

Bergstadtatelier is a small regional e-commerce business specializing in personalized and mining heritage-themed merchandise such as calendars, wall pictures, mugs, postcards, and gifts. The website is built on the Shopify platform using the Dawn theme, indicating a modern and scalable technical infrastructure. The site is well-structured with good design quality, mobile optimization, and clear navigation, targeting customers interested in regional culture and personalized products. Security posture is strong due to Shopify's hosting and SSL implementation, with standard security headers and no visible vulnerabilities. However, the site lacks visible privacy and cookie policies, which impacts GDPR compliance and privacy transparency. Contact information is not explicitly provided, which may affect customer trust and support accessibility. Overall, the website is functional, secure, and professionally presented but would benefit from enhanced privacy compliance and clearer contact channels.

L

lumipöllö®

lumipollo.com

47

lumipöllö® is a small boutique manufacturer and retailer specializing in unique headwear products, operating primarily through an e-commerce webshop and supported by a physical boutique manufacturing presence. The website reflects a niche market positioning targeting consumers interested in unique fashion headwear. The business appears to be established since 2012, consistent with domain registration data, and operates primarily in Germany. The digital presence is basic but functional, with limited interactive features and a focus on product presentation. Technically, the website uses older JavaScript libraries such as jQuery 1.11.0 and Lightbox, with styling through CSS and Google Fonts. Hosting and domain registration are managed by reputable providers, but there is no evidence of advanced CMS or modern frameworks. Performance and mobile optimization are basic, and SEO features are minimal. Security practices show room for improvement, including the absence of DNSSEC, lack of security headers, and use of outdated libraries that may expose vulnerabilities. Security posture is moderate with HTTPS assumed but no visible security headers or cookie consent mechanisms, which impacts GDPR compliance. No incident response or vulnerability disclosure information is provided. The website does not expose sensitive data but could benefit from enhanced security controls and privacy compliance features. Overall, the risk is moderate with recommendations to update technical components and improve compliance. Strategically, the company should focus on modernizing its technical stack, implementing security best practices, and enhancing privacy compliance to build greater trust with customers and meet regulatory requirements. The current digital maturity supports basic e-commerce operations but limits scalability and security resilience.

E

eBay Inc.

ebay-deine-stadt.de

76

eBay Deine Stadt is a localized e-commerce platform initiative by eBay Inc. targeting German cities and regions to support local retailers by integrating them into eBay's broader marketplace. The platform offers buyers access to local products online, enhancing visibility and sales for small and medium-sized local businesses. The website demonstrates a strong market position leveraging eBay's established brand and infrastructure. Technically, the website uses modern web technologies including Marko.js for rendering, SVG icons, and CDN-hosted static assets, ensuring fast performance and mobile optimization. The site is well-structured with good SEO and accessibility features, providing a professional user experience. From a security perspective, the site enforces HTTPS, employs standard security headers, and avoids exposing sensitive data. Privacy and cookie policies are comprehensive and GDPR compliant, with clear contact points for sellers and city participation. However, explicit security policies and incident response contacts are not publicly detailed. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy regulations. Strategic recommendations include publishing explicit security and incident response policies and enhancing transparency around data protection officer contacts to further strengthen trust and compliance.

S

Syde GmbH

inpsyde.com

63

Syde GmbH is a leading European WordPress agency specializing in enterprise-grade, secure, and scalable web solutions. Established in 1998, the company holds a strong market position as a WordPress VIP Gold Agency and WooExpert partner, serving forward-thinking enterprises with services including multilingual WordPress solutions, WooCommerce payment gateways, website relaunches, and ongoing maintenance and support. Their client portfolio includes major brands such as Adidas, SAP, Mercedes-Benz, and PayPal, supported by strong testimonials and industry certifications. Technically, Syde operates on a modern WordPress 6.6.2 platform enhanced with Yoast SEO Premium and Borlabs Cookie for privacy compliance. Hosting is provided by Hetzner, a reputable German provider, and the site demonstrates good performance, mobile optimization, and accessibility. The company employs advanced cookie consent mechanisms and integrates Google Tag Manager for analytics, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS and employs domain transfer protection, though DNSSEC is not enabled. Security best practices are partially implemented, with room for improvement in publishing explicit security policies, incident response contacts, and security headers. No vulnerabilities or suspicious activities were detected, indicating a solid security posture. Overall, Syde presents a professional, trustworthy, and technically sound online presence with excellent content quality and business credibility. Strategic recommendations include enabling DNSSEC, publishing comprehensive privacy and security policies, and enhancing security headers to further strengthen their security posture.

W

Wirtschaftsförderung Erzgebirge GmbH

welcome-erzgebirge.de

50

The Welcome Center Erzgebirge, operated by Wirtschaftsförderung Erzgebirge GmbH, is a regional government-affiliated service center established in 2016 to support companies, immigrants, and returnees in the Erzgebirge region of Germany. It offers comprehensive assistance including integration support, bureaucratic guidance, and labor market services, positioning itself as a pioneering entity in Saxony for workforce integration. The website reflects a professional and consistent brand image with clear navigation and relevant content targeted at its audience. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes analytics and live chat functionalities, indicating a mature digital infrastructure. Security posture is solid with HTTPS, cookie consent, and secure forms, though formal security policies and incident response contacts are absent. Overall, the site is trustworthy, compliant with GDPR, and well-positioned to serve its community effectively.

L

LÖWEN PLAY

loewen-play-unternehmen.de

46

LÖWEN PLAY operates as a gaming and entertainment company based in Germany, offering both physical gaming locations and a state-licensed online gaming platform. The website targets general audiences interested in gaming, career opportunities, and corporate social responsibility. The company maintains a professional market position with investor relations and social media presence, indicating a medium-sized enterprise with consistent branding and trust signals. Technically, the website is built on WordPress with common plugins for cookie management and UI enhancements, leveraging jQuery and Font Awesome for frontend functionality. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though security headers are not explicitly detected and no incident response contacts are provided. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent banner implemented via Borlabs Cookie. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website is safe, professional, and trustworthy, with no adult or NSFW content detected.

W

Wirtschaftsförderung Erzgebirge GmbH

odbornipracovnici-krusnohori.cz

55

The website www.odbornipracovnici-krusnohori.cz operates as a regional job portal branded as Fachkräfteportal Erzgebirge, targeting job seekers and employers within the Erzgebirge region of Germany. It provides a platform for posting and searching job offers across multiple industries, with a focus on local employment opportunities. The portal is managed by Wirtschaftsförderung Erzgebirge GmbH, a regional economic development entity, which lends credibility and a governmental association to the service. The site supports multiple languages including Czech, German, and English, enhancing accessibility for a diverse regional audience. Technically, the website employs a modern tech stack including JavaScript libraries such as jQuery and Select2 for UI enhancements, and integrates analytics and marketing tools like Matomo Analytics, Google Tag Manager, Google Analytics 4, and Facebook Pixel. The site uses HTTPS and has implemented a cookie consent mechanism compliant with GDPR, reflecting a mature approach to privacy and data protection. The content is well structured with clear navigation, job filtering options, and categorized listings, providing a good user experience. From a security perspective, the site enforces HTTPS and includes basic security headers, though it lacks advanced headers like Content-Security-Policy or Strict-Transport-Security. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. However, the absence of a published security policy or incident response contact limits transparency in security governance. The WHOIS data is unavailable or missing, which raises concerns about domain registration legitimacy and should be monitored. Overall, the website presents a professional and trustworthy regional job portal with good technical implementation and privacy compliance. The main risk lies in the lack of WHOIS transparency and limited published security governance documentation. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving accessibility compliance to further strengthen trust and security posture.

W

Wirtschaftsförderung Erzgebirge GmbH

specialists-erzgebirge.com

64

Wirtschaftsförderung Erzgebirge GmbH operates the Fachkräfteportal Erzgebirge, a regional job recruitment portal focused on the Erzgebirge region in Germany. The platform offers a comprehensive job board with numerous current and qualified job listings, targeting both job seekers and companies within the region. The website is professionally designed with consistent branding and clear navigation, supporting multiple languages and providing detailed filters for job searches. Technically, the site leverages modern JavaScript libraries, Matomo and Google Analytics for analytics, and Google Tag Manager for tag management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and a robust cookie consent mechanism, though some security headers and explicit security policies are absent. The WHOIS data is notably missing or unavailable, which raises concerns about domain registration transparency despite the professional appearance and operation of the site. Overall, the site is trustworthy and well-positioned as a regional employment platform but would benefit from improved domain registration transparency and enhanced security policies.

D

Destillation und Likörfabrik Ernst F. Ullmann

lauterbacher-tropfen.de

55

The website www.lauterbacher-tropfen.de represents a small, family-owned German business specializing in the production and retail of traditional spirits and liqueurs since 1869. The company operates both physical locations including a museum and tasting events, as well as an online shop powered by Magento 2. The site is well-structured, professionally designed, and targets mature consumers interested in alcoholic beverages and regional heritage. Technically, the site uses modern eCommerce technologies with integrations such as Google Analytics, Google Tag Manager, and Amazon Pay, ensuring a functional and user-friendly experience. Security posture is good with HTTPS enforced and secure cookie settings, though some security headers could be improved. Privacy compliance is strong with GDPR-aligned cookie consent and privacy policies. Overall, the site is trustworthy and credible, with no signs of blocking or malicious activity.

F

Freiberger Brauhaus

freiberger-pils.de

65

Freiberger Brauhaus is a well-established German brewery with a rich heritage spanning approximately 175 years of pilsner brewing tradition. The company emphasizes authenticity, regional pride, and tradition in its branding and product offerings. The website serves as a marketing and informational platform showcasing their beer products, brewery tours, events, and an online shop. The target audience is mature adults interested in traditional beer culture. Technically, the website employs modern web technologies including Google Tag Manager and Usercentrics for consent management, ensuring GDPR compliance and user privacy. The site is mobile-optimized with good navigation and professional design. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers are not explicitly detected. No critical vulnerabilities or exposed sensitive data were found. Overall, the website is trustworthy and professionally maintained, with clear compliance to privacy regulations and responsible marketing practices for alcoholic beverages.

E

Erzgebirgssparkasse

erzgebirgssparkasse.de

69

Erzgebirgssparkasse is a regional financial institution based in Germany, offering a broad range of banking and financial services including online banking, loans, investments, insurance, and real estate services. The website targets both private and corporate customers, providing comprehensive digital access to their products and services. The bank maintains a strong local presence and positions itself as a trusted financial partner in the Erzgebirge region. Technically, the website is built on Adobe Experience Manager, indicating a mature and enterprise-grade digital infrastructure. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and professional design. Security posture is strong with HTTPS enforcement, session management, and cookie consent mechanisms, although some security headers are not explicitly visible in the HTML. Privacy policies and cookie management comply with GDPR requirements. No critical vulnerabilities or suspicious activities were detected. Overall, Erzgebirgssparkasse demonstrates a solid digital presence with good security and compliance practices, supporting its role as a reputable regional bank.

W

Wendt & Kühn KG

wendt-kuehn.de

45

Wendt & Kühn KG is a well-established German manufacturer specializing in handcrafted wooden figures and Christmas decorations, with a history dating back to 1925. The company maintains a strong market position in the niche of collectible wooden art, serving collectors and gift buyers worldwide through its own stores, authorized dealers, and an online marketplace. The website reflects a mature digital presence built on TYPO3 CMS, featuring rich content, multilingual support, and customer engagement tools such as an official app and a customer magazine. Technically, the site is hosted by Alfahosting and employs modern web technologies with good performance and mobile optimization. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, with clear privacy and cookie policies and GDPR adherence. Overall, the website projects high professionalism and trustworthiness, aligned with the company's heritage and business model.

5

599media GmbH

599media.de

52

599media GmbH is a specialized design and digital agency based in Germany with offices in Freiberg and Leipzig. The company focuses on TYPO3 CMS web development, branding, corporate design, and digital marketing services. Their market position is that of a regional agency serving corporate clients and public sector organizations with a comprehensive suite of design and digital solutions. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery and Paper.js for interactive elements. It uses Matomo Analytics for privacy-conscious user tracking and includes a robust cookie consent mechanism compliant with GDPR. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some security headers are missing. From a security perspective, the site enforces HTTPS and uses secure session cookies for backend access. However, it lacks a publicly available security policy or incident response contact, and no security.txt file is present. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could be improved with additional headers and transparency. The overall risk assessment is low, with the website demonstrating strong business credibility, privacy compliance, and technical maturity. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

F

Förderverein Montanregion Erzgebirge e.V.

fv-montanregion-erzgebirge.de

48

Förderverein Montanregion Erzgebirge e.V. is a small non-profit organization dedicated to promoting and supporting the mining heritage of the Erzgebirge region in Germany. The website serves as a platform to communicate their projects, sponsorship opportunities, and community engagement activities. Their market position is regional and cultural, targeting local stakeholders and heritage enthusiasts. Technically, the website is built on WordPress using the Enfold theme, with modern web technologies and a cookie consent mechanism that supports GDPR compliance. Security posture is adequate with HTTPS enforced and cookie consent blocking, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it lacks explicit incident response or vulnerability disclosure information.

W

Wirtschaftsförderung Erzgebirge GmbH

erzgebirge-gedachtgemacht.de

57

The website Erzgebirge – Gedacht. Gemacht. is a professionally managed regional promotion platform operated by Wirtschaftsförderung Erzgebirge GmbH. It focuses on showcasing the cultural, economic, and touristic strengths of the Erzgebirge region in Germany. The site offers rich content including success stories, news, ambassador profiles, and local product promotion, targeting residents, businesses, and tourists. Technically, it is built on TYPO3 CMS with modern JavaScript libraries and integrates analytics and marketing tools with proper consent mechanisms. Security posture is solid with HTTPS and cookie management, though some security headers could be improved. Overall, the site demonstrates strong compliance with GDPR and provides clear contact information, enhancing trust and credibility.

T

trendtours Touristik GmbH

trendtours.de

58

trendtours Touristik GmbH is a leading direct travel tour operator in Germany, specializing in bus, flight, and roundtrip package tours. Founded in 2005, the company serves German-speaking travelers with a broad portfolio of travel offers, including discounted and curated group tours. The website reflects a professional and consistent brand presence with strong trust signals such as Trustpilot integration and membership in the Deutscher Reiseverband. The target audience is primarily leisure travelers seeking organized travel experiences within Germany and abroad. Technically, the website employs modern JavaScript libraries including jQuery, Bootstrap, Swiper.js, and Font Awesome, alongside Google Tag Manager and a Usercentrics consent management platform for GDPR compliance. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. Performance is moderate with deferred script loading and image placeholders. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service in the provided content. Business credibility is strong due to clear company information, contact details, and trust indicators. Overall, the website is safe, professional, and trustworthy, with room for improvement in privacy transparency and security best practices. There is no indication of WAF or content blocking, allowing full content accessibility and analysis.

A

Animod GmbH

animod.de

63

Animod GmbH operates a German hospitality e-commerce platform specializing in hotel vouchers and short trips across Germany and Europe. The website targets general consumers looking for discounted travel gift options and short vacation packages. With over 20 years of experience, Animod positions itself as an established player in the travel voucher market. The technical infrastructure is modern, leveraging Nuxt.js and Vue.js frameworks, and hosted on Hetzner, a reputable German hosting provider. The website demonstrates good design quality, mobile optimization, and SEO practices, although some accessibility features are basic. Security posture is moderate; HTTPS is implied but no explicit security headers or policies are detected. Privacy compliance is weak due to missing privacy and cookie policies and lack of consent mechanisms. No incident response or vulnerability disclosure information is publicly available. Overall, the domain registration data is consistent with the business identity, indicating legitimacy. Strategic improvements in privacy compliance, security headers, and transparency would enhance trust and compliance.

H

Holiday Extras Ltd

holidayextras.de

63

Holiday Extras Ltd operates a leading online platform specializing in travel extras such as airport parking, hotels, and transfers, primarily targeting German-speaking European markets. The company positions itself as a market leader with over 40 years of experience, offering convenience and enhanced travel experiences to its customers. The website is professionally designed, localized in German, and integrates multiple social media channels to engage its audience. Technically, the website employs modern web technologies including React, extensive use of JavaScript, and third-party optimization and analytics tools such as Visual Website Optimizer and Google Analytics. Hosting and content delivery leverage Amazon Cloudfront CDN, ensuring reliable performance. The site is mobile-optimized and includes SEO best practices, although accessibility features are basic. From a security perspective, the site enforces HTTPS, employs standard security headers, and integrates cookie consent mechanisms compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the website demonstrates a strong digital presence with good content quality and security posture. The absence of WHOIS data limits domain trust assessment, but the business credibility is supported by consistent branding and market claims. Strategic recommendations include enhancing security transparency, improving accessibility, and establishing a vulnerability disclosure program to further strengthen trust and compliance.

N

NORMA connect

norma-connect.de

64

NORMA connect is a German telecommunications provider specializing in 5G mobile tariffs within the premium D-Netz network. The company offers prepaid and postpaid plans with flexible data options, allnet and SMS flat rates, and eSIM support. Their business model includes direct consumer sales via a WordPress-based website integrated with a Shopify webshop partner for order processing. The website is professionally designed, mobile-optimized, and SEO-friendly, targeting German consumers seeking reliable 5G mobile services. Technical infrastructure leverages WordPress CMS with modern plugins for video playback, cookie consent, and image optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are absent. No privacy policy or terms of service pages were found, indicating room for compliance improvement. Overall, the site is trustworthy, safe for general audiences, and well-positioned in the German telecommunications market.

S

Urlaub in Sachsen: Kultur, Natur & Genuss erleben

sachsen-tourismus.de

61

The website www.sachsen-tourismus.de serves as a regional tourism portal promoting travel, culture, nature, and leisure experiences in Saxony, Germany. It targets tourists and travelers seeking vacation information and booking options in the region. The site is built on TYPO3 CMS and hosted on Schlund Technologies infrastructure, indicating a stable and professional technical foundation. The content is well-structured, visually appealing, and optimized for mobile devices, providing a good user experience. However, explicit privacy policies and terms of service are not found in the provided content, which could be improved for compliance and user trust. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks some security headers and incident response information.

3

3DFindit

partcommunity.com

66

3DFindit is a specialized CAD content platform serving engineers, architects, and purchasers by providing access to extensive manufacturer catalogs and 3D BIM content. The platform supports multiple search modalities including 3D geometric, 2D sketch, and color search, facilitating efficient part finding and design integration. It is positioned as a key player in the CAD/BIM content market, backed by the parent company CADENAS, a recognized entity in the technology sector. The website demonstrates a professional and consistent brand presence with comprehensive content and multilingual support.

J

James Hardie Europe GmbH

holzbauplaner.com

43

The website holzbauplaner.com hosts the fermacell Timberwork Planner, a specialized tool designed for professionals in timber construction to calculate and design timber frame wall panels according to recognized standards. The business is operated by James Hardie Europe GmbH, a medium-sized company based in Germany, focusing on manufacturing and construction sectors. The site provides detailed technical content, tutorials, and downloadable documentation to support its users, primarily structural engineers and architects. Technically, the website uses modern web technologies such as Vue.js and JavaScript libraries, ensuring a responsive and user-friendly experience. However, some security best practices like security headers and DNSSEC are not implemented, which could be improved. Privacy and cookie policies are present with consent mechanisms, indicating good compliance with GDPR requirements. Overall, the site is professional, trustworthy, and well-positioned within its niche market.

James Hardie Europe GmbH operates the Bodenplaner website, providing building materials and related services under the Fermacell brand. The company is a large multinational with a strong presence in Europe and the USA, serving a broad audience including customers, suppliers, architects, and contractors. The website offers a floor planning tool and comprehensive privacy information, reflecting a mature business with established GDPR compliance. Technically, the site uses common web technologies such as Google Analytics with IP anonymization, Google Tag Manager, and video.js, but lacks advanced CMS or modern frameworks. Security posture is moderate with cookie consent implemented but missing explicit security headers and DNSSEC. The domain is well-established since 2008, consistent with the company's history, and uses a reputable registrar without privacy protection, enhancing trust. Overall, the website is professional, GDPR-compliant, and trustworthy, though improvements in security headers, mobile optimization, and incident response transparency are recommended.

J

James Hardie Europe GmbH

aestuver.de

56

The website www.aestuver.de represents Aestuver®, a well-established German brand under James Hardie Europe GmbH specializing in fire protection solutions using glass fiber lightweight concrete technology. The company offers a broad portfolio of certified fire protection products and engineering services targeting construction professionals, industrial OEMs, and infrastructure projects. The site demonstrates a solid market position with a focus on quality, certification, and technical support. Technically, the website is built on ASP.NET WebForms with Kentico CMS, hosted behind Cloudflare, and integrates modern marketing and analytics tools such as Google Tag Manager and cookie consent mechanisms. Security posture is good with HTTPS enforced and CSRF protections, though some security headers could be improved. Privacy compliance is basic but present with clear cookie and privacy policies. Overall, the site is professional, trustworthy, and well-structured, supporting the company's business credibility and customer engagement.

J

James Hardie Europe

jameshardie.de

65

James Hardie Europe operates as a manufacturer and supplier of fiber cement facade cladding products targeted primarily at the German construction market. The website presents a professional and well-structured digital presence, offering detailed product information, sample ordering, technical support, and dealer locator tools. The company positions itself as a leading provider of durable and aesthetic facade solutions, leveraging fiber cement technology. Technically, the website is built on ASP.NET with Kentico CMS, uses Cloudflare for DNS and likely CDN services, and integrates OneTrust for cookie consent and Google Tag Manager for analytics. Security posture is solid with HTTPS and cookie consent but lacks explicit security headers and published security policies. Privacy compliance is partial, with cookie consent present but no visible privacy policy or terms of service in the provided content. Overall, the site is trustworthy and professionally maintained but could improve transparency and security documentation.

S

Sächsischer Städte- und Gemeindetag e.V.

ssg-sachsen.de

65

Sächsischer Städte- und Gemeindetag e.V. is a regional government association representing cities and municipalities in Saxony, Germany. The organization provides advocacy, information, events, and publications to support local governments. The website reflects a professional and consistent brand presence with a focus on municipal topics and intercommunal cooperation projects. The technical infrastructure is based on the ionas4 CMS with modern JavaScript frameworks and Google Invisible reCAPTCHA for form security. Hosting appears to be managed by Deutsche Telekom, inferred from the nameservers. Security posture is good with HTTPS enforced and no visible vulnerabilities, though additional security headers and published security policies would enhance trust. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service detected. Overall, the website is trustworthy, well-structured, and serves its target audience effectively.

S

Sächsischer Landkreistag

lkt-sachsen.de

45

The Sächsischer Landkreistag is a governmental association representing the ten districts of Saxony, Germany. Its primary role is to consolidate and advocate for the interests of these districts before the state government and other institutions. The website provides comprehensive information about the association's tasks, services, and organizational structure, targeting government officials and local citizens. The digital infrastructure is built on GeoCMS with modern web technologies such as Bootstrap and jQuery, ensuring a responsive and user-friendly experience. The site employs Matomo for analytics and includes GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although security headers could be improved. Overall, the website is professional, trustworthy, and well-aligned with its governmental purpose.

T

Tourismusverband Erzgebirge e.V.

erzgebirge-tourismus.de

43

The website www.erzgebirge-tourismus.de represents the Tourismusverband Erzgebirge e.V., a regional tourism association promoting the Erzgebirge region in Germany. It focuses on cultural heritage, outdoor activities, family tourism, and regional specialties, positioning itself as a key regional tourism authority. The site offers comprehensive information, booking capabilities, event promotion, and regional product marketing, targeting tourists interested in authentic cultural and natural experiences. Technically, the site is built on TYPO3 CMS, integrates Google Tag Manager for analytics, and includes accessibility tools like Eye-Able. Hosting is provided by Schlundtech, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent, though it lacks explicit security headers and a published security policy. Contact information is clearly presented, and the site maintains a professional and trustworthy appearance with certifications such as Service Qualität Deutschland. Overall, the site is well-structured, content-rich, and compliant with privacy regulations, making it a reliable resource for regional tourism.

W

Welterbe Montanregion Erzgebirge e.V.

montanregion-erzgebirge.de

49

The website www.montanregion-erzgebirge.de represents the official online presence of the Welterbe Montanregion Erzgebirge e.V., a non-profit association managing the UNESCO World Heritage site Montanregion Erzgebirge/Krušnohoří. The organization coordinates heritage management, promotes cultural tourism, and provides educational resources about the region's mining history. The site targets tourists, historians, and regional stakeholders, offering multilingual content in German, English, and Czech. The business operates in the government and non-profit sectors with a small organizational size founded in 2015. Technically, the website is built on TYPO3 CMS, utilizing modern JavaScript libraries such as jQuery, Slick Carousel, and MixItUp. The site demonstrates moderate performance and basic mobile optimization with good accessibility and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are absent. Overall, the site is professional, trustworthy, and content-rich, with clear contact information and active social media channels. No critical vulnerabilities or suspicious patterns were detected. Recommendations include enhancing security headers, adding incident response contacts, and considering a vulnerability disclosure policy to further strengthen security and compliance.

K

kul(T)our-Betrieb des Erzgebirgskreises

kultour-erz.de

44

The website kultour-erz.de serves as the digital presence for the kul(T)our-Betrieb des Erzgebirgskreises, a regional government-operated cultural service entity in the Erzgebirge region of Germany. It offers a variety of cultural activities including concerts, thematic hikes, craft holidays, and astronomy-related experiences such as visits to the Zeiss Planetarium and Sternwarte Schneeberg. The site targets local residents and tourists interested in cultural and leisure activities within the Erzgebirge. Technically, the site is built on WordPress using the Divi theme and employs jQuery for client-side scripting. The hosting is inferred to be provided by inet-server.net based on the nameservers. The website demonstrates moderate digital maturity with a good design and mobile optimization but lacks advanced SEO and accessibility features. Security posture is basic with no detected security headers or incident response information, and privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

K

KohleWelt - Museum Steinkohlenbergbau Sachsen

kohlewelt.de

46

KohleWelt is a regional museum dedicated to the history and culture of Saxon hard coal mining. It offers interactive exhibitions, guided tours, and educational programs targeting families, school groups, and mining enthusiasts. The museum positions itself as a cultural and educational institution with strong regional partnerships and a focus on preserving mining heritage. Technically, the website is built on the Contao CMS platform, using modern web technologies and fonts, with good mobile optimization and accessibility. The site employs Matomo analytics configured to disable cookies, reflecting a privacy-conscious approach, although it lacks a cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but could be improved by adding security headers and explicit security policies. Overall, the website is professional, trustworthy, and well-structured, serving its audience effectively while maintaining compliance with GDPR privacy requirements.

N

NORMA Reisen

norma-reisen.de

53

NORMA Reisen is a German online travel agency specializing in package tours, flights, cruises, wellness, and family vacations. The website offers a comprehensive booking platform integrated with Travelcheck and affiliated Norma brands, targeting German-speaking travelers seeking affordable and diverse travel options. The business model focuses on aggregating travel offers and providing direct booking services with clear contact channels and detailed travel information. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, and various UI libraries, hosted on a dedicated IP with HTTPS enabled. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS and secure form handling, though lacks explicit security headers and published security policies. Privacy compliance is strong with comprehensive privacy and terms pages, though no explicit cookie consent mechanism is detected. Overall, the website is professional, trustworthy, and well-positioned in the hospitality sector in Germany.

N

Norma24

norma24.de

73

Norma24 is a German online retail platform offering a wide range of Norma products with a focus on quality, variety, and fast delivery. The website is built on the Spryker e-commerce framework and leverages modern marketing and analytics tools such as Usercentrics CMP for cookie consent, Microsoft Clarity, Google Tag Manager, Facebook Pixel, and Emarsys for customer engagement and tracking. The technical infrastructure is supported by Akamai CDN services, ensuring reliable hosting and performance. Security measures include HTTPS enforcement and standard security headers, reflecting a solid security posture. However, the absence of explicit privacy policy, terms of service, and contact information pages indicates areas for compliance and transparency improvement. Overall, the website presents a professional and trustworthy e-commerce experience for general consumers in Germany.

Druckhaus Karlsruhe is a German-based printing and publishing company specializing in magazine production and related services. The company positions itself as a passionate partner supporting clients from initial concept to finished product, targeting businesses and individuals in need of high-quality printing solutions. The website is built on WordPress using Elementor and several plugins to enhance user experience and compliance, including Real Cookie Banner Pro for GDPR consent management and Matomo for analytics. Security measures include HTTPS enforcement and Google reCAPTCHA integration to protect forms from spam. However, some advanced security headers are missing, which could be improved to enhance protection. Overall, the site demonstrates good technical maturity and privacy compliance, with clear business focus and professional presentation.

T

TQG Lottery Solutions GmbH

tqg-lotterysolutions.com

67

TQG Lottery Solutions GmbH is a specialized technology company focused on providing lottery and gaming solutions, including lottery draw systems, gaming platforms, and handheld terminals. The company targets lottery operators and stakeholders in the gaming industry, offering strategic consulting and technology products. The website is built on WordPress with the Gutenberg plugin, reflecting a moderate level of digital maturity with good mobile optimization and basic SEO features. Security posture is moderate with HTTPS likely enabled but lacking visible security headers and formal privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and structured data indicate a legitimate business presence. Overall, the site is professional but would benefit from enhanced security and compliance measures.

M

MULTA MEDIO Informationssysteme AG

multamedio.de

57

MULTA MEDIO Informationssysteme AG is a medium-sized German IT service provider specializing in tailored software solutions for Learning and Lottery sectors. With over 25 years of experience, the company offers full-service digital transformation and optimization of information processes, serving clients domestically and internationally. Their market position is strong in Germany, particularly in lottery system development and digital learning solutions. The website reflects a professional and trustworthy business with clear service offerings and a strong brand presence. Technically, the website is built on a modern stack including Pimcore CMS, Bootstrap, and various JavaScript libraries for UI and UX enhancements. It is mobile-optimized, accessible, and SEO-friendly, with good performance. The presence of cookie consent mechanisms and structured data markup indicates digital maturity and compliance awareness. Security posture is solid with HTTPS enforced and ISO 27001 certification indicated, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent management. Business credibility is high, supported by detailed contact information, certifications, and social media presence. Overall, the website and domain present a low-risk profile with strong professionalism and compliance. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding a vulnerability disclosure policy to further strengthen trust and security posture.

M

mobivention GmbH

mobivention.com

49

mobivention GmbH is a well-established German IT service provider specializing in app development, web applications, and backend solutions. With over 20 years of experience and a team of approximately 30 experts, they offer comprehensive services from consulting and UI/UX design to development and maintenance. Their client portfolio includes reputable organizations, and they emphasize digital transformation with a 'Made in Germany' approach. Technically, the website is built on WordPress with modern plugins and tools, including Matomo for privacy-conscious analytics and Borlabs Cookie for cookie consent management. Security posture is solid with HTTPS and domain transfer protection, though DNSSEC is not enabled and security headers are missing. Privacy compliance is moderate due to the absence of an explicit privacy policy page. Overall, the site is professional, trustworthy, and well-optimized for SEO and user experience.

M

MERKUR GROUP

gauselmann.com

63

The MERKUR GROUP website represents a well-established international company specializing in the development and provision of slot machines, gaming machines, casinos, sports betting, and related financial services. With a history dating back to 1957, the company positions itself as a leader in the gaming industry with a large workforce and multiple subsidiaries. The website content is professionally presented, targeting industry partners, customers, and potential employees. Technically, the site employs modern frameworks such as Bootstrap and integrates analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is good with HTTPS and consent mechanisms in place, though some security headers could be improved. The WHOIS data is privacy protected, which is common for corporate domains, but limits transparency. Overall, the site is trustworthy and professionally maintained, with moderate room for security and compliance enhancements.

M

MERKUR GROUP

merkur.group

64

MERKUR GROUP is a well-established German company with over 65 years of experience in the gaming industry, specializing in the development and provision of slot machines, casino operations, sports betting, and related financial and eSolutions services. The company positions itself as a major player in the hospitality and gaming sectors with a large workforce and a diversified product portfolio. Their website reflects a professional and consistent brand image, targeting a general audience interested in gaming and career opportunities within the group. Technically, the website employs modern frameworks such as Bootstrap and integrates analytics and consent management tools, indicating a mature digital infrastructure. Security-wise, the site uses HTTPS and consent mechanisms but lacks explicit security headers and incident response information, suggesting room for improvement in security transparency. Overall, the domain WHOIS data is unavailable due to TLD restrictions or privacy protection, but the website content and external references strongly support the legitimacy of the business. Strategic recommendations include enhancing security headers, publishing clear security policies, and adding vulnerability disclosure mechanisms to strengthen trust and compliance.