Germany security reports

K

KRAUSE Systems

krause-systems.co.uk

52

KRAUSE Systems is a well-established manufacturer specializing in access technology and occupational safety products. The company offers a broad range of ladders, steps, scaffolds, and customized solutions targeting craftsmen, industry professionals, and general consumers. Their international presence is supported by multiple localized websites and comprehensive product and service information. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries and analytics tools such as Google Analytics and Matomo. The site demonstrates good digital maturity with responsive design, clear navigation, and privacy compliance mechanisms including cookie consent. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of HTTP security headers suggests room for improvement. The WHOIS data is unavailable due to domain registration issues, which slightly impacts trustworthiness from a domain legitimacy perspective. Overall, the website is professional, secure, and compliant, representing a credible business entity.

I

intecsoft GmbH & Co. KG

intecsoft.de

58

intecsoft GmbH & Co. KG is a well-established IT consulting and software development company based in Germany, with a subsidiary in Switzerland. The company specializes in digital transformation services, offering a broad portfolio including business process optimization, business intelligence, cloud infrastructure, SAP development, and embedded systems. Their target audience includes businesses and public sector organizations primarily in German-speaking countries. The company demonstrates a strong market position supported by long-term experience, recognized certifications such as ISO/IEC 27001, and partnerships with major technology providers like Microsoft, SAP, and Oracle. Technically, the website is built on Joomla CMS with modern frontend technologies including Bootstrap and JavaScript ES modules. The infrastructure is hosted via domaincontrol.com nameservers, indicating professional hosting. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is strong with HTTPS enforced and ISO 27001 certification, but could be improved by adding explicit security headers and incident response contact details. No WAF or blocking mechanisms were detected, allowing full content access. Privacy compliance is mostly met with a comprehensive privacy policy and terms of service, but lacks a visible cookie consent mechanism. No vulnerability disclosure or security.txt files were found. Contact information is clearly presented, enhancing business credibility. Overall, intecsoft presents a professional, trustworthy, and secure digital presence aligned with its business objectives. Strategic improvements in cookie consent and security headers would further enhance compliance and security posture.

I

inovoo GmbH

inovoo.com

61

inovoo GmbH is a German-based technology company specializing in intelligent business process management and automation solutions. Their offerings include a low-code platform (NOVO CxP), AI-driven document processing (NOVO AI Studio), and process analytics tools (NOVO BI Board). The company targets businesses seeking to automate document and data workflows efficiently, leveraging AI and low-code technologies to reduce manual effort and improve accuracy. Recognized by industry analysts such as Gartner and infosource, inovoo maintains a solid market position with a medium-sized business profile and a professional digital presence. Technically, the website is built on Silverstripe CMS with UIkit framework, integrating modern tools like Google Tag Manager and Klaro for consent management. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit HTTP security headers and published security policies are absent, representing areas for improvement. The WHOIS data for the domain is missing, which is unusual and slightly reduces transparency and trust. However, the website's professional content, certifications (ISO 27001), customer testimonials, and analyst recognitions support the company's legitimacy. No WAF or blocking mechanisms were detected, allowing full content access and analysis. Overall, inovoo presents as a credible and professional B2B technology provider with strong digital maturity and a focus on privacy compliance. Enhancing security transparency and WHOIS data availability would further strengthen trust and compliance posture.

I

Interone

interone.de

59

Interone is a German digital agency affiliated with TEAMBBDO, offering end-to-end digital experiences combining technology, creativity, and strategic experience. The company operates multiple offices in Germany including Munich, Hamburg, Düsseldorf, and Berlin, serving a business clientele with a focus on human-centric digital solutions. Their key services include experience design, creative content, technology solutions, and AI/automation. The website is professionally designed using modern technologies such as React and Next.js, with good mobile optimization and accessibility. Security posture is solid with HTTPS and no exposed sensitive data, though explicit security policies and incident response information are absent. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and well-positioned in the digital agency market in Germany.

F

Frankenraster GmbH (now DI.UNIT GmbH Standort Süd)

frankenraster.de

56

Frankenraster GmbH, now operating as DI.UNIT GmbH Standort Süd, is a medium-sized, ISO-certified document scanning and archiving service provider based in Germany. The company specializes in digitization, physical and digital archiving, and logistics services for business clients in Germany and Austria. Their market position is strengthened by integration into the DI.UNIT group, providing a broader service portfolio and enhanced brand recognition. The website reflects a professional business model targeting organizations seeking efficient document management solutions. Technically, the website is built on the Webflow platform, utilizing modern JavaScript libraries such as jQuery and Google Analytics with privacy-conscious configurations like IP anonymization and cookie consent management via Cookiebot. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some improvements in accessibility and security headers could be made. From a security perspective, the site enforces HTTPS, uses cookie consent with blocking mode, and provides opt-out mechanisms for analytics tracking. However, it lacks explicit incident response contact information and a vulnerability disclosure policy, which are recommended for enhanced security posture. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional image with strong privacy compliance and business credibility. Strategic recommendations include implementing additional HTTP security headers, publishing incident response contacts, and enhancing accessibility features to further improve security and compliance.

E

EITCO

eitco.de

58

EITCO is a German-based digitalization consultancy specializing in product-independent digital transformation, IT strategy, and process optimization services. The company targets businesses seeking to modernize and optimize their digital infrastructure. The website is built on WordPress with Elementor and uses modern web fonts and SEO plugins, indicating a moderate level of digital maturity. Hosting is via AWS DNS, suggesting reliable infrastructure. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website presents a professional image but could improve transparency and security documentation.

C

cosinex GmbH

cosinex.de

54

cosinex GmbH is a well-established German company specializing in digital solutions for public procurement. Their offerings include a comprehensive suite of software products that enable fully digital procurement processes for government entities at federal, state, and municipal levels. The company positions itself as a pioneer in e-procurement with a strong focus on innovation and customer support. The website reflects a professional and modern digital presence, leveraging WordPress and WooCommerce platforms with various plugins to enhance functionality and user experience. Security posture is solid with HTTPS and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and vulnerability disclosures. Overall, cosinex GmbH demonstrates a credible and trustworthy business with clear contact information, social media engagement, and compliance with GDPR requirements.

citeq is a municipal IT service provider for the city of Münster and surrounding public sector entities. The organization offers comprehensive IT services including consulting, system operation, application development, and network infrastructure support. Positioned as a key digitalization partner for local government and public institutions, citeq supports a broad range of clients including schools and neighboring municipalities. The website reflects a professional and consistent brand image aligned with public sector standards. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes privacy-conscious analytics via Matomo. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response details are not published. Overall, citeq demonstrates a mature digital presence suitable for a government IT provider.

CharismaTeam GmbH is a German software company specializing in the development of application assistants, workflow management systems, and custom software solutions primarily targeting public administration and business clients. The company has established a niche market position supported by recognized innovations such as the Innovationspreis-IT awards in 2016 and 2017 and strategic partnerships with notable firms like Wolters Kluwer. Their business model focuses on delivering turnkey software systems and consulting services to streamline digital application processes and workflow automation. Technically, the website is built on the webEdition CMS platform, utilizing Bootstrap and jQuery, though some technologies are dated. The site is moderately optimized for performance and mobile use, with good SEO practices but limited accessibility features. Security posture is moderate; HTTPS is assumed but no explicit security headers were detected, and older JavaScript libraries are in use. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is professional and trustworthy, with no signs of malicious content or blocking mechanisms.

B

brain-SCC GmbH

brain-scc.de

56

brain-SCC GmbH is a German company specializing in digital administration and e-government solutions, targeting public sector entities and administrations. Their key offerings include the VOIS-Vorgangsraum software component and the EfA - Digitale Baugenehmigung service, which streamline administrative processes such as building permits. The company holds recognized certifications like ISO9001:2015 and TSA, indicating a commitment to quality and security. The website is professionally designed, content-rich, and well-structured, reflecting a mature digital presence.

B

bol Behörden Online Systemhaus GmbH

bol-systemhaus.de

56

bol Behörden Online Systemhaus GmbH is a specialized software development and system house company focused on universal form management systems, serving public sector clients, industry, and finance sectors. Established in 1998, the company offers products, solutions, and consulting services to facilitate digital transformation and online form workflows. The website reflects a professional and consistent brand presence with clear business information and contact channels. Technically, the site is built on WordPress with WooCommerce and uses modern plugins and AWS hosting infrastructure, indicating a mature digital presence. Security posture is adequate with HTTPS and anti-spam measures like hCaptcha, but lacks explicit security headers and published security policies, representing areas for improvement. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy, well-structured, and business-focused, with moderate technical and security maturity.

B

Bundesdruckerei GmbH

bundesdruckerei.de

69

Bundesdruckerei GmbH is a large, government-affiliated technology company specializing in secure digital identity solutions, cybersecurity, and digital transformation services primarily for public sector and critical industries in Germany. The company holds a strong market position as the largest cross-departmental federal enterprise in digitalization with approximately 1300 employees. Their offerings include identification systems, IT security, trusted services, and digital infrastructure solutions. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding consistent with their government ties. Technically, the site is built on Drupal CMS with Bootstrap 5, optimized for mobile, and integrates eTracker analytics with privacy-conscious cookie consent mechanisms. Security posture is strong with HTTPS enforced, nonce usage in scripts, and a dedicated vulnerability disclosure page, though explicit security headers could be more visible. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness.

B

Bank-Verlag GmbH

bank-verlag.de

58

Bank-Verlag GmbH is a specialized IT solutions provider focused on the financial sector, supporting credit institutions and public administration in digital transformation and product development. As a 100% subsidiary of the Bundesverband deutscher Banken (BdB), it holds a strong market position as a trusted technology driver and service provider. The company offers a broad portfolio including banking and payment solutions, card management, trusted digital solutions, business support, and educational services through its academy. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its target audience of financial institutions and related sectors. Technically, the site leverages modern frameworks such as Next.js and Storyblok CMS, with Matomo analytics and a cookie consent manager ensuring privacy compliance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response details are not published. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR requirements.

The website adminflex.de serves as a minimal login portal, presumably for administrative or internal use, with very limited publicly accessible content. The site lacks any visible business description, contact information, or user guidance, indicating it is not intended for general public engagement. The domain is registered with German name servers, consistent with the .de TLD, but no registrant details or company information are provided. The site’s technical infrastructure is basic, relying on simple HTML and CSS without modern frameworks or CMS platforms. No analytics, tracking, or advertising technologies are detected, suggesting a low digital maturity level. Security posture is weak due to absence of HTTPS enforcement, security headers, and visible anti-CSRF measures on the login form. No privacy or cookie policies are present, indicating non-compliance with GDPR and related regulations. Overall, the site appears to be a small-scale internal tool rather than a public-facing business website.

S

Schramm GmbH

schramm-gmbh.de

55

Schramm GmbH is a medium-sized German manufacturing company specializing in control cabinet systems, explosion-proof heating systems, temperature measurement technology, and sheet metal processing. Founded in 1947, it serves industrial sectors such as oil, gas, chemical, machinery, medical, pharmaceutical, transport, and steel industries. The company maintains a strong market position as a certified supplier with a professional online presence. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and includes a consent management platform and self-hosted analytics, reflecting a mature digital infrastructure. Security posture is good with HTTPS and privacy compliance, though explicit security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and compliant with GDPR, supporting the company's credibility and business operations.

L

Lugrain Software GmbH

lugrain.de

37

Lugrain Software GmbH is a small German technology company specializing in network security solutions for enterprise customers. The company emphasizes over 10 years of experience in securing corporate networks, positioning itself as a trusted niche provider. The website is built on TYPO3 CMS and integrates modern consent management tools such as Usercentrics, reflecting a moderate level of digital maturity. Technical infrastructure includes standard web technologies and Google Tag Manager for analytics. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of published privacy policies, terms of service, and incident response information indicates room for improvement in transparency and compliance documentation. Overall, the website is professional and trustworthy but could enhance its security and privacy disclosures to better align with best practices.

C

cmb PLUS Czarnecki + Mosinski + Bliewert Steuerberater Partnerschaft mbB

cmbplus.de

46

cmb PLUS Czarnecki + Mosinski + Bliewert Steuerberater Partnerschaft mbB is a small regional tax consultancy firm operating in Germany with offices in Fulda, Petersberg, and Gersfeld. The company provides professional services including financial accounting, payroll accounting, and tax consulting targeted at businesses and individuals in the region. The website is built using TYPO3 CMS and styled with Bootstrap 5, reflecting a moderate level of digital maturity with a clean and professional design. However, the site lacks explicit privacy and cookie policies, contact information, and social media presence, which limits user engagement and trust. Security posture is basic with no detected security headers or advanced protections, and no evidence of HTTPS enforcement was found in the provided data. Overall, the site is functional and professional but would benefit from enhanced security and compliance features.

W

Willy-Brandt-Schule Gießen

wbs-giessen.de

48

The Willy-Brandt-Schule Gießen is a vocational educational institution located in Gießen, Germany, offering a broad range of educational programs including Fachoberschule, Modeschule, Berufsfachschule, and dual vocational training. The school targets students, parents, and local businesses, positioning itself as a key regional provider of vocational education. The website is built on TYPO3 CMS with Bootstrap and jQuery, reflecting a moderate level of digital maturity with good mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled and email obfuscation, but lacks advanced security headers and a cookie consent mechanism. Contact information is clearly presented, enhancing trust and credibility.

S

STEINBECK GmbH

steinbeckwelt.de

48

STEINBECK GmbH operates the Steinbeckwelt website, a German-based business combining art and chocolate gifts. The company offers products through its own online shop and maintains a presence on major social media platforms including Instagram, Facebook, Amazon, and YouTube. The website serves as a portal linking to these sales channels and promoting the art of Walter Steinbeck. The business targets general consumers interested in art and confectionery gifts, positioning itself in a niche retail market. Technically, the website is built with standard HTML, CSS, and JavaScript, hosted by DomainFactory, a reputable German hosting provider. The site is moderately optimized for mobile and performance, with basic SEO and accessibility features. Security posture is adequate with SSL/TLS encryption but lacks advanced security headers and explicit incident response information. Privacy compliance is strong with a comprehensive GDPR-aligned privacy policy, though a cookie consent mechanism is missing. Overall, the website is professional, trustworthy, and well-branded, supporting a small-sized retail business in Germany.

H

Hartmann Holzbau GmbH & Co. KG

hartmann-holzbau-hessen.de

48

Hartmann Holzbau GmbH & Co. KG is a well-established family-owned company specializing in ecological timber construction with over 100 years of tradition in the Hessen region of Germany. The company offers a range of services including house building, timber construction, renovations, and engineering timber works, focusing on sustainable and regional building practices. Their website reflects a professional and consistent brand image with clear contact information and multiple certifications that reinforce their market credibility. Technically, the website is built on TYPO3 CMS with modern front-end libraries such as jQuery, Owl Carousel, and Bootstrap, providing a responsive and user-friendly experience. The site is well-structured with good SEO practices and mobile optimization, although some accessibility features could be improved. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the website uses HTTPS with a good SSL configuration but lacks important security headers and a cookie consent mechanism, which are recommended for GDPR compliance and enhanced security. There is no visible incident response or vulnerability disclosure information, which could be improved to strengthen trust and preparedness. Overall, the website presents a trustworthy and professional image with solid business credibility and technical implementation. Strategic improvements in privacy compliance and security policies would further enhance their security posture and regulatory adherence.

A

Animals' Angels

animals-angels.de

53

Animals' Angels is a German-based non-profit organization dedicated to the welfare of farmed animals, with a particular focus on protecting animals during transport. The organization operates internationally, advocating for improved animal welfare laws and raising public awareness through reports, publications, and monitoring activities. Their website is professionally designed using TYPO3 CMS, featuring clear navigation, multilingual support, and integration with privacy compliance tools such as Usercentrics. The organization maintains active social media channels and provides transparent contact information, enhancing trust and engagement with supporters. Technically, the website employs modern frameworks and analytics tools like Matomo, ensuring good performance and privacy-conscious tracking. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and formal security policies. Overall, Animals' Angels presents a credible, well-maintained digital presence aligned with its mission and audience.

C

CEKA

ceka.de

50

CEKA is a German manufacturer specializing in modern office furniture and office interior solutions. The company positions itself as a direct manufacturer offering high-quality products aimed at creating efficient and modern workplaces. The website is built using TYPO3 CMS and styled with Bootstrap, indicating a moderate level of technical maturity. The site is accessible without any WAF or security challenges, but lacks critical privacy and security disclosures such as privacy policies, cookie consent mechanisms, and terms of service. No contact information or social media presence is evident in the provided content, which may impact user trust and engagement. Security posture is basic with no detected security headers or incident response information, suggesting room for improvement in protecting user data and complying with regulations. Overall, the website is functional and business-focused but would benefit from enhanced security, privacy compliance, and transparency to improve trustworthiness and regulatory adherence.

A

adunox GmbH

adunox.com

50

adunox GmbH is a German technology company established in 2009, specializing in digital solutions and IT services. The company targets business clients and operates primarily in the technology sector. Their website is powered by TYPO3 CMS, reflecting a mature digital infrastructure. The site is professionally designed with good mobile optimization and SEO practices, although some compliance documents like privacy policy and terms of service are missing. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and published security policies. Overall, the website is trustworthy and professional but could improve compliance and security transparency.

P

Physikalischer Verein

physikalischer-verein.de

45

The Physikalischer Verein is a small non-profit educational organization operating in Germany, specifically in the Frankfurt and Rhein-Main region. It focuses on astronomy education and public outreach, operating the Sternwarte Frankfurt observatory and offering astronomical observations and lectures. The website is built on TYPO3 CMS with Bootstrap 5, indicating a modern and maintainable technical infrastructure. The site is mobile optimized and provides good user experience and navigation clarity. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate with no detected security headers or advanced protections, and no incident response or vulnerability disclosure information is provided. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the organization.

K

KRAUSE-Systems GmbH

krause-systems.de

58

KRAUSE-Systems GmbH is a well-established German manufacturer specializing in climbing technology and related occupational safety equipment. The company offers a broad portfolio of products including ladders, steps, scaffolding, and safety gear, complemented by services such as training seminars, product testing, and customer support. Their website reflects a strong market position with comprehensive product information and a professional presentation targeting both industrial professionals and private users. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including jQuery and privacy-conscious analytics via Matomo. The site is well-structured, mobile-optimized, and includes a robust cookie consent mechanism compliant with GDPR requirements. Hosting is managed through a reputable provider, and performance is moderate with good SEO and accessibility practices. From a security perspective, the site enforces HTTPS and integrates consent management for tracking technologies such as Facebook Pixel and Google Tag Manager. However, explicit security policies and incident response contacts are not published, and some security headers are not explicitly detected. No vulnerabilities or exposed sensitive data were found in the provided content. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. Strategic improvements in security policy transparency and header implementation could further enhance their security posture.

H

Home for Kids e.V.

homeforkids.de

49

Home for Kids e.V. is a German non-profit organization dedicated to supporting children and adolescents who have experienced psychological trauma. The organization funds and promotes psychosocial care projects and initiatives aimed at helping young people recover and lead normal lives. Their website is professionally designed, multilingual, and optimized for SEO, featuring clear navigation and a donation system integrated with PayPal. The organization maintains a transparent presence with comprehensive contact information and social media links. Technically, the site is built on WordPress using modern themes and plugins, with good mobile optimization and privacy compliance via Usercentrics. Security posture is solid with HTTPS and secure forms, though some security headers and explicit policies could be improved. Overall, the website reflects a trustworthy and credible non-profit entity with a clear mission and effective digital presence.

P

PHILIPPI Reisen

philippi-reisen.de

48

PHILIPPI Reisen is a German travel company specializing in bus tours, flights, cruises, and various travel experiences. The company operates multiple physical offices and offers a broad range of travel services to a general audience. Their website is built on TYPO3 CMS and integrates modern technologies such as Matomo for analytics and Usercentrics for consent management, reflecting a mature digital infrastructure. The site is well-structured, mobile-optimized, and provides clear navigation and contact information, enhancing user experience and trust. From a security perspective, the website enforces HTTPS and employs privacy-respecting analytics, but lacks explicit security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent with the website content and hosting provider, supporting legitimacy. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, PHILIPPI Reisen demonstrates a solid business and technical foundation with good security hygiene and privacy compliance. Strategic improvements could include publishing a formal security policy and enhancing security headers to further strengthen their security posture.

G

Governikus GmbH & Co. KG

governikus.de

68

Governikus GmbH & Co. KG is a medium-sized German company specializing in IT security software solutions for digital administration and e-government. Founded in 1999, the company provides secure identity management, communication, and data solutions primarily targeting public sector entities such as government agencies and the judiciary. Their market position is strong within the German public sector, supported by partnerships with notable organizations like Bundesdruckerei and Bank-Verlag. The website reflects a professional and comprehensive presentation of their services and products, emphasizing digital transformation and security in public administration. Technically, the website is built on WordPress with modern plugins such as WooCommerce for e-commerce, Yoast SEO for search optimization, and Borlabs Cookie for GDPR-compliant cookie management. The site is mobile-optimized, accessible, and performs moderately well. Security practices include HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response details are not publicly disclosed. No critical vulnerabilities or suspicious activities were detected in the website content or WHOIS data. Overall, Governikus demonstrates a mature digital presence with a focus on compliance and security, suitable for its government clientele. The absence of direct contact emails and phone numbers on the main site suggests a controlled communication approach, likely via contact forms. The domain registration data aligns well with the company's history and identity, reinforcing legitimacy. Strategic improvements could include publishing detailed security policies, incident response contacts, and vulnerability disclosure information to enhance trust and transparency.

M

#mehrAchtung – die neue Verkehrssicherheitsinitiative | #mehrAchtung

mehrachtung.de

52

The website www.mehrachtung.de represents a German traffic safety initiative called #mehrAchtung, focused on promoting respectful and considerate behavior in road traffic to improve the overall traffic climate. The site provides educational content, campaigns, and partner collaboration opportunities aimed at road users in Germany. The business model is non-profit and targeted at public awareness and safety promotion within the transportation sector. The website is well-designed, mobile-optimized, and uses modern technologies such as Gatsby and React, with integrated Matomo analytics and Usercentrics for cookie consent management. However, it lacks explicit privacy and terms of service pages, as well as direct contact information, which slightly impacts its transparency and user trust. Security posture is good with HTTPS and consent management but could be improved by adding explicit security headers and publishing security policies. Overall, the site is legitimate, professional, and serves a niche public safety role with moderate risk and good technical maturity.

B

Bundesverband Deutscher Omnibusunternehmer e.V.

diebusunternehmen.de

51

The website 'Die deutschen Busunternehmen' is a professional platform operated by the Bundesverband Deutscher Omnibusunternehmer e.V., focused on recruitment and information dissemination for medium-sized bus companies across Germany. It targets prospective bus drivers, employers, and trainees, providing job listings, training information, and regional employer searches. The platform holds a solid market position as a representative voice for the German bus industry, founded around 2020. Technically, the site is built on WordPress with modern libraries such as jQuery and Plyr for video playback, and employs Borlabs Cookie for GDPR-compliant cookie management. The site is mobile-optimized and SEO-friendly with structured data enhancing search visibility. Security-wise, the site enforces HTTPS, uses security headers, and implements cookie consent mechanisms, though it lacks explicit published security policies or incident response contacts. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations, with moderate tracking via Google Tag Manager and TikTok Pixel. No blocking or WAF interference was detected, allowing full content access.

W

WBO

tag-des-busses.de

33

The website 'Tag des Busses' is an event-focused platform organized by WBO, dedicated to promoting bus mobility and careers in the bus transportation sector in Germany. It provides event listings and opportunities for the public to engage with the bus industry, including hands-on experiences such as sitting in the driver's seat. The site targets a general audience interested in transportation and career opportunities within this niche. Technically, the site is built on WordPress using the Astra theme and several plugins including Yoast SEO and WP Event Manager, with integration of Google Maps API for event location filtering. The site is hosted on servers associated with kasserver.com and uses HTTPS, ensuring secure communication. Security posture is moderate with HTTPS enabled but lacks explicit security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Business credibility is moderate with consistent branding and professional content but lacks explicit contact information and certifications. Overall, the site is safe, well-structured, and serves its niche purpose effectively but would benefit from enhanced privacy and security disclosures.

T

team digital GmbH

team-digital.de

54

team digital GmbH is a well-established full-service marketing agency based in Lauterbach, Hessen, Germany, with over 25 years of experience. The company offers a broad range of services including web design, online marketing, print design, branding, and public relations, targeting small and medium-sized enterprises primarily in Hessen and across Germany. Their market position is strong regionally, supported by a loyal client base and a comprehensive portfolio showcasing diverse projects. The website reflects a professional and consistent brand image with detailed team and service information.

Nodeeps is a German-based small web hosting and domain registration provider with over 11 years of experience serving private users and small to medium businesses. Their offerings include webhosting packages with SSL, managed servers, reseller hosting, and domain services. The website is built on Contao CMS and uses modern technologies such as PHP 7.x, MariaDB, and PostgreSQL. The site is accessible, professionally designed, and provides clear navigation and service descriptions. Security posture is adequate with HTTPS enforced and secure mail protocols, but lacks some advanced security headers and explicit incident response policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the domain registration is consistent with the business claims, though WHOIS data is limited due to DENIC policies. The website is safe, trustworthy, and suitable for its target audience.

O

ocean[medien]®

oceanmedien.com

56

Oceanmedien is a small, established German advertising and internet agency based in Selm, offering a broad range of services including web design, print media, multimedia production, and marketing solutions. With over 25 years of experience, the company targets businesses primarily in Germany, Austria, and Switzerland, providing personalized and digital marketing services. The website reflects a professional and consistent brand image with clear contact information and active social media presence. Technically, the website uses a custom CMS called waterdrop, along with common web technologies such as jQuery and Font Awesome. The site is moderately performant, mobile-optimized, and includes SEO best practices. Cookie consent and privacy compliance mechanisms are implemented effectively, supporting GDPR requirements. From a security perspective, the site enforces HTTPS and uses secure cookie flags. However, it lacks explicit security headers and a published security policy or incident response contact, which are areas for improvement. The absence of WHOIS domain registration data raises some concerns about domain legitimacy, although the website content and business information appear credible. Overall, Oceanmedien presents a trustworthy and professional online presence with room for enhanced security practices and domain registration transparency. Strategic recommendations include implementing security headers, publishing a security policy, and verifying domain registration details to strengthen trust and compliance.

F

FOCKMAST®

fockmast.com

58

FOCKMAST® is a German marketing agency established since 1999, specializing in both internet and print media services. The company targets businesses primarily in Germany, Austria, and Switzerland, offering a broad range of marketing solutions including web design, webshops, domain services, print media, photography, and drone services. The website reflects a professional and consistent brand image with a strong focus on customer service and marketing expertise. Technically, the site uses Waterdrop CMS, jQuery, and Font Awesome, and is moderately optimized for performance and mobile devices. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers and formal security policies are absent. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy, but the website content and business information appear credible and trustworthy. Overall, the site is well-structured, compliant with GDPR, and provides clear contact information and social media presence.

A

assfinet

assfinet.de

65

assfinet is a German company specializing in the development and distribution of administrative and sales software solutions for the insurance market. Established in 1991, it positions itself as a pioneer in digital cross-company process support with award-winning software products. The website targets insurance professionals and companies, offering digital transformation tools tailored to their needs. The company maintains a medium-sized business profile with a consistent and professional online presence. Technically, the website is built on WordPress with modern plugins such as Gravity Forms and Yoast SEO, hosted on Microsoft Azure DNS infrastructure. The site demonstrates good SEO and mobile optimization, with a moderate performance profile. Security-wise, the site enforces HTTPS and uses a comprehensive cookie consent mechanism via Cookiebot, ensuring GDPR compliance. However, explicit security headers and incident response policies are not publicly visible, suggesting room for improvement in transparency and security posture. Overall, the domain registration and hosting details align well with the company's business claims, indicating a legitimate and trustworthy entity.

N

NAFI GmbH

nafi.de

62

NAFI GmbH is a well-established German company specializing in insurance software solutions, particularly for car insurance brokers, with a dominant market share in Germany. Founded in 1990, it offers cloud-based platforms with extensive tariff and functional coverage, serving brokers, pools, insurers, and portals. The company is part of the Acturis Group, indicating a strong corporate backing. The website reflects a professional and comprehensive presentation of their products and services, targeting insurance professionals and related businesses. Technically, the site uses modern web technologies such as jQuery and FontAwesome, hosted likely via Deutsche Telekom infrastructure, and is optimized for mobile devices with good SEO practices. Security posture is adequate but could be improved by adding explicit security headers and incident response information. Privacy compliance is well addressed with clear privacy and cookie policies, though no explicit cookie consent mechanism is detected. Overall, the site is trustworthy, professional, and business-focused with no signs of suspicious or malicious activity.

A

assfinet

acturis.de

65

assfinet.de is a professional website representing a medium-sized German company specializing in administrative and sales software solutions for the insurance market. Founded in 1991, the company positions itself as a pioneer in digital cross-company process support with award-winning software products. The website is well-structured, SEO-optimized, and uses modern technologies including WordPress, Yoast SEO, and Cookiebot for compliance. Hosting is managed via Microsoft Azure DNS, indicating a reliable infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. The site uses third-party analytics and marketing cookies with transparent disclosures. Overall, the website is safe, professional, and trustworthy, targeting insurance industry professionals and companies.

M

MB Capital Services GmbH

mb-capital-services.de

62

MB Capital Services GmbH is a German-based company specializing in creative event and exhibition services, including design and system stand construction, hostess services, and advertising spaces primarily at Messe Berlin. The website targets businesses and event organizers seeking professional support for trade shows, congresses, and events. The company positions itself as a reliable partner for worldwide implementation of creative corporate and product presentations. Technically, the website uses a combination of jQuery, jQuery UI, Nivo Slider, Fancybox, and a custom video player, hosted on managed infrastructure. The site includes a Usercentrics cookie consent mechanism, indicating some level of privacy compliance, but lacks explicit privacy and terms of service pages. Security posture is moderate with HTTPS enabled but missing security headers and no visible incident response or security policy information. Overall, the website is functional and professional but would benefit from enhanced transparency and security practices.

D

Der offizielle LAUFMAUS® Shop

laufmaus.run

71

Der offizielle LAUFMAUS® Shop is a specialized e-commerce retailer focused on selling the LAUFMAUS® product, which aims to improve running posture and reduce pain and joint stress. The website is professionally designed, leveraging the Shopify platform and integrating multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and PayPal for payments. The site is well-optimized for performance and mobile devices, providing a good user experience with clear navigation and trust signals including customer testimonials and a money-back guarantee. However, explicit privacy and terms of service policies are not clearly found in the HTML content, which slightly impacts privacy compliance scores. The domain WHOIS data is privacy protected, which is common for retail sites, and no suspicious patterns were detected. Overall, the site demonstrates a mature digital presence with a solid security posture, though improvements in transparency around privacy and security policies are recommended.

F

FLEXVIT - Bands Reloaded

flexvit.band

70

FLEXVIT - Bands Reloaded operates a professional e-commerce platform specializing in fitness and functional training bands, targeting athletes and fitness enthusiasts primarily in Germany and surrounding markets. The brand is well-established with a decade of market presence, supported by certifications such as Ökotex and endorsements from world champions and Olympians. The website is built on Shopify, leveraging modern e-commerce technologies and third-party integrations for marketing, analytics, and customer engagement. Privacy and compliance are well addressed with GDPR-compliant cookie consent and privacy policies. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Overall, the site presents a trustworthy and professional digital presence.

F

Frosch Sportreisen

frosch-sportshop.de

50

Frosch Sportshop is a German-based e-commerce retailer specializing in used mountain bikes, skis, and sports equipment. The website is professionally designed using WordPress and WooCommerce, offering a user-friendly shopping experience with clear navigation and mobile optimization. The company maintains a consistent brand presence with active social media channels and transparent contact information. Technical infrastructure includes modern JavaScript libraries and SEO tools, hosted on a domain controlled by GoDaddy nameservers. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers could be improved. Privacy policies are comprehensive and GDPR compliant, enhancing user trust. Overall, the site presents a credible and trustworthy online retail platform for sports enthusiasts.

3

3Bears

3bears.com

68

3Bears is a European e-commerce brand specializing in premium vegan porridge products made with whole oat flakes and large fruit pieces. The company operates multiple localized domains targeting various European countries, indicating a mature and regionally diversified business model. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations such as Google Tag Manager, Hotjar, and Klaviyo for analytics and marketing. GDPR compliance is well implemented with a comprehensive cookie consent mechanism and privacy policy. Security posture is solid with HTTPS enforced and domain registration locked, though DNSSEC is not enabled and no explicit security policy or incident response information is published. Overall, the site presents a professional, trustworthy, and user-friendly experience with good technical and privacy compliance.

R

resmio GmbH

resmio.com

44

resmio GmbH operates a leading online reservation system tailored for the hospitality industry in Germany, Austria, and Switzerland. Their platform supports restaurants, bars, and cafés with reservation management, staff planning, online ordering, and marketing services. The company positions itself as a SaaS provider with a fixed-cost pricing model, serving over 10,000 hospitality businesses. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and analytics integrations, ensuring good performance and SEO optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. The domain WHOIS data is missing or unavailable, which is unusual and reduces trust from a domain registration perspective, but the overall business credibility remains high based on website content and social proof. Strategic recommendations include publishing a dedicated security policy, incident response information, and vulnerability disclosure details to enhance transparency and trust.

M

Messe Düsseldorf GmbH

k-online.com

60

The website www.k-online.com represents the official online presence of K 2025, the world's leading trade fair for the plastics and rubber industry organized by Messe Düsseldorf GmbH. It serves industry professionals by providing comprehensive event information, exhibitor and visitor services, and program details. The site is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital infrastructure. Technically, it employs modern JavaScript libraries, a consent management platform, and analytics tools, indicating a commitment to user experience and data privacy. Security posture is adequate with HTTPS enforced and consent mechanisms in place, though the absence of security headers and explicit privacy and terms pages suggests room for improvement. The lack of WHOIS data for the domain is a notable anomaly that slightly detracts from trustworthiness but does not undermine the evident legitimacy of the business. Overall, the site is a credible and authoritative resource for its target audience.

D

DRV-Jahrestagung: DRV Jahrestagung

drv-jahrestagung.de

32

The website www.drv-jahrestagung.de serves as the official information portal for the DRV Jahrestagung, an annual conference scheduled for April 2026 in the Azores, Portugal. It provides event details, program information, partner listings, and travel guidance primarily targeting attendees and stakeholders of the DRV organization. The site is built on TYPO3 CMS and leverages a modern JavaScript stack to deliver a visually appealing and user-friendly experience. However, it lacks critical compliance elements such as privacy and cookie policies, and explicit contact information is not readily available on the main pages. Security posture is moderate with no visible security headers and unknown SSL configuration, though no blocking or WAF mechanisms interfere with content access.

D

Deutscher Reiseverband

drv-netzwerkstatt.de

42

The DRV-Netzwerkstatt website represents a professional event platform affiliated with the Deutscher Reiseverband, focused on networking and knowledge exchange within the tourism industry. The site targets industry professionals and offers biannual events to foster cross-sector collaboration. The business model centers on event hosting and community building, supported by a small but consistent team with clear contact channels and social media presence. Technically, the website is built on TYPO3 CMS, hosted by Schlund Technologies, and incorporates modern web standards including responsive design and Google Tag Manager for analytics. The site performs moderately well with good SEO and accessibility basics, though some improvements in security headers and explicit policies could enhance its posture. Security-wise, the site enforces HTTPS and provides cookie consent mechanisms, indicating GDPR awareness. However, it lacks publicly visible security policies, incident response contacts, or vulnerability disclosure information. No critical vulnerabilities or suspicious elements were detected, and the WHOIS data aligns well with the business identity, supporting legitimacy. Overall, the website is trustworthy, professionally maintained, and compliant with basic privacy standards. Strategic improvements in security transparency and policy publication would further strengthen its risk profile and user trust.

M

Messe Berlin GmbH

itb.com

63

ITB Berlin is a globally recognized travel trade fair organized by Messe Berlin GmbH, serving as a key platform for travel industry professionals, exhibitors, and visitors. The website provides comprehensive information about the event scheduled for March 3-5, 2026, including exhibitor services, visitor information, and various travel segments. The site is professionally designed with good content quality and clear navigation, targeting the travel and hospitality sectors primarily in Germany. Technically, the site is built on modern frameworks such as Next.js and React, with cookie consent managed by Usercentrics, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and some security best practices observed, though explicit security policies and incident response contacts are not published. The absence of WHOIS data for the domain www.itb.com is a notable gap, reducing trust slightly, but the overall business credibility remains high due to the professional nature of the site and its association with Messe Berlin GmbH. Strategic recommendations include enhancing security headers, publishing security policies, and improving WHOIS transparency to strengthen trust and compliance.

F

Fenster & Türen Welt

futw.de

50

Fenster & Türen Welt is a German retail-oriented website specializing in windows and doors products and information. The website targets consumers and businesses interested in these products, offering detailed content and product-related information. The business appears to be a small-sized entity founded around 2016, with a consistent brand presence and a clear focus on its niche market. Technically, the website is built on WordPress using the Enfold theme and Avia framework, supported by modern technologies such as jQuery and Google Tag Manager. The site is hosted on servers associated with kasserver.com, consistent with its German market focus. Security-wise, the website employs HTTPS and a cookie consent mechanism via Cookiebot, demonstrating a basic level of privacy compliance. However, it lacks explicit privacy policies, terms of service, and security headers, which are areas for improvement. No WAF or blocking mechanisms were detected, and the site is fully accessible. Overall, the website scores moderately well in content quality, technical implementation, and business credibility but should enhance privacy and security practices to improve compliance and trust.

G

Gambio GmbH

gambio.com

53

Gambio GmbH operates a professional ecommerce platform targeting startups and established online retailers, offering cloud-based shop software with extensive features including legal compliance, multichannel sales, and automatic updates. The company positions itself as a trusted solution with over 25,000 shops using its platform, supported by certifications and a strong community. Technically, the website is built on Contao CMS with modern JavaScript libraries and integrates Google Tag Manager and SnapEngage for analytics and customer support. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly documented. The WHOIS data is missing, which is unusual but the overall trust signals from the website content and certifications mitigate concerns. The site is well-optimized for SEO, mobile, and accessibility, providing a professional user experience.