Germany security reports

S

Siegerland-Flughafen GmbH

siegerland-airport.de

47

Siegerland-Flughafen GmbH operates a regional airport in Germany, providing aviation services including pilot training, charter flights, business facilities, and community engagement. The website targets pilots, business partners, and local travelers, positioning itself as a key regional transportation hub. The digital infrastructure is built on WordPress with modern plugins and themes, offering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking a dedicated security policy or incident response information. Overall, the site is professional, trustworthy, and compliant with GDPR regulations.

S

SG Flensburg-Handewitt

sg-flensburg-handewitt.de

50

SG Flensburg-Handewitt operates as a professional handball club based in Germany, providing comprehensive team, fan, and business engagement services through their website. The site serves as a hub for fans, sponsors, and the local community, offering schedules, news, fan club information, and ticketing options. Their market position is that of an established sports entity with a medium-sized operational scale. Technically, the website is built on TYPO3 CMS, integrates modern cookie consent management via Cookiebot, and uses Google Tag Manager for analytics and marketing. Hosting is provided by SchlundTech, a reputable provider. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though security headers could be improved. Privacy compliance is strong, with clear GDPR adherence and user consent controls. Overall, the website is professional, trustworthy, and well-structured, supporting a positive user experience and business credibility.

M

Marina Flensburg GmbH & Co. KG

marinaflensburg.de

48

Marina Flensburg GmbH & Co. KG operates a marina located in Flensburg, Germany, providing essential yachting services such as berth rental, winter storage, boat fueling, crane access, and harbor amenities. The website positions itself as a local, customer-focused marina with a strong emphasis on comfort and convenience for boat owners. The target audience includes yachting enthusiasts and visitors to the Flensburg harbor area. The business model revolves around providing marina infrastructure and services to boat owners and seasonal residents. Technically, the website is built on Joomla CMS with Yootheme Pro and UIkit frameworks, leveraging Leaflet.js for interactive maps and Google reCAPTCHA for form security. The site demonstrates good digital maturity with responsive design, accessibility features, and SEO optimization. Performance is moderate, with modern technologies and proper meta tags implemented. From a security perspective, the site enforces HTTPS, includes security headers, and uses reCAPTCHA to protect forms from spam. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive GDPR-compliant privacy policy and cookie consent mechanism. However, explicit security policies and incident response contacts are absent. Overall, the website is professional, trustworthy, and well-maintained, reflecting a legitimate and customer-oriented business. Strategic recommendations include adding explicit security and incident response policies, publishing a vulnerability disclosure statement, and providing data protection officer contact details if applicable.

M

Mädchenzentrum Osnabrück

maedchenzentrum-os.de

47

Mädchenzentrum Osnabrück is a German non-profit organization dedicated to supporting girls and young women through various counseling and community programs. Their website reflects a clear focus on youth empowerment and social support, offering services such as open meetings, counseling on sensitive topics, and projects aimed at girls' perspectives. The organization maintains a local presence in Osnabrück and partners with related entities such as Haus Neuer Kamp e.V. and the Diakonisches Werk evangelischer Kirchen in Niedersachsen for data protection and operational support. Technically, the website is built on Joomla CMS with modern UI frameworks like UIkit and Yootheme, ensuring a responsive and user-friendly experience. The site employs standard privacy and cookie consent mechanisms compliant with GDPR, including detailed privacy policies and explicit user consent for cookies. Security posture is solid with HTTPS enforced and CSRF protections, though there is room for improvement in implementing security headers and formal incident response disclosures. Overall, the website is professional, trustworthy, and well-aligned with its non-profit mission, with no indications of malicious activity or content safety concerns.

M

Meerzeit Immobilien

meerzeit-immobilien.de

46

Meerzeit Immobilien operates as a specialized real estate brokerage focusing on exclusive and luxury properties in the Ostseeresort Olpenitz and surrounding Baltic Sea region. Their website showcases a portfolio of high-end villas, apartments, and holiday homes, targeting affluent buyers and sellers seeking premium maritime real estate. The business model centers on exclusivity, discretion, and personalized service, positioning them as a niche player in the regional luxury real estate market. Technically, the website is built on Joomla CMS with Yootheme templates and UIkit framework, delivering a modern and responsive user experience with good SEO and mobile optimization. Security posture is adequate with HTTPS enabled and CSRF protections, but lacks advanced security headers and explicit policies. Privacy compliance is weak due to missing privacy and cookie policies, and contact information is limited to a newsletter subscription form without direct emails or phone numbers. Overall, the site is professional and trustworthy but would benefit from enhanced compliance and security transparency.

N

NIRO Petersen

niro-petersen.de

55

NIRO Petersen is a specialized German manufacturer of high-quality stainless steel boat fittings and accessories, operating since 1965. The company targets yacht and boat owners, maritime industry professionals, and ship outfitters, offering custom-made and contract manufacturing services. The website reflects a mature market position with clear branding, comprehensive product and company information, and certifications that enhance trust. Technically, the site is built on Joomla CMS with modern UIkit and Yootheme frameworks, delivering a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS and CSRF protections, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with clear cookie and privacy policies. Overall, the website is professional, trustworthy, and well-aligned with the company's business model and market presence.

R

Reha Zentrum Flensburg

rehaflensburg.de

57

Reha Zentrum Flensburg is a well-established ambulatory rehabilitation and physiotherapy center located in Flensburg, Germany, with a history dating back to 1993. The website clearly targets patients seeking rehabilitation services, emphasizing local accessibility and professional care. The business positions itself as one of the oldest and northernmost EAP centers in Germany, highlighting its experience and competence. Technically, the website is built on Joomla CMS with modern UIkit and Yootheme frameworks, incorporating Leaflet.js for map functionality. The site is mobile-optimized and presents content in a clear, professional manner. Performance is moderate with good SEO practices but lacks some advanced accessibility features. From a security perspective, the site uses HTTPS with a good SSL configuration and employs CSRF tokens in forms, but lacks important security headers and a cookie consent mechanism. No vulnerability disclosure or incident response information is provided, which could be improved to enhance trust and compliance. WHOIS data aligns well with the business claims, showing a consistent and legitimate domain registration. Overall, the website is professional, trustworthy, and suitable for its healthcare audience, but could benefit from enhanced privacy compliance and security best practices to further strengthen its posture.

D

Dainat GmbH

dainat.de

48

Dainat GmbH is a small German company specializing in roofing and facade services, including roof renovation, insulation, metalwork, solar installations, and roof windows. The company positions itself as a regional expert with a focus on quality, experience, and customer service. Their website is built on Joomla CMS with a modern UIkit framework and Yootheme template, providing a professional and mobile-optimized user experience. The site uses HTTPS and includes structured data for SEO but lacks some advanced security headers and cookie consent mechanisms. Contact information is clearly presented, enhancing business credibility. Overall, the website reflects a mature digital presence suitable for a small regional service provider.

M

medixum.de

medixum.de

11

medixum.de is a professional online and offline medical education platform operated by the Akademie des Deutschen Ärzteverlages, targeting physicians and medical assistants in Germany. It offers CME-certified courses across multiple medical specialties with flexible learning formats including e-learning, blended learning, and in-person seminars. The platform is well-integrated with German medical associations, ensuring high-quality and relevant content. Technically, the website is built on WordPress with WooCommerce and uses modern plugins for SEO, payment processing, and consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, Content-Security-Policy headers, and cookie consent mechanisms, though additional security headers and incident response disclosures could enhance trust. Overall, the site is professional, trustworthy, and compliant with GDPR, serving a specialized healthcare education market effectively.

D

Deutscher Ärzteverlag

aerzteverlag.de

38

Deutscher Ärzteverlag GmbH operates as a leading medical specialist publisher in Germany, providing a wide range of medical, dental, and healthcare publications and services. The company targets healthcare professionals and institutions, offering products such as journals, job market platforms, and continuing education programs. Their market position is strong within the German healthcare publishing sector, supported by a consistent brand presence and a professional website. Technically, the website is built on WordPress with modern technologies including jQuery, Bootstrap, and Font Awesome, and integrates Cookiebot for GDPR-compliant cookie consent management. The site demonstrates good SEO and accessibility practices, with a responsive design suitable for mobile users. Security posture is solid with HTTPS enforced and no critical vulnerabilities detected, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, explicit contact emails and phone numbers are not directly visible, and no terms of service or security policies are published. Overall, the website reflects a mature digital presence with room for enhanced transparency in security and incident response policies.

E

:: ERLEBE DEINEN MARKT ::

erlebedeinenmarkt.org

44

The website erlebedeinenmarkt.org serves as a promotional platform for the "Erlebe Deinen Markt" campaign, which supports and celebrates local weekly markets primarily in Germany and Europe. The campaign emphasizes fresh produce, community engagement, and cultural experiences, involving around 400 markets and international participation. The site content is informative and targeted at consumers interested in local market culture and events. Technically, the website is built with basic HTML, CSS, and JavaScript without modern frameworks or CMS, resulting in moderate performance and poor mobile optimization. Security posture is weak due to lack of DNSSEC, security headers, and no visible HTTPS enforcement details. Privacy compliance is minimal as no privacy or cookie policies are present. Business credibility is moderate, supported by the campaign's longevity and partnerships, but contact information is not explicitly provided. Overall, the site is functional but requires improvements in security, privacy compliance, and technical modernization.

F

Flugplatz Oldenburg-Hatten

edwh.de

10

Flugplatz Oldenburg-Hatten operates as a small regional aviation and leisure business located between Oldenburg and Bremen, Germany. The website offers services including a flight school, sightseeing flights, and a café with event booking options. The business targets aviation enthusiasts and local visitors seeking recreational activities. The website is built on WordPress with a custom theme and uses standard plugins for contact forms and cookie consent management. Hosting is provided by Schlund Technologies, consistent with the German domain and regional focus. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and GDPR-aligned cookie consent. Contact information is available, but no explicit security or incident response policies are published. Overall, the website is professional, trustworthy, and well-suited for its niche audience.

G

Großmarkt Rostock GmbH

rostocker-wochenmaerkte.de

44

The website www.rostocker-wochenmaerkte.de represents the Rostocker Wochenmärkte, a regional market operator in Rostock, Germany, offering weekly markets with a focus on fresh, regional products. The business also operates an online shop for merchandise and vouchers, targeting local residents and visitors interested in authentic local market experiences. The site is well-branded and consistent with the parent company Großmarkt Rostock GmbH, indicating a solid local market presence. Technically, the website uses a modern but standard tech stack including jQuery, Bootstrap, and Klaro for cookie consent, hosted by Alfahosting. It is mobile-optimized and performs moderately well. Security posture is adequate with HTTPS and cookie consent implemented, but lacks visible advanced security headers and explicit security policies. Privacy compliance is good with a privacy policy and cookie banner, including Google Analytics with IP anonymization and opt-out. Overall, the site is professional, trustworthy, and safe for general audiences.

Iisii solutions GmbH operates a specialized online appointment booking platform (O-TIS) fully integrated with the EVIDENT TIS practice management system, targeting medical practices in Germany. Their solution enables real-time appointment scheduling, automated reminders, and patient self-service, enhancing operational efficiency and patient satisfaction. The company positions itself as an exclusive partner of EVIDENT, emphasizing seamless integration and automation to reduce manual workload in medical practices. Technically, the website is built on WordPress with modern plugins such as WPBakery Page Builder and Borlabs Cookie for GDPR compliance. The site is mobile-optimized and uses HTTPS with secure data transmission. While the technical stack is modern and the site performs moderately well, there is room for improvement in security headers and accessibility features. Security posture is solid with HTTPS and secure forms, but lacks published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, with clear privacy and cookie policies and consent mechanisms in place. Overall, the website and business present a professional and trustworthy image with a strong focus on healthcare technology solutions. Strategic improvements in security transparency and technical hardening could further enhance trust and compliance.

P

Praxis & Klinik für Kiefer & Gesicht

praxis-und-klinik.de

46

Praxis & Klinik für Kiefer & Gesicht is a well-established oral and maxillofacial surgery and dental clinic based in Böblingen, Germany, with over 20 years of experience and a strong patient base exceeding 90,000 treated individuals. The clinic offers a comprehensive range of services including dental implants, oral surgery, pediatric dentistry, anesthesia, and aesthetic facial surgery. Their business model uniquely combines the personalized approach of a practice with the safety and capabilities of a clinic, supported by a full anesthesiology team and modern operating rooms. The website reflects a professional healthcare provider targeting patients and referring medical professionals, with multilingual support and patient convenience features such as free parking and Wi-Fi.

R

Red Monkeys GmbH

red-monkeys.de

46

Red Monkeys GmbH is an independent advertising agency based in Konstanz, Germany, specializing in brand building, communication, and activation services. Their website presents a professional and comprehensive overview of their offerings, targeting businesses seeking creative marketing solutions. The agency showcases a strong portfolio with client logos and case studies, emphasizing their regional market presence and creative expertise. Technically, the website employs modern web standards, including HTML5, CSS3, JavaScript, and integrates Vimeo for video content and analytics tools such as Google Analytics and Matomo. The site is mobile-optimized and features a cookie consent mechanism compliant with GDPR requirements. Security-wise, the website uses HTTPS with good SSL configuration and enforces cookie consent for tracking scripts, though it lacks a publicly available security policy or incident response contacts. Overall, the site is trustworthy, well-designed, and compliant with privacy standards, making it a reliable digital presence for the agency.

I

IBB Wörn Ingenieure GmbH

ibb-woern.de

58

IBB Wörn Ingenieure GmbH is a small, established engineering firm based in Germany specializing in infrastructure planning and project execution in the sectors of transportation and energy. Founded in 1996, the company offers comprehensive services including planning, construction supervision, and project management primarily in road construction, civil engineering, and water management. Their website reflects a professional and regionally focused business with detailed project references and industry memberships, indicating a solid market position within their niche. Technically, the website is built with standard modern web technologies (HTML5, CSS3, JavaScript) and hosted via INWX. It demonstrates good mobile optimization, SEO practices, and moderate performance. The site uses HTTPS with excellent SSL configuration but lacks some advanced security headers. Analytics are handled via Plausible, indicating a privacy-conscious approach with minimal user tracking. From a security perspective, the site is well-configured with no visible vulnerabilities or exposed sensitive data. However, it lacks published security policies, incident response contacts, and cookie consent mechanisms, which are important for GDPR compliance and user trust. The WHOIS data is consistent with the business claims, showing no privacy protection or suspicious registration patterns, supporting the legitimacy of the domain. Overall, the website presents a trustworthy and professional image with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

V

VR Coaster GmbH & Co. KG

vrcoaster.com

57

VR Coaster GmbH & Co. KG is a leading provider of virtual reality solutions for real ride attractions and location-based entertainment worldwide. As part of the Mack Group, it leverages strong partnerships with industry leaders such as Mack Rides and Europa-Park to deliver advanced VR experiences integrated into theme parks and entertainment venues. The company has established a strong market position since its founding in 2014, serving a global clientele including Universal Studios and Six Flags. The website reflects a professional and modern digital presence, showcasing their VR platforms, content offerings, and client portfolio. Technically, the website is built on WordPress with modern web technologies including video backgrounds, SVG graphics, and Google reCAPTCHA for form security. The site is mobile optimized, accessible, and SEO friendly, although performance is moderate. Security posture is good with HTTPS enforced and no exposed sensitive data, but lacks some security headers and a cookie consent mechanism. The contact form collects user data securely with reCAPTCHA protection. From a security and compliance perspective, the site demonstrates good practices but could improve by adding explicit security policies, incident response information, and vulnerability disclosure mechanisms. The absence of WHOIS data for the domain is unusual and reduces trust slightly, though the strong business branding and partner ecosystem mitigate concerns. Overall, the site is trustworthy and professional with minor areas for security and privacy enhancement. Strategically, VR Coaster should focus on improving transparency around security and privacy, implement cookie consent to comply fully with GDPR, and monitor domain registration status to ensure legitimacy. Enhancing security headers and publishing a vulnerability disclosure policy would further strengthen their security posture and trustworthiness.

B

Bagatelle Tattoo

bagatelletattoo.com

59

Bagatelle Tattoo is a small, artistic tattoo studio located in Stuttgart West, Germany. The business emphasizes tattooing as an art form and storytelling medium, offering personalized tattoo services by a team of resident artists. The website showcases artist portfolios, booking options, and studio workspace availability, positioning itself as a community-oriented gallery and tattoo studio. Technically, the site is built with modern web standards, likely using TYPO3 CMS, and is optimized for mobile devices with good SEO practices. Security posture is solid with HTTPS and secure form handling, though some security headers and cookie consent mechanisms are missing. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and contact information appear professional and trustworthy. Overall, the site presents a credible business with room for improvement in privacy compliance and domain registration transparency.

I

Immodera

immodera.de

54

Immodera is a small, regionally focused real estate brokerage and property development company based in Germany, specifically serving the Zollernalbkreis region. The company offers services including property valuation, sales, rentals, and exclusive condominium development. The website reflects a professional and consistent brand image with clear contact information and customer testimonials, indicating a trustworthy market position. Technically, the website uses modern web standards with HTTPS and Matomo analytics for privacy-conscious tracking. However, it lacks some security headers and a cookie consent mechanism, which are important for GDPR compliance. No security policies or incident response contacts are published, which could be improved to enhance trust and compliance. Overall, the site is accessible, well-structured, and safe, with no signs of malicious content or blocking mechanisms.

S

Sport Schreiner Tischtennis

sport-schreiner-tischtennis.de

53

Sport Schreiner Tischtennis operates a specialized e-commerce platform focused on table tennis equipment and apparel, targeting German-speaking customers. The website offers a broad range of products including blades, rubbers, tables, clothing, and accessories, positioning itself as a niche retailer within the sports retail sector. The business model is primarily online retail with a focus on quality and trusted brands. Technically, the site is built on the Shopware platform, leveraging modern web technologies and integrating analytics tools such as Matomo and Google Tag Manager. The site demonstrates good mobile optimization and user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and privacy-conscious analytics configurations, but lacks explicit security headers and visible privacy or cookie policies. Contact information is limited to a service hotline phone number, with no email or physical address found in the analyzed content. Overall, the website is functional, professional, and trustworthy but could improve transparency and compliance aspects.

B

brandstalentsrights

create-success.net

62

brandstalentsrights is a specialized sports marketing and branding agency based in Germany, focusing on leveraging data-driven insights to create compelling media formats with sports personalities. The company targets athletes and sports-related businesses aiming to enhance their brand presence and storytelling. The website is professionally designed using Squarespace, featuring clear navigation and relevant content that highlights their services and team. Technically, the site uses modern web technologies and integrates Google Analytics for tracking, but lacks some advanced security headers and a public WHOIS record, which slightly impacts trustworthiness. The cookie consent mechanism is implemented, but no privacy policy or terms of service pages were found, indicating room for compliance improvement. Overall, the security posture is moderate with HTTPS enforced but missing some best practices. The domain WHOIS data is unavailable, which raises minor concerns but does not negate the professional appearance and functionality of the site.

J

JAKO AG

jako.com

69

JAKO AG operates a professional e-commerce platform specializing in sportswear and equipment for men, women, and children, primarily targeting sports teams and individual consumers in Germany and surrounding regions. The website presents a well-structured, content-rich shopping experience with clear navigation and product categorization. The company leverages modern technologies such as Algolia for search, Google Tag Manager, and analytics tools, demonstrating a mature digital infrastructure. Security posture is strong with HTTPS enforced and consent-based cookie management, though some security headers could be improved. Privacy compliance is well addressed with comprehensive policies and cookie consent mechanisms. Despite the absence of WHOIS registration details, the site shows strong trust indicators including a high Trusted Shops rating and consistent branding. Overall, the site is professional, secure, and user-friendly, supporting JAKO's position as a reputable sportswear retailer.

B

Meine Onlineanträge - Behörden-Serviceportal

behoerden-serviceportal.de

48

The website www.behoerden-serviceportal.de is a German government service portal designed to provide citizens and businesses with digital access to administrative services and online applications. The portal aims to facilitate 24/7 access to government services, enhancing convenience and efficiency for its target audience. The site is hosted on Deutsche Telekom infrastructure, indicating a reliable hosting environment appropriate for government operations. The technical infrastructure employs modern web technologies including Duet Web Components, ensuring mobile optimization and a good user experience. However, SEO is limited due to the robots meta tag set to noindex, nofollow, which restricts search engine indexing. Security posture is weak as no security headers or explicit security policies are detected, and privacy compliance is minimal with no visible privacy or cookie policies. The domain registration data aligns with the expected hosting and business profile, supporting legitimacy. Overall, the site is functional and professional but requires improvements in security, privacy compliance, and SEO to enhance trust and visibility.

B

BGV Badische Versicherungen

bgv.de

72

BGV Badische Versicherungen is a regional German insurance provider specializing in family and private insurance solutions. The website targets families and private customers, offering tailored insurance products with benefits and discounts. The company positions itself as a trusted family insurer with a professional online presence. Technically, the website is built using JavaServer Faces with OmniFaces and PrimeFaces frameworks, integrating modern marketing and analytics tools such as Google Analytics, Google Ads, Facebook Pixel, and Cookiebot for consent management. The site demonstrates good digital maturity with mobile optimization, accessibility features, and SEO best practices. Security-wise, the site enforces HTTPS and a strict Content-Security-Policy, with no detected vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not publicly available. Overall, the website is professional, secure, and compliant with GDPR, but could improve transparency by publishing terms of service and security policies.

K

Karlsruher Verkehrsverbund

kvv.de

63

Karlsruher Verkehrsverbund (KVV) operates as a major public transportation provider in Baden-Württemberg, Germany, serving over 170 million passengers annually. The website offers comprehensive information on bus and train services, ticketing options including the Deutschlandticket, and mobility solutions such as KVV.MyShuttle and KVV.nextbike. The site targets a broad audience including commuters, students, and senior citizens, positioning itself as the third largest transport association in the region. The business model centers on providing accessible, reliable public transit and related services.

D

die neue welle

die-neue-welle.de

55

Die neue welle is a regional German radio station focused on delivering a diverse music mix spanning several decades. It targets listeners primarily in Baden-Württemberg and the Südpfalz region, offering broadcasts via traditional FM, digital DAB+, and online streaming platforms including apps and smart speakers. The website reflects a professional digital presence with good design and user experience, supporting the station's market position as a trusted regional media outlet. Technically, the site employs modern JavaScript libraries and analytics tools such as Matomo and Google Tag Manager, hosted on 1&1 IONOS infrastructure. Security posture is adequate with HTTPS enabled but lacks some advanced security headers and explicit privacy and cookie policies, indicating room for compliance improvement. Overall, the site is safe, trustworthy, and well-structured but would benefit from enhanced transparency and security practices.

B

Badische Neueste Nachrichten

bnn.de

61

Badische Neueste Nachrichten (BNN) is a well-established regional daily newspaper serving Karlsruhe and its surrounding regions in Germany. The website provides comprehensive local news coverage, subscription services, and digital ePaper access, positioning itself as a leading regional media outlet. The business model focuses on subscription revenue, classified ads, and digital content delivery, targeting regional readers interested in local news and events. The company operates under Badendruck GmbH, with a consistent and professional brand presence across its digital platforms. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and Chartbeat analytics, alongside a consent management platform to ensure GDPR compliance. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Hosting and DNS are managed via nodesecure.com servers, indicating professional infrastructure. From a security perspective, the site uses HTTPS and cookie consent mechanisms effectively, though explicit security headers are not evident in the provided data. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and terms of service are present and comprehensive, supporting regulatory compliance. The absence of direct contact emails or phone numbers in the HTML suggests contact is managed through dedicated service portals. Overall, BNN.de demonstrates a mature digital presence with strong business credibility and compliance posture. Strategic improvements could include enhanced security header implementation and publishing explicit incident response contacts to further strengthen trust and security posture.

B

Bundesverband Altbauerneuerung e.V.

bakaberlin.de

44

Bundesverband Altbauerneuerung e.V. (BAKA) is a well-established non-profit organization based in Germany, focusing on sustainable building, energy efficiency, and education related to building renovation and climate protection. The website serves as a comprehensive platform offering knowledge sharing, networking, certification, and educational seminars targeted at professionals such as architects, engineers, energy consultants, and building owners. The organization leverages a modern WordPress-based infrastructure with WooCommerce for e-commerce functionalities and integrates various plugins for enhanced user experience and SEO. Security posture is solid with HTTPS enforcement, use of reCAPTCHA, and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the website reflects a professional and trustworthy digital presence aligned with the organization's mission and market position.

T

telc

telc.net

62

telc.net is a professional website dedicated to language examinations, certifications, and learning materials primarily targeting language learners, educational institutions, and professionals. The site positions itself as a reputable provider of language certificates across multiple proficiency levels (A1 to C2), serving a broad audience in Germany and internationally. The business model centers on delivering language testing and training services, supported by a medium-sized organizational structure. The website content is well-structured, professionally designed, and consistent with the brand identity, reflecting a strong market presence in the education sector. Technically, the website leverages TYPO3 CMS with Bootstrap and FontAwesome for frontend design, integrating advanced analytics and marketing tools such as Matomo, Google Analytics, Google Tag Manager, and Cookiebot for GDPR-compliant cookie management. The site demonstrates good mobile optimization, accessibility, and SEO practices, although hosting provider details are not explicitly disclosed. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and employs essential security cookies like XSRF-TOKEN to prevent cross-site request forgery. Cookie consent mechanisms are robust and GDPR compliant. However, explicit security headers are not detected, and no published security or incident response policies are found, indicating areas for improvement. The WHOIS data is incomplete or privacy protected, which slightly reduces trust but is not uncommon for organizations in this sector. Overall, telc.net presents a trustworthy and professional online presence with a solid technical foundation and compliance posture. Strategic enhancements in security transparency and contact information availability would further strengthen its risk profile and user trust.

O

OVVD GmbH

ovvd.de

44

OVVD GmbH is a municipal waste disposal company operating primarily in the German districts of Mecklenburgische Seenplatte, Vorpommern-Greifswald, and Vorpommern-Rügen. Founded in 1991, it manages landfill operations, waste transfer stations, and mechanical-biological waste treatment through its subsidiary ABG mbH. The company emphasizes environmental sustainability and economic efficiency, offering vocational training and engaging in climate protection initiatives. The website reflects a professional and regionally focused business with clear contact information and certifications. Technically, the website is built on a modern stack using Next.js and React, with integration of Usercentrics for cookie consent and Matomo for analytics. The site is mobile-optimized and well-structured, though some security headers are missing. Cookie consent mechanisms indicate GDPR awareness, but explicit privacy and terms of service pages are not found on the main page. Security posture is generally good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure reduces the overall security maturity. The WHOIS data aligns well with the business claims, showing consistent domain registration and trustworthy hosting. Overall, OVVD GmbH presents a credible and professional municipal waste management service with room for improvement in privacy documentation and security transparency.

Ilse Bus is a regional demand-responsive public transportation service operating in rural areas of Mecklenburg-Vorpommern, Germany. It provides flexible bus rides connecting rural locations to cities, bookable via phone, internet, or smartphone apps. The service operates primarily on weekdays with some weekend availability under VVG. The website is built on WordPress using Elementor and Yoast SEO, hosted by Schlundtech, and includes accessibility and privacy compliance features. While security policies and incident response contacts are not explicitly provided, the site uses HTTPS and privacy plugins to ensure GDPR compliance. The digital infrastructure supports app-based booking and integrates Google Maps for location services. Overall, the site presents a professional and trustworthy interface for its target audience.

O

OWL-IT

owl-it.de

65

OWL-IT is a regional IT service provider specializing in digital transformation solutions for public sector organizations in Germany. The company offers a range of IT services including data center operations, document management, financial and personnel management solutions, and citizen service digitalization. Their website reflects a professional and user-friendly design, targeting government entities and municipalities with tailored IT solutions to enhance administrative efficiency and security. Technically, the site employs modern JavaScript libraries such as jQuery and Splide.js, and is hosted on infrastructure likely provided by Deutsche Telekom, indicating a stable and professional hosting environment. Security-wise, the website implements GDPR-compliant cookie consent mechanisms and maintains privacy policies, but lacks explicit security policies or incident response contacts. No WAF or blocking mechanisms were detected, and no vulnerabilities or exposed sensitive data were found in the content. Overall, the site demonstrates a good security posture with room for improvement in publishing security policies and enhancing HTTP security headers.

B

Bundesagentur für Arbeit

mein-beruf.de

62

The website 'meinBERUF' is an official portal operated by the Bundesagentur für Arbeit, Germany's Federal Employment Agency. It provides comprehensive career guidance, educational resources, and application support for users seeking information on training, study, and job applications. The portal is well-positioned as a national government service with a clear focus on assisting citizens in their professional development. Technically, the site leverages modern web technologies including React and Next.js, ensuring a fast, mobile-optimized, and accessible user experience. The use of Matomo analytics reflects a commitment to privacy-conscious data collection. The site is hosted on reliable infrastructure with secure DNS and HTTPS configurations. From a security perspective, the website demonstrates strong practices such as HTTPS enforcement, security headers, and cookie consent mechanisms. However, explicit security policies and incident response contacts are not prominently published, representing an area for improvement. No vulnerabilities or suspicious activities were detected. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR and other privacy standards. It serves its target audience effectively with high-quality content and clear navigation. Strategic recommendations include publishing detailed security policies, adding vulnerability disclosure mechanisms, and enhancing transparency around data retention.

S

Ströer SSP GmbH

adscale.de

10

Ströer SSP GmbH operates a sophisticated supply-side platform (SSP) that enables publishers to optimize their digital advertising inventory across display, video, and mobile channels. The platform supports private deals, private auctions, and real-time advertising, providing advertisers access to premium inventory with strong brand safety and anti-fraud measures. The company is positioned as a leading player in the German digital advertising market, supported by its parent company Ströer Digital Group. The website reflects a professional and business-focused approach, targeting publishers and advertisers seeking programmatic advertising solutions. Technically, the website is built on TYPO3 CMS and integrates privacy-conscious tools such as Cookiebot for consent management and Matomo for analytics with DoNotTrack enabled. Hosting and DNS services are provided via Cloudflare, enhancing performance and security. The site demonstrates good mobile optimization and SEO practices, though accessibility could be improved. Security headers are partially implemented, and HTTPS is enforced, indicating a solid security posture. From a security perspective, the site employs best practices including cookie consent with blocking mode, privacy-focused analytics, and brand safety commitments. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security headers like Content-Security-Policy and X-Frame-Options could be added to strengthen defenses. Incident response and security policy information are not publicly disclosed on the analyzed page. Overall, the website presents a trustworthy and professional digital advertising platform with good privacy compliance and security awareness. Strategic recommendations include enhancing security headers, improving accessibility, and publishing incident response contacts to further build trust and compliance.

OpenPandora GmbH operates a niche technology business focused on the development and support of the Pandora handheld device, a Linux-based portable gaming and productivity computer. The company maintains a dedicated community and software ecosystem, positioning itself as a leader in open handheld gaming devices. The website provides detailed product information, community links, and contact details, reflecting a small but focused business with a loyal user base. Technically, the website uses legacy JavaScript libraries and lacks modern security headers and privacy policies, indicating areas for improvement in digital maturity. Security posture is moderate with domain registration legitimacy but missing DNSSEC and security best practices. Overall, the website is professional and content-rich but requires enhancements in privacy compliance and security to meet modern standards.

S

SCHULPRAKTIKUMSFINDER

schulpraktikumsfinder.de

10

SCHULPRAKTIKUMSFINDER is a regional German educational platform designed to help students find school internships in areas such as Celle, Harburg, Heidekreis, Lüchow-Dannenberg, Lüneburg, and Uelzen. The platform is affiliated with the IHK Lüneburg-Wolfsburg and offers services including internship search, company profiles, and application management. The website is built on WordPress using modern plugins and frameworks, providing a good user experience with mobile optimization and structured data for SEO. Security posture is adequate with HTTPS and cookie consent, though improvements in security headers and explicit privacy policies are recommended. Overall, the platform appears legitimate, professional, and trustworthy, serving a niche educational market effectively.

B

berry2b

berry2b.com

10

berry2b is an educational technology platform focused on providing students with digital tools to manage their school life, including schedules, homework, and grades, while also preparing them for career entry. The platform also offers recruiting tools for companies to find apprentices and trainees, positioning itself as a bridge between education and employment in Germany. The website is professionally designed, mobile-optimized, and integrates multiple marketing and analytics technologies, indicating a mature digital infrastructure. Security posture is generally good with HTTPS and cookie consent implemented, though improvements are needed in security headers and visible privacy policies. The absence of WHOIS data for the subdomain is typical and does not detract from the legitimacy of the main domain. Overall, berry2b presents a credible and functional online presence with room for enhanced transparency and security practices.

B

Bundesagentur für Arbeit

berufe.tv

64

The website 'BERUFE.TV' is an official career and education video portal operated by the Bundesagentur für Arbeit, the German Federal Employment Agency. It serves as a government platform providing multimedia content to assist individuals interested in professions, training, and studies. The site offers categorized video content, links to related career services, and personal counseling options, positioning itself as a trusted resource in the German employment and education sector. The target audience includes students, job seekers, and those exploring career options in Germany. Technically, the website is built using modern web technologies including Angular framework, custom web components, and Piwik analytics for user tracking. The site is mobile-optimized, accessible, and employs HTTPS for secure communications. While performance is moderate, the site demonstrates good SEO and accessibility practices. However, explicit privacy and terms of service policies are not directly linked on the main page, which could be improved. From a security perspective, the site uses HTTPS and OAuth components for authentication, and includes a cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. Security headers are not explicitly visible in the provided data, and no vulnerability disclosure or security policy pages were found. The WHOIS data aligns with the official government entity, indicating high legitimacy and trustworthiness. Overall, the website is a professionally maintained government resource with good content quality and technical implementation. Strategic improvements include publishing clear privacy and security policies, enhancing security headers, and providing vulnerability disclosure information to strengthen compliance and user trust.

D

diaplan GmbH

diaplan.de

43

diaplan GmbH is a specialized service provider in the healthcare sector focusing on medical continuing education and event organization. The company offers a neutral platform facilitating exchange among clinics, medical practices, associations, and institutions. Their services include precise event planning, modern didactics, certification support, and networking opportunities, targeting medical professionals primarily in Germany. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the website is built on WordPress with a modern tech stack including jQuery, MasterSlider, and Ninja Forms. Hosting appears to be managed via 1&1 IONOS, indicated by the nameservers. The site demonstrates good mobile optimization and moderate performance, with proper SEO and accessibility features. Cookie consent mechanisms are implemented, supporting GDPR compliance. From a security perspective, the site uses HTTPS with excellent SSL configuration and employs best practices such as nonce usage in AJAX calls and cookie consent banners. However, it lacks explicit security headers and incident response contact information, which are recommended for enhanced security posture. No vulnerabilities or exposed sensitive data were detected. Overall, diaplan.de presents a trustworthy and professional online presence with a solid security baseline and compliance with privacy regulations. Strategic improvements in security headers and incident response transparency could further strengthen its security and trustworthiness.

D

Deutsche Gesellschaft für Kardiologie e.V.

dekk.koeln

41

The website kardiale-bildgebung.de serves as the official platform for the DGK Kardiale Bildgebung congress organized by the Deutsche Gesellschaft für Kardiologie e.V. It targets cardiology professionals and researchers, providing detailed information about the upcoming congress, including program schedules, speakers, and organizational details. The site is professionally designed with consistent branding and clear navigation, supporting its role as a trusted event information source in the healthcare sector. Technically, the site is built on WordPress using WPBakery Page Builder and standard web technologies, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, though security headers and explicit policies are absent. Overall, the site is safe, compliant with GDPR, and trustworthy, though it lacks some advanced security and compliance disclosures.

TEC Systems Systemhaus GmbH is a German IT service provider specializing in comprehensive IT infrastructure solutions, cloud concepts, software development, and consulting services primarily targeting small and medium-sized enterprises. The company maintains partnerships with major technology vendors such as IBM, Cisco, VMware, and TrendMicro, positioning itself as a trusted regional system house. The website reflects a professional and consistent brand image with clear contact information and service offerings. Technically, the site uses a custom PHP-based CMS with Bootstrap and jQuery frameworks, delivering moderate performance and good mobile responsiveness. However, there is room for improvement in accessibility and SEO optimization. Security posture is moderate; while no critical vulnerabilities are evident, the absence of security headers, visible incident response policies, and cookie consent mechanisms indicate gaps in security best practices and GDPR compliance. The domain WHOIS data is minimal but consistent with the company's German location and business history dating back to at least 2014. Overall, the website is trustworthy and professional but would benefit from enhanced security and privacy features to align with modern compliance standards.

The website www.quartzolit.weber currently presents a Cloudflare security challenge page, blocking direct access to its content. This domain appears to be part of a larger corporate ecosystem related to Saint-Gobain and its Weber brand, as indicated by multiple related domains in the analytics mapping. Due to the WAF challenge, no direct business content, contact information, or policies are accessible, limiting the ability to assess the company's market position or services in detail. Technically, the site uses Cloudflare for protection and Google Tag Manager for analytics, indicating a modern approach to traffic management and data collection. However, the lack of visible content and policies reduces transparency and trustworthiness. Security-wise, the presence of Cloudflare's Turnstile captcha is a positive mitigation against automated threats, but the absence of visible security headers or SSL details in the provided data prevents a full security posture evaluation. Overall, the site is protected but inaccessible for detailed analysis, resulting in a low AI score and recommendations to improve transparency and policy disclosures once access is granted.

R

Rigips GmbH

rigips.de

62

Rigips GmbH is a leading German manufacturer specializing in sustainable drywall and building materials for walls, ceilings, floors, and facades. As part of the Saint-Gobain group, it holds a strong market position with a comprehensive product portfolio and a focus on environmentally friendly construction solutions. The website targets construction professionals, architects, and distributors, providing product information, technical downloads, and a dealer locator. Technically, the site is built on Drupal 10, employs modern tracking and consent tools, and is hosted on reliable infrastructure. Security posture is strong with HTTPS, security headers, and no exposed vulnerabilities detected. Privacy compliance is well addressed with detailed policies and consent mechanisms. Overall, the site demonstrates good digital maturity, professional design, and trustworthy business representation.

The website www.isover-technical-insulation.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) security challenge page that requires browser verification via Turnstile captcha. This prevents direct access to any substantive website content, including business information, contact details, or policies. The WHOIS lookup for the domain returned no registration data, indicating the domain may be unregistered, expired, or protected by privacy services, which raises concerns about the legitimacy and operational status of the website. The presence of modern analytics and cookie consent scripts suggests some level of digital maturity, but without accessible content, a full assessment is not possible. Security posture benefits from Cloudflare protection but lacks visible security headers or policies. Overall, the site scores low on content quality, business credibility, and privacy compliance due to lack of accessible information.

The website www.it.weber is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) challenge page that requires browser verification via Turnstile CAPTCHA. This prevents access to any substantive content, including business descriptions, contact information, or policy documents. The site employs Google Tag Manager and Google Analytics 4 for tracking, alongside OneTrust for cookie consent management, indicating some level of privacy compliance infrastructure. However, the lack of accessible content and WHOIS data severely limits the ability to assess the company's market position, services, or legitimacy. The domain's WHOIS information is unavailable or malformed, which raises concerns about transparency and trustworthiness. Overall, the site appears to be part of a larger network of related domains using shared analytics configurations, but no direct business or contact details are visible.

The website www.carriere-de-gypse-sogyma.fr is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) challenge page that requires browser verification via Turnstile captcha. This prevents direct access to the site's content, limiting the ability to analyze business details or user-facing information. The domain's WHOIS data is unavailable, indicating privacy protection or lack of public registration data, which further reduces transparency and trust. The site uses Google Tag Manager and Google Analytics 4 for tracking, and OneTrust for cookie consent management, showing some level of compliance with privacy regulations. However, no privacy policy, terms of service, or contact information is visible on the challenge page. The hosting appears to be behind Cloudflare, providing security and performance benefits but also obscuring direct server details. Overall, the website's digital maturity is low due to content inaccessibility and lack of visible business information.

E

EDF power solutions Deutschland GmbH

edf-powersolutions.de

59

EDF power solutions Deutschland GmbH is a medium-sized company specializing in the development, construction, and operation of renewable energy projects in Germany, including onshore and offshore wind, photovoltaic systems, and battery storage solutions. The company targets industrial and commercial customers, offering tailored energy storage and management solutions to support the energy transition. The website reflects a professional and modern digital presence with comprehensive content, clear navigation, and multilingual support. Technically, the site uses modern JavaScript modules, lazy loading, and Craft CMS, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, CSRF protections, and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the site is trustworthy, GDPR compliant, and well-aligned with the company's business objectives.

V

Verband Deutscher Brieftaubenzüchter e.V.

brieftaube.de

47

The Verband Deutscher Brieftaubenzüchter e.V. operates a professional and well-structured website serving as the official platform for the German pigeon breeding community. The site provides comprehensive information about the association, its services, events, and publications, targeting pigeon breeders and enthusiasts in Germany. The technical infrastructure is based on Joomla CMS with modern plugins and a GDPR-compliant cookie consent mechanism, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit incident response policies. Overall, the website is trustworthy, safe, and professionally maintained, supporting the association's mission effectively.

M

MGS Motor Gruppe Sticht GmbH & Co. KG

auto-hensel.de

60

MGS Motor Gruppe Sticht GmbH & Co. KG is a well-established automotive dealership group operating nine locations in Bavaria, Germany. The company offers a wide range of vehicles including new and used cars, commercial vehicles, and campers, representing multiple well-known brands such as Ford, Fiat, Mazda, and Jaguar. Their business model focuses on vehicle sales, leasing, servicing, and customer support, targeting both private and commercial customers in the region. The website reflects a professional and comprehensive digital presence with clear navigation and detailed service offerings. Technically, the website employs modern web technologies including jQuery, Owl Carousel, and a proprietary CMS platform by Audaris. It is mobile-optimized, accessible, and SEO-friendly, with appropriate meta tags and structured content. Google Analytics is used with consent management configured to deny tracking by default, indicating privacy awareness. From a security perspective, the site uses HTTPS with secure cookie flags and basic security best practices. However, it lacks explicit security headers and a public security policy or incident response contact. No vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the business claims, supporting legitimacy and trustworthiness. Overall, the website is professional, secure, and compliant with GDPR requirements, providing a trustworthy platform for customers. Strategic improvements could include enhanced security headers and published security policies to further strengthen trust and compliance.