Germany security reports

I

IT-Recht Kanzlei Keller-Stoltenhoff, Keller

fairness-im-handel.de

43

Fairness im Handel is a German initiative website operated by IT-Recht Kanzlei Keller-Stoltenhoff, Keller, focused on promoting fair and abmahn-free online trade among e-commerce merchants. The site offers legal safety packages and fosters a community of over 20,000 participants to reduce legal risks and encourage open communication. The business model centers on providing legal compliance services and community membership benefits to online retailers, primarily in Germany. Technically, the website is built on WordPress using the Enfold theme, with Yoast SEO plugin for optimization and MediaElement.js for media playback. Hosting is provided by Schlund Technologies, a reputable German hosting provider. The site is mobile optimized and demonstrates good SEO practices, though accessibility features are basic. Security posture is solid with HTTPS enforced and no exposed sensitive data, but lacks some security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-positioned within its niche, but could improve in privacy and security transparency.

R

Ravensberger Schmierstoffvertrieb GmbH

ravenol.de

55

Ravensberger Schmierstoffvertrieb GmbH, operating under the brand RAVENOL, is a well-established German manufacturer and supplier of premium lubricants and fluids for automotive and industrial applications. Founded in 1946, the company has a strong market presence both domestically and internationally, supported by strategic partnerships including motorsport sponsorships such as Mercedes-AMG Motorsport. Their product portfolio includes motor oils, gear oils, additives, vehicle care products, and specialized fluids for various vehicle types and industrial uses. The website reflects a professional and comprehensive digital presence with multilingual support and detailed product information.

L

LeasingMarkt.de GmbH

leasingmarkt.de

55

LeasingMarkt.de GmbH operates Germany's leading online marketplace for auto leasing offers, providing consumers and businesses with a platform to compare leasing deals across all major car brands and models. The website facilitates direct contact with dealers and offers additional services such as leasing takeovers, newsletters, and WhatsApp deal alerts. The company positions itself as a market leader in the transportation sector within Germany, targeting both private and commercial customers seeking flexible leasing options. Technically, the website is built with modern web technologies including JavaScript ES modules, CSS3, and SVG graphics, hosted on Amazon AWS infrastructure. It integrates a sophisticated consent management platform aligned with GDPR requirements, ensuring user privacy and compliance. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be enhanced. From a security perspective, LeasingMarkt.de enforces HTTPS and employs consent mechanisms for cookie and data processing compliance. However, it lacks explicit security headers and publicly available security policies or incident response contacts, which could be improved to strengthen trust and resilience. No critical vulnerabilities or suspicious patterns were detected in the analysis. Overall, LeasingMarkt.de presents a professional, trustworthy, and user-friendly platform with strong privacy compliance and a solid technical foundation. Strategic enhancements in security transparency and accessibility would further elevate its market standing and user confidence.

X

xyflow

xyflow.com

60

xyflow is a small Berlin-based technology company specializing in the development and maintenance of open source libraries for building node-based user interfaces with React and Svelte. Their flagship products, React Flow and Svelte Flow, are widely adopted by developers and companies such as Stripe and Typeform, positioning xyflow as a key player in the niche of interactive diagram and workflow UI components. The company operates an informative and professionally designed website that serves both as a marketing platform and a community hub. Technically, the website is built using modern web technologies including Next.js, React, and Svelte, hosted on alwaysdata.com. It demonstrates excellent performance, mobile optimization, and SEO practices. The site integrates minimal user tracking via Fathom Analytics, respecting user privacy without intrusive cookie consent mechanisms. The technical infrastructure reflects a mature digital presence suitable for a small but focused software development team. From a security perspective, the site enforces HTTPS and employs domain transfer protection. However, it lacks some advanced security headers and does not publicly disclose a security policy or incident response contacts. No vulnerabilities or suspicious activities were detected in the content or WHOIS data. The domain registration is consistent with the company's history and transparent, enhancing trustworthiness. Overall, xyflow presents a low-risk profile with a strong business credibility and technical foundation. Strategic improvements in security headers, cookie consent, and public security policies would further enhance their security posture and compliance standing.

S

Stiftung AutoMuseum Volkswagen

automuseum-volkswagen.de

48

The Stiftung AutoMuseum Volkswagen operates a well-established automotive museum in Wolfsburg, Germany, showcasing over 130 legendary Volkswagen vehicles including prototypes, series models, and unique exhibits. The museum is a popular tourist destination with a strong focus on Volkswagen's product history and heritage. The website is built on WordPress with Elementor and optimized for performance using WP Rocket and Borlabs Cookie for consent management. It demonstrates good technical maturity with HTTPS and modern web technologies. However, the site lacks explicit privacy and terms of service policies, as well as published security or incident response information, which are areas for improvement. Overall, the website presents a professional and trustworthy image aligned with its non-profit museum business model.

G

Gläserne Manufaktur

glaesernemanufaktur.de

71

The Gläserne Manufaktur website serves as a digital gateway to Volkswagen's electric mobility manufacturing and visitor experience center located in Dresden, Germany. It offers detailed information about factory tours, showroom visits, test drives, and event venue hire, positioning itself as a flagship experience site for Volkswagen's ID.3 electric vehicle production. The site targets a broad audience including automotive enthusiasts, potential visitors, and customers interested in sustainable mobility. Technically, the website is built on modern frameworks including React and Adobe Experience Manager, hosted on Volkswagen's infrastructure, and optimized for performance, accessibility, and SEO. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, though it lacks a dedicated security policy or incident response contact information. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable source for visitors and stakeholders.

D

DRIVE. Volkswagen Group Forum

drive-volkswagen-group.com

67

The DRIVE Volkswagen Group Forum website serves as a digital gateway to the Volkswagen Group's flagship brand experience center located in Berlin. It offers visitors information about exhibitions, events, guided tours, conference facilities, retail shopping, and gastronomy services. The site is well-positioned as a medium-sized corporate platform targeting general audiences interested in mobility and automotive innovation. Technically, the website is built on WordPress with modern SEO and cookie management plugins, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in DNSSEC and security headers. Privacy compliance is strong, with accessible and comprehensive privacy and cookie policies. Overall, the site reflects a professional and trustworthy digital presence aligned with Volkswagen Group's brand standards.

A

Autostadt GmbH

autostadt.de

71

Autostadt GmbH operates a prominent automotive visitor attraction and brand experience center located in Wolfsburg, Germany. The website serves as a comprehensive portal for visitors, offering information on vehicle pick-up, events, educational programs, hospitality services, and corporate information. The company targets a broad audience including families, automotive enthusiasts, educational groups, and business clients. The business model integrates experiential marketing, education, and hospitality services, positioning Autostadt as a leading destination in the automotive and transportation sector. Technically, the website is built on the Liferay CMS platform, utilizing modern web technologies such as jQuery and SVG graphics. Hosting is supported by Azure CDN, ensuring good performance and availability. The site is mobile-optimized and accessible, with clear navigation and SEO-friendly metadata. Cookie consent mechanisms and privacy policies demonstrate compliance with GDPR requirements. From a security perspective, the site enforces HTTPS and employs a cookie consent modal for user privacy. However, no explicit security headers were detected in the HTML source, and no dedicated incident response or vulnerability disclosure information is published. No vulnerabilities or exposed sensitive data were found in the provided content. Overall, the security posture is solid but could be enhanced by adding security headers and a security.txt file. The domain WHOIS data is minimal but consistent with a legitimate German hosting provider. The lack of detailed registrant information slightly reduces trust but does not raise suspicion. The website content is safe for general audiences, with no adult or questionable material. Social media presence and multiple contact channels enhance business credibility. Strategic recommendations include improving security header implementation, publishing incident response contacts, and enhancing transparency around vulnerability disclosures to strengthen trust and compliance.

S

START Munich

startmunich.de

59

START Munich is a well-established student entrepreneurship hub based in Munich, Germany, founded in 2003. It serves as a vibrant community for students interested in startups and innovation, offering access to mentorship, incubators, venture capital, and a variety of events such as the Road to START Summit and Road to START Hack. The organization positions itself as a leading platform for nurturing the next generation of entrepreneurs in the Munich ecosystem. Technically, the website is built on Webflow with modern web technologies, optimized for performance and mobile devices, and integrates analytics and payment processing tools like Google Tag Manager and Stripe. Security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements can be made by adding security headers and formal security policies. Privacy compliance is addressed with a privacy policy and cookie consent mechanism, but terms of service and incident response details are missing. Overall, the website is professional, trustworthy, and provides a positive user experience, supporting the organization's mission effectively.

C

Committee on Space Research (COSPAR)

cospar-assembly.org

58

The Committee on Space Research (COSPAR) operates an official website focused on managing scientific assembly abstract submissions and providing program information for international space research events. The organization is well-established with a domain age of over 17 years, reflecting its longstanding presence in the scientific community. The website targets researchers and professionals in space science, offering key services such as event scheduling, abstract handling, and publication guidance. The business model is non-profit and educational, supporting global scientific collaboration.

I

IT-Recht Kanzlei

it-recht-kanzlei.de

47

IT-Recht Kanzlei is a specialized German legal service provider focusing on IT law, offering comprehensive legal text packages and digital tools tailored for online shops and businesses. Recognized as a top economic law firm in 2024, it holds a strong market position as the largest legally organized trader support in IT law in Germany. The company provides subscription-based legal services, including GDPR-compliant documents, trademark registration, and legal consulting, supported by a mature digital infrastructure. Technically, the website is built on a custom CMS with modern JavaScript libraries and privacy-conscious analytics (Matomo), hosted by a reputable German provider. Security posture is solid with HTTPS and some best practices, though explicit security headers and policies are not publicly detailed. Privacy compliance is partial, lacking visible privacy and cookie policies in the provided content. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.

B

Business Insider Deutschland GmbH

gruenderszene.de

67

Business Insider Deutschland GmbH operates Gründerszene, a leading German-language media platform focused on startups, digital economy, and venture capital. The website offers comprehensive news, insights, events, and subscription-based premium content targeting entrepreneurs, investors, and professionals in the startup ecosystem. It holds a strong market position as part of Axel Springer Deutschland GmbH, leveraging professional branding and consistent content quality. Technically, the website is built on WordPress CMS with modern JavaScript libraries such as jQuery and Underscore.js, integrated with Google Tag Manager, Adobe Tag Manager, and Piano for subscription management. Hosting and DNS are managed via Cloudflare, ensuring robust performance and security. The site demonstrates good mobile optimization, accessibility, and SEO practices, including structured data and meta tags. From a security perspective, the site enforces HTTPS, uses Cloudflare for DNS and CDN, and implements consent management compliant with GDPR via Sourcepoint. While explicit security headers are not fully visible in the HTML, the overall posture is strong with no exposed sensitive data or vulnerabilities detected. Privacy policies and cookie consent mechanisms are comprehensive and clearly presented. Overall, the website presents a low risk profile with high business credibility and technical maturity. Strategic recommendations include enhancing security header implementation, publishing a vulnerability disclosure policy, and improving incident response contact visibility to further strengthen trust and compliance.

A

Automobili Lamborghini S.p.A.

lamborghini.com

75

Automobili Lamborghini S.p.A. is a globally recognized luxury automotive manufacturer specializing in high-performance sports cars and supercars. The official website serves as a comprehensive platform showcasing their product lineup, latest news, events, and dealer information, targeting affluent customers and automotive enthusiasts worldwide. The brand holds a premium market position under the Volkswagen Group umbrella, emphasizing exclusivity and innovation. Technically, the website leverages modern web technologies including React and Next.js frameworks, integrated with Google Tag Manager and New Relic for analytics and performance monitoring. The site demonstrates excellent mobile optimization, accessibility, and SEO practices, ensuring a smooth user experience across devices. Privacy compliance is robust, with clear cookie consent mechanisms and GDPR-aligned policies implemented via OneTrust. From a security perspective, the site enforces HTTPS with strong SSL configurations and employs standard security headers. While no explicit security policy or incident response details are publicly disclosed, no vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable or privacy protected, which is typical for high-profile brands to mitigate spam and abuse risks. Overall, the website presents a secure, professional, and trustworthy digital presence aligned with Lamborghini's luxury brand image. Strategic recommendations include publishing detailed security policies, establishing a vulnerability disclosure program, and enhancing transparency around data protection officer contacts to further strengthen trust and compliance.

V

Volkswagen Group

vwgroup.com

72

Volkswagen Group is a leading global automotive manufacturer focused on shaping the future of mobility through innovation, sustainability, and technology leadership. The website reflects a mature digital presence with comprehensive corporate information, investor relations, media resources, and career opportunities. The technical infrastructure uses modern web technologies and includes privacy-conscious analytics with user consent mechanisms. Security posture is strong with HTTPS and cookie consent but lacks explicit security policy and vulnerability disclosure details. The absence of WHOIS data is unusual but the website's professional presentation and official social media presence strongly support legitimacy. Overall, the site is well-structured, user-friendly, and trustworthy.

M

Modix

modix.net

67

Modix is a well-established provider of innovative digital solutions tailored for automotive dealers and manufacturers, aiming to accelerate vehicle sales and enhance brand experiences. As part of Cox Automotive, Modix benefits from a strong market position and access to a comprehensive portfolio of automotive services. The website reflects a mature digital presence with professional design, clear navigation, and targeted content for B2B automotive clients. Technically, the site is built on WordPress with modern plugins and SEO optimizations, supported by Google Tag Manager for analytics and marketing. Security posture is solid with HTTPS and cookie consent mechanisms, though some advanced security headers and policies could be improved. Overall, the site demonstrates a trustworthy and professional business with good compliance to privacy regulations.

N

Nomos

nomos.de

60

Nomos Verlag is a German academic publishing company specializing in literature related to law, social sciences, economics, and history. The website targets academics, legal professionals, and researchers, offering a professional and content-rich platform. The company maintains a consistent brand presence and uses modern web technologies including WordPress and Yoast SEO to optimize content delivery and search visibility. The integration of Cookiebot ensures GDPR-compliant cookie management, reflecting a commitment to privacy and regulatory compliance. Technically, the site is moderately performant with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and explicit security policies could enhance protection. No critical vulnerabilities or blocking mechanisms were detected, and the domain appears legitimate though WHOIS data is limited. Overall, the site presents a trustworthy and professional digital presence suitable for its academic audience.

E

evolver group

evolver.center

64

evolver group is a German IT and software company specializing in SaaS marketplace platforms, notably their evolverMARKET product which integrates AI and offers extensive features for businesses, startups, publishers, and municipalities. The company positions itself as a reliable provider of digitalization solutions with a focus on user-friendly, mobile-optimized, and SEO-friendly portals. Their offerings include hosting in German data centers, customer support, and advanced marketplace functionalities such as Click & Reserve and intelligent ad management. Technically, the website employs modern JavaScript libraries, analytics tools like Matomo and Google Tag Manager, and implements cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and consent-based tracking, though explicit privacy and terms policies are not clearly presented on the analyzed page. Overall, the domain and website content indicate a legitimate, professional business with a strong market presence in the technology sector.

TariffPilot GmbH operates a specialized AI-powered cloud platform designed to automate and accelerate the customs tariff classification process for companies engaged in cross-border trade. The platform integrates the official EZT-Online customs tariff database and provides detailed classification suggestions with justifications, significantly reducing manual effort and time. The website is professionally designed, mobile-optimized, and rich in relevant content including customer testimonials, partner logos, and comprehensive FAQs. Technically, the site uses modern frameworks such as Astro, integrates Google Analytics and rapidmail for marketing, and is hosted likely on Google Cloud infrastructure. Security posture is strong with HTTPS and a strict Content-Security-Policy, though some additional security headers and explicit incident response policies are absent. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the WHOIS data is missing or unavailable, which raises concerns about domain registration transparency despite the professional appearance and business legitimacy of the site. Overall, the website presents a credible and trustworthy business front with minor areas for security and compliance improvement.

AWA AUSSENWIRTSCHAFTS-AKADEMIE GmbH operates an e-learning platform focused on external trade and business education, leveraging the Moodle CMS to deliver online courses. The website presents a professional login interface with consistent branding and a clear target audience of students and professionals seeking specialized training. The technical infrastructure is modern, utilizing Moodle 3.17.2, YUI, jQuery, and MathJax for content rendering, indicating a mature digital environment. Performance and mobile optimization are adequate, supporting a good user experience. Security posture is solid with HTTPS enforced and secure login forms, though the absence of security headers and public privacy or terms policies limits compliance and trust. The WHOIS data is missing or inaccessible, raising concerns about domain registration legitimacy despite the active website presence. Overall, the platform is functional and professional but would benefit from enhanced transparency and security disclosures.

S

Staatliche Zentralstelle für Fernunterricht

zfu.de

56

The website https://zfu.de/ represents the Staatliche Zentralstelle für Fernunterricht, a German government authority responsible for regulating distance learning courses and programs under the Fernunterrichtschutzgesetz (FernUSG). It serves as the official body for approving and overseeing Fernunterrichtslehrgänge and Fernstudiengänge, targeting course providers, interested learners, and educational institutions. The site provides authoritative information including recent legal rulings by the Bundesgerichtshof (BGH) relevant to distance education regulation. The content is primarily in German and is professionally presented with clear navigation and consistent branding.

Z

Zwei P PLAN:PERSONAL gGmbH

weiterbildungsbonus.net

64

Zwei P PLAN:PERSONAL gGmbH is a Hamburg-based non-profit organization specializing in providing educational consulting and financial support for professional development, primarily targeting employees, self-employed individuals, and SMEs within Hamburg. The organization has a strong local presence with over 25,000 success stories and is funded by the European Union and the Free and Hanseatic City of Hamburg. Their key services include advisory support and the administration of the Weiterbildungsbonus PLUS funding program. The website is professionally designed, content-rich, and clearly communicates eligibility criteria, application processes, and contact information.

M

Ministerium für Arbeit, Gesundheit und Soziales des Landes Nordrhein-Westfalen

mags.nrw

68

The website https://mags.nrw/ is the official digital presence of the Ministry for Labor, Health, and Social Affairs of the German state North Rhine-Westphalia. It serves as a comprehensive information portal for citizens and institutions, providing news, press releases, and access to government programs related to labor, health, and social welfare. The site is well-branded, professionally designed, and highly accessible, reflecting its government status and public service mission. Technically, it is built on Drupal CMS with modern frameworks like Bootstrap and uses Matomo for privacy-conscious analytics. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The domain registration aligns perfectly with the ministry's identity, enhancing trust and legitimacy. Overall, the site demonstrates a mature digital infrastructure suitable for a government entity, with excellent content quality and user experience.

R

Reonic GmbH

reonic.de

65

Reonic GmbH is a medium-sized German company founded in 2017 specializing in SaaS solutions for the renewable energy sector, focusing on software to plan, sell, and install photovoltaic systems, heat pumps, energy storage, and wallboxes. The company serves installers, solar technicians, utilities, and both private and commercial customers, positioning itself as an all-in-one platform for the entire customer journey from lead generation to installation and documentation. The website reflects a mature digital presence with extensive marketing and analytics integrations, mobile app availability, and strong trust signals including customer testimonials and press coverage. Technically, the site is built on modern frameworks like Next.js, hosted with Cloudflare DNS, and optimized for performance and mobile use. Security posture is good with HTTPS enforced and domain registration consistent with business claims, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website and business demonstrate professionalism, credibility, and a strong market position in the renewable energy software space.

K

KfW Entwicklungsbank

kfw-entwicklungsbank.de

66

KfW Entwicklungsbank is a German development bank operating under the KfW Bankengruppe, focusing on international development financing and cooperation with governmental and EU institutions. The website reflects a mature, professional organization with a strong emphasis on transparency, sustainability, and global development impact. The digital infrastructure employs modern technologies including responsive design, consent management, and analytics, supporting a good user experience and compliance with privacy regulations. Security posture is solid with HTTPS and consent mechanisms, though explicit security policies and incident response contacts are not publicly visible. Overall, the site is trustworthy, well-maintained, and aligned with the organization's public mission.

D

DEG - Deutsche Investitions- und Entwicklungsgesellschaft

deginvest.de

63

DEG - Deutsche Investitions- und Entwicklungsgesellschaft is a large German finance institution specializing in financing, promoting, and advising private companies investing in developing and emerging markets. It operates as a subsidiary of the KfW Bankengruppe, offering tailored financial solutions including loans, equity investments, and advisory services with a strong focus on impact and climate-related projects. The website reflects a professional and well-structured digital presence with comprehensive content targeting German companies, financial institutions, and investors interested in sustainable development and international investments. Technically, the site employs modern JavaScript libraries, analytics tools, and a consent management platform, ensuring good performance, mobile optimization, and privacy compliance. Security posture is strong with HTTPS enforcement and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, DEG demonstrates a credible and trustworthy online presence aligned with its business objectives and regulatory requirements.

K

KfW IPEX-Bank

kfw-ipex-bank.de

63

KfW IPEX-Bank is a specialized financial institution within the KfW Bankengruppe, focusing on international project and export financing primarily for the German and European markets. The bank offers tailored financing solutions including project financing, export credits, and structured trade finance, positioning itself as a key player in supporting sustainable economic growth and infrastructure development. The website reflects a professional and corporate image with clear branding and a focus on sustainability and innovation in financing solutions. Technically, the website employs modern JavaScript libraries, responsive design, and integrates advanced analytics and consent management tools, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website demonstrates high business credibility and trustworthiness, suitable for its target audience of corporate and institutional clients.

O

Omnora GmbH

slidepresenter.com

61

Omnora GmbH is a German-based technology company specializing in AI-powered corporate learning and knowledge management solutions. Their flagship offerings include an AI Authoring Tool (SlidePresenter) for creating educational videos compatible with any LMS and Intelligence Management Software to automate knowledge capture and distribution within organizations. The company targets corporate clients, learning and development departments, HR professionals, and experts seeking scalable and efficient knowledge transfer solutions. Founded in 2015, Omnora has established a credible market presence with notable clients and case studies. Technically, the website is built on the HubSpot CMS platform, leveraging modern JavaScript libraries such as Glide.js and AOS for UI enhancements. The site is hosted by Hetzner Online GmbH and employs HTTPS with a good SSL configuration. Privacy compliance is well addressed with a cookie consent mechanism via Cookiebot and a comprehensive privacy policy. Analytics are implemented using HubSpot Analytics and Google Tag Manager, with moderate user tracking. From a security perspective, the site enforces HTTPS and uses cookie consent but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. DNSSEC is not enabled, and security headers are not explicitly detected, suggesting room for improvement in hardening the security posture. Overall, Omnora presents a professional, trustworthy, and well-structured digital presence aligned with its business objectives. The domain registration data is consistent with the company’s claims, supporting legitimacy. Strategic recommendations include enabling DNSSEC, publishing security policies, and adding vulnerability disclosure information to enhance trust and security maturity.

T

Trendence Institut GmbH

mein-chancen-check.de

66

Mein Chancen-Check is a career and labor market insight platform operated by Trendence Institut GmbH, a medium-sized German research and consulting company. The website provides users with tools to assess their job market chances, subscribe to newsletters, participate in surveys, and access career-related podcasts. The business targets job seekers and professionals interested in labor market data and career development. Technically, the site uses modern JavaScript frameworks including Turbo and Stimulus, integrates multiple analytics platforms (Matomo, Plausible), and employs a consent management platform to ensure GDPR compliance. The site is hosted with reputable DNS providers and enforces HTTPS, indicating a secure infrastructure. Security posture is good but could be improved by adding explicit security headers and incident response information. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable resource for its audience.

A

Axel Springer SE

spring-media.de

61

Axel Springer SE operates a professional career portal at career.axelspringer.com, targeting job seekers interested in media, journalism, technology, marketing, and sales roles. The company is a leading media and technology enterprise with a strong international presence, particularly in Europe and the USA. The website provides comprehensive career information, job listings, and insights into company culture and benefits, supported by a modern TYPO3 CMS infrastructure and integrated recruitment tools such as SmartRecruiters. The site is well-branded, GDPR compliant, and actively engages users via multiple social media channels. Technically, the site is well-implemented with good mobile optimization and SEO practices, though some security headers could be improved. The absence of WHOIS data for the subdomain is typical and does not detract from the site's legitimacy. Overall, the website reflects a mature digital presence aligned with Axel Springer's corporate identity.

H

Heise Medien

heise.de

75

Heise Medien operates heise.de, a leading German IT news and media portal offering comprehensive coverage of technology, science, and related topics. The website serves a broad audience including IT professionals and technology enthusiasts, providing news, forums, online magazines, price comparisons, and software downloads. The business model combines advertising, subscription services, and e-commerce. Technically, the site employs modern web technologies, including a consent management platform, analytics, and personalization tools, ensuring a mature digital infrastructure. Security posture is strong with HTTPS and consent mechanisms, though explicit security headers and vulnerability disclosure policies are absent. Overall, the site is professional, trustworthy, and compliant with GDPR principles, though contact and legal policy information could be more explicit.

M

Mobility Ads GmbH

mobility-ads.de

49

Mobility Ads GmbH operates a professional digital advertising platform focused on the automotive sector, targeting car dealers and publishers. The company provides lead generation and traffic monetization services, positioning itself as a specialized player in the German automotive digital marketing space. The website is well-designed, mobile-optimized, and offers clear navigation with strong branding and trust signals including certifications and customer testimonials. Technically, the site uses modern Angular framework technology and enforces HTTPS with SSL encryption, ensuring secure communications. However, explicit security headers and a vulnerability disclosure policy are absent, representing areas for improvement. Privacy compliance is robust with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Overall, the site demonstrates a mature digital presence with a high level of professionalism and trustworthiness.

A

Axel Springer Teaser Ad GmbH

adup-tech.com

72

AdUp Technology is a digital marketing company specializing in native advertising and performance marketing, primarily serving advertisers and publishers in the European travel sector. As part of the Axel Springer group, it leverages strong partnerships and exclusive content access to maintain a competitive market position. The company offers CPC-based advertising solutions with advanced regional targeting and machine learning optimization. Technically, the website is built on TYPO3 CMS, uses modern JavaScript frameworks, and integrates Google Analytics with privacy-conscious configurations. The site is well-designed, mobile-optimized, and provides clear navigation and comprehensive privacy and terms policies. Security posture is solid with HTTPS and consent management, though some security headers and explicit incident response contacts are missing. Overall, the business appears credible and professional, though WHOIS data is unavailable, which slightly reduces trust transparency.

V

Volkswagen Commercial Vehicles

connectfleet.io

56

Connect Pro is a digital fleet management platform developed by Volkswagen Commercial Vehicles, targeting commercial customers who need efficient management of their vehicle fleets. The platform offers real-time vehicle tracking, maintenance monitoring, and software update capabilities for electric vehicles, accessible via web browsers on multiple device types. The website reflects a professional and consistent brand image aligned with Volkswagen Group, leveraging modern web technologies such as Angular and AWS hosting infrastructure. However, the site lacks explicit privacy, cookie, and terms of service policies, as well as visible contact information, which are important for compliance and user trust. Security posture is adequate with HTTPS and domain transfer protections, but could be improved by enabling DNSSEC and implementing security headers. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures to improve compliance and trust.

B

Business Insider Deutschland GmbH

businessinsider.de

11

Business Insider Deutschland GmbH operates a leading German-language business news website delivering current news and in-depth analyses in economy, finance, technology, and career sectors. The site targets business professionals and decision makers, offering both free content and a premium subscription model (BI Plus). The company is a subsidiary of Axel Springer Deutschland GmbH, reflecting a strong market position in the media industry. Technically, the website is built on WordPress with modern SEO and consent management tools, hosted behind Cloudflare for performance and security. Security posture is strong with HTTPS, security headers, and GDPR-compliant consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-optimized for users and search engines.

T

The Mobility House

mobilityhouse.com

10

The Mobility House is a medium-sized company focused on providing sustainable and 100% emission-free e-mobility solutions, targeting consumers and businesses interested in green transportation technologies. The website presents a professional and consistent brand image with a clear business description emphasizing sustainability and zero emissions. The company appears to have an international presence with localized content for different regions. Technically, the website uses modern frameworks such as Next.js and integrates analytics and marketing tools like Google Analytics, Hotjar, HubSpot, and Cookiebot for privacy compliance. The site is mobile-optimized and performs moderately well with good SEO practices. Security-wise, the website enforces HTTPS, employs standard security headers, and uses a cookie consent mechanism, reflecting a mature security posture. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and trustworthiness, which should be further investigated. Overall, the site is safe, professional, and compliant with GDPR, but lacks visible direct contact information and explicit security incident response details.

B

Bundesamt für Wirtschaft und Ausfuhrkontrolle (BAFA)

bafa.de

59

The Bundesamt für Wirtschaft und Ausfuhrkontrolle (BAFA) is a German federal agency responsible for economic and export control, energy efficiency programs, and supply chain compliance. The website serves as an official portal providing comprehensive information, services, and resources for private individuals, companies, and municipalities. It is well-positioned as a trusted government entity with a broad scope of regulatory and support functions. Technically, the site is built on the Government Site Builder CMS, hosted by ITZBund, and employs modern web technologies with good mobile optimization and accessibility. Security posture is solid with HTTPS, cookie consent, and minimal tracking, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

K

KfW Bankengruppe

kfw.de

56

KfW Bankengruppe is a prominent German promotional bank dedicated to supporting sustainable development and innovation both domestically and internationally. The website reflects a mature digital presence with comprehensive information on funding programs for private individuals, companies, and public institutions. It also highlights KfW's subsidiaries and international financing activities, positioning it as a key player in the finance and government sectors. The site is well-branded, professionally designed, and optimized for accessibility and mobile use. Technically, the website employs modern JavaScript frameworks, responsive design, and integrates advanced analytics and consent management tools, indicating a high level of digital maturity. Security posture is strong with HTTPS enforced and secure form handling, though explicit security policies and vulnerability disclosures are absent. Privacy compliance is robust, with clear privacy and cookie policies and a consent mechanism in place. Overall, the security posture is solid with no evident vulnerabilities or suspicious content. The domain registration aligns with the organization's identity, reinforcing trustworthiness. The site serves as a reliable resource for stakeholders seeking financial support and information about KfW's services and initiatives.

E

Elli

elli.eco

77

Elli is a brand under the Volkswagen Group focused on providing comprehensive solutions in the E-Mobility and energy sectors. The company offers products such as Wallbox charging stations, sustainable electricity tariffs, and mobility services targeting both private consumers and business clients. The website reflects a strong market position with professional branding and a clear focus on sustainability and innovation in electric life. Technically, the site is built on modern web technologies including Webflow CMS, SVG animations, and video content, delivering a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy and professional, supporting Elli's business credibility as a Volkswagen Group brand.

V

Volkswagen AG

volkswagen-karriere.de

70

Volkswagen AG operates a comprehensive career website targeting job seekers, students, graduates, and professionals interested in automotive industry careers. The site offers detailed information on job opportunities, apprenticeships, internships, and dual study programs, reflecting Volkswagen's strong market position as a leading global automotive manufacturer. The website is well-branded, professionally designed, and provides extensive resources to support applicants throughout the recruitment process. Technically, the site leverages modern web technologies including React and Adobe Experience Manager, ensuring fast performance, mobile optimization, and good accessibility. Security posture is strong with HTTPS enforcement, security headers, and consent management, although explicit incident response contacts and vulnerability disclosure mechanisms are not publicly detailed. Overall, the site demonstrates a mature digital presence aligned with Volkswagen's enterprise scale and reputation.

V

Volkswagen Nutzfahrzeuge

volkswagen-nutzfahrzeuge.de

70

Volkswagen Nutzfahrzeuge is the official commercial vehicle brand of Volkswagen AG, offering a wide range of commercial vehicles, including vans, transporters, and electric models. The website serves as a comprehensive platform for product information, vehicle configuration, financing, leasing, and after-sales services, targeting both private and business customers. The brand holds a strong market position in the transportation sector in Germany and internationally. Technically, the website is built on modern web technologies including React and Adobe Experience Manager, ensuring fast performance, mobile optimization, and good accessibility. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security and privacy policies are not prominently published. Overall, the site reflects a mature digital presence consistent with a large enterprise brand.

V

Volkswagen AG

autosuche.de

72

Volkswagen AG operates a comprehensive automotive website focused on new and used vehicle sales, leasing, financing, and mobility services primarily targeting the German market. The site demonstrates a mature digital infrastructure leveraging modern web technologies such as React and Adobe Experience Manager, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS enforcement, security headers, and consent management mechanisms in place. Privacy policies are comprehensive and GDPR compliant, reflecting Volkswagen's commitment to data protection. Overall, the website is professional, trustworthy, and well-aligned with Volkswagen's brand and business objectives.

C

C.H. Beck

beck-elibrary.de

57

Beck eLibrary is a digital platform operated by the reputable German publishing house C.H. Beck, providing specialized access to legal and economic textbooks and professional literature. The platform targets professionals, academics, and students in law and economics, offering a subscription-based service with a well-structured and professionally designed website. The technical infrastructure includes modern web technologies, cookie consent management via Cookiebot, and analytics through Google Analytics 4 with GDPR-compliant consent mode. The security posture is strong, with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Privacy compliance is well addressed with clear cookie categories and consent mechanisms, aligning with GDPR requirements. Overall, the website demonstrates a mature digital presence with good performance, accessibility, and SEO optimization. The domain WHOIS data is consistent with the business profile, hosted on Deutsche Telekom infrastructure, and shows no signs of suspicious activity. Strategic recommendations include publishing detailed security policies, adding vulnerability disclosure information, and providing clear contact channels for security incidents to enhance trust and compliance further.

A

AWS oHG

aws-online.de

60

AWS oHG is a well-established German educational provider specializing in tax law seminars and professional development. With over 30 years of experience, the company offers seminar series, individual seminars, and web seminars targeted primarily at tax advisors and professionals seeking to stay current in tax law. The website reflects a professional and consistent brand presence with clear contact information and a focus on user-friendly seminar search and registration. Technically, the website employs a modern but straightforward technology stack including jQuery, Bootstrap, and Select2 for UI enhancements. The site is mobile optimized and SEO friendly, with a cookie consent mechanism ensuring GDPR compliance. Analytics tools such as Google Analytics and Matomo are used with moderate tracking levels. From a security perspective, the site enforces HTTPS and manages cookie consent effectively but lacks explicit security policies or incident response information. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns with the business, showing no privacy protection or suspicious registration patterns. Overall, AWS oHG presents a trustworthy and professional online presence with good security and privacy practices. Strategic improvements could include adding explicit security policies, vulnerability disclosure, and enhanced security headers to further strengthen the security posture.

I

id Verlag

ibr-online.de

65

ibr-online is a specialized German legal information portal operated by id Verlag, focusing on construction, architects, and real estate law. It provides comprehensive legal databases, case law, commentaries, seminars, and practical tools tailored for legal professionals and industry experts. The website demonstrates a consistent and professional brand presence with a clear target audience in the legal and construction sectors. Technically, the site uses a basic but functional tech stack including jQuery and custom scripts, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS usage and secure form handling, but lacks explicit security headers and published security policies. Privacy compliance is partially met with a comprehensive privacy policy and terms of service, though no cookie consent mechanism is evident. Overall, the site is trustworthy and well-positioned in its niche market.

MWV Seminare is a German-based educational company specializing in seminars related to insurance and economic law. With a history of approximately 38 years, it serves professionals such as insurance company employees, brokers, social insurance carriers, and legal practitioners. The company positions itself as a leading independent provider of continuing education in its sector, offering around 100 seminars annually with about 5,000 participants. The website content reflects a professional and focused business model with clear target audiences and well-defined seminar offerings. Technically, the website uses standard web technologies including HTML, CSS, and jQuery 3.6.1. It is hosted on servers associated with 1&1 IONOS, a reputable hosting provider. The site demonstrates basic mobile optimization and accessibility but lacks advanced SEO and modern frameworks or CMS indications. Performance is moderate, and the navigation structure is clear but basic. From a security perspective, the site lacks visible security headers and privacy or cookie policies, which are important for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided. The site uses HTTPS (assumed) but does not demonstrate advanced security best practices. No tracking or advertising scripts are detected, indicating minimal user tracking. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security headers, and more transparent contact information to increase trust and compliance posture.

A

AWA AUSSENWIRTSCHAFTS-AKADEMIE GmbH

awa-seminare.com

56

AWA AUSSENWIRTSCHAFTS-AKADEMIE GmbH is a specialized education provider focused on customs and foreign trade law, offering seminars, webinars, inhouse trainings, distance learning, and master courses primarily in Germany and neighboring countries. The company is affiliated with the reputable C.H.Beck publishing group and holds recognized certifications such as TÜV Nord and ISO 29993, positioning it as a leading specialist in its niche market. The website is professionally designed, content-rich, and well-structured, targeting professionals and companies involved in international trade compliance and management. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates GDPR-compliant consent management and analytics tools. Security posture is good with HTTPS enforced and consent mechanisms in place, though some security headers and explicit policies could be improved. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency but does not detract significantly from the overall trustworthiness given the strong business indicators. Overall, the site presents a credible, professional, and secure platform for its educational services.

B

BECKAKADEMIE FERNKURSE

beck-fernkurse.de

45

BECKAKADEMIE FERNKURSE is a reputable German educational institution specializing in state-approved and professionally recognized distance learning courses for legal and vocational training of Berufsbetreuer. The website demonstrates a solid market position supported by certifications such as TÜV®, AZAV, and cooperation with the Katholische Hochschule Nordrhein-Westfalen, offering students recognized certificates and flexible learning options. The business model focuses on providing accessible, high-quality remote education with strong trust signals and a clear target audience of professionals seeking career advancement in legal guardianship and related fields. Technically, the site is built on WordPress with modern plugins and SEO tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, CAPTCHA protection, and consent management, though it lacks a published security policy or incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR, with moderate user tracking via Google Analytics and Google Ads. Recommendations include enhancing security headers and publishing incident response information to further improve trust and compliance.

BeckAkademie Seminare operates a professional German-language website offering legal education and training seminars, including live webinars and e-learnings, targeting legal professionals such as lawyers, tax advisors, and executives. The company positions itself as a reputable provider with over 700 annual events across 20 legal fields, emphasizing high-quality content and expert speakers. Technically, the website employs modern JavaScript libraries, Google Tag Manager, Microsoft Application Insights, and a GDPR-compliant Usercentrics consent management platform, hosted likely by Deutsche Telekom. The site is mobile-optimized and well-structured, providing a good user experience. Security-wise, HTTPS is enforced, but the absence of explicit security headers and a published security policy or vulnerability disclosure reduces the security posture slightly. Privacy compliance is partially addressed through cookie consent but lacks visible privacy and terms of service pages. Overall, the website is professional, trustworthy, and safe for general audiences.

W

WiWi Career

wiwicareer-vahlen.de

57

WiWi Career is a German-language online career platform operated by VAHLEN, targeting students, graduates, and young professionals in economics and business sciences. The platform offers job listings and career services tailored to this niche audience, positioning itself as a specialized resource in the education sector. Technically, the website employs a mix of modern and legacy technologies including jQuery, Bootstrap 3, FontAwesome, and Usercentrics for cookie consent management, hosted on evolver.center infrastructure. The site is mobile-optimized with good SEO and basic accessibility features. Security posture is moderate with HTTPS enforced and consent management implemented, but lacks explicit security headers and published privacy or security policies. Overall, the domain registration and hosting details align with the website's business claims, indicating legitimacy. The site does not contain adult or questionable content and is fully accessible without WAF blocking.