Germany security reports

I

immobilie1

immobilie1.de

65

immobilie1.de is a German real estate platform offering nationwide property search services including apartments, houses, commercial real estate for rent and purchase. The website targets property seekers and providers in Germany, providing a user-friendly interface with search and provider lookup features, as well as real estate guides. The platform uses modern web technologies including Laravel Livewire, Tailwind CSS, and integrates Cookiebot for GDPR-compliant cookie consent and Google Tag Manager for analytics. Security posture is solid with HTTPS and CSRF protections, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, no terms of service or explicit security policies were found. Overall, the site is professional, trustworthy, and well-optimized for users.

S

SPERLI

sperli.de

54

SPERLI operates a well-established e-commerce platform specializing in seeds and gardening products, with a history dating back to 1788. The website targets both retail consumers and B2B customers, offering a broad range of products including BIO seeds, vegetable seeds, flower bulbs, and lawn care products. The company positions itself as a trusted and traditional supplier in the gardening sector within Germany. Technically, the website leverages modern technologies such as Shopware 6, Google Tag Manager, Matomo Analytics, and Algolia search, indicating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and implements bot protection via Friendly Captcha, but lacks explicit security policies and vulnerability disclosure information. Privacy compliance is partially addressed through cookie consent mechanisms, though no explicit privacy or terms of service documents were found in the provided content. Overall, the website is trustworthy, secure, and professionally maintained, but could improve transparency around privacy and security policies.

Scheurich GmbH & Co. KG is a well-established German manufacturer and market leader in indoor and outdoor planters, with a history spanning over 90 years. The company emphasizes innovation, quality, and sustainable production, targeting consumers and retailers interested in home decoration and gardening products. Their business model focuses on manufacturing ceramic and plastic planters, supported by an online shop and extensive product range. The website reflects a professional and consistent brand image with clear navigation and multilingual support.

R

Romberg

romberg.de

51

Romberg operates a professional e-commerce platform specializing in gardening and cultivation products, targeting hobbyists and small-scale gardeners primarily in Germany. The website offers a broad product range including greenhouses, seedling pots, substrates, and sustainable gardening accessories, with a dedicated B2B dealer area indicating a dual business model. The company positions itself as a niche retailer focusing on sustainable and innovative gardening solutions. Technically, the website uses modern JavaScript, SVG icons, and integrates PayPal for payments, likely built on the Shopware CMS platform. The site is mobile-optimized with moderate performance and basic accessibility features. Security posture is good with HTTPS enforced and IP anonymization in Google Analytics, but lacks explicit security headers and published security policies. Privacy compliance is basic, with a cookie consent mechanism but no visible privacy or cookie policies. Contact information and incident response details are not clearly provided, which could impact user trust. Overall, the website is safe, professional, and trustworthy for general audiences.

N

Neudorff

neudorff.de

62

Neudorff is a German company specializing in natural gardening products and advice, targeting environmentally conscious gardeners. The website presents a professional and consistent brand image with good content quality and user experience. Technically, the site uses modern JavaScript frameworks such as Nuxt.js and employs Cloudflare for DNS and likely CDN services, ensuring good performance and security. Advertising is managed through Taboola, and cookie consent is implemented via Cookiebot, indicating some level of privacy compliance. However, explicit privacy policies, terms of service, and direct contact information are not found in the provided content, which limits full compliance and transparency. Security posture is generally good with HTTPS enabled, but additional security headers and incident response information would strengthen it. Overall, the site appears trustworthy and well-maintained but could improve in privacy and security documentation.

B

Bruno Nebelung GmbH

nebelung.de

56

Bruno Nebelung GmbH is a traditional German company established in 1925, specializing in supplying high-quality horticultural products such as seeds, microgreens, lawn and soil treatments, flower bulbs, and merchandising displays. The company operates a B2B e-commerce platform targeting business customers and garden professionals. The website is built on the Shopware CMS platform and incorporates modern technologies including Matomo analytics and Friendly Captcha for bot protection. While the site demonstrates good technical implementation and user experience, it lacks explicit privacy and cookie policies, as well as visible contact information, which are important for compliance and trust. Security posture is solid with HTTPS and captcha usage, but could be improved with additional security headers and published incident response information. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact channels.

L

LECHUZA

lechuza.de

57

LECHUZA is a well-established German brand specializing in high-quality plant containers with intelligent watering systems, substrates, and care products. The company operates a professional e-commerce platform targeting gardening enthusiasts and consumers seeking premium plant care solutions. The website demonstrates a mature digital infrastructure leveraging Salesforce Commerce Cloud, modern tracking and analytics tools, and internationalization with multiple country and language versions. Security posture is strong with HTTPS and secure payment methods, though visible security headers and formal security policies are absent. Privacy compliance is limited due to missing explicit privacy and cookie policies in the analyzed content. Overall, the site is professional, trustworthy, and well-positioned in the retail gardening market.

L

LA’BIO!®

labio.de

46

LA’BIO!® is a small German-based organic gardening and retail company specializing in purely organic herbs and vegetables grown without artificial fertilizers or pesticides. The company targets environmentally conscious consumers interested in organic gardening and sustainable produce. The website is built on WordPress with modern plugins for SEO, social media integration, and user engagement. It features a clear business model focused on retail and online sales, supported by a partner online shop and environmental initiatives. The site is well-branded, consistent, and professionally designed with good navigation and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and incident response information. WHOIS data aligns well with the website content, indicating a legitimate and consistent registration history. Overall, the site presents a trustworthy and professional online presence for its niche market.

K

Kiepenkerl

kiepenkerl.de

52

Kiepenkerl operates a professional e-commerce platform specializing in seeds, flower bulbs, plants, and related gardening products. The website targets both retail consumers and B2B customers, positioning itself as a premium brand within the German gardening market. The platform offers a broad range of product categories and supports customer engagement through structured navigation and search capabilities. Technically, the website is built on a modern e-commerce framework (Shopware 6) and integrates multiple analytics and marketing tools such as Matomo, Google Tag Manager, and Facebook Pixel. The site is hosted on servers associated with kasserver.com and uses HTTPS with a good SSL configuration. Security measures include the use of Friendly Captcha to mitigate bot activity and a cookie consent mechanism to comply with basic privacy requirements. However, explicit privacy policies, terms of service, and contact information are not found in the provided content, which limits full compliance and trust transparency. Overall, the website demonstrates a solid technical foundation and business credibility but would benefit from enhanced privacy disclosures and security header implementations.

E

Europäischer Fonds für regionale Entwicklung Bremen

efre-bremen.de

60

The website www.efre-bremen.de serves as the official platform for the European Regional Development Fund (EFRE) in Bremen, Germany. It provides comprehensive information about funding programs for the periods 2014-2020 and 2021-2027, project examples, news, and contact options. The site targets entrepreneurs, startups, research institutions, and public sector entities interested in regional development funding. It acts as a government-funded informational and support portal, positioning itself as an authoritative source for EFRE-related activities in the Bremen region. Technically, the website is built on the SixCMS content management system, hosted by hosting.de, and uses modern web technologies including HTML5, CSS3, and JavaScript. It integrates Matomo analytics configured to respect user privacy by disabling cookies and honoring DoNotTrack. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. However, some security headers are missing, and no cookie consent mechanism is present despite the use of analytics. From a security perspective, the site enforces HTTPS and uses secure login forms with CSRF tokens. No vulnerabilities or exposed sensitive data were detected. The absence of security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in security transparency and compliance. The WHOIS data aligns with the hosting provider and website content, indicating a legitimate and consistent domain registration. Overall, the website demonstrates a solid business credibility and technical foundation with good content quality and user experience. Strategic recommendations include implementing additional security headers, publishing security and incident response policies, and adding cookie consent mechanisms to enhance privacy compliance and user trust.

B

BAB - Die Förderbank für Bremen und Bremerhaven

bab-bremen.de

60

BAB - Die Förderbank für Bremen und Bremerhaven is a regional development bank supporting public and private investments in the Bremen and Bremerhaven regions. It offers a range of financial products including grants, loans, participations, and guarantees to foster economic growth, housing development, and innovation. The institution partners closely with local economic development agencies BIS and WFB, positioning itself as a key player in regional economic strengthening and sustainability initiatives. The website reflects a professional and well-structured digital presence with clear navigation, accessibility features, and comprehensive information about funding programs and events. Technically, the website employs modern web technologies such as jQuery, Bootstrap, and FontAwesome, and is likely powered by a specialized CMS tailored for regional government entities. The site is mobile-optimized, accessible, and includes privacy-conscious analytics via Matomo without cookies. Security posture is solid with HTTPS enforced and secure form handling, though some security headers are missing and no explicit security policy or incident response contacts are published. Overall, the website demonstrates a mature digital infrastructure suitable for a public financial institution, with strong compliance to GDPR and privacy standards. The presence of certifications and partner logos enhances trustworthiness. No critical vulnerabilities or suspicious elements were detected, and the content is safe for general audiences. Strategically, BAB should consider publishing a formal security policy and incident response contacts to further enhance transparency and trust. Additionally, implementing recommended security headers would strengthen defense-in-depth. The current digital maturity supports BAB's mission effectively, but ongoing security and compliance improvements are advisable.

B

BOMA GmbH

olerum.de

70

BOMA GmbH operates the website olerum.de, a well-established German e-commerce platform specializing in plants, greenhouses, and garden accessories. The company leverages strong partnerships with local nurseries to offer high-quality products and a broad selection to gardening enthusiasts and home gardeners. The website is professionally designed with excellent content quality, clear navigation, and mobile optimization, targeting a broad audience of garden lovers. Technically, the site uses modern JavaScript libraries such as jQuery, Splide.js, and Owl Carousel, alongside Google Analytics and Tag Manager with robust consent mechanisms, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be enhanced. No critical vulnerabilities or suspicious activities were detected. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR requirements.

Jaguar Land Rover Classic is a specialized division of Jaguar Land Rover focused on providing classic Jaguar and Land Rover parts and restoration services. The website targets classic car enthusiasts and owners primarily in Germany and Europe, leveraging a robust e-commerce platform based on Magento Enterprise. The technical infrastructure includes modern JavaScript libraries, advanced search capabilities via Klevu, and GDPR-compliant cookie management through Cookiebot. Security posture is strong with HTTPS enforced and standard security headers present, though explicit privacy and terms policies are not detected in the provided content. Overall, the site demonstrates a mature digital presence aligned with a large automotive brand, though improvements in transparency and contact availability would enhance trust and compliance.

A

Augsburger Allgemeine

augsburger-allgemeine.de

63

Augsburger Allgemeine is a prominent regional news media company based in Augsburg, Germany, providing comprehensive news coverage across politics, economy, sports, culture, and local events. The website serves as a digital platform for news dissemination, subscription services, classifieds, and event ticketing, positioning itself as a leading regional information source with a broad audience. The business model combines advertising revenue with digital subscriptions and ancillary services such as online shops and specialized portals.

The website your-server.de serves primarily as a login portal for konsoleH, a server and account management interface likely associated with a hosting service provider. The site targets existing customers who manage their hosting accounts and webmail services. The business model revolves around providing server hosting and account administration services, with a technical infrastructure apparently hosted or supported by Hetzner, a known German hosting provider. The site content is minimal, focusing on login functionality without broader marketing or informational content. From a technical perspective, the website uses basic HTML and CSS without modern frameworks or CMS detected. The site lacks HTTPS on the main domain, which is a significant security shortfall. Mobile optimization and accessibility are minimal, and SEO practices are poor. External links point to related subdomains and Hetzner documentation, indicating some integration with the hosting provider's ecosystem. Security posture is weak due to the absence of HTTPS and security headers, exposing users to potential risks during login. No privacy, cookie, or terms of service policies are present, indicating non-compliance with GDPR and other privacy regulations. No contact or incident response information is provided, limiting transparency and trust. WHOIS data shows partial consistency but lacks detailed registrant information, slightly reducing trustworthiness. Overall, the website presents a basic, functional login portal with critical security and compliance gaps. Strategic improvements in SSL implementation, privacy compliance, and security best practices are essential to enhance trust and protect user data.

D

Delius Klasing Verlag GmbH

delius-klasing.de

61

Delius Klasing Verlag GmbH is a well-established German publishing company specializing in books, magazines, and events focused on watersports, cycling, and automobiles. Founded in 1911 and part of Mediengruppe KLAMBT, it serves a niche audience of enthusiasts and professionals in these sectors. The website reflects a mature digital presence with a modern tech stack including Next.js and React, supported by cloud-based image hosting and a consent management platform. The site is mobile-optimized and SEO-friendly, providing a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and privacy compliance evident through comprehensive policies and consent mechanisms, although some security headers are not explicitly detected. No critical vulnerabilities or suspicious elements were found. Overall, the site demonstrates high trustworthiness and business credibility.

B

Bundesministerium für Forschung, Technologie und Raumfahrt

forschung-fachhochschulen.de

64

The website 'Forschung an Fachhochschulen' is an official German government platform managed by the Bundesministerium für Bildung und Forschung (BMBF). It serves as an information hub for research activities at universities of applied sciences (HAW) in Germany, providing news, funding opportunities, project details, and service information. The site targets researchers, academic institutions, and policymakers interested in applied research. The business model is government-funded dissemination and promotion of research programs. The site maintains a good level of content quality, professional design, and consistent branding, reinforcing its authoritative position in the government research sector. Technically, the website is built using the Government Site Builder CMS, with a modern tech stack including HTML5, CSS3, and JavaScript. It is hosted likely by ITZBund, a federal IT service provider, and shows good mobile optimization, accessibility, and SEO practices. Performance is moderate, with no major issues detected. The site uses Matomo analytics with anonymized data collection and a clear cookie consent mechanism, demonstrating good privacy compliance. From a security perspective, the site enforces HTTPS and employs cookie consent for tracking. However, it lacks explicit security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data shows partial consistency with the government affiliation, with no suspicious patterns. Overall, the security posture is solid but could be improved by adding security headers and formal incident response information. The overall risk assessment is low, with the site being trustworthy and professionally maintained. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and providing clearer incident response contacts to further strengthen trust and compliance.

The Bundesministerium für Forschung, Technologie und Raumfahrt (BMFTR) is the official German federal ministry responsible for research, technology, and space affairs. The website serves as a comprehensive information portal targeting the general public, researchers, educational institutions, and government stakeholders. It provides extensive content on education, research initiatives, technological innovation, and space programs, positioning itself as a key government entity in these sectors. The site is professionally designed with consistent branding and clear navigation, supporting both German and English languages to cater to a broad audience. Technically, the website is built on the Government Site Builder CMS, a specialized platform for German federal administration websites. It employs modern web technologies including responsive CSS for mobile optimization, JSON-LD structured data for semantic clarity, and accessibility features such as ReadSpeaker for text-to-speech. Hosting is likely managed within the German academic network infrastructure, ensuring reliability and compliance with government standards. Performance is moderate with good SEO and accessibility practices. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes security headers. It implements a cookie consent mechanism compliant with GDPR, offering users control over statistical and external media cookies. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not published, representing areas for improvement. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It effectively supports the ministry's mission to disseminate information and engage with its audience. Strategic recommendations include publishing detailed security policies, establishing incident response contacts, and adding a vulnerability disclosure policy to enhance transparency and security posture.

D

Deutsches Jugendherbergswerk (DJH)

jugendherberge.de

69

The website www.jugendherberge.de represents the Deutsches Jugendherbergswerk (DJH), a large and established non-profit organization operating a network of approximately 400 youth hostels across Germany. The site targets families, school groups, youth groups, and solo travelers, offering affordable accommodation and specialized travel programs. The business model focuses on hospitality and group travel services with a strong emphasis on inclusivity and community experience. Technically, the site is built on TYPO3 CMS, employs modern JavaScript frameworks like Vue.js for interactive components, and integrates analytics and consent management tools such as Matomo, Google Tag Manager, and Usercentrics CMP. The website is mobile-optimized, accessible, and SEO-friendly with structured data markup.

A

Azul

azul.de

66

Azul is a specialty coffee roastery based in Bremen, Germany, focusing on high-quality coffee roasting, retail sales, and coffee education. The website presents a professional and well-structured digital presence built on WordPress, leveraging modern plugins such as WPBakery Page Builder, Slider Revolution, and Borlabs Cookie for cookie consent management. SEO is enhanced with Rank Math, and analytics are conducted via Matomo, indicating a moderate level of digital maturity. Security posture is good with HTTPS enabled and cookie consent implemented, though explicit security headers and privacy policies are missing. The site is accessible without any WAF or security challenges, and no adult or questionable content is present, making it safe for general audiences. Contact information is primarily via a contact form, with no explicit emails or phone numbers found in the HTML content. WHOIS data is minimal but does not raise suspicion, though more detailed registrant information would improve trust. Overall, Azul's website is a solid representation of a small specialty coffee business with room for improvement in privacy compliance and security best practices.

N

nordmedia - Film- und Mediengesellschaft Niedersachsen/Bremen mbH

nordmedia.de

54

nordmedia is a regional media funding organization serving the German states of Niedersachsen and Bremen. Established in 2001, it plays a central role in supporting and developing the local film and media industry through funding programs, events, and advisory services. The website reflects a mature and professional digital presence with comprehensive content tailored to its target audience of media professionals and filmmakers. Technically, the site uses modern web standards and privacy-respecting analytics (Matomo), with good mobile optimization and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit incident response policies are absent. Overall, the site is trustworthy and well-aligned with its business purpose.

R

Reishunger

reishunger.de

66

Reishunger is a German-based e-commerce company specializing in rice products, digital rice cookers, kitchen accessories, and related cooking ingredients. The website targets consumers interested in diverse rice varieties and cooking solutions, offering a broad product catalog and recipe content. The company positions itself as a premium provider with over 10 years of expertise and a strong customer base, supported by high Trusted Shops ratings. Technically, the website employs modern JavaScript frameworks like Alpine.js, uses Cloudflare for DNS and CDN services, and integrates YouTube APIs and Swiper.js for enhanced user experience. The site is mobile-optimized and performs well with fast loading times. Security-wise, HTTPS is enforced, and basic security best practices are observed, though explicit security headers like Content-Security-Policy are not clearly present. Privacy compliance is moderate, with cookie consent mechanisms but no explicit privacy or terms of service pages found in the provided content. Overall, the website is professional, trustworthy, and safe for general audiences.

J

John Will Kommunikation

will-kommunikation.de

39

John Will Kommunikation is a small, experienced communication consultancy based in Germany, specializing in tailored communication strategies for brands, markets, and people. With over 25 years of experience, the company offers a range of services including media relations, crisis communication, media training, and social media management. The website reflects a professional and consistent brand image, targeting corporate clients across various sectors in the German-speaking region. Technically, the site is built on WordPress with common plugins and libraries, showing moderate performance and good mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, though it lacks some advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professionally maintained, with room for improvement in security and privacy transparency.

U

Universität Bremen

uni-bremen.de

64

The Universität Bremen website serves as the official digital presence of a medium-sized German university with approximately 20,000 students. It offers a broad range of academic programs including bachelor, master, and legal state examinations, and is recognized as an Excellence University since 2012. The site targets students, researchers, international visitors, and partners, providing comprehensive information on study programs, research, and university services. Technically, the site is built on TYPO3 CMS, employs Matomo for privacy-conscious analytics, and demonstrates good mobile optimization and accessibility. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms. No critical vulnerabilities or suspicious content were detected, and the domain registration aligns with the university's identity and history.

S

swb

swb.de

67

swb is a regional energy and telecommunications provider based in Bremen, Germany, offering a broad range of utility services including electricity, natural gas, water, heating, IT, and telecom solutions. The company positions itself as a key regional player serving private customers with a comprehensive portfolio. The website reflects a mature digital presence with professional design, clear navigation, and GDPR-compliant cookie consent mechanisms. Technically, the site employs modern tools such as Google Tag Manager and Cookiebot for analytics and consent management, hosted on a regional German provider's infrastructure. Security posture is adequate with HTTPS enforced and CSRF protections indicated, though additional security headers and explicit incident response policies are absent. Overall, the site demonstrates good privacy compliance and business credibility, though opportunities exist to enhance transparency and security documentation.

G

Gastivo

gastivo.de

55

Gastivo operates as a leading digital ordering platform tailored for the gastronomy sector in Germany, facilitating streamlined procurement between restaurants and suppliers. The website is built on a WordPress CMS with Elementor, indicating a modern and flexible technical infrastructure. The platform demonstrates good design quality, mobile optimization, and SEO practices, supporting a positive user experience for its target audience. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and incident response information, which could be improved to enhance trust and compliance. Privacy and cookie policies are absent, representing a compliance gap under GDPR regulations. Overall, the site is functional and professional but would benefit from enhanced privacy and security disclosures to strengthen its risk profile.

C

CEWE

cewe.de

62

CEWE operates a large-scale e-commerce platform specializing in personalized photo products such as photobooks, calendars, greeting cards, and photo gifts. The website targets a broad consumer audience primarily in Germany and other German-speaking countries, offering a comprehensive range of photo printing services. The company is positioned as a leading European photo service provider with a strong brand presence and consistent digital branding across its platforms. Technically, the website employs modern web technologies including ES modules, custom web components, and advanced tracking and consent management tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security headers and published security policies are absent. The site demonstrates extensive user tracking for marketing and analytics purposes, balanced with a consent management platform to address privacy compliance. Overall, the website is professional, trustworthy, and well-optimized for user experience, though it could improve transparency around privacy and security policies.

Grafik Werkstatt operates a professional German-language e-commerce website specializing in greeting cards, calendars, gifts, and related products. The site targets general consumers seeking occasion-specific cards and gifts, offering a well-structured catalog and a B2B shop variant. Technically, the website is built on Magento CMS, leveraging RequireJS, jQuery, and Owl Carousel for frontend interactivity, with integrations for Google Analytics and Facebook Pixel for marketing and tracking. The hosting is managed via kasserver.com, and the site enforces HTTPS with a cookie consent mechanism, indicating GDPR awareness. However, explicit privacy policies and terms of service are not found in the provided content, which is a compliance gap. Security posture is moderate with SSL enabled but lacking security headers and vulnerability disclosure policies. Overall, the website is safe, professional, and trustworthy for general audiences.

G

Gourmet Berner

gourmetberner.de

74

Gourmet Berner is a German e-commerce business specializing in gourmet food products such as spices, antipasti, liqueurs, and gift baskets. The website positions itself as a strong brand for fine gourmet items, targeting general consumers interested in high-quality culinary products. The business operates on the Shopify platform, leveraging its robust e-commerce infrastructure and integrations with trusted third-party services like Trusted Shops and Complianz for compliance and marketing. Technically, the site uses modern web technologies and Shopify's Alchemy theme, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and a formal security policy are absent. Privacy compliance is partially addressed with cookie consent but lacks a visible privacy policy or terms of service. Overall, the domain registration data aligns well with the website's business claims, indicating legitimacy and trustworthiness.

G

Geli GmbH

geli.de

42

Geli GmbH is a well-established German family-owned manufacturer specializing in plastic products for gardening and household use. With over 75 years of experience, the company emphasizes sustainable and energy-efficient production processes, targeting gardeners and retail customers primarily in Germany. Their product portfolio includes a wide range of garden accessories, including watering cans and plant containers, with a focus on recycled plastics and environmental responsibility. The website reflects a mature digital presence with multilingual support and professional branding. Technically, the site is built on WordPress with WooCommerce, leveraging modern web technologies and analytics tools like Fathom Analytics. Security posture is solid with HTTPS enforced, though improvements can be made by adding security headers and cookie consent mechanisms. Overall, the business demonstrates strong credibility and market positioning in the manufacturing and retail sectors.

P

PATZER ERDEN GmbH

frux.de

69

PATZER ERDEN GmbH operates the frux brand, specializing in high-quality soils and gardening substrates for hobby gardeners and commercial trade customers. The company has a strong market presence in Germany and parts of Europe, supported by multiple production sites and a comprehensive product portfolio including organic and peat-free soils. The website is well-structured, content-rich, and professionally designed, offering detailed product information and gardening tips. Technically, the site uses established JavaScript libraries and frameworks, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

E

EMSA GmbH

emsa.com

54

EMSA GmbH is a German-based manufacturer and retailer specializing in household products such as thermos mugs, insulated jugs, and food storage containers. The company operates a professional and well-structured website powered by TYPO3 CMS, offering multi-language support and rich product and lifestyle content. The site demonstrates a mature digital infrastructure with modern tracking and consent management tools, ensuring compliance with GDPR and cookie regulations. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response information are not publicly available. The domain WHOIS data is unavailable, which slightly impacts transparency but does not detract from the overall legitimacy given the brand's established market presence and professional web presence.

D

Deutsche CUXIN Marketing GmbH

cuxin-dcm.de

64

Deutsche CUXIN Marketing GmbH operates the website cuxin-dcm.de, providing sustainable and ecological gardening products and expert advice targeted primarily at hobby gardeners in Germany. The company is positioned as a reputable brand within the gardening retail sector, offering a broad range of fertilizers, soils, pest control products, and gardening tips. The website is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, the site leverages modern frameworks such as Vue.js and Shopware, with Cloudflare providing DNS and CDN services, ensuring fast and secure content delivery. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities. Privacy compliance is robust, with clear privacy and cookie policies and GDPR adherence. Overall, the website demonstrates high professionalism and trustworthiness, supporting the company's market position effectively.

C

COMPO

compo.de

54

COMPO is a well-established German brand specializing in gardening products and plant care solutions, targeting consumers ranging from novice gardeners to experienced plant enthusiasts. The website provides product information, gardening advice, and inspiration content, positioning itself as a trusted resource in the gardening retail sector within Germany. The digital infrastructure is built on modern web technologies including Next.js and integrates multiple third-party services for analytics and advertising, such as Google Analytics, Hotjar, and Meta Pixel. Cookiebot is employed to manage GDPR-compliant cookie consent, reflecting a commitment to privacy regulations. Security posture is moderate with HTTPS implied and no visible security headers or explicit security policies published. No critical vulnerabilities or blocking mechanisms were detected, but the absence of explicit privacy and security policies and contact information represents an area for improvement. Overall, the website is professional, user-friendly, and trustworthy for its target audience.

F

feinschreiber

feinschreiber.com

62

feinschreiber is a Bremen-based agency specializing in text, content creation, branding, and marketing services. Founded in 2018, the company offers a broad range of services including consulting, copywriting, SEO, social media, and storytelling, targeting businesses and brands seeking professional content solutions. The website demonstrates a strong market position with notable clients and a consistent brand presentation. Technically, the site is built on WordPress with modern libraries like jQuery and Swiper.js, and it implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Overall, the site is professional, accessible, and trustworthy, with clear contact information and no signs of malicious activity.

H

Hinrichs & Partner

stb-hinrichs.de

66

Hinrichs & Partner is a German tax consultancy firm providing personalized and professional tax advisory and accounting services to a broad range of clients from small businesses to large enterprises. The firm emphasizes digital client engagement through its Kanzlei-App and maintains a strong commitment to environmental sustainability. The website is built on WordPress with modern plugins and technologies, offering a good user experience with clear navigation and mobile optimization. Security posture is solid with HTTPS and GDPR-compliant cookie management, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were found. Overall, the website and domain registration indicate a trustworthy and legitimate business with active operations and a professional online presence.

S

Starthaus Bremen

starthaus-bremen.de

58

Starthaus Bremen is a regional consulting and support organization focused on assisting startups and entrepreneurs in Bremen and Bremerhaven. The website provides comprehensive information about consulting services, financing options, mentoring programs, and a rich calendar of events designed to support business founders and growing companies. The platform positions itself as a central hub for startup support in the region, emphasizing free consultations and a strong network of partners. Technically, the website uses a modern tech stack including jQuery, Bootstrap, and FontAwesome, built on the SixCMS content management system. Accessibility features such as text zoom and high contrast modes are implemented, enhancing usability. However, explicit privacy and cookie policies are not found, and no security headers or incident response information are present, indicating areas for improvement in security and compliance. Overall, the website is professional and content-rich, but could benefit from enhanced security posture and privacy compliance to strengthen trust and regulatory adherence.

F

FHnet

eu-strategie-fh.net

57

FHnet operates as a collegial network of German universities of applied sciences focused on advancing EU research activities and funding participation. The platform serves as an information hub and strategic collaboration space for its members, primarily targeting academic and administrative staff involved in EU projects. The website is professionally designed, content-rich, and consistent with its educational and non-profit mission. Technically, it leverages WordPress with modern libraries such as Bootstrap and Leaflet.js, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS and domain transfer protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is addressed with a privacy policy and cookie information, but lacks an explicit consent mechanism. Overall, the site is trustworthy and well-positioned within its niche, with moderate technical and security maturity.

H

HSB - Hochschule Bremen

aufzurhsb.de

59

Hochschule Bremen (HSB) is a well-established university of applied sciences in Germany offering a broad range of Bachelor and Master degree programs with a strong emphasis on practical experience and international exposure. The website serves as an informational portal targeting prospective students, highlighting study programs, campus life, and application deadlines. The digital infrastructure is based on WordPress with standard plugins for privacy compliance and spam protection, reflecting a moderate level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and formal security policies. Overall, the website is professional, trustworthy, and compliant with GDPR, supporting the university's reputation and outreach efforts.

L

Land Rheinland-Pfalz

rlp.de

65

The website www.rlp.de serves as the official internet portal for the state government of Rheinland-Pfalz, Germany. It provides comprehensive information about the state, its government, current news, thematic focuses, and public services. The portal targets citizens, businesses, and other stakeholders interested in the region. It is positioned as a trusted government source with a broad range of services including news dissemination, social media engagement, and access to government departments. Technically, the site is built on TYPO3 CMS with Bootstrap framework, ensuring a modern, responsive, and accessible user experience. Hosting is managed via Versatel, a reputable German ISP. The site demonstrates good performance and SEO practices, with multilingual support and clear navigation. From a security perspective, the site enforces HTTPS and employs secure forms, with no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security headers and a published security or incident response policy. Privacy compliance is strong with a comprehensive privacy policy, though no cookie consent mechanism was detected. Overall, the site is a professional, secure, and trustworthy government portal with minor areas for improvement in security transparency and cookie management.

The website sbf-fragen.de is an educational platform offering a mobile app to support users preparing for boating license theoretical exams in Germany. It is operated by Delius Klasing Verlag, a known publishing company. The site provides official exam questions, learning aids, and exam simulations via a freemium app model with in-app purchases. The target audience is individuals seeking boating licenses and related certifications. Technically, the site uses modern web technologies such as React and Next.js, ensuring a responsive and user-friendly experience across devices. The site is well-branded and professionally designed, with clear navigation and relevant content in German. Security posture is moderate with HTTPS assumed but lacking explicit security headers and incident response information. Privacy compliance is partial, with a clear privacy policy linked but no cookie consent mechanism detected. Overall, the site is trustworthy and serves a niche educational market effectively.

I

IVBM GmbH

ivbm-gmbh.de

57

IVBM GmbH is a small German real estate service company specializing in property management, asset management, and real estate valuation. The company operates primarily in Bremen and Hannover, targeting real estate owners and investors seeking professional management and valuation services. Their website reflects a professional and consistent brand image with clear service descriptions and contact information. Technically, the site is built on WordPress with Bootstrap and uses a GDPR-compliant cookie consent mechanism, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the website is trustworthy and well-maintained, supporting the company's credibility in its niche market.

B

Bremer Bonbon Manufaktur

bremer-bonbon-manufaktur.de

60

Bremer Bonbon Manufaktur is a small artisanal confectionery business based in Bremen, Germany, specializing in handmade sweets such as bonbons, lollipops, fudge, and nougat. The company operates both a physical retail presence with two locations and an online shop, complemented by workshops and events targeting a broad audience including families and corporate clients. Their market position is that of a local specialty retailer with a focus on quality and craftsmanship. Technically, the website is built on the Shopware 6 e-commerce platform, leveraging modern web technologies including Google reCAPTCHA v3 for bot protection and PayPal for payment processing. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. The presence of cookie consent and privacy policies indicates a good level of digital maturity and GDPR compliance. From a security perspective, the site enforces HTTPS and integrates reCAPTCHA to protect forms, but lacks explicit mention of security headers such as X-Frame-Options or Content-Security-Policy in the HTML source. No vulnerabilities or exposed sensitive data were detected. The absence of a public security policy or incident response page suggests room for improvement in transparency and preparedness. Overall, the website presents a trustworthy and professional front for the business, with strong privacy compliance and a secure shopping experience. Strategic enhancements in security headers and incident response documentation would further strengthen their security posture and customer trust.

H

Hospiz St. Peter Oldenburg

hospiz-oldenburg.de

63

Hospiz St. Peter Oldenburg is a well-established non-profit healthcare provider specializing in hospice and palliative care services in Oldenburg, Germany. The organization offers stationary and day hospice care, grief counseling, and social services, aiming to support terminally ill patients and their families with dignity and compassion. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional design, targeting patients, caregivers, and the local community. Technically, the site is built on WordPress with modern libraries such as jQuery and Swiper.js, and employs GDPR-compliant cookie management. Security posture is solid with HTTPS and anti-spam measures, though some security headers could be improved. The WHOIS data aligns well with the business claims, showing transparency and legitimacy. Overall, the site demonstrates a strong commitment to privacy, compliance, and user experience.

H

Heldenschmiede Bremen GbR

heldenschmiede-bremen.de

57

Heldenschmiede Bremen GbR is a small education and coaching business based in Bremen, Germany, specializing in workshops, seminars, and coaching services aimed at personal and professional development. The company positions itself as a niche provider focused on empowering individuals and teams to unlock their potential and achieve meaningful change. Their offerings include business coaching, life school programs, speaker training, and events with keynote speakers. The website reflects a professional and consistent brand image with clear service descriptions and event schedules. Technically, the site is built on modern web technologies including React and Next.js, hosted on a custom CMS platform, and optimized for performance and mobile devices. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and formal policies are missing. Privacy compliance is strong with a comprehensive privacy policy and cookie banner. Contact information is clearly presented with multiple channels. Overall, the website is trustworthy, well-maintained, and suitable for its target audience.

B

Bernd Pfelzer

ra-pfelzer.de

38

Bernd Pfelzer operates a professional legal and notary practice based in Bremen, Germany, offering services primarily in tenancy law, inheritance law, traffic accident law, and debt collection. The website is designed to serve local clients seeking legal counsel and notary services, presenting clear contact information and service descriptions. The business is positioned as a small, specialized legal entity with a focus on personal client service. Technically, the website is built on WordPress using Bootstrap and FontAwesome, hosted on kasserver.com. It demonstrates good mobile optimization and moderate performance. The site uses HTTPS with a valid SSL certificate, ensuring secure communications. However, it lacks some advanced security headers and cookie consent mechanisms, which are recommended for compliance and enhanced security. From a security perspective, the site shows a solid baseline with no visible vulnerabilities or exposed sensitive data. The absence of a published security policy or incident response contact limits transparency in security governance. No tracking or advertising scripts were detected, indicating minimal user tracking and a privacy-respecting approach. Overall, the site is trustworthy and professional but could improve in privacy compliance and security best practices.

S

Startseite - Stadtmagazin Bremen

stadtmagazin-bremen.de

62

Stadtmagazin Bremen is a local media outlet focused on providing news, events, and cultural information relevant to the Bremen area. The website serves residents and visitors interested in local happenings and cultural content. The business model revolves around media publication and event promotion within the Bremen community. Technically, the website is built on WordPress, uses Matomo for analytics, and Font Awesome for icons. Hosting appears to be provided by Ewetel, a German hosting provider. The site shows basic mobile optimization and moderate performance. Security posture is weak, with no detected security headers or explicit security policies, and no HTTPS status provided in the data. Privacy compliance is minimal, with no privacy or cookie policies found, and no consent mechanisms in place. Overall, the site is accessible and safe for general audiences but lacks advanced security and privacy features. Strategic improvements in security headers, privacy policies, and contact transparency are recommended.

2

Inklusion am Arbeitsplatz: Vielfalt fördern, Barrieren abbauen

27prozentvonuns.de

58

The website 27prozentvonuns.de is a German-language informational blog focused on promoting workplace inclusion, diversity, and barrier-free communication. It provides educational content, guides, and strategies aimed at professionals and organizations interested in fostering inclusive work environments. The site is built on WordPress, leveraging common plugins such as Yoast SEO for optimization and uses Cloudflare for DNS and likely CDN services. The technical infrastructure is modern and supports mobile responsiveness with good SEO practices. Security posture is adequate with HTTPS enabled and Cloudflare DNS, but lacks advanced security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service page. Contact is available via a contact form, but no direct emails or phone numbers are published. Overall, the site is safe, professional, and trustworthy for its niche audience.

S

SAGAFLOR AG

dabluehichauf.de

68

SAGAFLOR AG operates the 'da blüh ich auf' brand, a well-established German gardening retail and information platform. The website offers a broad range of garden products including soil, fertilizers, mulch, and seeds, complemented by gardening tips, recipes, and a market locator for regional garden centers. The company emphasizes quality, regional connection, and sustainability, targeting gardening enthusiasts and consumers in Germany. Technically, the website employs modern JavaScript libraries such as jQuery, Splide.js, and Owl Carousel, and integrates analytics tools like Matomo and Google Analytics with a strong cookie consent mechanism ensuring GDPR compliance. Accessibility is enhanced via the UserWay widget, and the site is mobile-optimized with good SEO practices. Security posture is solid with HTTPS enforced and session management cookies in place, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site reflects a professional, trustworthy, and user-friendly digital presence aligned with its business goals.

Z

ZOO & Co.

zooundco.de

52

ZOO & Co. is a German specialty retail business focused on pet supplies and animal food, targeting pet owners with exclusive products for dogs, cats, birds, and other animals. The website is built on TYPO3 CMS with Bootstrap and jQuery, reflecting a moderate level of digital maturity with good design and mobile optimization. However, the absence of explicit privacy and terms of service pages indicates gaps in compliance and transparency. Security posture is moderate with cookie consent implemented but lacking advanced security headers and incident response information. Overall, the website is functional and professional but would benefit from enhanced privacy disclosures and security practices to improve trust and compliance.