Germany security reports

M

msg Rethink Compliance GmbH

msg-compliance.de

64

msg Rethink Compliance GmbH is a specialized consulting and technology firm focused on Anti-Financial Crime Compliance, serving a broad international client base primarily in the financial sector. The company offers a comprehensive portfolio of services including advisory, compliance outsourcing, digital compliance solutions, and AI-driven compliance frameworks. Their market position is strong, supported by extensive consultant experience and integration within the larger msg Group corporate family. The website reflects a mature digital presence with modern technologies, effective consent management, and professional branding. Security posture is solid with HTTPS enforcement and ISO 27001 certification, though explicit security headers and incident response disclosures could be improved. Overall, the site is trustworthy, well-structured, and compliant with GDPR requirements.

M

msg industry advisors ag

msg-advisors.com

63

msg industry advisors ag is a consulting firm specializing in the life sciences and chemicals industries, providing expert services in organizational change, manufacturing excellence, compliance, digital health, data management, SAP transformation, and project management. The company positions itself as a trusted partner for complex and highly regulated markets, leveraging deep industry knowledge and digital expertise. The website reflects a professional and comprehensive digital presence, with clear navigation, rich content, and multi-language support. Technically, the site is built on Joomla CMS with modern libraries and includes consent management and analytics tools, indicating a mature digital infrastructure. Security posture is generally strong with HTTPS and consent mechanisms, though some security headers are not evident, and no explicit incident response or vulnerability disclosure information is provided. The absence of WHOIS data for the domain is a notable anomaly that warrants further verification. Overall, the website and business appear credible and well-managed, serving a medium-sized enterprise audience primarily in Germany.

M

msg for banking ag

msgforbanking.de

54

msg for banking ag is a well-established company specializing in innovative, platform-based digital solutions and consulting services for the banking and financial sector. With over 100 years of experience and a strong market position as a leader in bank steering and regulatory reporting, the company serves financial institutions with a broad portfolio including risk management, compliance, payments, and digital transformation. The website reflects a professional and comprehensive digital presence aligned with its business objectives and target audience. Technically, the site is built on Joomla CMS with modern JavaScript libraries and includes robust cookie consent management, analytics, and marketing tools. Security posture is good with HTTPS and consent mechanisms, though some security headers could be improved. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact and business information.

L

Leibniz-Institut für Wissensmedien

e-teaching.org

64

e-teaching.org is a well-established, non-commercial educational portal operated by the Leibniz-Institut für Wissensmedien, providing scientifically grounded and practice-oriented information on digital media in higher education. The portal targets educators, students, and higher education professionals primarily in Germany, offering resources such as online events, blogs, podcasts, and thematic specials. The website demonstrates a consistent and professional brand presence with excellent content quality and user experience. Technically, the site is built on the Plone CMS platform, utilizing modern front-end technologies including Bootstrap Icons and Font Awesome. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding security headers and formal incident response documentation. The WHOIS data is unavailable due to a malformed query response, limiting domain registration trust analysis. Despite this, the website's affiliation with a reputable research institute and the presence of privacy and legal policies support its legitimacy. No blocking or WAF mechanisms were detected, allowing full content access. Overall, e-teaching.org is a credible and authoritative resource in the education sector with a solid technical foundation and good security practices. Enhancements in privacy consent mechanisms and security header implementation are recommended to further strengthen compliance and security posture.

M

msg systems ag

msg.group

68

msg systems ag is a large German enterprise specializing in IT services, digital transformation, and industry-specific consulting across sectors such as automotive, banking, insurance, public sector, and telecommunications. The company operates a comprehensive and professionally designed website with extensive service offerings and multiple subsidiaries, reflecting a mature market position. The technical infrastructure includes modern web technologies, consent management via Usercentrics, and Google Tag Manager for analytics, indicating a high level of digital maturity. Security posture is strong with HTTPS, security headers, and privacy compliance mechanisms in place, though explicit incident response contacts and vulnerability disclosure mechanisms are not publicly visible. Overall, the website is trustworthy, well-structured, and compliant with GDPR, serving a broad enterprise audience.

U

Upscore GmbH

upscore.com

61

Upscore GmbH is a German-based company specializing in content intelligence solutions for editorial teams and media brands. Their integrated platform combines real-time data, analytics, content recommendation, and dynamic paywall management to empower digital publishing workflows. The company targets media organizations seeking to optimize content performance and monetization through data-driven insights. Technically, the website is built on Orchard Core CMS with modern frontend technologies like Tailwind CSS and Alpine.js, hosted behind Cloudflare DNS services. The site is well-structured, mobile-optimized, and professionally designed, providing a good user experience. Security posture is solid with HTTPS and domain registration protections, though improvements are recommended in security headers and explicit incident response policies. Privacy compliance is partially met with a clear privacy policy but lacks cookie consent mechanisms. Overall, the domain registration and website content are consistent and trustworthy, reflecting a legitimate business with a long operational history.

C

Columbus McKinnon

cmco.com

72

Columbus McKinnon is a large, established manufacturer specializing in smart lifting and motion control solutions, serving industrial and commercial sectors globally. The website showcases a broad portfolio of trusted brands and extensive product categories, indicating a strong market position in manufacturing and transportation sectors. The digital infrastructure employs modern analytics and tracking tools, with good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some improvements in security headers and incident response transparency are recommended. The absence of WHOIS data raises concerns about domain registration legitimacy, which slightly impacts overall trust. Strategic recommendations include enhancing security headers, publishing incident response contacts, and clarifying domain registration details to improve credibility and compliance.

Kodex is a privacy and security engineering platform developed by KIProtect, a Berlin-based startup focused on open-source privacy and security solutions. The platform offers advanced pseudonymization and anonymization techniques embedded in a data engineering layer to help organizations securely process sensitive data. Kodex targets organizations involved in data engineering and data science that require compliance with privacy laws and robust data protection. The company has received multiple awards and maintains research partnerships with universities, positioning it as a credible player in the privacy technology niche. Technically, the website employs modern web technologies including Preact and Bulma CSS, hosted by Hetzner Online GmbH. The site is mobile-optimized with good navigation and content quality, though some improvements in accessibility and SEO could be made. No major performance issues were detected, and the site is fully accessible without WAF or security challenges. From a security perspective, the site lacks explicit security headers and a cookie consent mechanism, which are areas for improvement. WHOIS data is consistent and legitimate, with no privacy protection or suspicious patterns. No direct contact emails or phone numbers are provided, with contact primarily via a form. The platform demonstrates a good security posture but could enhance transparency and compliance features. Overall, Kodex presents a professional and trustworthy online presence with a solid foundation in privacy and security engineering. Strategic enhancements in security headers, privacy compliance, and contact transparency would further strengthen its market position and user trust.

The analyzed URL leads to a standard 404 error page indicating the requested document is not found on the server. The page content is minimal, multilingual, and provides no business or security-related information. The domain computercheck24.com is registered with IONOS SE since 2007, indicating a legitimate and established domain, but the specific URL analyzed is inactive or removed. No metadata, structured data, or contact information is present on the page, limiting the ability to assess business operations or security posture. The absence of HTTPS and security headers information further restricts security evaluation. Overall, the website content at this URL is inaccessible for meaningful analysis, resulting in a very low AI score and no detected privacy or compliance policies.

C

Columbus McKinnon

cmworks.com

72

Columbus McKinnon is a global enterprise specializing in smart lifting and motion control solutions, serving industrial and commercial sectors. Their website showcases a broad portfolio of trusted brands and products including hoists, crane systems, rigging equipment, and power technology. The company targets B2B customers requiring reliable material handling and motion control equipment. The website is professionally designed with good content quality, clear navigation, and mobile optimization, reflecting a mature digital presence. Technically, the site uses modern analytics and tracking tools such as Google Tag Manager and Azure Application Insights, combined with a cookie consent mechanism to ensure privacy compliance. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and explicit security policies suggests room for improvement. The WHOIS data is notably missing or unavailable, which raises concerns about domain transparency but does not detract from the overall legitimacy indicated by the website content and branding. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and clarifying domain registration details to improve trust and compliance.

M

MA Lighting International GmbH

malighting.com

72

MA Lighting International GmbH is a Germany-based company specializing in the manufacturing and worldwide distribution of advanced lighting control systems, including the renowned grandMA series. The company serves professional lighting industry users, distributors, and technical professionals globally, offering comprehensive product support, training, and software downloads. Their market position is that of an established leader in lighting technology with a strong global presence. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and integrating Google Tag Manager and Google Analytics for performance and user behavior insights. The site demonstrates good mobile optimization, accessibility, and SEO practices, providing a professional and user-friendly experience. From a security perspective, the site enforces HTTPS, uses secure login forms with CSRF protection, and implements a granular cookie consent mechanism. However, it lacks explicit security headers and a published security policy or incident response contacts, which are recommended for enhanced security posture. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. The risk level is low, with recommendations focusing on improving security headers and transparency around security policies to further strengthen trust and resilience.

E.ON Drive Germany GmbH is a leading enterprise in the energy and transportation sectors, specializing in electric mobility solutions for businesses. The company leverages the extensive infrastructure and expertise of its parent company, E.ON SE, to provide comprehensive charging solutions, smart logistics, and green energy tariffs. Their market position is strong in Europe, supported by a professional and well-structured website that targets commercial customers seeking sustainable mobility options. Technically, the website is built on Adobe Experience Manager, uses modern JavaScript modules, and integrates advanced consent management tools, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, employs reputable third-party services, and manages user privacy effectively, though some security headers could be enhanced. Overall, the site is trustworthy, professional, and compliant with GDPR, with no signs of blocking or malicious activity.

E.ON is a leading European energy company specializing in energy distribution networks, infrastructure solutions, and retail services. The company targets a broad audience including private customers, business clients, investors, and job seekers. Their market position is that of a large enterprise with a strong focus on sustainability and innovation. The website reflects a mature digital presence with modern technologies such as custom web components, Adobe Experience Manager CMS, and integrated consent management. Security posture is strong with HTTPS, security headers, and compliance frameworks like ISO 27001 evident. However, the absence of WHOIS data and a formal vulnerability disclosure policy slightly reduce trust. Overall, the site is professional, secure, and compliant, supporting E.ON's reputation as a trustworthy energy provider.

K

KIProtect GmbH

kiprotect.com

69

KIProtect GmbH is a German technology company specializing in software solutions and consulting services focused on data protection, data security, and privacy engineering. Founded in 2018, the company offers open source products such as Klaro! for cookie consent management and Kodex for privacy and security engineering. Their target audience includes businesses seeking to implement compliant and privacy-friendly data processing workflows. The website reflects a professional and consistent brand image with clear navigation and modern design. Technically, the website employs a modern frontend stack including React, Bootstrap, and jQuery, hosted on Hetzner Online GmbH with Cloudflare DNS services. The site is mobile optimized and performs moderately well, though accessibility and SEO could be improved. Security-wise, HTTPS is enforced and a cookie consent mechanism is implemented, but additional security headers and explicit security policies are absent. The security posture is solid but could be enhanced by enabling DNSSEC, publishing privacy and security policies, and implementing a vulnerability disclosure program. No critical vulnerabilities or suspicious content were detected. Overall, the website is trustworthy and professional, with room for improvement in privacy compliance documentation and security best practices. Strategic recommendations include adding comprehensive privacy and terms of service pages, enhancing security headers, enabling DNSSEC, and establishing an incident response and vulnerability disclosure policy to strengthen trust and compliance.

S

SEWOBE GmbH

sewobe.de

62

SEWOBE GmbH is a German-based technology company specializing in providing online software solutions for member organizations, such as associations and clubs. Their SaaS platform focuses on membership management and digital transformation, targeting German-speaking markets. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content tailored to their niche audience. The company maintains a consistent brand presence and offers multiple contact channels including email, phone, and contact forms. Privacy and cookie policies are comprehensive and GDPR-compliant, reflecting a mature approach to data protection. Technically, the website is built on WordPress with modern tools such as Yoast SEO, Google Tag Manager, and Facebook Pixel for analytics and marketing. Hosting appears to be with 1&1 IONOS, supported by stable DNS infrastructure. Performance is moderate with good mobile optimization and basic accessibility features. Security posture is strong with HTTPS enforced and multiple security headers present, although no explicit security policy or incident response information is published. No vulnerabilities or suspicious domains were detected. Overall, SEWOBE demonstrates a solid digital maturity with a secure and compliant web presence. The absence of a public security policy and vulnerability disclosure are areas for improvement. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. The website content is safe for general audiences and free from adult or questionable material.

S

SerNet GmbH

sernet.de

73

SerNet GmbH is a German-based IT security service provider specializing in secure infrastructures and information security compliance. The company offers a broad portfolio of products and services including next-generation firewalls, VPN solutions, endpoint and email security, domain services, virtualization, and network access control. Their business model focuses on delivering secure and legally compliant IT operations, emphasizing standards such as ISO 27001, NIS2, TISAX, and BSI IT-Grundschutz. The website reflects a professional and consistent brand image targeting businesses requiring secure IT infrastructure and compliance support. Technically, the website is built on TYPO3 CMS, employs Matomo for analytics, and uses modern web technologies including SVG graphics and Bootstrap components. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security best practices are observed with HTTPS enforcement and cookie consent mechanisms, although some security headers and incident response disclosures could be improved. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Compliance with GDPR and other standards is evident, supported by detailed privacy and cookie policies. However, the absence of a vulnerability disclosure policy and incident response contact are areas for enhancement. Overall, the domain and WHOIS data align with the company’s branding and operations, indicating legitimacy and trustworthiness. Strategically, SerNet is well-positioned in the IT security market with a clear focus on compliance and secure IT operations. The website supports their market presence effectively, though adding more explicit security and legal disclosures would further enhance trust and compliance visibility.

S

SerNet GmbH

verinice.com

77

verinice.com is the official website for verinice, a professional open-source Governance, Risk, and Compliance (GRC) software solution developed and maintained by SerNet GmbH. The company offers integrated management systems software supporting standards such as BSI IT-Grundschutz, ISO 27001, VDA ISA/TISAX, EU-DSGVO, and NIS2. The website targets public and private sector organizations, including critical infrastructures across Germany and Europe, positioning verinice as a unique open-source ISMS tool with licensed content and a strong market presence since 2007. The business model combines open-source software with professional services, support, and cloud hosting offerings.

S

SerNet GmbH

samba.plus

72

SerNet GmbH operates the SAMBA+ website, offering enterprise-grade Samba software packages and identity and access management solutions for Linux and IBM AIX platforms. The company targets enterprise customers, appliance vendors, and cloud service providers globally, providing software subscriptions, support, and consulting services. The website is professionally designed, well-structured, and provides comprehensive contact and policy information, reflecting a mature business presence. Technically, the website is built on TYPO3 CMS, uses modern web technologies including JavaScript and CSS, and integrates Matomo analytics for user tracking. The site is mobile-optimized and accessible, with good SEO practices. Security posture is strong with HTTPS enforced and CAPTCHA protection on forms, though explicit security headers and incident response policies are not published. The WHOIS data is privacy protected, which is common for software companies, and no suspicious patterns were detected. The domain is linked to SerNet GmbH, a reputable entity in the Samba ecosystem. Overall, the website demonstrates a solid security and compliance posture with room for improvement in publishing security policies and headers. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure information, and continuing to maintain GDPR compliance and transparent contact channels.

ResearchGate GmbH operates a leading academic social networking platform designed to facilitate collaboration and knowledge sharing among researchers and scientists worldwide. The platform offers services such as research paper sharing, academic networking, and collaboration tools, targeting primarily the scientific and academic community. Founded in 2008 and headquartered in Germany, ResearchGate has established itself as a significant player in the technology sector focused on research and education. Technically, the website is protected by Cloudflare's Web Application Firewall (WAF) and employs Turnstile CAPTCHA to mitigate unusual or suspicious traffic. This security measure, while effective for protection, currently blocks direct access to the website content, limiting the ability to fully assess the site's technical maturity, performance, and SEO optimization. The site uses modern web technologies including JavaScript, HTML5, and CSS3, but no CMS or specific frameworks are identifiable from the blocked content. From a security perspective, the presence of a Cloudflare WAF and CAPTCHA indicates a proactive approach to mitigating automated threats and abuse. However, the lack of visible security headers, privacy policies, cookie consent mechanisms, and contact information on the accessible page reduces transparency and user trust. Additionally, the absence of WHOIS data for the domain raises concerns about domain registration transparency, although the domain is widely recognized and associated with a reputable company. Overall, the website's risk assessment is moderate due to the blocking of content by security mechanisms and missing publicly accessible compliance and contact information. Strategic recommendations include improving accessibility beyond the WAF challenge for legitimate users, publishing clear privacy and cookie policies, enhancing security header implementation, and ensuring WHOIS data transparency to strengthen trust and compliance.

A

Anoxinon e.V.

anoxinon.de

67

Anoxinon e.V. is a small non-profit organization based in Germany dedicated to promoting data privacy and free software. The organization provides community-oriented digital services including a social network (Anoxinon Social), a blog focused on data security and free software (Anoxinon Media), and a privacy-friendly messaging service based on the Jabber/XMPP standard (Anoxinon Messenger). Their mission emphasizes fostering a collaborative and privacy-respecting digital world. The website is well-structured, primarily in German, and targets users interested in privacy, free software, and community-driven internet services. Technically, the website is built using the Hugo static site generator, leveraging Bootstrap for layout and Fork Awesome for icons. Hosting is provided by servercow, as indicated by the nameservers. The site is mobile-optimized with good SEO practices and moderate performance. No advanced CMS or complex frameworks are detected, reflecting a straightforward and maintainable technical infrastructure. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several security headers and does not provide explicit security or incident response policies. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks cookie consent mechanisms. No analytics or tracking scripts are detected, indicating a privacy-respecting approach. The absence of vulnerability disclosure or security.txt files suggests room for improvement in transparency and security maturity. Overall, Anoxinon e.V. presents a trustworthy and professional online presence consistent with its non-profit mission. The website is safe for general audiences, free of adult or questionable content, and demonstrates a solid foundation in privacy and community values. Strategic improvements in security headers, cookie consent, and incident response documentation would enhance their security posture and compliance standing.

I

Inxmail GmbH

inxmail.com

46

Inxmail GmbH operates a professional email marketing platform focused on delivering newsletters, automated campaigns, transactional emails, and SMTP mail relay services. The company targets businesses seeking GDPR-compliant, secure, and efficient email marketing solutions. Their platform supports integrations with CRM, CMS, and e-commerce systems, and offers marketing automation with visual workflows. The website reflects a mature digital presence with a modern TYPO3 CMS infrastructure, consent management, and tracking tools integrated for analytics and compliance. Security posture is strong, supported by ISO 27001 certification and adherence to GDPR standards, with no visible vulnerabilities or exposed sensitive data. Overall, Inxmail presents a trustworthy and professional brand with a solid market position in the technology and e-commerce sectors.

G

GlaxoSmithKline GmbH & Co. KG

gskpro.com

72

GSKpro.de is a professional portal operated by GlaxoSmithKline GmbH & Co. KG, targeting medical professionals in Germany. The website provides comprehensive product information, therapy area overviews, event registrations, and service content related to GSK's pharmaceutical and vaccine products. It serves as a B2B platform supporting healthcare providers with up-to-date information and educational resources. The site is well-branded, consistent with GSK's corporate identity, and integrates multiple partner portals specialized in niche medical topics.

N

NeoNephos Foundation

neonephos.org

62

NeoNephos Foundation is a recently established open source foundation under Linux Foundation Europe, focused on advancing cloud native sovereignty aligned with the EU's IPCEI-CIS strategic objectives. The foundation fosters collaboration among members, contributors, and end users to drive open source projects that support digital sovereignty in Europe. The website reflects a professional and consistent brand presence with clear navigation and relevant content for its target audience of cloud native enthusiasts and stakeholders. Technically, the website is built using modern static site generation technology (VitePress) with JavaScript modules and integrates HubSpot forms for community engagement. The site is mobile optimized, fast loading, and accessible, with good SEO practices. DNS is managed via DNSimple, though DNSSEC is not enabled, representing a minor security gap. The site uses HTTPS with a valid SSL configuration. From a security perspective, the website enforces HTTPS and has domain transfer protections but lacks explicit security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy linked via the parent organization but no cookie consent mechanism present. Contact information is limited to a web form without direct emails or phone numbers. Overall, the website presents a low-risk profile with good business credibility and technical maturity. Strategic recommendations include enabling DNSSEC, adding security headers, publishing security and incident response policies, and implementing cookie consent to improve privacy compliance and security posture.

V

Verband der Heilklimatischen Kurorte Deutschlands e.V.

heilklima.de

63

The website heilklima.de represents the Verband der Heilklimatischen Kurorte Deutschlands e.V., a non-profit association promoting health resorts with therapeutic climate benefits across Germany. It provides detailed information about member resorts, premium health resorts, and related tourism services. The site targets tourists and visitors seeking wellness and health-focused vacations in Germany. Technically, the website is built using the sitely.app CMS platform, employs modern HTML5 and CSS3 standards, and integrates Google Analytics with consent-based activation. The site is mobile-optimized and offers good user experience and navigation clarity. Security-wise, the site uses HTTPS but lacks explicit security headers and detailed privacy or cookie policies, which are areas for improvement. No vulnerabilities or suspicious content were detected, and the domain registration aligns well with the business purpose, indicating legitimacy. Overall, the website is professional and trustworthy but could enhance privacy compliance and security posture.

E

ERPNext Deutschland

erpnext-deutschland.org

48

ERPNext Deutschland is a small technology-focused business providing a modern, open source ERP system tailored for companies in the German-speaking region. The website promotes ERPNext as a comprehensive, customizable, and mobile-friendly ERP solution supported by an active community. Technically, the site is built on WordPress with the Divi theme, hosted with a reputable German registrar and using Cloudflare DNS. The site is accessible, well-designed, and mobile optimized, though it lacks privacy and cookie policies and explicit contact information. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

EUROBAUSTOFF Handelsgesellschaft mbH & Co. KG operates a comprehensive cooperation platform for the building materials trade sector in Germany. The company provides a wide range of services including procurement, logistics, marketing, finance, personnel management, and IT services to its members and partners. The website reflects a mature digital presence with detailed service descriptions, partner links, and a professional design consistent with a large enterprise in the retail and manufacturing sectors. The company holds recognized industry awards such as the Plus X Award, reinforcing its market position. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and includes mobile optimization, accessibility features, and SEO best practices. The site uses HTTPS with good security headers and implements cookie consent mechanisms, indicating a solid privacy compliance posture. However, explicit security policies and incident response contacts are not found, which could be improved. Security-wise, the site shows good practices with secure forms and no obvious vulnerabilities. The absence of WHOIS data is a notable anomaly, possibly due to privacy protection or registrar issues, which slightly impacts trust but does not detract from the overall legitimacy based on content and external references. Overall, the website is professional, secure, and compliant with privacy regulations, serving a clear business purpose with a strong brand presence. Strategic recommendations include publishing explicit security policies, incident response contacts, and vulnerability disclosure information to enhance trust and security transparency.

I

Infokom GmbH

infokom.info

47

Infokom GmbH is a medium-sized German IT company specializing in software and digital solutions for the building materials trade sector. With over 40 years of experience, they provide modular ERP systems, financial accounting, document management, and cloud telephony services, integrated closely with the EUROBAUSTOFF cooperative. Their website demonstrates a professional digital presence built on TYPO3 CMS, with good SEO and mobile optimization. Security practices include HTTPS and cookie consent with Matomo analytics, though formal security and incident response policies are not publicly documented. Overall, the company presents a credible and trustworthy profile with comprehensive contact information and clear business focus.

I

i&M Bauzentrum

i-m.de

46

i&M Bauzentrum is a well-established Fachhandelsmarke (specialist retail brand) under the EUROBAUSTOFF group, serving the German building materials market with over 130 locations. The company focuses on providing high-quality building materials, expert advice, and comprehensive services to both private customers and professional builders. Their digital presence is powered by TYPO3 CMS with a modern Bootstrap-based design, offering good mobile optimization and user experience. The website includes multimedia content and a cookie consent mechanism aligned with GDPR requirements. Security posture is adequate with HTTPS and cookie management, but lacks some advanced HTTP security headers. No direct contact details are visible on the homepage, but social media channels are active. Overall, the site reflects a professional retail business with strong market positioning in Germany.

H

Hochwasser-Ratgeber

hochwasser-ratgeber.de

32

Hochwasser-Ratgeber is a German-language informational website focused on flood preparedness and building materials, serving homeowners and professionals in Germany. It acts as a partner platform for the Eurobaustoff Fachhändler network, providing comprehensive guidance on flood risk, prevention, and damage mitigation. The site offers key services such as flood preparedness advice, specialist dealer search, and educational content. Technically, the website is built on TYPO3 CMS with a modern tech stack including jQuery, FontAwesome, Google Fonts, and integrates Matomo analytics and Echobot marketing widgets. The site demonstrates good mobile optimization, clear navigation, and solid SEO practices. Security-wise, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR, but lacks explicit security headers and documented security policies or incident response contacts. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could improve its security posture and transparency. The domain WHOIS data is limited but shows no suspicious indicators, supporting the site's legitimacy.

O

OPUS1

opus-1.eu

48

OPUS1 is a German-based company specializing in innovative paint and coating products for both interior and exterior applications. The website presents a professional image with a focus on quality products such as interior paints, facade paints, and lacquers, targeting DIY enthusiasts and professional painters. The company leverages a modern TYPO3 CMS platform with Bootstrap for responsive design, ensuring a good user experience across devices. The presence of a cookie consent mechanism and use of privacy-respecting Matomo analytics indicate a commitment to privacy compliance. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and explicit policies could enhance trust further. Overall, the website is well-structured, content-rich, and trustworthy, reflecting a medium-sized retail business in the home improvement sector.

E

EUROBAUSTOFF Handelsgesellschaft mbH & Co. KG

cerabella.de

44

Cerabella is a German-based retailer specializing in high-quality ceramic tiles and related accessories, operating under the EUROBAUSTOFF Handelsgesellschaft mbH & Co. KG umbrella. The company targets both retail customers and professional tile buyers, offering a broad product range including floor and wall tiles, mosaics, and tile accessories. The website reflects a well-structured and professionally designed digital presence, leveraging TYPO3 CMS and Bootstrap frameworks, with moderate performance and good mobile optimization. Matomo analytics is used for user tracking with a compliant cookie consent mechanism in place. Security posture is adequate but could be improved by implementing standard security headers and publishing explicit security policies. Contact information and company details are clearly presented, enhancing business credibility. No critical vulnerabilities or suspicious content were detected, and the site is fully accessible without WAF or blocking mechanisms.

F

FULLHAUS GmbH

gartenkatalog.com

55

The website www.gartenkatalog.com is a professionally designed German-language platform operated by FULLHAUS GmbH, offering a free garden catalog for the 2025 season. It targets homeowners and garden enthusiasts in Germany, providing inspiration and connecting users with EUROBAUSTOFF Fachhändler, a cooperative of specialist dealers in house and garden products. The business model centers on catalog distribution and lead generation for these dealers. Technically, the site is built on TYPO3 CMS, employs Usercentrics for consent management, and uses Matomo for analytics, indicating a modern and privacy-conscious infrastructure. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. The absence of WHOIS registration data is a notable anomaly, reducing domain trustworthiness despite the professional presentation and GDPR compliance. Overall, the site is functional, trustworthy in content, but would benefit from improved transparency in domain registration and enhanced security practices.

S

SerNet GmbH

sambaxp.org

71

The website sambaxp.org represents the official platform for the sambaXP conference, an established international event dedicated to the Samba open source software ecosystem. Organized by SerNet GmbH, the site provides comprehensive information about the upcoming 25th conference scheduled for April 2026, targeting developers, IT professionals, and businesses involved with Samba. The business model centers on event organization and community engagement, supported by reputable sponsors such as Microsoft. The site is well-branded, professionally designed, and content-rich, reflecting a mature and trusted presence in the technology conference space. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and includes responsive design elements for mobile optimization. Performance is moderate with good SEO and accessibility basics. The site employs HTTPS with a secure SSL configuration, though DNSSEC is not enabled. Cookie consent mechanisms and a comprehensive privacy policy linked to SerNet's data protection declaration demonstrate good privacy compliance. Analytics are handled via Matomo, indicating a preference for privacy-respecting tracking. From a security perspective, the site shows solid fundamentals with HTTPS enforcement and domain transfer protection. However, it lacks advanced security headers and published security or incident response policies. No vulnerability disclosure or security.txt files are present. WHOIS data confirms domain longevity and legitimacy, supporting trustworthiness. Overall, the site scores well on content quality, business credibility, and privacy compliance, with room for improvement in security posture. Strategically, the site should consider enabling DNSSEC, implementing security headers, and publishing formal security policies to enhance trust and resilience. Maintaining transparent privacy practices and expanding incident response readiness will further strengthen its security culture and compliance posture.

S

Sovereign Tech Agency

sovereign.tech

67

Sovereign Tech Agency is a German-based organization focused on securing and investing in open digital infrastructure critical for the 21st century economy and society. Their market position is that of a strategic investor and supporter of open source ecosystems, targeting startups, SMEs, and the broader digital infrastructure community in Germany and Europe. The website presents a professional and modern technical infrastructure using modern JavaScript modules, SVG graphics, and privacy-respecting analytics (Fathom). Security posture is strong with HTTPS and security headers implemented, though explicit privacy and cookie policies are missing. No forms or direct contact information are provided on the main site, limiting direct user engagement. Overall, the site is trustworthy and well-designed but could improve privacy compliance and contact transparency.

S

Scholl Communications AG

scholl.de

35

Scholl Communications AG is a German software manufacturer and web service provider specializing in the Weblication® CMS platform. With over 37 years in the market, the company serves a broad range of business customers including corporations, medium-sized enterprises, and agencies. Their key offerings include CMS software, web development services, and technology partnerships. The website reflects a professional and consistent brand presence targeting German-speaking business clients. Technically, the site is built on their proprietary CMS and uses modern web standards with responsive design, though performance is moderate and accessibility is basic. Security posture is limited due to lack of visible security headers and policies, and privacy compliance is weak as no privacy or cookie policies are found. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims.

S

Scholl Communications AG

weblication.de

38

Weblication® CMS, developed by Scholl Communications AG, is a well-established XML-based content management system with a significant customer base and specialized products targeting web agencies, enterprises, and municipalities. The website presents a professional image with detailed product offerings and a bug bounty program indicating a commitment to security. Technically, the site uses a proprietary CMS platform with modern web technologies and demonstrates good mobile optimization and accessibility. However, the absence of explicit privacy and cookie policies, security headers, and incident response contacts indicates areas for improvement in compliance and security transparency. Overall, the website is credible and functional but would benefit from enhanced privacy and security disclosures to align with best practices.

EUROBAUSTOFF Handelsgesellschaft mbH & Co. KG operates a cooperative network serving the building materials retail sector in Germany. The company provides a broad range of services including procurement, logistics, marketing, finance, personnel management, and IT support to its members. It holds a strong market position as a leading cooperation in the German building materials trade, supported by recognized awards such as the Plus X Award and a robust partner ecosystem including subsidiaries like i&M Bauzentrum. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and delivering a professional, mobile-optimized user experience. The site demonstrates good SEO and accessibility practices, with a moderate performance profile. Privacy compliance is well addressed through comprehensive privacy and cookie policies, including consent mechanisms. From a security perspective, the website enforces HTTPS and implements standard security headers, though explicit security and incident response policies are not publicly available. No vulnerabilities or exposed sensitive data were detected. However, the WHOIS data for the domain is missing or inaccessible, which raises concerns about domain registration transparency and trustworthiness. Overall, the website presents a professional and trustworthy front for the business, but the lack of WHOIS data and explicit security policies suggest areas for improvement in transparency and security governance.

H

Hetzner Online GmbH

hetzner.com

71

Hetzner Online GmbH is a well-established German hosting provider offering a wide range of services including dedicated servers, cloud hosting, web hosting, managed servers, colocation, and storage solutions. The company emphasizes GDPR compliance and sustainability by using 100% green energy. Their market position is strong in Europe, supported by multiple industry awards and a professional online presence. The website is designed with excellent usability, mobile responsiveness, and clear navigation, targeting businesses and individuals seeking reliable hosting services. Technically, the site uses modern frameworks such as Bootstrap and SilverStripe CMS, with Matomo analytics integrated respecting user privacy through consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers are not detected in the HTML content. The absence of WHOIS domain registration data is a notable anomaly, but the overall trustworthiness remains high due to consistent branding and transparency in legal and privacy policies.

H

Hetzner Online GmbH

hetzner.de

69

Hetzner Online GmbH operates a professional and comprehensive hosting and cloud services website primarily targeting German and European customers. The company offers a wide range of IT infrastructure services including dedicated servers, cloud servers, web hosting, managed servers, colocation, and storage solutions. The website is well-designed, mobile-optimized, and provides clear navigation and pricing information. The presence of multiple industry awards and a strong brand identity positions Hetzner as a reputable player in the European hosting market. Technically, the website leverages modern web technologies including Bootstrap and SilverStripe CMS, with privacy-conscious analytics via Matomo. The site is fast, accessible, and SEO-optimized. Security practices include HTTPS enforcement and cookie consent mechanisms, although explicit HTTP security headers are not evident in the provided data. The company maintains comprehensive legal and privacy policies, demonstrating GDPR compliance and providing abuse contact channels. The WHOIS data for the domain www.hetzner.com is incomplete or unavailable, which is unusual for a major provider but may be due to querying the subdomain or registry issues. Despite this, the website content and external signals strongly indicate legitimacy. Overall, Hetzner Online GmbH presents a mature digital presence with solid security and privacy postures, suitable for business customers seeking reliable hosting services.

K

Kur- und Bäder GmbH Bad Dürrheim

solemar.de

47

Kur- und Bäder GmbH Bad Dürrheim operates the Solemar wellness and spa center located in Bad Dürrheim, Germany. The website presents a professional and comprehensive digital presence showcasing their wellness services including the Sole-Therme, Schwarzwald-Sauna, Totes-Meer-Salzgrotte, and WellnessCenter. The company targets general wellness and spa visitors, positioning itself as a regional leader in hospitality and health tourism. The site includes detailed information on services, events, and visitor information, supported by certifications such as ISO 9001 and Wellness Stars, enhancing trust and credibility. Technically, the website is built on WordPress with modern plugins for SEO (Yoast), cookie consent (Borlabs Cookie), and user experience enhancements. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Hosting is via a commercial provider consistent with the domain's WHOIS data. Privacy compliance is well addressed with clear policies and consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the site lacks explicit security policies or incident response contacts, which could be improved. No WAF or blocking mechanisms are detected, allowing full content access. Overall, the site is trustworthy, professional, and compliant with relevant regulations. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen security and compliance posture.

N

nupian GmbH

unser-ferienprogramm.de

50

Unser-ferienprogramm.de is an online platform operated by nupian GmbH that facilitates the organization and booking of holiday programs primarily targeting parents, municipalities, clubs, and event organizers in Germany. The platform offers centralized management of holiday programs, participant data, and registrations, positioning itself as a niche service provider in the education sector. The website is professionally designed with a clear focus on usability and accessibility for its target audience. Technically, the website employs standard web technologies such as Bootstrap and jQuery, hosted via INWX nameservers, indicating a stable and reliable infrastructure. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security practices include HTTPS enforcement and secure form handling, but lack advanced security headers and cookie consent mechanisms, which are recommended for compliance and enhanced protection. From a security perspective, the website shows a good baseline posture with no visible vulnerabilities or exposed sensitive data. However, the absence of security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in security maturity. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, the website is trustworthy and professionally maintained, with recommendations focusing on enhancing privacy compliance, security headers, and transparency to strengthen user trust and regulatory adherence.

cEasy Steffen Hemberger is a small German technology business specializing in Content Management Systems (CMS). The website presents a basic but relevant description of its CMS offerings, targeting small to medium businesses or individuals seeking CMS solutions. The market position appears niche and local, with limited digital maturity evident from the website's minimal content and basic technical implementation. The technical infrastructure relies on standard web technologies such as HTML, CSS, JavaScript, and jQuery, with Cloudflare providing DNS services. However, there is no evidence of advanced CMS platforms or frameworks, and performance and mobile optimization are basic. Security posture is limited, with no detected HTTPS enforcement, security headers, or incident response policies. Privacy compliance is minimal, with a privacy policy page present but no cookie consent mechanism. Overall, the website is functional but lacks modern security and privacy best practices, which could impact trust and compliance.

H

hitcom gmbh

hitcom.de

64

hitcom gmbh is a well-established digital agency and software house based in Germany, specializing in digital transformation solutions for municipalities, local governments, and energy providers. With over 28 years of experience, the company offers a comprehensive portfolio including websites, intranets, apps, AI-driven platforms, and government branding services. Their flagship software, disgovery, is designed to enhance online citizen services and streamline communication between administrations and citizens. The company holds multiple industry awards and certifications, reinforcing its market leadership in the public sector digitalization space. Technically, the website is built on the cEasy CMS platform and leverages modern web technologies such as lazy loading, SVG graphics, and responsive design to ensure excellent performance and user experience across devices. Analytics are implemented via Google Analytics and Matomo, with a clear cookie consent mechanism in place, demonstrating a commitment to privacy compliance. Hosting is managed through DomainControl, a reputable provider, ensuring reliable infrastructure. From a security perspective, the site enforces HTTPS and employs cookie consent banners, but lacks explicit security policy documentation and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The overall security posture is strong but could be enhanced by adding security headers and formalizing incident response information. Overall, hitcom gmbh presents a professional, trustworthy, and technically sound online presence aligned with its business focus. The website is well-structured, content-rich, and compliant with GDPR requirements, making it a reliable digital partner for public sector clients.

L

Lufthansa Group

lufthansagroup.careers

65

The Lufthansa Group Careers website serves as a professional portal for employment opportunities within the Lufthansa Group, a major global aviation company headquartered in Germany. The site presents a clear business focus on connecting talent with diverse aviation-related career paths. The content is primarily in German, with structured data and Open Graph metadata supporting SEO and social sharing. The technical infrastructure is modern, leveraging Angular 15 with server-side rendering, ensuring a responsive and performant user experience. However, the site lacks visible privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security headers and SSL configuration details are not available from the provided data, indicating potential areas for improvement in security posture. Overall, the domain appears legitimate and consistent with the Lufthansa brand, though WHOIS data is privacy protected, which is typical for large enterprises. The site is safe for general audiences and does not contain any adult or questionable content.

L

Lufthansa Technik

lufthansa-technik.com

70

Lufthansa Technik is a leading aviation technology company based in Germany, specializing in comprehensive aircraft maintenance, repair, overhaul, and modification services globally. The company serves a broad customer base including airlines, lessors, governments, and private jet owners, positioning itself as a premier independent MRO provider with a strong market presence and extensive service portfolio. The website reflects a mature digital infrastructure using modern CMS and search technologies, with good mobile optimization and user experience. Privacy compliance is robust, featuring a consent management platform and clear privacy policies. Security posture is solid with HTTPS and no exposed sensitive data, though explicit security headers and published incident response policies are absent. The absence of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy, but the strong branding and parent company association mitigate concerns. Overall, the site is professional, trustworthy, and well-structured, supporting Lufthansa Technik's market leadership in aviation services.

Lufthansa Cargo operates a comprehensive and professionally designed website serving as a global air freight expert platform. The site offers extensive eServices such as booking, tracking, and freight management, targeting business customers worldwide. The technical infrastructure is built on a modern Liferay CMS platform with React and AlloyUI components, enhanced by consent management and tag management tools to ensure privacy compliance. Security posture is strong with HTTPS enforcement, nonce-based script security, and form validation, although explicit security policies and incident response details are not publicly disclosed. Overall, the website reflects a mature digital presence consistent with a leading enterprise in the transportation sector.

B

bioC

bioc.info

57

bioC operates a specialized online platform providing certification status information for over 130,000 organic suppliers and their products. The website serves as a trusted resource for operators, certification bodies, and consumers interested in organic certification. It is supported by numerous certification bodies and government agricultural departments, positioning it as a reputable player in the organic certification ecosystem. The platform offers search functionality, lists of operators, and detailed certification information, catering primarily to the organic product sector in Germany and other countries. Technically, the website uses a custom Blitz.Bioc package, jQuery 1.11.3, and etracker analytics, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enforced and secure form handling, but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a privacy policy and cookie consent banner present. Overall, the site is professional, trustworthy, and safe for general audiences.

M

Messe Düsseldorf GmbH

compamed-tradefair.com

63

COMPAMED Trade Fair is a leading international event focused on high-tech solutions for the medical technology supplier sector, organized by Messe Düsseldorf GmbH. The website serves as a comprehensive platform for exhibitors and visitors, providing detailed information about the event, participation, services, and program. The business is well-positioned in the healthcare and technology sectors, targeting medical suppliers and product developers globally. The site demonstrates a professional digital presence with good content quality and user experience.

V

Virtual Minds GmbH

theadex.com

56

Virtual Minds GmbH is a well-established European adtech company specializing in programmatic advertising solutions for publishers, broadcasters, agencies, and advertisers. As a 100% subsidiary of ProSiebenSat.1 Media SE, it holds a strong market position with a modular full-stack offering comprising multiple technology brands. The company targets B2B clients in the digital advertising ecosystem, providing enterprise marketing platforms, DSPs, SSPs, data management, and media management solutions. The website reflects a professional and consistent brand image with good content quality and clear messaging. Technically, the site is built on WordPress with Elementor, leveraging modern JavaScript libraries and integrating third-party marketing and analytics tools such as HubSpot and Piwik PRO. The presence of a comprehensive cookie consent mechanism demonstrates GDPR compliance and privacy awareness. Security posture is solid with HTTPS enforced and domain registration protections, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected, and the domain registration details align well with the business claims, supporting legitimacy. Overall, the website is a credible digital presence for a medium-sized enterprise in the adtech industry.

E

EUREF-Event GmbH

euref-event.de

59

EUREF-Event GmbH operates sustainable and climate-neutral event locations primarily on the EUREF campuses in Berlin and Düsseldorf. The company targets event organizers and businesses focused on sustainability, offering innovative venues aligned with climate goals. The website is built on a modern WordPress infrastructure using Elementor and integrates privacy-compliant cookie consent and analytics via Matomo. Security posture is strong with HTTPS and privacy mechanisms in place, though explicit security policies and incident response contacts are absent. Overall, the site presents a professional and trustworthy digital presence with room for enhanced security documentation and direct contact information.