Germany security reports

V

Vectron Systems AG

bonvito.net

67

bonVito is a German-based multichannel marketing platform operated by Vectron Systems AG, specializing in customer loyalty, e-payment, online table reservations, and live reporting solutions primarily for retail and hospitality sectors. The platform integrates with Vectron's POS systems, offering a comprehensive suite of marketing tools such as coupons, digital stamp cards, and direct discounts. The website is professionally designed, mobile-optimized, and provides a clear navigation structure, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS and leverages modern marketing and analytics technologies including Google Tag Manager, Facebook Pixel, and Cookiebot for GDPR-compliant cookie consent management. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though the absence of explicit security headers and vulnerability disclosure mechanisms suggests room for improvement. The WHOIS data is notably absent, raising concerns about domain registration transparency, but the overall business credibility is supported by the professional website and parent company association. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing clearer contact and legal information to strengthen trust and compliance.

H

handfest

handfest-online.de

55

handfest-online.de is a German online magazine dedicated to careers and education in the skilled trades sector. It provides comprehensive information on various trades, training, internships, and career advancement opportunities. The site targets young people interested in skilled trades, as well as parents, teachers, and career advisors. The business operates as a niche educational media platform with a focus on the German market. Technically, the website is built on WordPress using popular plugins such as Yoast SEO and WPBakery Page Builder, hosted by netcup. It employs Matomo analytics for privacy-conscious user tracking and implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Contact is available via a dedicated contact page, but no direct emails or phone numbers are published in the HTML. Overall, the site is professional, well-structured, and trustworthy.

H

Handwerkskammer Lübeck

hwk-luebeck.de

58

Handwerkskammer Lübeck is a regional government chamber serving the handcraft sector in Lübeck and Schleswig-Holstein, Germany. The organization provides comprehensive services including vocational training, further education, business start-up consulting, and business management support. The website reflects a well-established institution with a strong regional presence and a clear focus on supporting entrepreneurs, apprentices, and the wider handcraft community. The site is professionally designed, content-rich, and targets multiple audiences such as entrepreneurs, youth, and lifelong learners. Technically, the website is built on the Neos CMS platform using the Flow PHP framework and Bootstrap for responsive design. It employs modern web technologies and integrates accessibility tools like eyeAble. Hosting is provided by rzone.de, with secure HTTPS enforced and cookie consent mechanisms in place. The site demonstrates good SEO and accessibility practices, with structured data and social media integration enhancing its digital maturity. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks explicit security policy pages or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the organization's identity, confirming legitimacy. Overall, the website presents a secure and trustworthy digital presence suitable for a government-affiliated institution. The overall risk is low, with recommendations to enhance transparency around security policies and incident response. Strategic improvements could include publishing a security policy, adding vulnerability disclosure information, and implementing additional security headers to further harden the site.

P

Praktikum Westküste

praktikum-westkueste.de

47

Praktikum Westküste operates as a regional internship network platform focused on connecting students, pupils, and young people with internship opportunities in the Westküste region of Germany, including Nordfriesland, Dithmarschen, Steinburg, and Pinneberg. The platform hosts thousands of internship offers from over two thousand registered companies, positioning itself as a key regional player in educational and vocational placement services. The website is designed to serve both the internship seekers and companies looking to fill internship positions, with specialized offerings for various voluntary service programs such as FSJ, FÖJ, FKJ, and Bundesfreiwilligendienst. Technically, the website is built on the Contao Open Source CMS and leverages modern web technologies including jQuery, the Foundation framework, and FontAwesome for UI elements. It integrates Matomo Analytics for privacy-conscious visitor tracking and implements GDPR-compliant cookie consent mechanisms. The site demonstrates good mobile optimization and accessibility basics, with a clear navigation structure and professional design quality. However, some security headers are not explicitly detected, and no dedicated security or incident response policies are publicly available. From a security perspective, the site enforces HTTPS and uses cookie consent banners aligned with GDPR requirements. The use of Matomo Analytics with DoNotTrack enabled reflects a privacy-aware approach. No critical vulnerabilities or exposed sensitive data were identified in the HTML content. The WHOIS data is consistent with the website's regional focus and shows no privacy protection or suspicious registration patterns, supporting the platform's legitimacy. Overall, Praktikum Westküste presents a trustworthy, well-maintained regional educational platform with solid privacy compliance and a moderate security posture. Strategic improvements could include enhancing security headers, publishing explicit security policies, and providing clearer contact information for incident response. These steps would further strengthen trust and compliance in the evolving regulatory landscape.

K

Kreis Dithmarschen

dithmarschen.de

58

Kreis Dithmarschen operates as a regional government authority in Germany, providing local government information and public services to residents and visitors. The website is built on TYPO3 CMS, a robust open-source content management system, and integrates modern tools such as Cookiebot for cookie consent management and digiAccess for accessibility enhancements. Multi-language support is provided via Google Translate, catering to a broader audience. The site demonstrates good content quality, professional design, and clear navigation, aligning with its government service mission. Security posture is adequate with HTTPS enforced and consent mechanisms in place, though there is room for improvement in security headers and explicit privacy documentation. Overall, the domain registration and hosting details are consistent with an official government entity, supporting the site's legitimacy.

HanseWerk AG is a large regional energy service provider based in Germany, offering a broad portfolio of energy and telecommunications services to households, businesses, and municipalities. The company operates multiple subsidiaries and focuses on electricity, gas, heating solutions, and emerging technologies such as electric vehicle charging. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service information. Technically, the site uses modern frameworks like React and integrates consent management and analytics tools, indicating a good level of digital maturity. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security policies and incident response information are not publicly available. The absence of WHOIS data reduces trust signals but does not negate the legitimacy indicated by the website content. Overall, the site is professional, compliant with GDPR, and suitable for its target audience.

F

Fachhochschule Westküste

fh-westkueste.de

46

Fachhochschule Westküste is a regional university of applied sciences in Germany specializing in business and technology education with a strong emphasis on sustainability and applied research. The institution serves students, academic partners, and regional businesses, offering degree programs, research initiatives, and student services including international exchange programs. The website is professionally designed using TYPO3 CMS, hosted likely by the University of Kiel, and integrates modern privacy and analytics tools such as Usercentrics CMP and self-hosted Matomo analytics. Security posture is solid with HTTPS enforced and secure form handling, though some security headers could be improved. Overall, the site reflects a trustworthy and credible educational institution with good digital maturity.

T

Torst Elektrotechnik GmbH

torst.de

53

Torst Elektrotechnik GmbH is a German-based electrical engineering company specializing in electrical installations, smart home solutions, and photovoltaic systems. The company targets both business and private customers seeking energy and electrical services. The website is built on Joomla CMS using the Helix Ultimate template framework, hosted on Strato servers, and employs modern web technologies including Bootstrap and jQuery. Usercentrics is used for cookie consent, indicating attention to privacy compliance. Security posture is solid with HTTPS enabled and CSRF protections in place, though the absence of security headers and explicit privacy policies suggests room for improvement. Overall, the website is professional, well-structured, and trustworthy, with no signs of malicious or adult content.

S

Schröder Elektrotechnik

schroederelektrotechnik.de

55

Schröder Elektrotechnik is a regional electrical services company operating primarily in Rellingen, Holstein, and Hamburg, Germany. The company offers services including lighting, electrical installations, household appliances, and environmental technology catering to both private and commercial clients. The website reflects a small-sized local business with a clear focus on its target audience and service offerings. The digital infrastructure is built on WordPress CMS, utilizing modern technologies such as Bootstrap, jQuery, and FontAwesome, complemented by plugins for cookie consent and portfolio management. The site is optimized for mobile devices and demonstrates good SEO practices. Security posture is solid with HTTPS enforced, standard security headers present, and no exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. However, the site lacks explicit terms of service and security policy pages, and contact information is limited to an email address and contact form without phone or physical address details. Overall, the website presents a professional and trustworthy digital presence for a local electrical services provider.

S

SLEZAK Elektroanlagen GmbH

slezak.de

43

SLEZAK Elektroanlagen GmbH is a well-established German family-owned company specializing in electrical installations, switch cabinet construction, and industrial electrical services. Founded in 1987, the company operates with approximately 35 employees including apprentices, serving residential, commercial, and industrial clients. Their website reflects a professional and consistent brand image, highlighting their certifications and commitment to training the next generation of electricians. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and FontAwesome, optimized for mobile devices and SEO via the Yoast plugin. Hosting appears to be managed through a German provider consistent with the company's location. The site uses HTTPS and includes privacy consent mechanisms on its contact form, though lacks a cookie consent banner and explicit security headers. From a security perspective, the site demonstrates good practices such as encrypted connections and user consent for data collection, but could improve by implementing additional security headers and publishing incident response policies. No vulnerabilities or suspicious activities were detected. The domain registration data aligns well with the business claims, supporting legitimacy. Overall, the website presents a trustworthy and professional digital presence with room for enhancement in security policies and privacy compliance. Strategic improvements in these areas would strengthen the company's risk posture and customer trust.

T

Tritón Pardubice, spol. s r. o.

triton-racks.de

46

Tritón Pardubice, spol. s r. o. is a medium-sized manufacturing company founded in 1993 in Pardubice, Czech Republic, specializing in data cabinets, data center equipment, and locker room furnishings. The company has a strong regional presence and offers technical assistance and a configurator tool on its website. The website targets German-speaking customers and maintains a professional online presence with comprehensive product information and downloadable resources. Technically, the site is built on WordPress with Elementor, uses modern web technologies, and implements GDPR-compliant privacy and cookie policies. Security posture is good with HTTPS and cookie consent but could be improved with additional security headers and incident response information. Overall, the website is trustworthy, well-structured, and suitable for its industrial B2B audience.

S

STEINEL

steinel.de

60

STEINEL is a German manufacturing company specializing in sensor and lighting technology. The website presents a professional and consistent brand image focused on industrial and commercial customers. The technical infrastructure includes modern JavaScript tracking tools such as Google Tag Manager, hosted on German Telekom servers, indicating a stable hosting environment. However, the website lacks visible privacy and cookie policies, security policies, and contact information, which are critical for compliance and user trust. Security posture is minimal with no detected security headers or vulnerability disclosures. Overall, the website is functional and professional but requires improvements in privacy compliance and security transparency to enhance trust and regulatory adherence.

S

Solar Fabrik

solar-fabrik.de

53

Solar Fabrik is a German-based company specializing in high-quality solar modules and sustainable photovoltaic solutions targeting both private and commercial customers. The company positions itself as a reliable partner in the renewable energy sector, emphasizing quality and sustainability. The website is professionally built on WordPress using the Divi theme, incorporating modern technologies such as Usercentrics for cookie consent and analytics tools like Google Analytics 4 and Facebook Pixel. The technical infrastructure is solid, hosted likely by 1&1 IONOS, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and cookie consent implemented, though explicit security policies and vulnerability disclosures are absent. Overall, the website reflects a trustworthy and professional business presence with room for improvement in privacy and security transparency.

S

Signify Holding

signify.com

67

Signify Holding operates as a global leader in connected LED lighting products, systems, and services, serving both business and private customers. The company maintains a strong market position with a comprehensive portfolio including well-known brands such as Philips and Interact. The website reflects a mature digital presence with professional design, clear navigation, and targeted content for various customer segments including lighting professionals and system integrators. Technically, the site is built on Adobe Experience Manager, leveraging modern web technologies and performance optimization tools. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the website demonstrates high professionalism and trustworthiness, although the lack of WHOIS data slightly reduces domain registration transparency.

S

SCHMITZ-WILA GmbH

schmitz-wila.com

54

SCHMITZ-WILA GmbH is a German medium-sized manufacturing company specializing in advanced lighting solutions, including multifunctional linear light systems and LED technologies. The company targets architects, designers, and commercial clients, offering both products and project-based lighting solutions. Their website demonstrates a professional digital presence with detailed product information, project showcases, and customer engagement tools such as a product configurator and newsletter subscription. Technically, the site is built on TYPO3 CMS, leveraging modern JavaScript libraries and Google Tag Manager for analytics, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements could be made by enabling DNSSEC and adding security headers. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

rutec Licht GmbH & Co. KG is a medium-sized, family-run German company specializing in LED lighting products and customized lighting solutions. Established in 1990, the company has a solid market position in the energy sector, offering a broad range of products including recessed downlights, LED modules, LED strips, and power supplies. Their website reflects a professional and consistent brand image targeting architects, designers, and lighting professionals. Technically, the site is built on the Contao CMS platform, uses modern JavaScript libraries like jQuery and Flickity, and is hosted on servers associated with agenturserver. The website is mobile-optimized and provides a good user experience with clear navigation and multilingual support. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published security policies. Analytics tools such as Google Analytics, LeadInfo, and Piwik PRO are used with opt-in consent. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the website is trustworthy and professionally maintained, with room for improvement in security policy transparency and header implementation.

R

REMKO GmbH & Co. KG

remko.de

53

REMKO GmbH & Co. KG is a medium-sized German company founded in 1976, specializing in heating and climate technology products including warm air heating systems, dehumidifiers, climate systems, and heat pumps. The company operates primarily in the European market and maintains a professional online presence with a well-structured website powered by TYPO3 CMS. The website demonstrates good technical maturity with modern technologies, fast performance, and mobile optimization. Security posture is strong with HTTPS enforcement, cookie consent management, and no visible vulnerabilities. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, REMKO presents a credible and trustworthy business with clear contact information and active social media channels.

N

nobilé AG

nobile.de

47

nobilé AG is a medium-sized German company specializing in LED lighting solutions with over 30 years of experience. The company offers a broad range of products including indoor and outdoor lighting, shop and hall lighting, and LED light strips. Their market position is strengthened by ISO 9001:2015 certification and a professional online presence. The website is built on Joomla CMS with VirtueMart e-commerce integration, leveraging modern web technologies such as UIkit and jQuery. The site is well-structured, mobile-optimized, and compliant with GDPR regulations, including a cookie consent mechanism and a comprehensive privacy policy. Security practices include HTTPS enforcement, CSRF tokens, and email obfuscation, though additional security headers could enhance protection. No vulnerabilities or suspicious patterns were detected. Overall, the website reflects a trustworthy and professional business with a solid digital infrastructure.

H

Heinrich Kopp GmbH

kopp.eu

62

Heinrich Kopp GmbH is a well-established German manufacturer specializing in electrical installation materials including switches, sockets, dimmers, and smart home solutions. With a history dating back to 1927, the company holds a leading position in the German-speaking market, offering over 7,000 products. Their website reflects a mature digital presence with multilingual support, comprehensive product catalogs, and customer service resources. Technically, the site is built on WordPress with modern plugins and accessibility features, ensuring good performance and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit incident response policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting the company's credibility and market position.

K

KAISER GmbH & Co. KG

kaiser-elektro.de

65

KAISER GmbH & Co. KG operates a professional website focused on electrical installation products and systems, targeting business customers primarily in Germany and internationally. The company offers a broad portfolio including boxes, housings, cable glands, and specialized installation solutions emphasizing energy efficiency and fire protection. The website reflects a mature B2B business model with a consistent brand presence and a well-structured product catalog. Technically, the website is built on the Shopware e-commerce platform, utilizing modern web technologies such as JavaScript, CSS, and HTML5. It integrates third-party services like Signalize for marketing and eTracker for analytics, alongside Google reCAPTCHA for bot protection. The site is mobile-optimized with good SEO and basic accessibility features, hosted on servers associated with internet1.de. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. Security headers are likely present, and no critical vulnerabilities or exposed sensitive data were detected in the analyzed content. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent, representing areas for improvement. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic enhancements in security transparency and contact availability would further strengthen trust and operational resilience.

F

FENECON GmbH

fenecon.de

48

FENECON GmbH is a German company specializing in energy storage systems and energy management solutions aimed at supporting the transition to 100% renewable energy. Their product portfolio includes residential, commercial, and industrial battery storage systems, complemented by software solutions such as the FEMS energy management system. The company is recognized in the industry with multiple innovation awards and maintains a strong digital presence with multilingual support and comprehensive customer resources. Technically, the website is built on WordPress with modern plugins and frameworks, offering good performance and SEO optimization. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the website reflects a professional and trustworthy business with a clear focus on sustainable energy solutions.

E

EBERLE Controls GmbH

eberle.de

45

EBERLE Controls GmbH is a German-based manufacturer specializing in heating, climate, and building technology products. Their offerings include a wide range of thermostats, relays, and smart home compatible devices designed for energy-efficient temperature regulation. The company targets both private and commercial customers, emphasizing quality, reliability, and modern design. Their market position is that of an established medium-sized enterprise with a strong focus on innovation and customer service. Technically, the website is built on TYPO3 CMS and integrates modern web technologies including Usercentrics for cookie consent management. The site is well-structured, mobile-optimized, and provides comprehensive product information and support resources. Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS, uses consent management for cookies, and does not expose sensitive data. However, it lacks explicit security policies and incident response contacts, and could improve by adding security headers and formal documentation. Overall, the security posture is solid but could be enhanced with additional transparency and controls. The overall risk assessment is low with no critical vulnerabilities detected. Strategic recommendations include publishing a formal security policy, providing incident response contacts, enhancing security headers, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

C

Comelit Group Deutschland

comelitgroup.de

65

Comelit Group Deutschland is a medium-sized technology company specializing in security and communication solutions for residential and commercial properties. Their offerings include door intercom systems, access management, video surveillance, and burglary protection. The company targets installers, property developers, TGA planners, and housing companies, positioning itself as a reputable player in the German security technology market. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates third-party services such as Cookiebot for cookie consent management, Google Tag Manager for analytics, and Trustpilot for reviews. Hosting and DNS are managed via Cloudflare, providing performance and security benefits. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms aligned with GDPR. The presence of ISO 27001 certification indicates a commitment to information security management. However, explicit security headers and incident response policies are not evident, and no vulnerability disclosure or security.txt file is published. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website presents a low-risk profile with a solid security posture and compliance awareness. Strategic recommendations include enhancing security headers, publishing clear privacy and security policies, and improving accessibility compliance to further strengthen trust and regulatory adherence.

A

Albert Leuchten

albert-leuchten.de

50

Albert Leuchten is a German-based manufacturer specializing in high-quality outdoor luminaires, including LED lighting solutions designed for environmental harmony and safety. The company targets both consumers and businesses seeking durable, weatherproof outdoor lighting products. Their market position is that of an established medium-sized enterprise with a focus on innovation and quality. The website reflects a mature digital presence built on WordPress with WooCommerce, integrating modern technologies such as Google Tag Manager and ConsentManager for privacy compliance. Security measures include HTTPS, reCAPTCHA on forms, and cookie consent mechanisms, though some security headers could be improved. Overall, the site is professional, well-structured, and GDPR compliant, with clear contact channels and business information. No critical security or content safety issues were detected.

A

ABN GmbH by Schneider Electric

abn-electro.com

64

ABN GmbH by Schneider Electric is a well-established company specializing in metering and distribution technology products, with a history spanning over 75 years. The company operates under the Schneider Electric umbrella, offering a range of products including surge protection, field distributors, and transformer technology. The website reflects a mature digital presence built on TYPO3 CMS, featuring professional design, good mobile optimization, and comprehensive privacy compliance mechanisms such as OneTrust cookie consent. Security posture is solid with HTTPS and no visible vulnerabilities, although some security headers could be improved. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy, which should be further investigated to ensure trustworthiness. Overall, the website presents a professional and trustworthy front aligned with its business sector.

E

e-masters GmbH & Co. KG

intelligent-modernisieren.de

55

INTELLIGENT MODERNISIEREN is a German brand operated by e-masters GmbH & Co. KG, providing comprehensive information and services related to energy-efficient and smart modernization solutions for residential and commercial buildings. The website serves as a platform connecting users with a large network of qualified specialist companies and reputable manufacturers, offering expert knowledge, product showcases, and interactive planning tools. The company positions itself strongly in the energy sector with a focus on sustainable and modern technologies such as photovoltaics, heat pumps, and smart home systems. Technically, the website is built on TYPO3 CMS, integrates modern consent management via Usercentrics, and uses Google Tag Manager for analytics, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and consent-based tracking, though some security headers and explicit security policies are absent. Overall, the site is professional, GDPR compliant, and trustworthy, with clear contact information and strong branding consistency.

e-masters GmbH & Co. KG operates a specialized community platform serving the electrical and SHK trades in Germany, providing marketing cooperation, discounts, and training opportunities to its members. The website is well-structured, professionally designed, and targets trade professionals with relevant content and offers. Technically, the site is built on TYPO3 CMS, integrates modern tools like Google Tag Manager and Cookiebot for consent management, and employs secure login mechanisms for members. The security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Overall, the site demonstrates good compliance with GDPR and privacy standards, with clear cookie policies and consent mechanisms. No critical vulnerabilities or suspicious activities were detected, indicating a trustworthy and professional online presence.

A

Ahmling Elektrotechnik

ahmling-elektrotechnik.de

47

Ahmling Elektrotechnik is a small, regional master electrical engineering company based near Itzehoe, Germany. The company specializes in electrical installations for old and new buildings, photovoltaic systems, wallboxes for electric vehicles, smart home solutions, lighting planning, and telecommunications. Their market position is that of a trusted local expert with partnerships and memberships in relevant industry associations, serving residential and commercial clients. The website is professionally designed, well-structured, and optimized for SEO, reflecting a mature digital presence. Technically, the site is built on WordPress with common plugins and libraries, hosted on a reputable German hosting provider. Security posture is good with HTTPS and cookie consent implemented, though security headers are missing and no dedicated security or incident response policies are found. Overall, the website is safe, trustworthy, and compliant with GDPR, with clear contact information and business details.

C

Caspersen Energie & Haustechnik GmbH

elektro-caspersen.de

63

Caspersen Energie & Haustechnik GmbH is a well-established German company specializing in electrical installations, photovoltaic systems, smart home solutions, and safety inspections such as DGUV V3 and E-Check. With over 60 years of experience, the company positions itself as a reliable and innovative service provider for both residential and commercial clients. The website reflects a professional and trustworthy business with clear service offerings and customer engagement features. Technically, the site is built on WordPress using Elementor and optimized with modern SEO and performance tools. Security posture is good with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the site is compliant with GDPR and provides comprehensive contact information, enhancing business credibility.

D

Dieter Moch GmbH

dietermoch.de

45

Dieter Moch GmbH is a regional German company specializing in heating, sanitary, and electrical services, with over 25 years of experience serving the Pinneberg and Hamburg areas. Their business model focuses on installation, maintenance, and renovation services tailored to residential and commercial customers. The website reflects a professional and consistent brand image, providing clear contact information and job opportunities, indicating active operations. Technically, the site is built on WordPress using a commercial theme and common plugins, delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, though lacking advanced security headers and explicit security policies. Overall, the site is trustworthy and compliant with GDPR requirements.

Dieter Krauss GmbH is a small, family-run business specializing in heating, sanitation, ventilation, and renewable energy solutions, operating primarily in Klein Offenseth-Sparrieshoop, Germany. The company offers a broad range of services including bathroom installations, heating systems, ventilation and air conditioning, photovoltaic and solar thermal systems, as well as gas heating services through its Krauss GAS Center. The website reflects a professional and consistent brand image with clear contact information and service descriptions, targeting local residential and commercial customers. Technically, the website is built using Bootstrap and jQuery, providing a responsive and user-friendly experience. However, there is no evidence of advanced CMS or hosting details. The site lacks modern security headers and cookie consent mechanisms, and no analytics or tracking tools are detected, indicating minimal user tracking. Performance is moderate with good mobile optimization but basic accessibility and SEO features. From a security perspective, the site does not show critical vulnerabilities but lacks HTTPS confirmation and security headers, which are recommended for improved protection. The absence of a privacy policy with GDPR compliance details and cookie consent reduces privacy compliance. WHOIS data is missing, raising questions about domain registration legitimacy, although the website content and business information appear trustworthy and professional. Overall, the site is a solid representation of a small regional business with room for improvement in security, privacy compliance, and domain registration transparency.

Enno Makoschey Heizung- und Sanitär GmbH is a small German company specializing in heating and sanitary services, including installation, maintenance, and emergency services. The company positions itself as a reliable local specialist offering a broad range of services such as heating systems, bathroom renovations, solar thermal solutions, and funding consultation. The website reflects a professional business with clear service descriptions and contact information, targeting a general audience in Germany. Technically, the website uses modern JavaScript libraries and the Foundation framework, ensuring good mobile optimization and user experience. Security-wise, the site employs HTTPS and a cookie consent mechanism but lacks visible advanced security headers or explicit incident response policies. Overall, the website is trustworthy and well-maintained, though improvements in security headers and explicit policies could enhance its posture.

A

Artur Baasch GmbH

baasch-steinburg.de

51

Artur Baasch GmbH is a well-established regional Meisterbetrieb specializing in heating systems and bathroom renovation services in the Kreis Steinburg area of Germany. The company has a long history dating back to 1951 and offers a comprehensive range of services including new bathroom construction, 3D bathroom planning, heating installation, modernization, and maintenance. The website reflects a professional business model targeting residential and commercial customers seeking expert advice and quality workmanship. The presence of partner logos from reputable brands enhances trust and market positioning. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site is mobile-optimized and includes GDPR-compliant cookie consent mechanisms via the Complianz plugin. Google Analytics is used with IP anonymization, reflecting attention to privacy compliance. Hosting appears to be with a German provider, consistent with the business location. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data shows no privacy protection but lacks detailed registrant information, which is common for small businesses. Overall, the domain and website appear legitimate and consistent with the business claims. The overall risk assessment is low with recommendations to enhance security headers, add incident response information, and consider a vulnerability disclosure policy. The website quality is good with clear navigation, relevant content, and professional design, supporting business credibility and customer trust.

Gosau GbR is a small, specialized master craftsman company based in Oelixdorf, Germany, focusing on heating, ventilation, and sanitary services. The company offers a broad range of modern heating solutions including oil, gas, pellet, biomass, heat pumps, and solar energy systems, complemented by maintenance and customer service. Their market position is that of a trusted local provider emphasizing quality and customer care, supported by certifications such as a Stiftung Warentest award. Technically, the website is built on a modern stack using jQuery, Foundation framework, and various UI libraries, with good mobile optimization and SEO practices. Security posture is moderate with cookie consent implemented but lacking visible advanced security headers. Overall, the site is professional, trustworthy, and compliant with GDPR, with clear contact information and social media presence. No critical security issues or content safety concerns were detected.

F

Frisch & Neubert GmbH

frisch-neubert.de

50

Frisch & Neubert GmbH is a well-established German company specializing in modern home technology services, particularly in heating, sanitation, and ventilation. Founded in 1994 and based in Itzehoe, the company serves private and commercial clients with a team of approximately 30 employees. Their website reflects a professional and consistent brand image, showcasing partnerships with reputable manufacturers and offering clear contact channels. Technically, the site is built on WordPress with modern frameworks like Bootstrap and includes GDPR-compliant cookie management via Borlabs Cookie. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site is accessible, well-structured, and compliant with privacy regulations, supporting a trustworthy online presence.

H

Hans Otte

hans-otte.de

53

Hans Otte is a well-established mid-sized German company specializing in energy-efficient building services including heating, sanitary installations, climate technology, and photovoltaic systems. Founded in 1988, the company serves residential and commercial clients primarily in Schleswig-Holstein and surrounding regions. The website reflects a professional business with clear service offerings, references, and partner affiliations. Technically, the site is built on WordPress with modern plugins for SEO, cookie consent, and user engagement, indicating a mature digital infrastructure. Security posture is good with HTTPS and consent mechanisms in place, though improvements are recommended in security headers and privacy policy publication. Overall, the site is trustworthy and well-positioned in its market niche.

C

Christoph Heide

christoph-heide.de

54

Christoph Heide is a well-established German company specializing in building technology services including sanitation, heating, ventilation, and electrical installations. Founded in 1927, the company serves residential and commercial customers primarily in the Heide/Dithmarschen region. Their website reflects a professional and consistent brand presence, highlighting key services such as heat pumps, bathroom renovations, and photovoltaic systems. The company holds certifications like Vaillant Kompetenzpartner and offers guarantees that enhance customer trust. Technically, the website is built on WordPress with modern plugins and technologies such as Slider Revolution, CookieYes for consent management, and Google Site Kit for analytics. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Hosting appears to be on Microsoft Azure, indicated by specific cookies. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. However, some security headers are not explicitly detected and could be improved. No critical vulnerabilities or exposed sensitive data were found. Incident response and explicit security policies are not published, which could be enhanced. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic improvements in security headers and incident response transparency would further strengthen their posture.

W

Wilke GmbH & Co. KG

wilke-shk.de

53

Wilke GmbH & Co. KG is a specialized installer and service provider in energy and building technology, focusing on heating, sanitary, ventilation, and solar thermal systems in Schleswig-Holstein and Hamburg, Germany. The company targets both private and commercial customers, offering comprehensive consulting, installation, and maintenance services. Their market position is strengthened by membership in CELSEO, a leading cooperation in the building technology sector. The website is built on TYPO3 CMS, leveraging modern JavaScript modules and third-party widgets for enhanced user experience and marketing. It features good SEO, accessibility, and mobile optimization. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site reflects a professional, trustworthy regional business with a clear digital presence.

H

HEINRICH KRUMME Gesellschaft für Sanitär- und Heizungstechnik mbH

krumme-brunsbuettel.de

49

HEINRICH KRUMME Gesellschaft für Sanitär- und Heizungstechnik mbH is a medium-sized German company specializing in innovative and energy-efficient solutions in building services engineering and plant construction, with over 50 years of experience. The company targets B2B clients requiring heating, cooling, ventilation, sanitation, project management, and maintenance services. The website reflects a professional and consistent brand presence with clear navigation and relevant project references. Technically, the site uses a modern CMS (Contao), integrates common libraries like jQuery and Bootstrap, and employs Google Analytics and Cookiebot for tracking and consent management. Security posture is solid with HTTPS and cookie consent blocking, though additional security headers could enhance protection. Overall, the site is compliant with GDPR and provides clear contact information, supporting business credibility and trust.

D

DIE BAD- & HEIZUNGSGESTALTER

die-badgestalter.de

58

DIE BAD- & HEIZUNGSGESTALTER is a well-established network of over 130 certified specialist companies operating in Germany and Austria, providing comprehensive bathroom and heating renovation services. The brand emphasizes complete project management, individual design, and customer-centric service, evidenced by their Deutscher Servicepreis 2024 award and high customer ratings. Technically, the website is built on TYPO3 CMS, employs Matomo for privacy-respecting analytics, and integrates third-party widgets for customer reviews. The site is well-optimized for mobile and SEO, with clear navigation and professional design. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the website reflects a mature digital presence aligned with business goals and compliance requirements.

W

Wolf-Technik GmbH

wolf-technik.com

42

Wolf-Technik GmbH is a medium-sized German company specializing in the planning, production, installation, and service of heating and cooling technology solutions, including Wärmepumpen and Kälteanlagen. The company has a strong regional presence in northern Germany with over 900 installed heat pump systems and a global distribution network for refrigeration units. Their website reflects a professional business model focused on B2B clients in the energy and industrial sectors. Technically, the website is built on the Weblication CMS platform using standard web technologies like jQuery and JavaScript. While the site has good content quality and navigation, it lacks modern security implementations such as HTTPS and DNSSEC, which impacts its security posture. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional but requires security and privacy improvements to meet modern standards.

H

Heinz Tesch GmbH & Co. KG

tesch-sylt.de

49

Heinz Tesch GmbH & Co. KG is a well-established installer company based on Sylt, Germany, specializing in heating, sanitary, ventilation, and electrical building technology. Founded in 1969, the company serves both private and commercial customers with a strong emphasis on quality, customer service, and modern technology solutions. The website reflects a mature digital presence with comprehensive service descriptions, customer engagement features, and a clear local market focus. Technically, the site is built on TYPO3 CMS, employs modern web technologies, and integrates Google Analytics and YouTube for marketing and engagement. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in incident response and security policy disclosures. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting the company's reputable market position.

Arfst Bohn GmbH is a small, family-owned specialist company based on Amrum island, Germany, providing heating, sanitation, ventilation, climate technology, solar energy solutions, and related services. The company emphasizes quality, reliability, and comprehensive customer support from planning to installation and maintenance. Their market position is that of a trusted local expert with a focus on renewable energy and modern heating technologies. Technically, the website uses a modern but straightforward stack including jQuery, Foundation framework, and various UI libraries, hosted likely on a standard web hosting platform. The site is mobile-optimized and provides clear navigation and content relevant to its target audience. Security posture is moderate with HTTPS implied but lacks explicit security headers and detailed security policies. Privacy compliance is good with a cookie consent mechanism and a privacy policy present. Overall, the website is professional and trustworthy, though improvements in security headers and incident response information are recommended.

S

S.A.T. Alternativtechnik

alternativtechnik.de

50

S.A.T. Alternativtechnik is a small German company specializing in the planning, installation, and maintenance of solar and alternative energy systems, including heating solutions. The company targets private and commercial customers seeking to reduce energy costs and increase energy independence. The website is professionally designed using WordPress with the Divi theme and includes structured data to enhance search engine visibility. Technical infrastructure includes Google Tag Manager and Rank Math SEO plugin, with Google Analytics present but disabled by default in the EU region to comply with privacy regulations. Security posture is moderate with HTTPS enforced and consent mode implemented, but lacks advanced security headers and published security policies. Overall, the website is accessible, trustworthy, and provides clear contact information, though it would benefit from enhanced privacy and security disclosures.

H

Hans Andritter GmbH

andritter.de

49

Hans Andritter GmbH is a well-established regional company in Germany specializing in heating, sanitary, climate, and roofing services. With a history spanning approximately 160 years, the company offers comprehensive solutions from planning to implementation and maintenance, targeting regional customers seeking modern and reliable energy and sanitary services. The website reflects a professional and consistent brand image, emphasizing customer service and regional presence. Technically, the website is built on WordPress using the Elementor page builder, supported by plugins such as Borlabs Cookie for privacy compliance. The hosting is provided by agenturserver, indicated by the nameservers. The site is moderately performant, mobile-optimized, and SEO-friendly, with basic accessibility features. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is strong with a comprehensive privacy policy and cookie management. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements in security headers and incident response documentation could further enhance trust and security posture.

Dachdeckerei Thorsten Eggers is a small, local roofing service provider based in Barkenholm, Germany, with over 21 years of experience. The company offers a range of roofing-related services including flat roofs, solar installations, storm damage repair, chimney restoration, facade design, and more. The website is built on WordPress using the Twenty Twenty-One theme and includes standard plugins such as Contact Form 7 and an accordion slider gallery. The site is well-structured, mobile-optimized, and provides clear contact information, but lacks advanced privacy and security features such as cookie consent and security headers. No social media or analytics tracking is present, indicating a focus on privacy and simplicity. The domain registration data is consistent with the business claims and shows no signs of privacy protection or suspicious activity.

K

Kardell Sothmann Bedachungen GmbH & Co. KG

karriere-kardell-sothmann.de

59

Kardell Sothmann Bedachungen GmbH & Co. KG is a medium-sized roofing company based in Heide, Germany, offering apprenticeship and skilled worker positions in the roofing trade. The company emphasizes well-organized work sites, a supportive team environment, and tariff-based pay. Their website serves as a recruitment and informational platform targeting job seekers in the roofing industry. Technically, the site is built on the Chimpify CMS platform, utilizing Bootstrap and jQuery, and is hosted on German servers with good SSL configuration. The site includes a cookie consent mechanism and privacy policy compliant with GDPR. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and incident response information are lacking. Overall, the website is professional, trustworthy, and safe for general audiences.

N

Netzwerkagentur Erneuerbare Energien Schleswig-Holstein

ee-sh.de

53

The website for Netzwerkagentur Erneuerbare Energien Schleswig-Holstein (EE.SH) serves as a regional network agency focused on supporting renewable energy initiatives in Schleswig-Holstein, Germany. It promotes regional value creation, innovation, and digital transformation for companies involved in renewable energy sectors such as wind, solar, bioenergy, and hydrogen. The site is built on the Weblication® CMS platform and hosted via DomainControl name servers, indicating a standard commercial hosting setup. The content is professionally presented with good design and navigation, targeting regional businesses and stakeholders in the energy sector. From a technical perspective, the website uses modern HTML5, CSS3, and JavaScript technologies with a responsive design optimized for mobile devices. However, no advanced frameworks or analytics tools were detected. The site lacks visible privacy and cookie policies, which is a compliance gap. No contact emails or phone numbers were explicitly found, though a physical address is provided in meta tags. Security posture is moderate but could be improved. There is no evidence of security headers or incident response contacts, and no vulnerability disclosure or security.txt files were found. The SSL configuration status is unknown from the provided data. The domain WHOIS data is minimal but does not indicate privacy protection or suspicious patterns, though registrant details are not fully available. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security best practices, and clearer contact information to improve trust and regulatory adherence.

W

Watt 2.0

wattzweipunktnull.de

57

Watt 2.0 is a German industry association focused on renewable energy, aiming to connect companies, academia, and policymakers to strengthen the renewable energy sector and promote sustainable solutions. The website presents a professional and consistent brand image with content primarily in German, targeting stakeholders in the energy sector. The business model is that of a trade association, providing networking and advocacy services within the renewable energy industry. Technically, the website uses modern web technologies with responsive design and good SEO practices, hosted on UI-DNS infrastructure. Security posture is moderate; while HTTPS is assumed, no explicit security headers or advanced policies are detected. Cookie consent mechanisms are implemented, but privacy and terms of service policies are missing, indicating room for compliance improvement. Overall, the site is accessible, safe, and professional but would benefit from enhanced transparency and security practices.

L

Landesverband Erneuerbare Energien Schleswig-Holstein e.V.

lee-sh.de

50

The Landesverband Erneuerbare Energien Schleswig-Holstein e.V. (LEE.SH) is a regional non-profit association dedicated to promoting renewable energy and sustainable climate protection in Schleswig-Holstein, Germany. The organization serves as a representative body for the renewable energy sector, providing advocacy, information, events, and member services to stakeholders and the public. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its regional audience. Technically, the site uses a custom CMS (Multifenster App), is hosted via Goneo, and employs Matomo analytics for privacy-conscious user tracking. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response visibility. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements.