Germany security reports

X

X-School

xschool.io

60

X-School is an innovative educational initiative focused on designing and implementing the school of the future. It aims to create a global network of schools that provide sustainable, inclusive education for future leaders and changemakers. The website presents a comprehensive framework emphasizing diversity, excellence, and well-being, supported by a team of experts and promoters. The business model is based on a state-approved alternative school in Germany with plans for international expansion. The site is professionally designed, mobile-optimized, and rich in content, targeting students, parents, and educators interested in modern education concepts. Technically, the website uses modern front-end technologies such as Alpine.js and Tailwind CSS, with embedded Vimeo videos and social media integration. It is hosted on infrastructure linked to GoDaddy and uses HTTPS with good SSL configuration. However, some security best practices like security headers and cookie consent mechanisms are missing, which could be improved to enhance compliance and security posture. From a security perspective, the site shows a good baseline with HTTPS and secure form handling but lacks explicit security policies, incident response contacts, and vulnerability disclosure information. The domain WHOIS data is privacy protected but consistent with the business timeline and type, indicating legitimacy. No suspicious or malicious content was detected. Overall, the website is trustworthy, professionally maintained, and focused on education innovation. Strategic improvements in privacy compliance and security headers would further strengthen its posture.

X

X-Schule

xschule.io

59

X-Schule is a German-based innovative educational initiative focused on founding and operating future-oriented schools that emphasize diversity, potential development, and holistic well-being. The organization targets parents, educators, and education experts interested in transforming traditional schooling to meet 21st-century challenges. The website presents a professional, content-rich platform with detailed team profiles and educational frameworks, positioning X-Schule as a credible emerging player in the education sector in Germany. Technically, the site uses modern frontend technologies such as Alpine.js and AOS animations, hosted on AWS infrastructure, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and domain locking, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is partial, with a comprehensive privacy policy but no cookie consent mechanism. Overall, the site is trustworthy, well-branded, and professionally maintained, suitable for its educational mission.

X

XVentures

xventures.de

48

XVentures is a German-based venture fund and venture studio specializing in transformative entrepreneurship with a focus on Web3 and education innovation. The company leverages nearly a century of combined entrepreneurial experience among its partners, having raised over $500 million in equity and supported numerous startups to successful exits. Their business model combines funding with hands-on expertise, accelerator programs, and access to a global network of industry leaders, positioning them uniquely in the venture capital landscape. Technically, the website is built on Webflow with modern web technologies, offering good performance and mobile optimization, though it lacks advanced security headers and privacy compliance mechanisms. Security posture is solid with HTTPS but could be improved with additional headers and published policies. Overall, the site is professional and trustworthy, though it lacks explicit privacy and cookie policies, which impacts compliance scoring.

C

Codeberg e.V.

forgejo.org

63

Forgejo is a self-hosted, lightweight software forge platform developed and maintained by the non-profit organization Codeberg e.V. It targets developers and organizations seeking a privacy-focused, federated alternative to proprietary platforms like GitHub. The website demonstrates a high level of professionalism with excellent design, clear navigation, and comprehensive content focused on collaboration and open source values. Technically, the site uses modern web technologies including Astro framework, SVG icons, and responsive design, hosted by OVH sas. Security posture is solid with HTTPS enabled and domain protections in place, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is strong with a clear privacy policy and minimal tracking, but lacks a cookie consent mechanism. Overall, the domain registration and WHOIS data align well with the organization's identity, supporting high legitimacy and trustworthiness.

H

Hartmann IT Solutions GmbH

hartmann-it.de

61

Hartmann IT Solutions GmbH is a small German IT services company specializing in software development, IT consulting, e-commerce solutions, digital modernization, graphic and web design, and blockchain consulting. The company presents itself professionally with a well-structured website featuring multimedia content and detailed team profiles. Their market position is that of a specialized boutique IT provider targeting businesses seeking tailored IT solutions. Technically, the website uses modern frameworks such as UIkit and FontAwesome, is hosted by a reputable provider (1&1 IONOS SE), and is mobile optimized with good SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and cookie consent mechanisms are missing. Privacy compliance is strong with a comprehensive GDPR-aligned privacy policy and a named data protection officer. Overall, the website is trustworthy and professional, with clear contact information and certifications enhancing credibility.

D

Deutsche Bank

db.com

66

Deutsche Bank is a leading global financial services provider offering a broad range of banking and investment services to corporate, institutional, and private clients. The website reflects a mature digital presence with comprehensive content covering products, services, corporate responsibility, and investor relations. The technical infrastructure employs modern web technologies and a consent management platform to ensure privacy compliance. Security posture is strong with HTTPS enforcement and security headers, though explicit incident response and vulnerability disclosure information are limited. The absence of WHOIS data for the domain is unusual but likely due to privacy or query scope issues. Overall, the website demonstrates high professionalism and trustworthiness consistent with a major financial institution.

H

Hartmann IT Solutions GmbH

chain49.com

65

Chain49, operated by Hartmann IT Solutions GmbH, is a technology company specializing in providing blockchain API services for enterprise and developer use. Their platform offers access to a network of cryptocurrency nodes supporting multiple blockchains, enabling clients to build crypto wallets, exchanges, payment processors, and block explorers. Positioned as a niche provider with a strong emphasis on German data protection laws, Chain49 targets startups and enterprises seeking cost-effective and scalable blockchain infrastructure solutions. The company offers tiered subscription plans including free and enterprise options, facilitating flexible adoption. Technically, the website employs a modern JavaScript-based tech stack with libraries such as jQuery, Bootstrap, and various UI/UX enhancement tools. Hosting is inferred to be in Germany, leveraging Hetzner datacenters, which aligns with their data protection claims. The site is mobile-optimized with good SEO and accessibility basics, though some advanced accessibility features could be improved. Performance is moderate, with no critical technical issues detected. From a security perspective, the website enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security policy documentation and incident response contact details. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data is consistent with the business claims, showing transparent registration without privacy protection, enhancing trustworthiness. Overall, Chain49 presents a professional and trustworthy online presence with solid privacy compliance and a clear business focus. Strategic improvements in security documentation and incident response transparency would further strengthen their security posture and customer confidence.

Chainflip Labs GmbH operates Chainflip.io, a specialized decentralized finance platform enabling cross-chain swaps primarily involving Bitcoin, Ethereum, and Solana. The platform emphasizes fast, native Bitcoin swaps with transparent pricing and no hidden fees, targeting cryptocurrency traders and developers seeking seamless cross-chain trading solutions. The business is positioned as a niche player in the DeFi ecosystem with a focus on trust and security, supported by claims of $1.4 billion traded securely. Technically, the website is built using Framer, hosted and registered via Cloudflare, and employs Google Analytics for user tracking. The site demonstrates good design quality, mobile optimization, and SEO practices, though accessibility features are basic. The technical infrastructure is modern but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. From a security standpoint, the site uses HTTPS but does not publish privacy or cookie policies, nor does it provide incident response or vulnerability disclosure information. No security headers were detected, and DNSSEC is not enabled, indicating room for improvement in security posture. No WAF or blocking mechanisms were detected, and no adult or questionable content is present, making the site safe for general audiences. Overall, Chainflip.io presents a professional and credible business with consistent domain registration data. However, it should enhance its privacy compliance and security practices to improve trust and regulatory adherence. Strategic recommendations include publishing comprehensive privacy and cookie policies, enabling DNSSEC, implementing security headers, and providing clear incident response contacts.

H

Heliad AG

heliad.com

54

Heliad AG is a publicly listed venture capital firm based in Germany, specializing in bridging investors and founders with capital markets. The company offers unique support to founders navigating financial markets and democratizes access to venture capital for public investors. The website is professionally designed using WordPress and Elementor, featuring modern web technologies and good mobile optimization. Security posture is solid with HTTPS and clientTransferProhibited domain status, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Contact information is transparent and includes email, phone, and physical address. Overall, the website reflects a credible and trustworthy business with a clear market position in finance and venture capital.

F

Flatiron Health GmbH

flatiron.de

62

Flatiron Health GmbH is a healthcare technology company specializing in oncology data curation and the generation of Real-World Evidence (RWE) to support cancer research and treatment improvements. The company collaborates with hospitals, clinics, life science companies, regulatory authorities, and academic institutions to transform routine medical data into valuable research insights. Their market position is that of an innovative leader in oncology data services, leveraging advanced technology and medical expertise to enhance cancer care outcomes. The website reflects a professional and comprehensive digital presence, built on HubSpot CMS and hosted on AWS, with a strong focus on GDPR compliance and user privacy. Security posture is robust with HTTPS and security headers, though explicit security policies and incident response details are not publicly disclosed. Overall, the site demonstrates high content quality, excellent user experience, and trustworthy business credibility.

T

Theemin Software UG (haftungsbeschränkt)

li.fi

68

LI.FI, operated by Theemin Software UG, is a technology company specializing in blockchain interoperability solutions, specifically bridging and decentralized exchange (DEX) aggregation across multiple blockchain ecosystems. The company targets developers and businesses seeking to integrate cross-chain asset swaps and liquidity aggregation, positioning itself as a leading multichain protocol in the DeFi space. The website reflects a mature digital presence with a modern tech stack including Next.js and Cloudflare DNS, optimized for performance and mobile responsiveness. Security posture is strong with HTTPS, DNSSEC, and security headers implemented, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with GDPR-aligned policies and privacy-respecting analytics. Overall, LI.FI demonstrates a high level of professionalism, technical maturity, and business credibility, suitable for its target audience in the blockchain industry.

O

Oracle NetSuite

netsuite.de

68

Oracle NetSuite operates a leading cloud-based ERP and business management software platform, targeting enterprise and medium to large businesses primarily in Germany and globally. The website presents a comprehensive portfolio of integrated solutions including ERP, CRM, e-commerce, human capital management, and professional services automation. The company positions itself as the number one cloud ERP provider worldwide, emphasizing its extensive customer base and advanced cloud platform capabilities. Technically, the website leverages modern frameworks such as Bootstrap 5 and jQuery, hosted on Akamai CDN infrastructure, ensuring good performance and mobile responsiveness. The use of TrustArc for cookie consent and Google Tag Manager for analytics reflects a mature digital marketing and compliance posture. Security-wise, the site enforces HTTPS and employs consent management but lacks explicit security headers and a public security policy, indicating room for improvement in transparency and defense-in-depth. Overall, the site is professional, trustworthy, and well-structured, with no signs of blocking or malicious content.

S

Statista

statista.org

80

Statista is a leading online statistics portal specializing in aggregating market data, consumer surveys, and industry studies from over 22,500 sources. The platform targets business professionals, researchers, and marketers, offering subscription-based access to a vast repository of statistical data. The website demonstrates a strong market position as a trusted source for market research and data analytics, primarily serving the media sector in Germany. Technically, the site employs modern web technologies including JavaScript frameworks, Google Tag Manager, and consent management tools like OneTrust, ensuring a responsive and performant user experience across devices. Security-wise, the website enforces HTTPS, implements key security headers, and manages cookie consent effectively, reflecting a mature security posture. However, the absence of publicly available WHOIS data due to privacy protection limits domain registration transparency. Overall, Statista presents a professional, secure, and privacy-conscious digital presence with high trustworthiness and excellent content quality.

S

Statista

statista.net

79

Statista is a leading statistics portal providing market data, consumer survey results, and industry studies aggregated from over 22,500 sources covering more than 60,000 topics. The platform targets business professionals, researchers, marketers, and academics, offering subscription-based access to comprehensive market intelligence and data visualization tools. Statista holds a strong market position as a trusted data provider with a large global user base. Technically, the website employs a modern tech stack including JavaScript frameworks, Segment analytics, Hotjar, Braze, and Google Tag Manager, supported by a CDN for fast content delivery. The site is well-optimized for performance, mobile responsiveness, accessibility, and SEO, reflecting a mature digital infrastructure. From a security perspective, Statista enforces HTTPS with strong SSL configurations and implements security headers such as Content Security Policy and Strict-Transport-Security. The use of OneTrust for consent management demonstrates compliance with GDPR and privacy best practices. No significant vulnerabilities or exposed sensitive data were detected, indicating a robust security posture. Overall, Statista presents a low-risk profile with high trustworthiness, professional content, and strong privacy compliance. The absence of WHOIS data is likely due to privacy protection, which is justified for a commercial data provider. Strategic recommendations include maintaining regular security audits, enhancing incident response visibility, and publishing a security.txt file to facilitate vulnerability disclosures.

S

Statista

statista.ch

68

Statista is a leading statistics portal providing market data, market research, and industry studies from over 22,500 sources covering more than 60,000 topics. The company targets business professionals, researchers, marketers, and academics with a subscription-based business model offering extensive data and analytics services. Statista holds a strong market position as a trusted source for statistical data and insights, primarily operating from Germany. The website reflects a mature digital presence with excellent content quality and professional branding consistency. Technically, Statista employs a modern technology stack including advanced analytics platforms such as Segment, Hotjar, Braze, and Pendo, alongside Google Tag Manager and OneTrust for consent management. The site is well-optimized for performance and mobile responsiveness, with good accessibility and SEO practices. Hosting and CMS details are not explicitly identified but the infrastructure supports fast loading and a seamless user experience. From a security perspective, the website enforces HTTPS with strong SSL configuration and implements multiple security headers including CSP and HSTS. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with GDPR adherence and active consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public security policy or incident response page suggests room for improvement in transparency and preparedness. Overall, Statista presents a low-risk profile with a high level of trustworthiness and professionalism. The lack of WHOIS data is likely due to privacy protection, which is justified given the business nature. Strategic recommendations include enhancing security transparency, publishing a vulnerability disclosure policy, and continuous monitoring of third-party scripts to maintain security posture.

S

Statista

statista.mx

79

Statista is a leading statistics portal providing market data, consumer survey results, and industry studies from over 22,500 sources covering more than 60,000 topics. The platform targets business professionals, researchers, marketers, and academics, offering subscription-based access to comprehensive statistical data and market research. The website is professionally designed, mobile-optimized, and features consistent branding with strong trust indicators such as HTTPS and structured data markup. Technically, Statista employs modern web technologies including JavaScript frameworks, Google Tag Manager, OneTrust for consent management, and analytics tools like Hotjar and Braze. The site demonstrates good performance and accessibility standards, with a comprehensive cookie consent mechanism and GDPR compliance. However, explicit security policies and incident response information are not publicly disclosed. From a security perspective, the site enforces HTTPS, uses multiple security headers, and integrates consent management to comply with privacy regulations. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS registration details slightly reduces trust but is likely due to privacy protection services common among large enterprises. Overall, Statista presents a low-risk profile with a mature digital presence, strong privacy compliance, and a professional business model. Strategic recommendations include publishing explicit security and incident response policies, adding vulnerability disclosure mechanisms, and enhancing transparency around data protection officer contacts and certifications.

P

PERBILITY GmbH

mein-helix.de

40

PERBILITY GmbH operates the HELIX platform, a comprehensive HR management software suite designed for German-speaking enterprises. The platform offers modular solutions covering recruiting, employee development, digitalization of HR processes, e-learning, and AI-assisted HR functionalities. Positioned as a modern B2B SaaS provider, HELIX targets HR professionals and organizations seeking flexible and efficient digital HR management tools. The website reflects a mature digital presence with professional design and clear business focus. Technically, the site is built using the Hugo static site generator, integrates Matomo analytics for privacy-conscious tracking, and employs Cloudflare Turnstile captcha for form security. Security posture is strong with HTTPS enforcement and standard security headers, though some compliance gaps exist such as missing cookie consent mechanisms and terms of service. Overall, the domain registration and DNS setup align with the German business identity, supporting legitimacy and trustworthiness.

P

PERBILITY GmbH

perbility.de

49

PERBILITY GmbH is a German technology company specializing in innovative personnel management software, notably their HELIX platform. The company positions itself as a hub for coders and problem solvers, targeting HR professionals and organizations seeking to unlock hidden potential within their workforce. Their market position is that of an innovative HR solution provider with a medium-sized operation based in Germany. The website is professionally designed, mobile-optimized, and provides clear contact information, enhancing trust and credibility. Technically, the website is built using the Hugo static site generator, leveraging modern CSS and JavaScript assets, and integrates Matomo analytics for user tracking. Hosting is managed via reputable German nameservers (noris.ch, noris.de, noris.net), indicating a stable infrastructure. Performance is moderate with good mobile optimization, though accessibility features are basic. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and does not provide explicit security or incident response policies. Privacy compliance is limited due to the absence of privacy and cookie policies, which is a notable gap given GDPR requirements. No vulnerability disclosure or security.txt files were found. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security transparency to improve its risk posture and regulatory adherence.

A

academics

academics.de

61

academics.de is a leading German career portal specializing in academic and research sector job listings. Operated under the Zeit Verlagsgruppe umbrella, it offers a comprehensive platform for academic talents, researchers, and public sector professionals to find tailored job opportunities. The site also provides employer services, career advice, and account features such as job bookmarking. The partnership with reputable media and research organizations enhances its market position and trustworthiness. Technically, the website is built on modern frameworks like Elixir Phoenix, hosted on Google Cloud infrastructure, and employs advanced analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and CSRF protections, although explicit security policies and incident response contacts are not publicly disclosed. Overall, academics.de demonstrates a high level of professionalism, compliance with GDPR, and a user-friendly experience, making it a trustworthy platform in the academic job market.

D

Deutscher Akademischer Austauschdienst e.V. (DAAD)

research-in-germany.org

60

Research in Germany is an official information platform operated by the Deutscher Akademischer Austauschdienst e.V. (DAAD), aimed at international researchers seeking PhD, postdoc, and advanced research opportunities in Germany. The website provides comprehensive guidance on the German research landscape, funding, job portals, and practical advice for planning a stay in Germany. It is well-positioned as a trusted government-backed resource with a clear focus on academic and research sectors. Technically, the website employs modern web technologies including Alpine.js for interactivity, Google Tag Manager and Analytics for user behavior tracking with explicit consent, and a Microsoft-powered chatbot for user assistance. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses CSRF tokens for form security, and implements GDPR-compliant cookie consent mechanisms. Data transfers to third countries (e.g., USA for Microsoft and Google services) are managed with standard contractual clauses. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security headers like X-Frame-Options were not confirmed in the HTML. Overall, the website demonstrates a strong security posture, excellent content quality, and good privacy compliance. The incomplete WHOIS data is a minor concern but likely due to registry query issues rather than malicious intent. Strategic recommendations include enhancing security header implementation, publishing a security.txt for vulnerability disclosure, and maintaining regular audits of third-party integrations.

F

Flower Labs GmbH

flower.ai

66

Flower Labs GmbH operates the website flower.ai, which provides a federated AI framework designed to unify federated learning, analytics, and evaluation across multiple machine learning frameworks and programming languages. The company is positioned as a leading technology provider in the federated learning space, with strong academic and industry adoption, evidenced by testimonials and usage by top universities and companies. The website offers extensive tutorials, documentation, and community engagement channels, including Slack and discussion forums, supporting both researchers and enterprises. Technically, the website is built on modern web technologies such as Next.js and React, hosted on AWS infrastructure, and optimized for performance and mobile devices. Security posture is strong with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is good with a comprehensive privacy policy and terms of service available, though no explicit cookie consent mechanism was detected. Overall, the site is professional, trustworthy, and well-maintained, with a high AI score reflecting content quality, technical implementation, security, privacy, and business credibility.

D

Deutsche Forschungsgemeinschaft e.V.

wissenschaftliche-integritaet.de

64

The website wissenschaftliche-integritaet.de is a professionally maintained portal operated by the Deutsche Forschungsgemeinschaft e.V. (DFG), Germany's central research funding organization. It serves as a reference and resource hub for scientific integrity, providing the official code of conduct and related commentary to promote good scientific practice within the German research community. The portal targets researchers, scientific institutions, and administrative leadership, supporting compliance with DFG funding requirements. Technically, the site is built on WordPress with a modern plugin ecosystem including Yoast SEO, Matomo analytics, and GDPR-compliant cookie management. The site is well-structured, mobile-optimized, and provides multilingual support. Security posture is solid with HTTPS enforced and privacy-respecting analytics, though some security headers and explicit policies could be improved. Overall, the site reflects a high level of professionalism and trustworthiness consistent with a government/non-profit entity.

A

Alexander von Humboldt-Stiftung

humboldt-foundation.de

66

The Alexander von Humboldt-Stiftung is a reputable German foundation dedicated to promoting international scientific collaboration and supporting researchers worldwide. It offers various funding programs, scholarships, and networking opportunities, boasting a large global network of over 30,000 researchers including numerous Nobel laureates. The foundation's website reflects its mission with comprehensive content, professional design, and consistent branding. Technically, the site is built on TYPO3 CMS, hosted by Colt Technology Services, and employs modern web technologies including lazy loading and Google Charts. Analytics are conducted via eTracker, though explicit cookie consent mechanisms and privacy policies are not evident in the provided content. Security posture is solid with HTTPS enforced, but lacks visible security headers and published security policies or incident response contacts. Overall, the site is trustworthy and well-positioned in the education and non-profit sectors, though improvements in privacy compliance and security transparency are recommended.

F

Formel 1 live: Alle Formel-1-Rennen & Termine - Formel1.de

formel1.de

65

Formel1.de is a German-language media portal dedicated to Formula 1 racing, providing live race coverage, results, schedules, and news about drivers and teams. The website targets a broad audience interested in motorsport, particularly Formula 1 fans in Germany. It holds a strong market position as a popular source for F1 content in the German-speaking region. Technically, the site employs modern JavaScript frameworks and integrates consent management tools such as Sourcepoint and ContentPass, indicating a mature approach to privacy compliance. Hosting is managed by plusserver.com, a professional hosting provider, ensuring reliable infrastructure. Security-wise, the site uses HTTPS and includes Google site verification, but lacks explicit security headers and published security policies, which could be improved. No WAF or blocking mechanisms interfere with content accessibility. Overall, the site demonstrates good content quality, technical implementation, and business credibility, though privacy and security documentation could be enhanced.

S

sport media group GmbH

motorsport-total.com

69

Motorsport-Total.com is a well-established German-language online motorsport magazine operated by sport media group GmbH. The website provides comprehensive coverage of motorsport disciplines including Formula 1, MotoGP, DTM, WEC, Rallye, and more, offering news, live tickers, results, photos, videos, and event calendars. The site targets motorsport enthusiasts and general audiences interested in racing sports. It operates primarily on an advertising-supported model with affiliate partnerships for ticket sales and fan merchandise.

2

25hours Hotels

25hours-hotels.com

66

25hours Hotels operates a boutique hotel chain with 17 hotels across 13 cities, focusing on tailored experiences for each location. The website is professionally designed, multilingual, and optimized for SEO and mobile devices, reflecting a mature digital presence. The technical infrastructure is based on WordPress with modern libraries such as Three.js and integrates marketing and analytics tools like Google Tag Manager and Bing Ads. Security posture is strong with HTTPS, security headers, and domain transfer protection, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, the website is trustworthy and well-positioned in the hospitality market, serving travelers seeking unique hotel experiences.

O

Oxfam Deutschland

oxfam.de

63

Oxfam Deutschland operates as a large, established non-profit organization dedicated to combating social inequality, poverty, and exploitation globally. The website reflects a strong commitment to transparency, humanitarian aid, and advocacy, targeting a broad audience interested in social justice and sustainable development. The organization leverages modern web technologies including Drupal 10, Matomo analytics, and Usercentrics for consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement and privacy-conscious tracking, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting Oxfam's mission effectively online.

K

Klimawissen e.V.

klimareporter.de

52

klimareporter° is an independent German-language online magazine focused on climate change, energy transition, and climate research. Operated by the non-profit Klimawissen e.V., it provides professional journalism, podcasts, newsletters, and advertorial content targeting environmentally conscious readers and stakeholders interested in climate topics. The website is well-branded, consistent, and maintains a high level of content quality and trustworthiness. Technically, the site runs on Joomla CMS with modern optimization plugins and privacy-focused tools such as a cookie consent manager and privacy-enhanced YouTube embedding. Hosting is provided by webgo GmbH, as indicated by the nameservers. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. From a security perspective, the site enforces HTTPS, uses CSRF tokens and captchas on forms, and provides a comprehensive cookie consent mechanism. However, some security headers like CSP and X-Frame-Options are not explicitly detected and could be improved. No vulnerabilities or exposed sensitive data were found. Privacy compliance is strong, with detailed policies and GDPR-aligned consent. Overall, klimareporter° presents a low-risk profile with a strong commitment to privacy and security best practices. It lacks explicit terms of service and security policies, which could be added to enhance transparency. Contact is primarily via web forms, with no direct emails or phone numbers publicly listed.

D

Der Postillon

der-postillon.com

62

Der Postillon is a German satirical news website presenting itself as the largest daily newspaper in Germany. It operates primarily as an online media outlet hosted on the Blogger platform, leveraging Google services for analytics and advertising. The website targets a general audience interested in satirical and humorous news content. Technically, the site uses modern web technologies and is mobile optimized, though it lacks some advanced security headers and explicit privacy documentation. The absence of WHOIS registration data for the domain www.der-postillon.com raises questions about domain legitimacy, but the content and hosting environment suggest a legitimate media presence. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but improvements in privacy compliance and contact transparency are recommended.

M

Materna Information & Communications SE

materna.de

71

Materna Information & Communications SE is an established German IT services provider specializing in digital transformation, cloud, cyber security, and AI solutions. With over 44 years of experience and a workforce of approximately 4500 employees, Materna serves a broad range of industries including government, energy, transportation, and finance. The company emphasizes tailored, sustainable, and secure IT solutions supported by strategic partnerships and a strong technology ecosystem. The website reflects a mature digital presence built on TYPO3 CMS, integrating modern analytics and marketing tools with GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS enforcement, security headers, and bot management via Cloudflare. However, explicit security policy and incident response contact pages are not found, representing an area for improvement. Overall, Materna presents a professional, trustworthy, and technically sound digital footprint aligned with its market position as a leading IT consultancy and service provider.

H

Weiterbildung an Hochschulen jetzt suchen und finden

hoch-und-weit.de

69

The website hoch-und-weit.de serves as a search and information platform for continuing education programs at universities, primarily targeting individuals seeking educational opportunities in Germany. The site is built using modern web technologies such as Gatsby and React, ensuring a responsive and user-friendly experience. The content is well-structured and relevant to its educational niche, with consistent branding and good design quality. However, the site lacks visible privacy and cookie policies, contact information, and explicit security policies, which are critical for compliance and user trust. The WHOIS data is minimal, providing limited insight into the domain's registration details, which slightly impacts the overall trust assessment. Security posture is basic, with no detected security headers or incident response information. Overall, the site is functional and professional but would benefit from enhanced privacy, security, and contact transparency to improve compliance and user confidence.

H

Hochschulrektorenkonferenz

hrk-modus.de

46

The website hrk-modus.de is an educational project portal operated by the Hochschulrektorenkonferenz and funded by the German Federal Ministry of Education and Research. It provides comprehensive information and resources related to recognition and accreditation processes at universities, targeting higher education institutions and stakeholders. The site is well-structured, professionally designed, and offers multilingual support (German and English). Technically, it is built on TYPO3 CMS with responsive design and uses Matomo for privacy-conscious analytics. Security posture is good with HTTPS enforced, but lacks some advanced security headers and cookie consent mechanisms. No contact or incident response information is publicly available, which could be improved to enhance trust and compliance. Overall, the site is trustworthy, content-rich, and serves a niche educational purpose effectively.

The Forschungslandkarte website is an official platform provided by the Stiftung zur Förderung der Hochschulrektorenkonferenz (HRK) to present and promote the research focuses of German higher education institutions. It serves as a bilingual informational and marketing tool that supports universities and applied sciences institutions in showcasing their research profiles. The site targets academic institutions, researchers, students, and policy makers, providing structured search capabilities and contact points for collaboration. Technically, the site is built on TYPO3 CMS with Bootstrap for responsive design and uses Matomo analytics configured with privacy considerations. The website demonstrates good performance, accessibility, and SEO practices. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, though it lacks some advanced security headers and a public security policy. Overall, the domain registration and WHOIS data align well with the institutional nature of the site, indicating legitimacy and trustworthiness.

The Allianz der Wissenschaftsorganisationen is a prominent alliance of leading German scientific organizations dedicated to promoting science, research, and innovation. The website serves as a professional platform to communicate scientific policy positions, initiatives, and collaborative efforts among its members. It targets scientific institutions, policymakers, researchers, and the general public interested in science policy. The alliance holds a strong market position as a key representative body in the German scientific landscape. Technically, the website is built on a modern WordPress CMS with a robust tech stack including Yoast SEO, WPML for multilingual support, and Borlabs Cookie for privacy compliance. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Analytics are handled via Matomo Tag Manager, reflecting a privacy-conscious approach. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms. While no critical vulnerabilities or exposed sensitive data were detected, there is room for improvement in security headers and formal security policies. The WHOIS data aligns well with the website's identity, indicating a legitimate and consistent domain registration. Overall, the website presents a trustworthy, professional, and well-maintained digital presence for a non-profit scientific alliance. Strategic recommendations include enhancing security headers, publishing explicit security policies, and continuing to maintain compliance with privacy regulations.

A

Actionbound

actionbound.com

63

Actionbound is a Germany-based company founded in 2012 that provides an innovative platform for creating and playing interactive scavenger hunts and guided tours on mobile devices. Their core offering includes a browser-based Bound Creator and mobile apps for Android and iOS, targeting educators, corporate trainers, museums, and event organizers. The business model is freemium with tiered licenses for professional, educational, and personal use. The website demonstrates strong branding, professional design, and extensive customer testimonials from reputable organizations, indicating a solid market position in the educational gamification niche. Technically, the website uses modern JavaScript frameworks, Semantic UI for styling, and integrates Matomo analytics with cookies disabled for privacy. The platform is well optimized for mobile devices and accessibility. Security posture is good with HTTPS enforced and secure login forms, though some security headers and explicit policies are missing. Privacy compliance is adequate with a comprehensive privacy policy and GDPR references, but lacks a cookie consent mechanism. Overall, the website is trustworthy, professional, and content-rich with no signs of malicious activity or adult content. The WHOIS data for the subdomain is unavailable, which is normal and not suspicious. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing security policies to improve compliance and trust.

The Hochschulkompass website is an authoritative and comprehensive platform operated by the Stiftung zur Förderung der Hochschulrektorenkonferenz (HRK), providing up-to-date information on studying and pursuing doctoral degrees in Germany. It serves as a key resource for prospective students and researchers, offering detailed search tools for study programs, universities, and doctoral opportunities. The platform also includes a study interest test and a study place exchange service, enhancing user engagement and support. The website's content is well-structured, professionally presented, and clearly targeted at students and academic audiences in Germany and internationally. Technically, the site is built on TYPO3 CMS with modern frontend technologies such as jQuery and Bootstrap, ensuring a responsive and accessible user experience. The presence of cookie consent mechanisms and a comprehensive privacy policy demonstrates good compliance with GDPR requirements. While the site uses HTTPS and secure login forms, it lacks explicit published security policies and incident response contacts, which could be improved to enhance transparency and trust. Security posture is strong with no visible vulnerabilities or exposed sensitive data. The WHOIS data aligns with the website's claims, showing consistent domain registration and professional DNS management. External links to partner domains and social media are legitimate and relevant. Overall, the site is trustworthy, well-maintained, and serves its educational mission effectively.

U

UNICUM Merchandising GmbH

unicum-merchandising.com

62

UNICUM Merchandising GmbH is a well-established German company specializing in full-service merchandising solutions, including product development, webshop management, logistics, and retail services. Founded in 2003, it serves a broad clientele including universities and businesses primarily in Germany and Austria. The website reflects a professional and consistent brand image, offering detailed service descriptions and multiple contact channels. Technically, the site is built on WordPress with modern plugins and integrates privacy-compliant tracking and CAPTCHA mechanisms. Security posture is solid with HTTPS and CAPTCHA usage, though improvements like DNSSEC and enhanced security headers are recommended. Overall, the site is trustworthy, compliant with GDPR, and provides a good user experience.

U

UNICUM Merchandising GmbH

unishop-potsdam.de

52

Unishop Potsdam is an official e-commerce platform operated by UNICUM Merchandising GmbH, serving as the official merchandise shop for Universität Potsdam. The site offers a range of university-branded products including hoodies, T-shirts, accessories, and stationery, targeting students and the university community. The business model focuses on retailing exclusive university designs online, supported by customer service via hotline and contact forms. The website maintains a consistent brand presence and leverages social media channels to engage its audience. Technically, the website is built on the Shopware 6 platform, utilizing modern web technologies such as Font Awesome for icons, Google reCAPTCHA v3 for bot protection, and Swiper.js for UI elements. Hosting and DNS services are provided through Cloudflare, ensuring reliable performance and security. The site demonstrates good mobile optimization, accessibility features, and SEO practices, contributing to a positive user experience. From a security perspective, the website enforces HTTPS with strong SSL configuration and implements multiple security headers. The presence of reCAPTCHA and secure login forms enhances protection against automated attacks. Privacy compliance is addressed with a clear cookie consent mechanism and a GDPR-aligned privacy policy. However, the site lacks a dedicated security policy or incident response contact information, which could be improved to strengthen trust. Overall, Unishop Potsdam presents a secure, professional, and user-friendly online retail platform with strong ties to the university community. The domain registration and website content are consistent and legitimate, supporting a high trustworthiness rating. Strategic recommendations include publishing a security policy, incident response details, and a vulnerability disclosure to further enhance security posture and transparency.

U

Universitätsallianz (UA) 11+ / German University Alliance (UA) 11+ e.V.

ua11plus.de

49

The Universitätsallianz (UA) 11+ is a non-profit alliance of 15 medium-sized, research-strong universities in Germany focused on advancing interdisciplinary research, knowledge transfer, and regional development. The alliance serves as a collaborative platform to represent member universities' interests at federal, state, and EU levels, fostering cooperation with economic and societal partners. The website reflects a professional academic presence with clear organizational structure and official university affiliations. Technically, the site is built on WordPress with Elementor and Yoast SEO, hosted likely by 1&1 IONOS, and demonstrates moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks some security headers and formal vulnerability disclosure mechanisms. Privacy compliance is limited due to absence of privacy and cookie policies. Overall, the site is trustworthy and well-positioned within the academic education sector in Germany.

K

Koordinationsstelle des Netzwerks Studienorientierung Brandenburg

studieren-in-brandenburg.de

67

The website 'Netzwerk Studienorientierung Brandenburg' serves as an educational and informational platform aimed at students interested in studying in Brandenburg, Germany. It provides comprehensive resources including study program searches, orientation offers, workshops, events, and personalized study advice. The platform is positioned as a regional coordination office supporting study orientation in Brandenburg, targeting prospective and current students. The business model is non-commercial and focused on educational support. Technically, the website is built on WordPress with modern web technologies such as jQuery, Matomo analytics for privacy-conscious tracking, and Mapbox for interactive maps. The site is mobile-optimized with good design quality and clear navigation, though some accessibility features are basic. Performance is moderate with room for improvement. From a security perspective, the site uses HTTPS and employs nonce tokens for AJAX requests, but lacks visible security headers and explicit privacy or cookie policies, which are compliance gaps. No vulnerabilities or exposed sensitive data were detected. The WHOIS data shows consistent domain registration aligned with the educational purpose, enhancing trustworthiness. Overall, the website is professional, trustworthy, and content-rich but should improve privacy compliance and security headers to enhance user trust and regulatory adherence.

Q

queonext

queonext.de

62

queonext is a German full-service agency specializing in communication and deep technology solutions. They offer a broad range of services including brand strategy, digital design, content production, technology integration, and experience design. Positioned as an innovative and next-level agency, queonext targets businesses seeking creative and technological synergy for their projects. The website demonstrates a professional portfolio with case studies and client references, indicating a solid market presence in the technology and media sectors. Technically, the site is built on WordPress with Elementor and related plugins, showing a modern and flexible infrastructure. The presence of multilingual support and cookie consent mechanisms reflects a degree of digital maturity and compliance awareness. Security posture is good with HTTPS enforced and privacy-conscious localStorage handling, though explicit security headers and policies are absent. Overall, the site is trustworthy and professionally maintained, with room for improvement in privacy and security documentation.

W

Wissenschaftszentrum Berlin für Sozialforschung

wzb.eu

60

Wissenschaftszentrum Berlin für Sozialforschung (WZB) is a prominent German research institution specializing in social sciences. The website serves as a comprehensive portal for their research activities, publications, events, and organizational information. It targets academics, researchers, policy makers, and students interested in social research topics. The institution operates as a non-profit entity with a strong presence in the European academic landscape. Technically, the website is built on Drupal 8 CMS, leveraging Matomo analytics configured to respect user privacy via Do Not Track settings. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some modern security headers are missing. The cookie consent mechanism is implemented in compliance with EU regulations. From a security perspective, the site uses HTTPS and has implemented privacy-conscious analytics. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No WAF or blocking mechanisms were detected, and the domain WHOIS data aligns well with the institution's identity, indicating high legitimacy. Overall, the website is professional, trustworthy, and well-suited for its academic audience, but could improve in transparency regarding privacy policies and security disclosures.

U

Universität Potsdam

uni-potsdam.de

60

Universität Potsdam is a large, well-established German university offering diverse study programs and a strong interdisciplinary research profile. The website reflects a professional academic institution with comprehensive services for students, researchers, companies, alumni, and media. The technical infrastructure is based on TYPO3 CMS with modern JavaScript libraries, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though some security best practices like security headers and incident response information are missing. Privacy compliance is good with a clear privacy policy but lacks a cookie consent mechanism. Overall, the site is trustworthy and professionally maintained.

D

Deutsche Bundesbank

bundesbank.de

66

The Deutsche Bundesbank website serves as the official online presence of Germany's central bank, focusing on monetary policy, banking supervision, cash management, and research. It targets a broad audience including financial professionals, researchers, government entities, and the general public. The site is well-structured with comprehensive navigation covering key services and organizational information. Technically, the site employs modern web technologies and privacy-conscious analytics (Matomo) with good mobile optimization and accessibility. Security posture is solid with HTTPS and privacy-respecting analytics, though it lacks explicit security headers and published security policies. The absence of visible privacy and cookie policies suggests room for improvement in compliance. Overall, the site reflects a high level of professionalism and trustworthiness consistent with a national central bank.

I

INFOnline GmbH

infonline.de

62

INFOnline GmbH is a medium-sized German company specializing in digital audience measurement services for publishers, joint industry committees, brands, and agencies. They provide a proprietary, privacy-compliant measurement system that is recognized as a technical standard in Germany and Austria. Their offerings include digital audience measurement, publishing benchmarks, project and stakeholder management, and software development, supported by a strong customer service infrastructure. The company emphasizes data privacy compliance with GDPR and TTDSG regulations and operates with a professional, well-structured website that reflects their market position and expertise. Technically, the website is built on WordPress using Elementor and integrates modern technologies such as HubSpot forms, Usercentrics for cookie consent, and various JavaScript libraries. The site is well-optimized for SEO, mobile-friendly, and accessible. Security practices include HTTPS enforcement and consent management, though some security headers could be improved. No vulnerabilities or exposed sensitive data were detected. The security posture is solid with good privacy compliance, but the absence of explicit security policies and incident response contacts suggests room for enhancement. The WHOIS data is privacy-protected as per DENIC policies, which is typical for German domains, and the domain appears legitimate and consistent with the business claims. Overall, INFOnline GmbH presents a trustworthy, professional digital presence with strong compliance and technical maturity. Strategic recommendations include enhancing security headers, publishing a security policy, and establishing a vulnerability disclosure process to further strengthen trust and security posture.

G

Genossenschaftliche FinanzGruppe Volksbanken Raiffeisenbanken

finanzgruppe.de

46

The website www.finanzgruppe.de represents the Genossenschaftliche FinanzGruppe Volksbanken Raiffeisenbanken, a large cooperative financial group in Germany. The group offers a broad range of financial services including home financing, investment management, insurance, credit solutions, and business financing through a network of partner institutions. The site is professionally designed with consistent branding and clear navigation, targeting a general audience seeking financial services. Technically, the website uses modern web technologies including JavaScript and CSS, with privacy and analytics tools integrated such as TrustCommander and eTracker. The site is mobile optimized and performs moderately well. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security best practices like security headers and incident response information are missing. The domain WHOIS data shows standard name servers but lacks detailed registrant information, which slightly reduces trust but is not uncommon for such entities. Overall, the website is trustworthy, compliant with GDPR, and provides a safe user experience without any adult or questionable content.

O

OXID eSales AG

oxid-esales.com

76

OXID eSales AG is a well-established German company specializing in e-commerce software solutions, particularly the OXID eShop platform. With over 20 years of experience, they serve both B2B and B2C markets, offering ERP integration, SEO optimization, and usability enhancements. Their market position is strong within the e-commerce software sector, targeting businesses seeking robust online shop systems. Technically, the website is built on TYPO3 CMS, leveraging modern frameworks and integrating advanced marketing and analytics tools such as HubSpot and Google Tag Manager. The site demonstrates good mobile optimization and SEO practices, reflecting a mature digital infrastructure. Security-wise, the website enforces HTTPS, employs security headers, and uses a consent management platform (Usercentrics) to comply with privacy regulations. However, there is no explicit security policy or incident response information publicly available, which could be improved. The WHOIS data for the domain is missing or unavailable, which raises some concerns about domain registration transparency, although the website content and business presence appear legitimate and professional. Overall, the site scores well on content quality, technical implementation, and security posture, but business credibility is slightly impacted by the lack of WHOIS transparency. Strategic recommendations include publishing a security policy, adding incident response contacts, and improving accessibility features to further enhance trust and compliance.

The website ioam.de is a minimal redirect page for INFOnline GmbH, forwarding visitors to the main company site www.infonline.de. The site lacks substantive content, metadata, or any business-related information beyond the redirect. The technical infrastructure is minimal, with no detected CMS, scripts, or analytics tools. Security posture is weak due to absence of HTTPS confirmation, security headers, and privacy policies. WHOIS data indicates the domain is managed with nameservers consistent with the company, supporting legitimacy despite minimal content. Overall, the site serves as a placeholder or redirect rather than a full business presence.

U

Universität Osnabrück

uos.de

63

Universität Osnabrück is a well-established public university in Germany offering a broad range of academic programs including economics, law, humanities, social sciences, natural sciences, artificial intelligence, and teacher education. The website targets prospective and current students, researchers, and international visitors, providing comprehensive information about study programs, application processes, and campus life. The university maintains a strong market position as a regional educational institution with a diverse academic portfolio. Technically, the website is built on TYPO3 CMS, a reputable open-source content management system, and employs Matomo analytics configured with privacy by design principles. Cookie consent is managed through tarteaucitron.js, ensuring compliance with GDPR and user privacy preferences. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms effectively. However, explicit security headers are not evident in the provided data, and no formal security policy or incident response contacts are published, representing areas for improvement. No vulnerabilities or suspicious activities were detected, and the domain registration is consistent with a legitimate educational institution, though registrant details are privacy protected as per DENIC policy. Overall, the website presents a professional, trustworthy, and privacy-conscious digital presence for Universität Osnabrück, with recommendations to enhance security transparency and header configurations to further strengthen its security posture.

W

Weizenbaum-Institut

weizenbaum-institut.de

58

The Weizenbaum-Institut is a leading German research institute specializing in interdisciplinary digitalization research focused on societal impacts, policy advice, and sustainable digital transformation. The website reflects a strong academic and governmental orientation, targeting policymakers, researchers, and civil society. It offers extensive content on research projects, events, publications, and collaborations with reputable partners. Technically, the site is built on TYPO3 CMS, uses privacy-conscious Matomo analytics, and features a modern, responsive design with good SEO and accessibility basics. Security posture is solid with HTTPS and cookie-less analytics, though it lacks some security headers and explicit cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its mission and audience.