Germany security reports

W

Wolf-Technik GmbH

wolf-technik.com

42

Wolf-Technik GmbH is a medium-sized German company specializing in the planning, production, installation, and service of heating and cooling technology solutions, including Wärmepumpen and Kälteanlagen. The company has a strong regional presence in northern Germany with over 900 installed heat pump systems and a global distribution network for refrigeration units. Their website reflects a professional business model focused on B2B clients in the energy and industrial sectors. Technically, the website is built on the Weblication CMS platform using standard web technologies like jQuery and JavaScript. While the site has good content quality and navigation, it lacks modern security implementations such as HTTPS and DNSSEC, which impacts its security posture. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional but requires security and privacy improvements to meet modern standards.

H

Heinz Tesch GmbH & Co. KG

tesch-sylt.de

49

Heinz Tesch GmbH & Co. KG is a well-established installer company based on Sylt, Germany, specializing in heating, sanitary, ventilation, and electrical building technology. Founded in 1969, the company serves both private and commercial customers with a strong emphasis on quality, customer service, and modern technology solutions. The website reflects a mature digital presence with comprehensive service descriptions, customer engagement features, and a clear local market focus. Technically, the site is built on TYPO3 CMS, employs modern web technologies, and integrates Google Analytics and YouTube for marketing and engagement. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in incident response and security policy disclosures. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting the company's reputable market position.

Arfst Bohn GmbH is a small, family-owned specialist company based on Amrum island, Germany, providing heating, sanitation, ventilation, climate technology, solar energy solutions, and related services. The company emphasizes quality, reliability, and comprehensive customer support from planning to installation and maintenance. Their market position is that of a trusted local expert with a focus on renewable energy and modern heating technologies. Technically, the website uses a modern but straightforward stack including jQuery, Foundation framework, and various UI libraries, hosted likely on a standard web hosting platform. The site is mobile-optimized and provides clear navigation and content relevant to its target audience. Security posture is moderate with HTTPS implied but lacks explicit security headers and detailed security policies. Privacy compliance is good with a cookie consent mechanism and a privacy policy present. Overall, the website is professional and trustworthy, though improvements in security headers and incident response information are recommended.

S

S.A.T. Alternativtechnik

alternativtechnik.de

50

S.A.T. Alternativtechnik is a small German company specializing in the planning, installation, and maintenance of solar and alternative energy systems, including heating solutions. The company targets private and commercial customers seeking to reduce energy costs and increase energy independence. The website is professionally designed using WordPress with the Divi theme and includes structured data to enhance search engine visibility. Technical infrastructure includes Google Tag Manager and Rank Math SEO plugin, with Google Analytics present but disabled by default in the EU region to comply with privacy regulations. Security posture is moderate with HTTPS enforced and consent mode implemented, but lacks advanced security headers and published security policies. Overall, the website is accessible, trustworthy, and provides clear contact information, though it would benefit from enhanced privacy and security disclosures.

H

Hans Andritter GmbH

andritter.de

49

Hans Andritter GmbH is a well-established regional company in Germany specializing in heating, sanitary, climate, and roofing services. With a history spanning approximately 160 years, the company offers comprehensive solutions from planning to implementation and maintenance, targeting regional customers seeking modern and reliable energy and sanitary services. The website reflects a professional and consistent brand image, emphasizing customer service and regional presence. Technically, the website is built on WordPress using the Elementor page builder, supported by plugins such as Borlabs Cookie for privacy compliance. The hosting is provided by agenturserver, indicated by the nameservers. The site is moderately performant, mobile-optimized, and SEO-friendly, with basic accessibility features. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is strong with a comprehensive privacy policy and cookie management. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements in security headers and incident response documentation could further enhance trust and security posture.

Dachdeckerei Thorsten Eggers is a small, local roofing service provider based in Barkenholm, Germany, with over 21 years of experience. The company offers a range of roofing-related services including flat roofs, solar installations, storm damage repair, chimney restoration, facade design, and more. The website is built on WordPress using the Twenty Twenty-One theme and includes standard plugins such as Contact Form 7 and an accordion slider gallery. The site is well-structured, mobile-optimized, and provides clear contact information, but lacks advanced privacy and security features such as cookie consent and security headers. No social media or analytics tracking is present, indicating a focus on privacy and simplicity. The domain registration data is consistent with the business claims and shows no signs of privacy protection or suspicious activity.

K

Kardell Sothmann Bedachungen GmbH & Co. KG

karriere-kardell-sothmann.de

59

Kardell Sothmann Bedachungen GmbH & Co. KG is a medium-sized roofing company based in Heide, Germany, offering apprenticeship and skilled worker positions in the roofing trade. The company emphasizes well-organized work sites, a supportive team environment, and tariff-based pay. Their website serves as a recruitment and informational platform targeting job seekers in the roofing industry. Technically, the site is built on the Chimpify CMS platform, utilizing Bootstrap and jQuery, and is hosted on German servers with good SSL configuration. The site includes a cookie consent mechanism and privacy policy compliant with GDPR. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and incident response information are lacking. Overall, the website is professional, trustworthy, and safe for general audiences.

N

Netzwerkagentur Erneuerbare Energien Schleswig-Holstein

ee-sh.de

53

The website for Netzwerkagentur Erneuerbare Energien Schleswig-Holstein (EE.SH) serves as a regional network agency focused on supporting renewable energy initiatives in Schleswig-Holstein, Germany. It promotes regional value creation, innovation, and digital transformation for companies involved in renewable energy sectors such as wind, solar, bioenergy, and hydrogen. The site is built on the Weblication® CMS platform and hosted via DomainControl name servers, indicating a standard commercial hosting setup. The content is professionally presented with good design and navigation, targeting regional businesses and stakeholders in the energy sector. From a technical perspective, the website uses modern HTML5, CSS3, and JavaScript technologies with a responsive design optimized for mobile devices. However, no advanced frameworks or analytics tools were detected. The site lacks visible privacy and cookie policies, which is a compliance gap. No contact emails or phone numbers were explicitly found, though a physical address is provided in meta tags. Security posture is moderate but could be improved. There is no evidence of security headers or incident response contacts, and no vulnerability disclosure or security.txt files were found. The SSL configuration status is unknown from the provided data. The domain WHOIS data is minimal but does not indicate privacy protection or suspicious patterns, though registrant details are not fully available. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security best practices, and clearer contact information to improve trust and regulatory adherence.

W

Watt 2.0

wattzweipunktnull.de

57

Watt 2.0 is a German industry association focused on renewable energy, aiming to connect companies, academia, and policymakers to strengthen the renewable energy sector and promote sustainable solutions. The website presents a professional and consistent brand image with content primarily in German, targeting stakeholders in the energy sector. The business model is that of a trade association, providing networking and advocacy services within the renewable energy industry. Technically, the website uses modern web technologies with responsive design and good SEO practices, hosted on UI-DNS infrastructure. Security posture is moderate; while HTTPS is assumed, no explicit security headers or advanced policies are detected. Cookie consent mechanisms are implemented, but privacy and terms of service policies are missing, indicating room for compliance improvement. Overall, the site is accessible, safe, and professional but would benefit from enhanced transparency and security practices.

L

Landesverband Erneuerbare Energien Schleswig-Holstein e.V.

lee-sh.de

50

The Landesverband Erneuerbare Energien Schleswig-Holstein e.V. (LEE.SH) is a regional non-profit association dedicated to promoting renewable energy and sustainable climate protection in Schleswig-Holstein, Germany. The organization serves as a representative body for the renewable energy sector, providing advocacy, information, events, and member services to stakeholders and the public. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its regional audience. Technically, the site uses a custom CMS (Multifenster App), is hosted via Goneo, and employs Matomo analytics for privacy-conscious user tracking. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response visibility. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements.

G

Gesellschaft für Energie und Klimaschutz Schleswig-Holstein

eksh.org

54

Gesellschaft für Energie und Klimaschutz Schleswig-Holstein (EKSH) is a German non-profit organization dedicated to promoting projects in energy and climate protection. The organization supports scientific research, education, and community initiatives focused on sustainable mobility, renewable energy, sector coupling, and energy efficiency. EKSH positions itself as a regional leader in Schleswig-Holstein, providing approximately 2 million euros annually for pilot projects and programs. The website is professionally designed, well-structured, and provides comprehensive information about its themes, projects, and news updates. Technically, the site is built on TYPO3 CMS, uses HTTPS, and includes modern web technologies such as Google reCAPTCHA for form security. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. However, the WHOIS data for the domain is unavailable, which limits domain registration trust verification. Despite this, the website's content quality, contact transparency, and social media presence support its legitimacy.

L

LANCIER Monitoring GmbH

gast-germany.de

43

LANCIER Monitoring GmbH operates as the official German representative and certified service center for GAST and Jun-Air compressed air components. The company offers a range of industrial products including compressors, air motors, membrane pumps, and rotary vane pumps, targeting sectors such as dental clinics, laboratories, food industry, machinery, vehicle construction, and medical technology. Their market position is strengthened by ISO 9001 certification and longstanding experience in compressed air systems. Technically, the website is built on TYPO3 CMS with Bootstrap and jQuery, providing a modern and responsive user experience. Security posture is moderate with HTTPS usage and secure form handling, but lacks explicit security headers and incident response policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the website reflects a professional small manufacturing business with good trust indicators and clear contact information.

P

PARROT MEDIA GmbH

parrot-it.de

57

PARROT MEDIA GmbH is a small-sized IT system house based in Lübeck, Germany, specializing in premium webhosting, cloud services, IT support, and data protection solutions primarily targeting businesses in Northern Germany. The company offers a broad portfolio of IT services including desktop management, remote support, cloud infrastructure, and Microsoft 365 integration, positioning itself as a reliable regional IT partner with long-term client relationships. Technically, the website is built on TYPO3 CMS with modern web technologies, responsive design, and a moderate performance profile. Security posture is solid with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the website demonstrates good privacy compliance and business credibility with clear contact information and partner affiliations. The risk profile is low with no suspicious indicators detected.

S

SONNTAG GROUP

sonntag.group

60

SONNTAG GROUP is a well-established German professional services group with over 45 years of experience, specializing in finance, tax, legal advisory, family office management, IT compliance, and auditing. The group operates multiple specialized subsidiaries and serves a broad business clientele including high net worth families and enterprises. The website reflects a professional and consistent brand image with good content quality and clear service offerings. Technically, the site uses modern frontend frameworks and libraries such as Bootstrap, jQuery, and Video.js, ensuring a responsive and visually appealing user experience. However, some technical aspects like security headers and cookie consent mechanisms are missing, which could be improved to enhance security and compliance. The WHOIS data is unavailable or privacy protected, which is common for professional firms in Germany due to GDPR, but limits transparency. Overall, the site is secure, professional, and trustworthy with room for improvement in security best practices and privacy disclosures.

D

demokratie.today - Deutschlands Nr.1 Consul-Dienstleister

demokratie.today

51

demokratie.today is a specialized service provider focused on delivering Consul citizen participation software, positioning itself as Germany's leading Consul platform provider. The website targets German municipalities and government entities aiming to enhance democratic engagement and citizen collaboration. The business model revolves around software services and consulting for democratic participation, with a clear market position supported by social media presence and structured data implementation. Technically, the site is built on WordPress with modern plugins for SEO, performance, and multilingual support, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements are recommended in security headers and formal privacy documentation. Overall, the site is professional, trustworthy, and compliant with basic GDPR requirements, though it lacks explicit privacy and terms of service pages. Strategic recommendations include enhancing security headers, publishing privacy and incident response policies, and maintaining regular security audits to strengthen trust and compliance.

H

HSH Soft- und Hardware Vertriebs GmbH, Niederlassung: GS-Computerservice

xn--fundbrodeutschland-q6b.de

64

Fundbürodeutschland is a German centralized online lost and found platform operated by HSH Soft- und Hardware Vertriebs GmbH, integrating with official authorities across Germany. It offers services including lost item search, online auctions, and administrative tools such as data deletion and fund office software. The platform targets residents and governmental bodies, positioning itself as a key national service with over 766 fund offices and 75,000 items listed. Technically, the website employs modern web technologies such as jQuery, Bootstrap, and Leaflet.js for interactive maps, delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and cookie consent implemented, though lacking advanced security headers and explicit incident response policies. Privacy compliance is good, with a clear privacy policy and cookie banner aligned with GDPR. WHOIS data is consistent with the business identity, supporting legitimacy. Overall, the website is professional, trustworthy, and functional, serving an important public service niche.

S

Stadtwerke Ahlen

stadtwerke-ahlen.de

62

Stadtwerke Ahlen is a regional utility provider based in Germany, offering essential services including electricity, gas, water supply, and electromobility solutions. The company positions itself as a trusted local energy supplier with a focus on sustainability and customer service, supported by recognized certifications and awards. Their digital presence is built on the Neos CMS platform with modern PHP frameworks, integrating privacy-conscious analytics and cookie consent management. The website is well-structured, mobile-optimized, and accessible, providing clear navigation and comprehensive service information. Security posture is strong with HTTPS enforcement and secure customer portals, though explicit security headers and incident response contacts could be improved. Overall, the domain registration and website content are consistent and trustworthy, reflecting a legitimate and professional business.

W

WFG Wirtschaftsförderungsgesellschaft Ahlen mbH

wfg-ahlen.de

59

WFG Wirtschaftsförderungsgesellschaft Ahlen mbH operates as the official economic development and city marketing agency for the city of Ahlen, Germany. The organization supports local businesses, promotes tourism, and manages events to strengthen the economic position of Ahlen. The website reflects a professional municipal service with clear focus on local economic growth and community engagement. The target audience includes local businesses, investors, residents, and tourists. The business model is public service oriented, emphasizing cooperation with regional partners and providing consulting and event services.

N

NordNews

nordnews.de

43

NordNews.de is a regional news media website focused on delivering the latest news and updates from northern Germany. The site provides news articles, police reports, local event coverage, and job listings, targeting the general public interested in regional information. The website uses WordPress CMS with popular plugins such as Yoast SEO and Perfecty Push Notifications, indicating a moderate level of digital maturity. The technical infrastructure supports mobile optimization and SEO best practices, although some accessibility features are basic. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and explicit privacy or cookie policies. Overall, the site is functional and professional but could improve in privacy compliance and security transparency.

B

Bodenseezentrum Innovation 4.0

bodensee-summit.com

23

Bodenseezentrum Innovation 4.0 operates a professional digital platform focused on the Bodensee Summit Digital 2025, a conference for digital innovation and resilience in the Bodensee region. The website targets entrepreneurs, leaders, innovators, and digital experts, providing detailed event information, speaker profiles, and interactive session descriptions. The business model centers on event organization and fostering digital transformation within a regional ecosystem. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and SEO best practices, including structured data and a cookie consent mechanism. Security posture is solid with HTTPS and no exposed sensitive data, though some security headers are missing and DNSSEC is not enabled. Privacy compliance is strong with GDPR-aligned policies and consent management. Overall, the site is professional, trustworthy, and well-optimized for its audience and purpose.

I

IBK-Akademie

ibk-akademie.org

61

The IBK-Akademie website represents a specialized educational platform focused on cross-border cooperation and administrative training within the Bodensee region, targeting government and public sector professionals. The platform offers modular courses, networking opportunities, and knowledge exchange to enhance regional collaboration. The website is professionally designed, mobile-optimized, and provides clear navigation and contact options, including a contact form with CAPTCHA for spam prevention. Technically, the site uses modern web technologies and a Sitejet CMS, with Matomo analytics for user tracking. Security posture is solid with HTTPS and basic protections, though security headers are not explicitly detected. WHOIS data is unavailable or malformed, limiting domain registration transparency, but the website content and partner affiliations suggest legitimacy. Privacy and cookie policies are present and GDPR compliant. Overall, the site scores well on content quality, business credibility, and technical implementation, with recommendations to improve WHOIS transparency and security headers.

B

Bodenseezentrum Innovation 4.0

bzi-netzwerk.com

10

Bodenseezentrum Innovation 4.0 operates a professional digital platform focused on digital transformation events and services in the Bodensee region. The website serves as a hub for event listings, expert connections, and regional innovation networking, targeting professionals and organizations interested in digital innovation. The business is newly founded in 2024, consistent with the domain registration date, and positions itself as a regional innovation facilitator. Technically, the website is built on WordPress with Elementor and uses modern plugins for SEO, GDPR compliance, and user experience enhancements. The site is mobile optimized and includes structured data for improved search visibility. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, though DNSSEC is not enabled and some security headers are missing. No critical vulnerabilities or suspicious activities were detected. Privacy compliance is strong with a comprehensive privacy policy and cookie consent banner. Overall, the website is trustworthy, professional, and well-maintained, with room for improvement in security headers and incident response transparency.

I

Interreg Alpenrhein-Bodensee-Hochrhein

interreg.org

62

Interreg Alpenrhein-Bodensee-Hochrhein is a European Union regional cooperation program focused on promoting cross-border collaboration in the Alpenrhein, Bodensee, and Hochrhein regions. The website serves as an information and funding portal, providing resources, project submission options, and updates about the program. It is positioned as a key facilitator of innovative projects with significant EU and partner country funding. Technically, the site is built on the Plone CMS platform, uses Bootstrap for responsive design, and integrates Matomo for analytics alongside a robust cookie consent mechanism. Security posture is generally good with HTTPS enforced and privacy compliance evident, though some security headers and explicit policies could be improved. The WHOIS data is unavailable, likely due to privacy protection, but the website's content and structure indicate legitimacy and professionalism. Overall, the site is well-designed, accessible, and trustworthy, serving a specialized governmental and non-profit audience.

S

Stadt Flensburg

flensburg-mitmachen.de

65

The website flensburg-mitmachen.de is the official online citizen participation platform for the city of Flensburg, Germany. It leverages the open source CONSUL platform, customized by demokratie.today, to provide residents with tools to engage in local projects, discussions, surveys, and events. The platform serves as a transparent and accessible channel for public involvement in municipal decision-making processes. The target audience is primarily the residents and stakeholders of Flensburg interested in civic engagement and local governance. Technically, the site is built on Ruby on Rails using the CONSUL framework, enhanced with CKEditor 5 for content editing and Klaro for cookie consent management. The site demonstrates good mobile responsiveness, accessibility, and SEO practices. It uses HTTPS with proper CSRF protections but could improve by adding more security headers and publishing a formal security policy. From a security perspective, the platform shows a solid posture with encrypted connections, consent mechanisms, and no visible vulnerabilities or tracking beyond consent management. However, it lacks explicit incident response contacts and vulnerability disclosure information, which are recommended for transparency and security maturity. Overall, the site is trustworthy, professionally maintained, and aligned with GDPR compliance. The domain WHOIS data is limited but consistent with an official municipal platform. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and possibly integrating analytics with privacy safeguards to better understand user engagement while maintaining compliance.

I

Innenstadtmanagement Flensburg

flensburg.city

57

Flensburg.City is the official website for the Innenstadtmanagement Flensburg, a municipal entity responsible for managing and promoting the city center of Flensburg, Germany. The organization focuses on urban development projects, community engagement, and event management to enhance the attractiveness of the city center. The website targets residents and visitors interested in local projects and cultural events, providing information and opportunities to participate. Technically, the website is built on the TYPO3 CMS platform, a robust and widely used open-source content management system. The site employs modern web technologies including JavaScript and CSS, and is optimized for mobile devices with good accessibility and SEO practices. Analytics are handled via plausible.io, a privacy-conscious analytics service, indicating a commitment to user privacy. From a security perspective, the site uses HTTPS but lacks visible advanced security headers and does not provide a vulnerability disclosure or security.txt file. No forms or sensitive data collection points were detected on the main page, reducing attack surface. The WHOIS data is unavailable due to registry limitations, but the domain is active and consistent with the municipal branding, supporting legitimacy. Overall, the website presents a professional and trustworthy digital presence for a local government entity with moderate technical sophistication and a good privacy posture. Strategic improvements in security headers and cookie consent mechanisms would enhance compliance and security posture further.

N

NetzWerkstatt GmbH & Co. KG

flensburg.digital

55

The website is a government-operated citizen portal for Flensburg, Germany, designed to provide digital administrative services and accessibility features to its users. It is powered by TYPO3 CMS and integrates Matomo analytics with a clear cookie consent mechanism, reflecting a commitment to user privacy and accessibility. The portal targets local citizens, offering a range of accessibility adjustments to support users with disabilities, indicating a strong focus on inclusivity. Technically, the site employs modern web technologies and frameworks, including TYPO3 CMS and JavaScript-based accessibility tools. The site appears well-structured, mobile-optimized, and accessible, though some performance and security headers could be improved. The absence of explicit privacy policies and contact information slightly detracts from the overall compliance and trustworthiness. From a security perspective, the site uses HTTPS and cookie consent but lacks visible security headers and incident response contacts. The WHOIS data is unavailable due to privacy protection, which is justifiable given the governmental nature of the site. No vulnerabilities or suspicious patterns were detected, and the site does not appear to be blocked by any WAF or security mechanism. Overall, the site presents a professional and trustworthy digital government service with good accessibility and privacy practices but would benefit from enhanced transparency in privacy policies and security disclosures.

G

GEF Ingenieur AG

siskmr.com

42

The website sisKMR.com represents GEF Ingenieur AG, a specialized engineering company providing software solutions for static calculations and optimization of district heating pipelines. The company holds a strong market position in Europe with over 30 years of experience and offers software, engineering services, training, and support primarily targeting planners, engineers, and manufacturers in the energy sector. The website is professionally designed, multilingual, and provides clear contact channels including forms, email, phone, and physical address. Technically, the site is built on WordPress with modern plugins and frameworks, delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is good with a comprehensive GDPR-aligned privacy policy, though no cookie consent mechanism or terms of service are present. Overall, the site is trustworthy and business credible, with minor improvements recommended in security and privacy transparency.

S

Stadtwerke Schwerin GmbH

swsn.de

49

Stadtwerke Schwerin GmbH is a regional utility provider based in Germany, offering a broad range of services including electricity, gas, heating, fiber-optic internet, and water supply. The company positions itself as a reliable and experienced service provider with over 30 years of operation, targeting both private and business customers in the Schwerin region. Their business model focuses on comprehensive energy and telecommunications services with customer-centric portals and digital tools such as tariff calculators. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its audience. Technically, the website is built on Drupal 10, leveraging modern web technologies and privacy-focused analytics via Matomo with cookies disabled. The presence of Usercentrics consent management indicates a strong commitment to GDPR compliance and user privacy. The site uses HTTPS and shows good security practices, although explicit security headers and a published security policy are not evident. No security incidents or vulnerabilities are visible in the content. Overall, the security posture is solid with room for improvement in publishing incident response contacts and security policies. The domain WHOIS data is minimal but does not raise concerns, aligning with the company's regional and established presence. Privacy and cookie policies are comprehensive and implemented with consent mechanisms. The site is free from adult or questionable content, making it safe for general audiences. Strategically, the company should consider enhancing transparency around security policies and incident response to further build trust. Continued investment in technical modernization and privacy compliance will support their market position as a trusted regional utility provider.

F

funkhaus

funkhaus.io

52

funkhaus is a digital-first creative studio based in Germany, specializing in branding, web development, and immersive digital experiences. The company targets brands and businesses seeking innovative digital solutions and positions itself as a creative agency with expertise in motion design, UI/UX, and WebGL technologies. The website currently suffers from a critical technical issue, returning an HTTP 500 error related to WebGL context creation, which severely impacts user experience and content accessibility. Technically, the site uses modern frameworks such as Nuxt.js and Tailwind CSS and is hosted behind Cloudflare DNS, but lacks DNSSEC and security headers, indicating room for security improvements. The security posture is moderate with HTTPS enabled and privacy-conscious analytics via Plausible, but missing privacy and cookie policies reduce compliance confidence. Overall, the domain registration is consistent and legitimate, with privacy protection justified for this business type.

S

Sonntag & Partner Partnerschaftsgesellschaft mbB

sonntag-karriere.de

57

Sonntag & Partner Partnerschaftsgesellschaft mbB is a well-established professional services firm in Germany specializing in auditing, tax consulting, legal advice, and economic consulting. The website focuses on career opportunities, emphasizing personal development, team collaboration, and flexible working conditions. The company has a strong regional presence with over 45 years of experience and maintains a consistent brand image across its digital assets. Technically, the website is built on WordPress with modern JavaScript libraries and includes a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site is professional, user-friendly, and trustworthy, targeting job seekers in finance and legal sectors.

Sonntag & Partner Partnerschaftsgesellschaft mbB operates as a specialized IT consulting and software development firm based in Augsburg, Germany. The company focuses on delivering tailored solutions in digital transformation, IT compliance, process management, and project management. Their market position is that of a boutique consultancy with a strong emphasis on compliance and innovative technologies such as AI and low-code development. The website reflects a professional and consistent brand image targeting business clients seeking expert IT services. Technically, the website is built on WordPress with modern plugins and libraries, including jQuery and Borlabs Cookie for consent management. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. Performance is moderate, with no critical errors or broken elements detected. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, explicit security headers are not detected in the HTML content, and no dedicated security policy or incident response contacts are provided. No vulnerabilities or exposed sensitive data were found, indicating a solid baseline security posture. Overall, Sonntag IT Solutions presents a trustworthy and professional online presence with strong compliance and business credibility. Strategic improvements in security headers and incident response transparency would further enhance their security posture and client trust.

S

SONNTAG Family Office

sonntag-fo.de

63

SONNTAG Family Office is a German-based family office service provider specializing in independent wealth management and asset structuring for high net worth individuals and families. The company positions itself as a trusted advisor in Augsburg and the broader South Germany region, focusing on preserving wealth and creating value. The website reflects a professional and consistent brand image, targeting affluent clients seeking neutral and independent financial consulting services. Technically, the website is built on WordPress with modern plugins such as All in One SEO Pro and Borlabs Cookie for cookie consent management. The use of FontAwesome icons and jQuery indicates a standard but effective technology stack. Security-wise, the site enforces HTTPS and implements cookie consent, but lacks visible security headers and published privacy or security policies, which are areas for improvement. Overall, the website is functional and professional but would benefit from enhanced transparency and security documentation to improve trust and compliance. The domain registration data aligns well with the business claims, supporting legitimacy and consistent market presence.

P

PARROT MEDIA GmbH

parrot-media.de

58

PARROT MEDIA GmbH is a well-established full-service advertising agency based in Lübeck, Germany, with over 18 years of experience serving diverse industries. The company offers a comprehensive range of services including website and online shop development, corporate design, print media, SEO, social media marketing, hosting, and IT services. Their market position is strong regionally, supported by a professional website, client references, and recognized partnerships such as Google Partner and Shopware. Technically, the website is built on TYPO3 CMS, uses modern web technologies, and integrates Google Tag Manager for analytics. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, although some HTTP security headers could be improved. Privacy compliance is robust with clear GDPR-aligned policies and cookie management. Overall, the business demonstrates credibility and professionalism with clear contact information and active social media presence. The domain registration is privacy protected via DENIC, which is typical for German domains and does not raise suspicion. No blocking or WAF mechanisms hinder access to the site, allowing full content analysis.

T

TB-Planungsgesellschaft

tb-planung.de

41

TB-Planungsgesellschaft is a recently founded (April 2024) German company specializing in technical planning and consulting services for energy infrastructure, particularly modern heat and cooling networks. The company targets municipal and private projects with a focus on sustainability and efficiency. Their website is professionally designed using WordPress and Elementor, providing clear service descriptions and partner references, notably to HPW-Fernwaerme. The technical infrastructure is modern but lacks advanced security headers and cookie consent mechanisms. No direct contact emails or phone numbers are publicly listed, relying on a contact form for communication. Overall, the security posture is basic with room for improvement in compliance and incident response transparency. The domain registration is consistent with the company's new establishment, though WHOIS data is minimal. The website content is safe and suitable for general audiences.

L

LANCIER Monitoring GmbH

junair.de

43

LANCIER Monitoring GmbH operates as the official German representative and certified service center for Jun-Air compressors, specializing in quiet and clean compressed air solutions for diverse industrial sectors including dental, food, machinery, and medical technology. The company offers a range of oil-free and oil-lubricated compressors with various accessories, emphasizing quality, reliability, and low noise. Their market position is strengthened by ISO 9001 certification and a certified service center status, targeting professional industrial customers primarily within Germany. Technically, the website is built on TYPO3 CMS with Bootstrap 5 and jQuery, providing a modern and responsive user experience. The site demonstrates good SEO and accessibility basics but lacks some advanced security headers and cookie consent mechanisms. Performance is moderate with a clean design and clear navigation. From a security perspective, the site uses HTTPS and secure forms but does not publish incident response contacts or vulnerability disclosure policies. No security headers were detected, and cookie consent is missing, indicating room for improvement in compliance and security posture. Overall, the website is professional, trustworthy, and business-focused with a solid technical foundation. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance the security and trustworthiness further.

G

Gesellschaft für Energie und Klimaschutz Schleswig-Holstein (EKSH)

powernet.sh

48

PowerNet is a well-established sector-crossing conference focused on the energy transition in Northern Germany, organized by the Gesellschaft für Energie und Klimaschutz Schleswig-Holstein (EKSH). The website presents a professional and comprehensive platform for event information, networking, and expert exchange, targeting stakeholders from business, science, municipalities, and government. The site is built on TYPO3 CMS with modern frontend technologies, offering good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response information are missing. The WHOIS data is incomplete and malformed, which slightly reduces domain trustworthiness, but the strong presence of official partners and government affiliations supports legitimacy. Overall, the website is a credible and professional resource for the energy transition community in Schleswig-Holstein.

E

Energieküste

ready-charged-career.de

46

The website 'Ready. Charged. Career!' serves as a regional career platform focused on renewable energy opportunities at the German North Sea coast, branded as Energieküste. It targets professionals, students, and career changers interested in the energy transition, providing information on training, education, and job openings. The platform is supported by a network of partner companies and educational institutions, enhancing its market position as a key regional hub for energy sector careers. Technically, the site is built on Kirby CMS, employs Matomo for privacy-conscious analytics, and uses modern web technologies including SVG graphics and responsive design. Hosting is managed via Schlund Technologies, with a good SSL configuration and privacy compliance mechanisms in place, including cookie consent and GDPR-aligned privacy policies. Security posture is solid with HTTPS enforced and privacy-respecting analytics, though explicit security policies and incident response contacts are not published. No critical vulnerabilities or exposed sensitive data were detected. The site is fully accessible without WAF or blocking mechanisms, ensuring a smooth user experience. Overall, the site demonstrates a high level of professionalism, content quality, and technical maturity, making it a trustworthy and effective platform for its intended audience. Strategic improvements could focus on enhancing security headers and publishing formal security policies to further strengthen trust and compliance.

The Umweltbildungszentrum Flensburg is a small, non-profit educational institution affiliated with the Naturwissenschaftliches Museum Flensburg, focusing on environmental education and sustainability programs. Founded in 2014, it serves local schools, kindergartens, and the general public with a variety of educational offerings including excursions, workshops, and exhibitions. The website reflects a professional and consistent brand presence with clear contact information and official city sponsorship. Technically, the website is built on the Contao Open Source CMS platform, utilizing modern JavaScript libraries such as jQuery and Colorbox for UI enhancements. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, there is room for improvement in security headers and explicit security policy documentation. From a security perspective, the site uses HTTPS and implements a cookie consent banner, indicating awareness of privacy compliance. No critical vulnerabilities or security issues were detected in the content or scripts. The WHOIS data aligns well with the website's claims, showing a consistent and legitimate registration. No WAF or blocking mechanisms interfere with content accessibility. Overall, the website presents a trustworthy and professional digital presence for an educational institution, with moderate technical sophistication and good privacy practices. Strategic improvements in security headers and formal security policies could further enhance its posture.

E

Engagiert in Flensburg - Ehrenämter und Freiwilligenbörse

engagiert-in-flensburg.de

44

The website engagiert-in-flensburg.de serves as a local platform dedicated to promoting volunteering and community engagement opportunities in Flensburg, Germany. It targets volunteers and organizations interested in Ehrenämter and Freiwilligenbörse activities. The platform operates likely as a non-profit or community service entity, focusing on connecting individuals with local volunteer opportunities. Technically, the site is built on WordPress using Elementor and integrates modern plugins such as Rank Math PRO for SEO and Google reCAPTCHA v3 for form security. Hosting is provided by agenturserver, a German hosting provider, which aligns with the website's regional focus. Security posture is moderate, with basic protections like reCAPTCHA but lacking advanced security headers and published policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site presents a good user experience with clear navigation and mobile optimization but requires improvements in transparency and security documentation to enhance trust and compliance.

T

Technisches Betriebszentrum AöR

tbz-flensburg.de

52

The Technisches Betriebszentrum Flensburg is a municipal service provider focused on environmental management, waste disposal, city maintenance, and infrastructure services for the city of Flensburg, Germany. The website presents a professional and comprehensive digital presence, offering detailed information about services, current news, and educational programs. The company maintains active communication channels including phone, email, and social media, enhancing accessibility for residents. Technically, the website is built on the gradwerk CMS 6 platform, utilizing modern web standards such as HTML5, CSS3, and JavaScript. It features responsive design and accessibility considerations, with a cookie consent mechanism compliant with GDPR. Performance is moderate with preloading of resources and optimized images. From a security perspective, the site enforces HTTPS and implements cookie consent management. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the municipal identity, supporting legitimacy. Overall, the site is trustworthy, well-maintained, and suitable for its public service role. Strategic improvements in security transparency and incident response readiness would further enhance its posture.

R

ruhr-concept KG

presse-service.de

57

ruhr-concept KG operates the website presse-service.de, a specialized press service portal established since 1995, targeting municipalities, associations, publishers, parties, companies, media offices, and hotel chains in Germany. The platform facilitates active press work by distributing press releases and media to editorial offices, subscribers, and readers. The website demonstrates a good level of content quality and professional design, with a strong focus on accessibility, integrating an advanced accessibility tool to support various user needs. Technically, the site is built on ASP.NET with Bootstrap and jQuery, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage but lacks explicit security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy but would benefit from enhanced security and compliance documentation.

B

BEOS AG

beos.net

10

BEOS AG is a leading German asset manager and project developer specializing in corporate real estate including office, production, logistics, and service spaces. The company positions itself as a market leader with a comprehensive portfolio and a strong focus on sustainability and ESG goals. Their website reflects a mature digital presence with professional design, multilingual support, and integrated analytics and consent management tools. Security posture is solid with HTTPS and captcha protections, though some HTTP security headers are not explicitly detected. The absence of WHOIS data is a notable anomaly but does not detract from the overall legitimacy indicated by the website content and business information. Strategic recommendations include enhancing security headers, publishing a security policy, and clarifying domain registration details.

W

Wildwechsel

wildwechsel.de

63

Wildwechsel is a regional German media platform specializing in event listings and cultural information for areas including Kassel, Paderborn, Marburg, Nordhessen, and OWL. The website offers comprehensive event data such as concerts, parties, theater, and local activities, targeting a general audience interested in regional happenings. Technically, the site is built on WordPress and integrates various modern web technologies including Google Fonts, FontAwesome, and multiple analytics and advertising scripts. Hosting is provided via GoDaddy, and the site uses HTTPS with a good SSL configuration. Security measures include anti-spam and bot detection services, but explicit security headers are lacking, and no formal privacy or cookie policies are detected, indicating room for compliance improvement. Overall, the site presents a professional and trustworthy front with moderate technical performance and good content quality.

L

LILA HILFE e.V.

lilahilfe.org

61

Lila Hilfe e.V. is a German non-profit feminist solidarity organization dedicated to supporting women affected by gender-based violence and structural discrimination. The organization operates primarily within Germany, providing financial aid, resources, and community support to its target audience. The website reflects a clear mission and offers membership and donation options to sustain its activities. Technically, the site is built on a modern React and Next.js framework, ensuring fast performance, excellent mobile optimization, and good accessibility. The content is rich, professionally presented, and highly relevant to its audience. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks explicit security headers and formal security policies. Privacy compliance is moderate, with a comprehensive privacy policy but no visible cookie consent mechanism. Overall, the domain appears legitimate despite the absence of WHOIS data, likely due to privacy protection common in non-profits. The site maintains a high trust level with clear branding and social media presence.

B

Breath:Sun:Bone:Blood

breathsunboneblood.com

46

Breath:Sun:Bone:Blood is a small independent music label based in Berlin, specializing in niche genres such as dark ambient, experimental, modern composition, black metal, and folk music. The website serves as a platform to showcase their releases, artists, and news, targeting music enthusiasts interested in these genres. The business model revolves around music distribution and artist promotion, with a presence on Bandcamp for direct music sales and streaming. Technically, the website is built on WordPress using the Enfold theme and several common plugins including LayerSlider and MediaElement.js. The site is moderately performant, mobile-optimized, and SEO-friendly with proper meta tags and structured data. Hosting and domain registration are consistent with the business location in Germany, using RegistryGate GmbH as the registrar. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks DNSSEC and explicit security headers, which are recommended to enhance security posture. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies are present and written in German, reflecting compliance with EU regulations. Overall, the website is professional, trustworthy, and safe for general audiences. The main areas for improvement include adding explicit contact information, security policies, and enhancing DNS and HTTP security configurations to strengthen trust and resilience against attacks.

T

TixforGigs

tixforgigs.com

70

TixforGigs operates as an online ticketing platform primarily serving the German market, offering ticket sales, event listings, and artist and venue promotion. The website is well-structured, mobile-optimized, and provides a user-friendly experience with features such as login, registration, password reset, and two-factor authentication. Privacy and cookie policies are present, reflecting GDPR compliance and a privacy-conscious approach. However, the absence of WHOIS data and explicit terms of service pages slightly detract from the overall trustworthiness. The technical stack includes modern JavaScript frameworks and libraries, and the site uses HTTPS with captcha protections on forms, enhancing security posture. Overall, the platform appears legitimate and professionally maintained but would benefit from improved transparency in domain registration and security headers.

B

BBZ Schleswig

bbzsl.de

46

BBZ Schleswig is a regional vocational training and continuing education institution based in Schleswig and Kappeln, Germany. The website serves as an informational portal for educational offerings targeting students and professionals seeking vocational qualifications. The technical infrastructure is built on WordPress using the Divi theme, incorporating common analytics tools such as Google Analytics and Facebook Pixel. While the site demonstrates good design quality and user experience, it lacks explicit privacy and cookie policies, as well as visible contact information, which impacts its privacy compliance and business credibility scores. Security posture is moderate with no detected security headers or vulnerability disclosures, indicating room for improvement in security best practices. Overall, the website is safe for general audiences and functions well as an educational resource.

Adiwidjaja Teamworks GmbH operates the domain atw.io, which currently hosts a minimal placeholder website with a 'Coming soon' message and an image. The company is registered in Germany since 2013, consistent with the domain registration data. The website lacks any descriptive business content, contact information, or policies, indicating it is not yet operational or publicly launched. The technical infrastructure is basic, with no detected CMS, frameworks, or advanced technologies. Security posture is minimal, with no security headers or DNSSEC enabled, though the domain uses a reputable registrar and is not privacy protected. Overall, the site presents low digital maturity and limited trust signals.

B

BrotHaus

brot-haus.de

49

BrotHaus is a German bakery business offering traditional and innovative baked goods through physical stores and an online shop. The website showcases their products, live events, and a customer loyalty program, positioning them as a regional retail bakery brand with a focus on quality and customer experience. Technically, the website is built on WordPress with WooCommerce and uses modern plugins and themes, providing a good user experience with multimedia content and mobile optimization. Security posture is adequate with HTTPS and some best practices, but lacks explicit security headers and privacy compliance documentation. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and contact transparency.

T

TC Buckenmaier

tc-buckenmaier.de

51

TC Buckenmaier is a leading fashion retail company based in the Hohenlohe/Franken region of Germany, offering a wide range of fashion products and services including women's, men's, children's fashion, wedding attire, and corporate fashion. The company emphasizes quality, style, and personalized service, positioning itself as a regional market leader with a strong brand presence. The website reflects this with professional design, clear navigation, and comprehensive content tailored to its target audience. Technically, the site is built on WordPress with WooCommerce for e-commerce capabilities, enhanced by popular plugins for SEO, marketing, and performance optimization. The infrastructure supports modern web standards, mobile responsiveness, and accessibility. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong, with a detailed privacy policy and cookie management aligned with GDPR requirements. Overall, the site is trustworthy and professionally managed, with no signs of blocking or malicious activity.