Germany security reports

M

M1 Sporttechnik

m1-sporttechnik.de

68

M1 Sporttechnik operates a professional e-commerce website specializing in custom electric bikes, targeting consumers interested in premium, innovative sport technology products. The website is built on the Shopify platform, leveraging modern technologies such as Google Analytics, Facebook Pixel, and GDPR-compliant cookie consent mechanisms. The business presents itself with clear branding, detailed product descriptions, and a user-friendly interface optimized for mobile devices. Security posture is strong with HTTPS enforced and appropriate security headers, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates a mature digital presence suitable for a small niche manufacturer in the transportation sector.

N

natureplus e.V.

natureplus.org

58

natureplus e.V. is a European non-profit organization dedicated to promoting sustainable, climate-protecting, and health-friendly building practices through certification and collaboration. The organization operates an eco-label for sustainable building materials and actively engages with industry experts, environmentalists, and scientists across Europe. The website reflects a mature digital presence with multilingual support, regular news updates, and event announcements, positioning natureplus as a recognized authority in sustainable construction. Technically, the site is built on Webflow with modern security measures including HTTPS, Cloudflare Turnstile, and Google reCAPTCHA, ensuring a secure user experience. However, the absence of a cookie consent banner and terms of service page indicates room for improvement in privacy compliance. The WHOIS data is incomplete, which slightly impacts trust but is mitigated by the professional site content and recognized certifications. Overall, natureplus e.V. demonstrates a solid security posture and credible business presence with recommendations to enhance privacy transparency and domain registration clarity.

WTA e.V. is an international non-profit association dedicated to promoting research and practical application in the field of building preservation and monument care. The organization provides technical guidelines, professional training, and organizes events to support practitioners and experts in this sector. The website is professionally designed using TYPO3 CMS, offering clear navigation and multilingual support (German and English). Contact information is transparent and accessible, enhancing business credibility. Technically, the website employs modern CMS technology and standard web technologies, with good mobile optimization and accessibility. However, there is room for improvement in security practices, such as implementing security headers and publishing privacy and terms policies. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. Security posture is solid with HTTPS enforced and secure form handling, but the absence of WHOIS data transparency and missing security headers slightly reduce trust. The website content is safe for general audiences, focusing on professional and educational material without any adult or questionable content. Overall, the site presents a trustworthy and professional front for WTA e.V., but enhancing transparency in domain registration and formalizing privacy and security policies would strengthen its security and compliance posture.

P

PORFIX CZ a.s.

porfix.de

56

PORFIX CZ a.s. is a medium-sized manufacturing company specializing in porous concrete building materials, serving primarily the construction industry in Germany and Central Europe. The company offers a range of products including Plansteine PORFIX, partition stones, and lintels, targeting builders, contractors, and construction professionals. The website is professionally designed with clear navigation, multilingual support, and regularly updated content such as news and references, indicating an active market presence. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and SVG graphics. It features responsive design optimized for mobile devices and includes a cookie consent mechanism compliant with GDPR. While no major CMS or frameworks are explicitly detected, the site appears custom-built with moderate performance and good SEO practices. From a security perspective, the site enforces HTTPS and implements cookie consent with analytics disabled by default, reflecting a privacy-conscious approach. However, it lacks explicit security headers and dedicated security or incident response policies, which could be improved to enhance trust and compliance. No vulnerabilities or suspicious patterns were detected in the content or WHOIS data. Overall, PORFIX demonstrates a solid digital maturity with good business credibility and privacy compliance. Strategic improvements in security policies and technical headers would further strengthen its posture. The domain registration aligns with the company's regional operations, supporting legitimacy and trustworthiness.

T

Thermona

thermona-shop.de

65

Thermona operates a professional German-language e-commerce website specializing in heating and energy products such as gas boilers, heating systems, and stoves. The site targets consumers and businesses in Germany seeking these products. The business model is retail e-commerce with a focus on energy sector products. The website demonstrates a mature digital infrastructure with integration of modern technologies including Google Tag Manager, Google reCAPTCHA, Mollie Payments, and Hotjar for analytics and user experience. Hosting is provided by webseitenserver, indicated by the nameservers. Security posture is solid with HTTPS enforced and anti-bot measures in place, though some security headers are not explicitly detected. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service pages found in the provided content. Overall, the website is professional, trustworthy, and well-structured for its market segment.

F

Fermeria

fermeria.de

49

Fermeria is a well-established online platform specializing in connecting caregivers, household helpers, tutors, and specialist professionals with clients across multiple European countries, primarily targeting the German market. The platform offers free profile creation and facilitates communication through symbolic fees, serving over 40,000 users since its founding in 2012. Its multi-country presence and professional design position it as a trusted intermediary in the healthcare and education sectors. Technically, the website employs modern web technologies including Google reCAPTCHA, Google Tag Manager, and CookieHub for privacy compliance, hosted by websupport.sk. The site is mobile-optimized and SEO-friendly, although accessibility features are basic. Security posture is solid with HTTPS enforced and anti-bot measures in place, but lacks explicit security headers and published security policies. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and safe for general audiences.

G

Georg Fritzmeier GmbH & Co. KG

fritzmeier.de

47

The Fritzmeier Group is a large German manufacturing company specializing in the production of customized vehicle components and environmental technology solutions for the Off-Highway and On-Highway industries. With approximately 2,200 employees, the company operates through four main business units: CABS, COMPOSITE, TECHNOLOGIE, and UMWELTTECHNIK, serving sectors such as construction machinery, agriculture, automotive, and municipal vehicles. The website reflects a professional corporate presence with detailed product and service descriptions, targeting B2B customers in specialized manufacturing sectors. Technically, the website is built on TYPO3 CMS, utilizing modern JavaScript libraries and responsive design techniques to ensure good mobile optimization and user experience. The site loads with moderate performance and includes structured navigation and SEO-friendly metadata. Analytics are implemented via Umami, indicating a privacy-conscious approach with minimal user tracking. From a security perspective, the site uses HTTPS (implied though not explicitly confirmed in HTML), but lacks visible security headers and cookie consent mechanisms. No incident response or vulnerability disclosure information is provided, which could be improved. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data shows standard domain registration with no privacy protection, consistent with a legitimate business. Overall, the Fritzmeier Group website demonstrates a solid business and technical foundation with room for improvement in security best practices and privacy compliance. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

P

Zubehör für Handys, Smartwatches und Tablets

protemio.de

58

The website www.protemio.de is an e-commerce platform specializing in accessories for mobile phones, smartwatches, and tablets, primarily targeting German-speaking consumers. The site operates on the Magento CMS platform and utilizes modern web technologies including jQuery and Google Tag Manager for analytics and marketing. The presence of multiple regional partner domains suggests a broader European market presence. Technically, the site is hosted behind Cloudflare, ensuring good SSL coverage and CDN performance. However, the site lacks visible privacy and cookie policies, which impacts its privacy compliance rating. Security-wise, HTTPS is enforced and Cloudflare provides a layer of protection, but the absence of security headers and incident response contact details are areas for improvement. Overall, the site is professionally designed with good navigation and mobile optimization, but it should enhance its privacy and security disclosures to improve trust and compliance.

A

Avira

avira.com

77

Avira is a well-established cybersecurity company offering a broad portfolio of security, privacy, and performance software solutions for multiple platforms including Windows, Mac, Android, and iOS. The company positions itself as a trusted provider of antivirus, VPN, system optimization, and password management tools, targeting both general consumers and business users globally. The website reflects a mature digital presence with professional design, comprehensive content, and strong branding consistency. Technically, the site employs modern web technologies, including Adobe DTM for tag management, Google Tag Manager, OneTrust for cookie consent, and various analytics tools, indicating a high level of digital maturity and performance optimization. Security-wise, the site enforces HTTPS, implements multiple security headers, and uses a consent management platform, demonstrating good security hygiene. However, the absence of publicly available WHOIS data for the domain is notable, though the overall trust signals and content quality suggest legitimacy. Strategic recommendations include publishing explicit security policies, vulnerability disclosure information, and DPO contact details to enhance transparency and compliance.

W

Wollmilchsau GmbH

jobspreader.com

70

Wollmilchsau GmbH operates the Jobspreader platform, a SaaS solution designed to support strategic and operational talent acquisition. The company positions itself as a recruiting co-pilot, offering tools for automated job ad placement, market data analytics, and recruiting business partnering. The website is professionally designed, well-structured, and targets HR professionals and talent acquisition teams primarily in Germany. Technically, the site is built on WordPress with Elementor, leveraging modern analytics and marketing tools such as Google Tag Manager, Crazy Egg, and LinkedIn Insight. Security is a key focus, evidenced by ISO/IEC 27001 certification and robust HTTPS implementation. Privacy compliance is addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site demonstrates a mature digital presence with strong business credibility and security posture.

K

Künstlerkolonie Fichtelgebirge

kueko-fichtelgebirge.de

45

Künstlerkolonie Fichtelgebirge is a regional network and platform dedicated to connecting cultural and creative professionals in the Fichtelgebirge region of Germany with the local economy. The website serves as a hub for creatives, offering business networking, a marketplace for creative products, and a coworking space project. The platform targets both creatives and local businesses, emphasizing the value and diversity of creative talent in rural areas. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, and it employs SEO best practices with Yoast SEO and structured data. The site is hosted on kasserver.com and uses HTTPS with a well-implemented cookie consent mechanism, reflecting good privacy compliance. Security posture is solid with no critical vulnerabilities detected, though improvements in security headers and incident response disclosures are recommended. Overall, the website is professional, trustworthy, and well-optimized for its audience and purpose.

F

Förderverein Fichtelgebirge e. V.

foerderverein-fichtelgebirge.de

45

Förderverein Fichtelgebirge e. V. is a regional non-profit organization dedicated to supporting and promoting the Fichtelgebirge region in Germany. The organization acts as an open future workshop for regional development, engaging in project funding, networking, and community activities. Their website reflects an active presence with project showcases, news updates, and membership information, targeting local residents and stakeholders. Technically, the website is built on WordPress with popular plugins such as WooCommerce, Elementor, and Contact Form 7, hosted likely by 1&1 IONOS. The site is well-structured, mobile-optimized, and uses HTTPS with Google reCAPTCHA for form security. However, it lacks explicit cookie consent mechanisms and security headers, which are areas for improvement. The WHOIS data is minimal but consistent with the organization's regional focus and domain age. Overall, the website demonstrates good business credibility and technical maturity for a small non-profit entity.

W

Wirtschaftsregion Hochfranken

hochfranken.org

66

Wirtschaftsregion Hochfranken is a regional economic development organization focused on promoting one of Europe's most industrialized regions in Germany. The website serves as a platform for regional businesses, investors, and job seekers, offering services such as a job portal, newsletters, and membership information. The business model centers on regional economic promotion and industry support, with a medium-sized organizational footprint founded around 2020. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, with Google Tag Manager and Usercentrics for analytics and consent management. The site demonstrates good mobile optimization and SEO practices but lacks explicit privacy and terms of service pages. Security posture is moderate with HTTPS enabled but missing security headers and limited WHOIS transparency. Overall, the website is professional and trustworthy but could improve compliance and security practices.

S

Seibert Group GmbH

seibert-media.net

67

Seibert Group GmbH is a technology consulting company specializing in agile scaling, modern work environments, and IT service management (ITSM). They provide a comprehensive suite of services including Atlassian Cloud solutions, Jira and Confluence consulting, SAFe agile scaling, Google collaboration tools, and professional training and advisory services. Positioned as an expert in the German-speaking market, the company targets businesses seeking to optimize collaboration and agile transformation. The website reflects a medium-sized enterprise founded in 2021, with a clear and professional digital presence. Technically, the website is built on WordPress using Elementor and integrates modern web technologies such as FontAwesome and jQuery. It employs HubSpot for marketing and analytics, and Borlabs Cookie for GDPR-compliant cookie consent management. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in technical modernization and security hardening. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled, and no explicit security headers or published security policies were found. There is no visible incident response or vulnerability disclosure information, which could be improved to enhance trust and compliance. The WHOIS data is transparent and consistent with the business identity, supporting a high legitimacy score. Overall, the website is professional, trustworthy, and business-focused, with moderate security and privacy compliance maturity. Strategic improvements in security policies, DNS security, and privacy documentation would further strengthen their posture.

The Fichtelgebirgsmuseum website represents a small cultural institution based in Germany, focusing on museum-related content. The site uses Bootstrap 5.3.3 and the CONTAILOR CMS platform, indicating a moderate level of technical infrastructure. The website is accessible without any WAF or security challenges, but it lacks critical compliance documents such as privacy and cookie policies. No contact information or social media presence is evident from the provided data, which limits user engagement and trust signals. Security posture is minimal with no detected security headers or incident response information, suggesting room for improvement in protecting user data and complying with GDPR requirements. Overall, the site is functional but basic, with moderate technical implementation and limited business credibility indicators.

Z

Ziller Holding GmbH & Co. KG

ziller-holding.de

48

Ziller Holding GmbH & Co. KG is a well-established German holding company founded in 1926, managing a portfolio of over 25 companies primarily in the production and industrial services sectors. The website reflects a professional corporate presence with a focus on showcasing its business portfolio. The technical infrastructure is based on WordPress with modern plugins such as Elementor and Yoast SEO, complemented by Google services for analytics and tag management. The site implements a comprehensive cookie consent mechanism aligned with GDPR requirements, enhancing privacy compliance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities or exposed sensitive data. However, explicit privacy policy and terms of service pages are not detected in the provided content, which slightly impacts privacy compliance scoring. Overall, the website demonstrates a mature digital presence suitable for its business scale and industry.

K

Kroll & Ziller GmbH Co. KG

kroll-ziller.de

47

Kroll & Ziller GmbH Co. KG is a well-established German manufacturer specializing in high-quality sealing solutions, particularly Gummi-Stahl-Dichtungen (rubber-steel gaskets). With over 80 years of experience, the company serves industrial sectors including water supply, gas, chemical, mining, and fire protection. The website positions the company as a market leader with a strong focus on product quality and technical support. Technically, the site is built on WordPress using the Divi theme and integrates modern cookie consent tools (Cookiebot and Usercentrics) to comply with GDPR requirements. Security posture is solid with HTTPS and consent management, though some security headers and explicit policies are missing. Overall, the site is professional, well-branded, and trustworthy, though improvements in privacy policy publication and contact transparency are recommended.

H

Welcome | Hydrogen Technology World Expo 2025

hydrogen-worldexpo.com

64

Hydrogen Technology World Expo 2025 is a major industry event focused on hydrogen and fuel cell technologies, scheduled to take place in Hamburg, Germany. The website serves as a comprehensive platform for event information, including conference tracks, speakers, exhibitors, and registration details. The event targets companies and professionals involved in the hydrogen energy sector, aiming to facilitate networking, knowledge sharing, and showcasing of innovative technologies. Technically, the website is built on the SHOWOFF CMS platform by ASP.events, utilizing modern JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel. The site is mobile-optimized and uses HTTPS, ensuring secure access. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Additionally, the lack of explicit privacy policy and contact information pages limits transparency. Overall, the site is professionally designed and content-rich but would benefit from enhanced compliance and trust signals.

B

BD|SIMEX

bdsimex.de

40

BD|SIMEX, a division of BD|SENSORS GmbH, specializes in measurement data acquisition and visualization solutions targeting industrial customers primarily in the energy sector. Their product portfolio includes process indicators, data loggers, impulse counters, I/O modules, and related accessories. The website is professionally designed, primarily in German with English support, and provides comprehensive product news, catalogs, and contact options. Technically, the site is built on TYPO3 CMS, uses modern web technologies including Google Analytics and Tag Manager, and enforces HTTPS for secure communication. However, it lacks advanced security headers and explicit security or incident response policies. Privacy compliance is addressed with a cookie consent banner and a privacy policy page. Overall, the site demonstrates a solid business presence with moderate technical maturity and good privacy practices.

F

Freiraum Fichtelgebirge

freiraumfuermacher.de

49

Freiraum Fichtelgebirge is a regional development and community engagement platform focused on promoting the Fichtelgebirge region in Germany. The website serves residents, businesses, innovators, and visitors by providing rich content about local culture, innovation, sustainability, and economic development. It leverages partnerships with regional organizations to strengthen its market position and community impact. Technically, the site is built on WordPress with modern plugins for SEO, multilingual support, and cookie management, hosted on a professional provider (netcup). The site demonstrates good performance, mobile optimization, and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be enhanced. Privacy policies are comprehensive and GDPR compliant. No critical vulnerabilities or suspicious WHOIS patterns were detected, indicating a trustworthy domain and hosting setup. Overall, the website is professional, secure, and well-aligned with its business goals.

B

BEULCO GmbH & Co. KG

beulco.de

50

BEULCO GmbH & Co. KG is a medium-sized German manufacturing company specializing in brass components and systems for water supply, drinking water protection, and house connections. With a history dating back to 1950, BEULCO operates four main business divisions focusing on industry, water, digital solutions, and cleaning/disinfection. The company positions itself as a trusted partner offering high-quality products, innovative digital monitoring solutions, and comprehensive services. The website reflects a mature digital presence built on TYPO3 CMS, with good mobile optimization, clear navigation, and professional content. Security posture is strong with HTTPS, CAPTCHA integration, and consent management, though some security headers could be explicitly confirmed. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness.

F

Franken Plastik

frankenplastik.com

48

Franken Plastik GmbH is a German company specializing in signage and identification marking systems for municipalities, public utilities, power supply companies, and industrial enterprises. With over 50 years of experience and a domain registered since 2000, the company holds recognized certifications such as ISO 9001 and EcoVadis, positioning itself as a trusted provider in the energy and transport sectors. Their product offerings include plastic and metal signage, measuring posts, and digital maintenance solutions integrating RFID and QR codes. The website is built on TYPO3 CMS, featuring a modern and professional design with good mobile optimization and clear navigation. Social media presence on LinkedIn, Instagram, and YouTube supports their brand visibility. However, the site lacks explicit cookie consent mechanisms and visible security headers, which impacts privacy compliance and security posture scores. No incident response or security policy pages were found, indicating room for improvement in transparency and security readiness. Overall, the website is credible and functional but could enhance its security and privacy compliance to meet higher standards.

K

Kroll & Ziller GmbH Co. KG

kroll-ziller.com

47

Kroll & Ziller GmbH Co. KG is a well-established German manufacturer specializing in high-quality sealing solutions, particularly Gummi-Stahl-Dichtungen (rubber-steel gaskets). With over 80 years of experience, the company holds a leading market position serving sectors such as water supply, gas, chemical industry, mining, and fire protection. Their product portfolio includes custom flange gaskets, profile seals, and adjustable wedge rings, supported by quality certifications like ISO 9001 and TÜV Süd. The website reflects a professional and consistent brand image targeting industrial clients with clear navigation and relevant content. Technically, the site is built on WordPress with the Divi theme, incorporating modern SEO and privacy tools such as Cookiebot and Usercentrics. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, well-maintained, and compliant with basic privacy standards, though improvements in transparency and security documentation are recommended.

B

BD|SENSORS GmbH

bdsensors.de

59

BD|SENSORS GmbH is a well-established German company specializing in electronic pressure and level measurement technology for industrial applications. With nearly 30 years of experience, the company offers a broad product portfolio including analog and digital pressure transmitters, level probes, calibration services, and customized solutions. The website reflects a professional and comprehensive digital presence, supporting multiple languages and providing detailed product and company information. The company maintains a strong market position as an innovative and reliable solutions provider in the manufacturing sector.

O

Otto Group

ottogroup.com

55

Otto Group is a large, internationally operating retail and services group headquartered in Germany, employing approximately 41,000 people. The corporate website presents a professional and well-structured digital presence, targeting general public, business partners, and job seekers. The site emphasizes responsible commerce and sustainability, reflecting the company's values and market positioning as a major player in retail and e-commerce sectors. Technically, the website is built on Weblication CMS and uses Matomo analytics with cookie disabling for privacy. The site is mobile-optimized and features good SEO practices, although accessibility features could be improved. Security posture is moderate with HTTPS enforced and some privacy-conscious tracking settings, but lacks visible security headers and cookie consent mechanisms. WHOIS data is unavailable or inconsistent, which slightly impacts trust but the website content and social media presence strongly indicate legitimacy. Overall, the site is professional and trustworthy but could enhance privacy compliance and security best practices.

R

REHAU New Ventures

newventures.io

64

REHAU New Ventures operates as the corporate venturing unit of the REHAU Group, focusing on collaboration with startups to drive innovation within the core business and beyond. Their business model includes venture clienting, venture capital investments, and venture building to capture new market opportunities. The company positions itself as an innovation catalyst embedded within a large industrial group, targeting startups, investors, and corporate partners. The website reflects a professional and consistent brand image with clear messaging and leadership profiles. Technically, the website is built on the Webflow platform, leveraging modern JavaScript libraries such as jQuery and Swiper.js, and integrates Google Tag Manager and HubSpot for analytics and marketing automation. The site is well-optimized for mobile devices, fast loading, and includes accessibility considerations. Privacy compliance is addressed through a consent management platform and comprehensive privacy and cookie policies. From a security perspective, the site enforces HTTPS and includes standard security headers, but lacks explicit published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and ownership verification. Overall, the website presents a low-risk profile with strong business credibility and technical maturity, but the domain registration inconsistency warrants further verification to ensure trustworthiness and reduce potential risks.

D

DIHK (Deutscher Industrie- und Handelskammertag)

emas-register.de

59

The website emas-register.de serves as the official German portal for the Eco-Management and Audit Scheme (EMAS), a European Union environmental management system. It is operated under the auspices of the Deutscher Industrie- und Handelskammertag (DIHK), providing authoritative information, registration services, and resources for organizations committed to environmental compliance and continuous improvement. The site targets businesses and organizations in Germany seeking EMAS registration and related information. Technically, the site is built on a modern Angular framework with Material Design components, ensuring a responsive and user-friendly interface. Hosting is supported by Microsoft Azure infrastructure, indicated by Azure DNS servers, which suggests reliable and scalable hosting. The site includes a cookie consent mechanism via Klaro, reflecting attention to privacy compliance. SEO and accessibility are adequately addressed, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and employs cookie consent, but lacks explicit security headers and incident response disclosures. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data aligns with the website's official nature, showing consistent domain registration and professional hosting. Overall, the site demonstrates a solid security posture but could benefit from additional transparency regarding security policies and incident handling. The overall risk is low given the official nature and lack of suspicious indicators. Strategic recommendations include implementing security headers, publishing a vulnerability disclosure policy, and enhancing accessibility features to further strengthen trust and compliance.

W

World-Flying-Disc-Federation

wfdf.sport

60

The World Flying Disc Federation (WFDF) operates as the global governing body for flying disc sports, including disciplines such as Ultimate, Disc Golf, and Freestyle. The organization is positioned as a non-profit entity focused on sport governance, event management, and global sport development. Their website reflects a professional and consistent brand presence, targeting athletes, federations, and enthusiasts worldwide. The business model centers on providing governance, rankings, and event services to the flying disc sports community. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and several specialized plugins for events and team management. Hosting and domain registration are consistent with the organization's identity, and the site demonstrates moderate performance and good mobile optimization. Analytics tools such as Google Analytics and Tag Manager are used for user tracking. From a security perspective, the site enforces HTTPS and employs standard security practices, though it lacks DNSSEC and a published security.txt or vulnerability disclosure policy. Privacy compliance is supported by a comprehensive privacy policy aligned with GDPR, but the absence of a cookie consent mechanism is a minor compliance gap. Contact information is primarily via web forms, with no explicit phone numbers or physical addresses found. Overall, the website presents a trustworthy and professional digital presence with a solid security posture and good business credibility. Strategic improvements in DNS security, incident response transparency, and cookie consent would enhance compliance and security maturity.

A

Albert Schweitzer Stiftung für unsere Mitwelt

albert-schweitzer-stiftung.de

56

Albert Schweitzer Stiftung für unsere Mitwelt is a German non-profit organization dedicated to animal welfare, specifically targeting the abolition of factory farming. The website serves as an educational and advocacy platform, providing detailed information on animal species affected by intensive farming, current campaigns, and ways for the public to engage and support the cause. The organization maintains a strong presence on multiple social media platforms and offers newsletters to keep supporters informed. Technically, the website employs modern web technologies including Bootstrap 5.2, Select2, and integrates third-party services such as Google Tag Manager, Google Analytics, Facebook Pixel, and CleverReach for newsletters. Hosting appears to be on Amazon AWS infrastructure, ensuring reliable performance and scalability. The site is mobile-optimized with good accessibility and SEO practices. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. However, explicit security headers and a published security policy or incident response plan are not evident. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission. The lack of direct contact emails or phone numbers is mitigated by a contact form. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

O

OmniCert Umweltgutachter GmbH

omnicert.de

46

OmniCert Umweltgutachter GmbH is a specialized environmental certification and consulting company based in Germany, focusing on sustainability, renewable energy, and energy management certifications such as ISO 50001, ISO 14001, and EMAS. The company serves a diverse clientele including industry, medium-sized enterprises, authorities, and the charitable sector, with a strong emphasis on biogas and biomass energy sectors. Their market position is strengthened by accreditations and memberships in recognized environmental and sustainability programs. Technically, the website employs standard web technologies including jQuery and Modernizr, hosted on a custom or proprietary CMS platform. The site is moderately performant with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS and shows no immediate vulnerabilities or exposed sensitive data. However, it lacks explicit security headers, incident response information, and a cookie consent mechanism, which are important for GDPR compliance and overall security posture. No tracking or analytics scripts were detected, indicating a privacy-conscious approach. Overall, the website presents a professional and trustworthy image with strong business credibility but could improve in privacy compliance and security best practices to enhance user trust and regulatory adherence.

L

Nejlevnější akční letenky – Zajištěte si ty nejvýhodnější akční lety do destinací po celém světě. U nás rezervujete nejen lety, ale i ubytování, pronájem auta a cestovní pojištění, vše za skvělé ceny. S nabídkou letů od více než 800 leteckých společností.

letenky.de

39

Letenky.de is a German-based travel deals website specializing in offering discounted flight tickets, weekend stays, and vacation packages. The platform aggregates offers from over 800 airlines and provides additional travel services such as car rentals and travel insurance. The website targets budget-conscious travelers primarily in Europe seeking affordable travel options. Technically, the site is built on WordPress with Bootstrap and jQuery, featuring a professional design and moderate performance. Security posture is adequate with HTTPS enabled but lacks important security headers and formal privacy or cookie policies, indicating compliance gaps. No contact or incident response information is provided, which may impact user trust and regulatory compliance. Overall, the site functions as an affiliate marketing platform with a moderate trust level and room for improvement in security and privacy practices.

R

REHAU New Ventures

rehau-newventures.com

65

REHAU New Ventures is the corporate venturing unit of the REHAU Group, focused on driving innovation by collaborating with startups, investing in promising ventures, and co-creating new businesses beyond the core manufacturing operations. The website presents a professional and well-structured digital presence with clear messaging about their mission, heritage, and leadership team. The company targets startups, investors, and corporate partners, positioning itself as a strategic innovation hub within a medium-sized manufacturing group headquartered in Germany. Technically, the website leverages modern web technologies including Webflow CMS, jQuery, Swiper.js, and integrates Google Tag Manager and a consent management platform, ensuring good performance, mobile optimization, and privacy compliance. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be investigated further to ensure trustworthiness. Overall, the site scores well on content quality, technical implementation, and privacy compliance, but business credibility is slightly impacted by the domain registration anomaly.

M

Meraxis

meraxis-group.com

59

Meraxis is a German-based company specializing in polymer distribution and related services, targeting the polymer processing industry with a comprehensive one-stop shop business model. The company emphasizes sustainability, digitalization, and supply chain efficiency, supported by certifications such as EcoVadis, ISCC PLUS, and RecyClass. The website is professionally designed using TYPO3 CMS, featuring customer and supplier portals, and is available in German and English. Technically, the site uses modern frontend libraries like Swiper.js and integrates Google Tag Manager for analytics. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers are not detected. The absence of WHOIS data for the domain is a concern for domain legitimacy verification, but the website content and certifications indicate a credible business. Overall, the site scores well on content quality, technical implementation, and business credibility, with room for improvement in security transparency and contact information availability.

R

RAUMEDIC AG

raumedic.com

67

RAUMEDIC AG is a large German company specializing in polymer-based medical and pharmaceutical solutions, serving the biopharmaceutical and healthcare industries globally. Their website demonstrates a strong market position with a comprehensive product portfolio, including medical tubing, drug delivery systems, and bioprocess equipment. The company emphasizes innovation, quality manufacturing, and customer support, supported by an online shop and detailed informational content. Technically, the website is built on TYPO3 CMS with modern JavaScript components and is well-optimized for mobile and accessibility. Security posture is strong with HTTPS, cookie consent management, and no visible vulnerabilities, though some security headers could be explicitly confirmed. Privacy compliance is robust with GDPR-aligned policies and consent mechanisms. The absence of WHOIS data is a notable anomaly but does not detract from the overall professionalism and trustworthiness of the site. Strategic recommendations include enhancing security header implementation, publishing a vulnerability disclosure policy, and monitoring domain registration status.

S

SMA Solar Technology AG

sunnyportal.com

65

SMA Solar Technology AG operates the Sunny Portal, a platform dedicated to monitoring and managing solar energy systems. The company is well-established, founded in 2004, and positioned as a key player in the solar energy sector, offering services such as energy management applications and user support. The website reflects a professional business model targeting solar system owners and professionals, providing tools and resources to optimize solar energy usage. Technically, the site is built on Microsoft ASP.NET Web Forms, utilizing RequireJS and jQuery, with integration of Google Tag Manager and a consent management system to comply with privacy regulations. The infrastructure appears stable with moderate performance and basic mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit incident response or vulnerability disclosure policies are publicly available. Overall, the website is trustworthy, professional, and compliant with GDPR, but could improve in security header implementation and mobile accessibility. The domain registration data aligns well with the business identity, reinforcing legitimacy.

O

ORCA Software GmbH

orca-software.com

62

ORCA Software GmbH is a medium-sized German technology company specializing in software solutions for the construction industry, focusing on AVA (tendering, awarding, billing), cost management, BIM integration, and product data management. Their offerings include the ORCA AVA software and the AUSSCHREIBEN.DE online database, targeting architects, engineers, planners, housing companies, authorities, and product manufacturers. The company emphasizes digital transformation and sustainability in construction. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site runs on WordPress with modern plugins and SEO tools, ensuring good performance and accessibility. Security posture is solid with HTTPS and consent management, though explicit security headers are not detected and WHOIS data is missing, which raises some concerns about domain registration transparency. Overall, the site is trustworthy and business credible, but domain registration inconsistencies warrant monitoring.

W

Startseite | WirliebenBau

wirliebenbau.de

48

The website www.wirliebenbau.de appears to be a German-language site focused on construction or building services, as suggested by the domain name and language. The site uses WordPress CMS with popular plugins such as Yoast SEO and Elementor, indicating a moderate level of digital maturity. The technical infrastructure is standard for small to medium business websites, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit privacy or cookie policies. No contact information or incident response details are present, which limits user trust and compliance with privacy regulations. Overall, the site is functional and professional but would benefit from enhanced security and compliance features.

D

DIAL GmbH & RELUX Informatik AG

gldf.io

60

GLDF.io is the official website for the Global Lighting Data Format, an open, modular XML-based data format developed and maintained by DIAL GmbH and RELUX Informatik AG, two established German companies in the lighting industry. The website serves as a resource hub offering documentation, schema references, and tools for manufacturers and software developers to adopt and implement GLDF. The project is positioned as an emerging industry standard aiming to streamline lighting product data exchange and integration with BIM and lighting planning software. Technically, the site is built on the modern Docusaurus framework with Algolia-powered search, delivering a fast, accessible, and well-structured user experience. Security posture is moderate with HTTPS enforced but lacking advanced security headers and cookie consent mechanisms. The domain registration is transparent and consistent with the business, supporting trustworthiness. Overall, the site is professional and credible, though improvements in privacy compliance and security policies are recommended.

Promotray operates a secure data storage service accessible via a Nextcloud-based login portal. The website is primarily a login interface with minimal public-facing content, focusing on providing a safe home for user data. The technical infrastructure leverages Nextcloud version 31.0.7 and Vue.js for frontend interactivity, hosted on aditsystems.hosting. The site uses HTTPS and modern web technologies, indicating a moderate level of digital maturity. However, the absence of public privacy, cookie, and terms of service policies, as well as lack of contact information, limits transparency and user trust. Security posture is adequate with HTTPS and session management features, but could be improved by adding security headers and incident response contacts. Overall, the site is functional and secure for its purpose but lacks comprehensive compliance and business transparency features.

Z

Zalando SE

zalando.de

47

Zalando SE operates a leading European online fashion retail platform offering a wide range of shoes, clothing, accessories, and beauty products from over 1,900 brands. The website targets consumers interested in fashion and lifestyle products, providing free delivery and returns to enhance customer experience. The company is well-established with a domain age consistent with its founding year of 2008 and operates multiple regional sister sites. Technically, the website employs modern JavaScript frameworks such as React and RequireJS, hosted on Amazon AWS infrastructure, ensuring fast performance and mobile optimization. Security measures include HTTPS enforcement, security headers, and consent management via Usercentrics, reflecting a mature security posture. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR, making it a reliable e-commerce platform.

O

OTTO GmbH & Co. KGaA

otto.com

63

OTTO GmbH & Co. KGaA operates a comprehensive corporate website focused on its e-commerce and retail business. The site highlights the company's culture, digital transformation, sustainability efforts, and press relations. It serves multiple audiences including consumers, partners, job seekers, and media. The company is positioned as a large, established player in the German and European e-commerce market with a broad product offering and thousands of partners. Technically, the website uses modern web technologies, is hosted on Akamai CDN, and integrates Google Analytics and social media widgets, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, CSRF tokens, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-optimized for performance and accessibility.

L

Fotos, Fotobücher, Wandbilder, Fotogeschenke & mehr online

limango-fotos.de

67

The website limango-fotos.de is a German e-commerce platform specializing in photo products such as photo prints, photo books, wall pictures, and photo gifts. It positions itself as a provider of affordable, high-quality photo products with fast delivery and easy ordering. The target audience is general consumers interested in personalized photo products. The business operates in the e-commerce sector with a medium-sized footprint and consistent branding. The website uses modern web technologies including PrimeFaces JSF components, jQuery, Google Tag Manager, and Visual Website Optimizer for analytics and optimization. Consent management is implemented via Cookiefirst, indicating attention to privacy compliance. Security posture is good with HTTPS enforced and secure cookie settings, though the absence of explicit security headers and published security policies suggests room for improvement. No contact information or privacy policy pages were detected, which impacts privacy compliance and business credibility scores. Overall, the website is professionally designed, mobile-optimized, and safe for general audiences, but could enhance trust by publishing comprehensive privacy and security information.

L

limango Travel

limango-travel.de

57

limango Travel is an online travel booking platform specializing in family-friendly and wellness vacation accommodations primarily in Germany and selected European destinations. The website offers a structured and detailed catalog of travel options including family hotels, wellness resorts, summer holidays, vacation apartments, all-inclusive packages, and discount deals. The target audience is families and couples seeking curated travel experiences. The platform is moderately mature technically, leveraging modern JavaScript frameworks such as Vue.js and PrimeVue, hosted on Amazon AWS infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS implied but lacks visible advanced security headers and formal security policies. Privacy compliance is basic with a cookie consent banner present but no visible privacy policy or terms of service in the provided content. Contact information is clearly provided with dedicated phone lines for Germany and Austria and a company email address. Overall, the site is professional and trustworthy but could improve transparency and security practices.

Z

Zenner International GmbH & Co. KG

zenner.com

70

Zenner International GmbH & Co. KG is a well-established global leader in manufacturing water, heat, and gas meters, along with digital metering solutions leveraging IoT and LoRaWAN® technologies. The company targets utility providers and industrial customers worldwide, with a strong presence in Europe, Asia, and Latin America. Their website reflects a mature digital presence built on WordPress, showcasing a broad product portfolio with detailed descriptions and multilingual support. Technically, the site uses modern web technologies and common plugins, providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some advanced security headers and explicit incident response information. The domain registration data is consistent with the company's claims, showing a long-standing and legitimate online presence. Overall, the website is professional and trustworthy but could improve privacy transparency and security practices.

R

RETOURA

retoura.de

66

RETOURA operates a German e-commerce platform specializing in certified B-Ware products, positioning itself as a sustainable and affordable alternative to new and used goods. The website emphasizes trust through its Trusted Shops certification and offers customer-friendly policies such as a 30-day withdrawal period and free returns. Technically, the site leverages modern e-commerce technologies including jQuery, Doofinder search, Google Tag Manager, and PayPal Commerce SDK, hosted behind Cloudflare for performance and security. Security posture is strong with HTTPS enforcement, secure forms, and consent-based cookie management, though explicit security and incident response policies are not published. Overall, RETOURA presents a professional, trustworthy, and user-friendly online retail experience with moderate tracking and good privacy compliance.

L

limango

limango.de

66

limango is a well-established German e-commerce platform specializing in family-oriented products including fashion, toys, home living, and travel offers. It operates under the Otto Group umbrella, serving over one million families with daily sales campaigns and exclusive brand partnerships. The platform emphasizes discounted pricing and a seamless shopping experience via web and mobile apps. Technically, limango employs modern frameworks such as React and Next.js, hosted on AWS infrastructure with CDN support, ensuring fast and responsive performance. Security is robust with HTTPS, security headers, and consent management implemented, though explicit incident response and vulnerability disclosure policies are absent. Overall, limango presents a mature digital presence with strong business credibility and compliance adherence.

Z

Zalando SE

zalando-lounge.de

48

Lounge by Zalando is a prominent online outlet platform operated by Zalando SE, offering significant discounts on fashion, home goods, and premium lifestyle products. The website targets a broad European audience with localized domains and provides a seamless shopping experience with daily updated deals. Technically, the site leverages modern web technologies including React, RequireJS, and integrates advanced consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and error tracking, though there is room for improvement in security headers and explicit data protection officer contact. Overall, the platform demonstrates high professionalism, trustworthiness, and compliance with GDPR, making it a reliable e-commerce destination.

J

JUNG

jung-europe.de

46

JUNG is a specialized provider of customized promotional products and packaging solutions, targeting businesses seeking tailored advertising materials to strengthen their brand impact. The website is professionally designed using WordPress with multilingual support and SEO optimization via Yoast. The technical infrastructure includes modern JavaScript libraries such as jQuery and GSAP, and cookie consent is managed through Cookiebot, ensuring GDPR compliance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although additional security headers and policies could enhance protection. No contact emails or phone numbers are explicitly provided, and no terms of service or security policies are visible, indicating areas for improvement in transparency and compliance documentation. Overall, the site is accessible, well-structured, and trustworthy for its business audience.

T

Troika Onlineshop

troika.de

51

Troika Onlineshop is a German e-commerce business specializing in modern gift ideas for men and women. The website presents a broad assortment of gifts and targets a general audience interested in design-oriented presents. The company appears to have been established around 2014, with hosting and domain registration consistent with a German-based small business. The website's technical infrastructure includes Google Tag Manager for analytics and a chat widget for customer interaction, hosted on Telekom domains, indicating reliable local hosting. However, the CMS and backend technologies are not explicitly identified from the provided data. From a security perspective, the website lacks visible security headers and formal privacy or cookie policies, which are critical for GDPR compliance and user trust. No incident response or vulnerability disclosure mechanisms are evident, and no contact information is explicitly provided in the analyzed content. The SSL configuration and HTTPS enforcement could not be fully assessed from the HTML snippet, but the presence of canonical HTTPS URLs suggests at least basic SSL usage. Overall, the website is functional and professionally designed with good SEO metadata and mobile optimization. However, the absence of privacy and cookie policies, security headers, and contact details reduces its compliance and security posture. Strategic improvements in these areas would enhance trustworthiness and regulatory compliance.

L

L-SHOP-TEAM GmbH

l-shop-team.de

52

L-SHOP-TEAM GmbH operates a professional wholesale e-commerce platform specializing in textiles for promotion, leisure, and professional use. The company positions itself as Germany's largest textile wholesaler in its niche, offering a broad product range including workwear, sportswear, accessories, and promotional items. The website targets business customers and organizations seeking bulk textile purchases. Technically, the site is built on OXID eShop CMS, leveraging modern web technologies such as HTML5, CSS3, JavaScript, and Matomo for analytics. The site is mobile-optimized with good navigation and content quality. Security posture is adequate with HTTPS enforced and secure login forms, though improvements are recommended in security headers and form protections. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website is trustworthy and professionally maintained, with clear contact information and social media presence.