Germany security reports

S

STUAL Dienstleistungsgesellschaft mbH

stual.de

62

STUAL Dienstleistungsgesellschaft mbH is a specialized logistics and transport services provider focusing on international transport projects, particularly in the CIS states and EU countries. The company emphasizes quality and reliability, supported by its ISO 9001 certification. Their website reflects a professional business presence with clear service offerings and contact information. Technically, the site is built on WordPress with common plugins such as Yoast SEO and Contact Form 7, hosted on one.com, and includes a compliant cookie consent mechanism. Security posture is solid with HTTPS and cookie consent, though security headers and incident response information are lacking. Overall, the site is trustworthy and well-structured, supporting the company's business goals effectively.

E

EFN GmbH

efn-gmbh.com

52

EFN GmbH is a German manufacturing company specializing in prototype, pilot, and small series production primarily for electronic components and electromobility sectors. With over 30 years of experience, the company offers modular and scalable manufacturing solutions including manual assembly, contract manufacturing, and precision machining. The website reflects a professional and consistent brand presence targeting businesses requiring specialized manufacturing services. Technically, the site uses modern web technologies with Google Tag Manager and CookieYes for analytics and cookie consent, but lacks advanced security headers and published security policies. The domain is well-established and consistent with the company's history, enhancing trustworthiness. Overall, the site is well-designed, mobile-optimized, and provides clear contact information, though it could improve in security transparency and incident response readiness.

P

Ist das Paradies im "Apfelbäumchen" oder woanders auf der Welt? - Vai paradīze ir "ābelē" vai kaut kur citur pasaulē? is under construction

paradies-apfelbaum.de

35

The website paradies-apfelbaum.de is a small personal blog focused on life, travel, and happiness, currently under construction. The site uses WordPress with an under construction plugin and basic technologies such as Bootstrap and jQuery. The content is minimal and placeholder in nature, indicating the site is not yet fully launched or populated with business information. The technical infrastructure is standard for small WordPress blogs, hosted on German servers (kasserver.com). Security posture is weak due to lack of HTTPS enforcement and missing security headers. No privacy or cookie policies are present, and no contact information is provided, limiting trust and compliance. Overall, the site is safe for general audiences but lacks maturity and professionalism in its current state.

T

tankpool24 GmbH

tankpool24.eu

51

tankpool24 GmbH operates a professional and extensive fuel card network across Germany and Europe, targeting logistics and transportation professionals. The company offers a variety of services including fuel cards, digital driver cards, LNG fueling, and parking solutions, positioning itself as a reliable partner for fleet operators. The website is built on TYPO3 CMS and features modern web technologies with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforced and privacy compliance evident through cookie consent and a comprehensive privacy policy. However, some security best practices such as security headers and incident response information could be improved. Overall, the website reflects a credible and established business with a clear market position in the transportation sector.

A

AUTO1.com GmbH

auto1.com

78

AUTO1.com is a leading European digital wholesale platform specializing in used cars, serving over 60,000 partners across more than 30 countries. The platform offers comprehensive digital solutions for buying and selling used cars, including logistics and document handling, supported by dedicated account managers. The website is professionally designed, mobile-optimized, and provides extensive content and services tailored for B2B car dealers and remarketing partners. Technically, the site uses modern frameworks such as Next.js and React, with fast performance and good SEO practices. Security posture is strong with HTTPS and secure forms, though explicit security headers and policies could be more visible. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with consent mechanisms. WHOIS data is unavailable, which slightly impacts trust but the overall business credibility remains high due to strong branding and market presence.

M

marstall GmbH

marstall.eu

44

Marstall GmbH operates a professional multi-country website offering premium horse feed products tailored to various European markets. The company presents itself as an established medium-sized business with a clear focus on equestrian nutrition. The website provides country-specific portals, contact information, and social media presence, indicating a mature digital footprint. Technically, the site uses common web technologies such as jQuery, Bootstrap, and Google Analytics, with HTTPS enabled ensuring secure communication. However, the absence of security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. The WHOIS data is not publicly available due to EURid privacy policies, but the website content and contact details align with a legitimate business entity based in Germany. Overall, the site demonstrates good professionalism and trustworthiness but would benefit from enhanced security and privacy features.

The website for gerryweber.com currently presents a minimalistic thank you page with no substantive content, policies, or contact information. The domain is well-established since 1999 and likely represents a large retail fashion business based in Germany. However, the digital presence as analyzed is very limited, lacking critical privacy, security, and compliance elements. The technical infrastructure details are sparse, with no visible scripts, analytics, or CMS indicators. Security posture cannot be fully assessed due to lack of data, but no WAF or blocking mechanisms are detected. Overall, the site appears accessible but underdeveloped from a security and compliance perspective.

F

Fahrzeugwerk Bernard KRONE GmbH & Co. KG

krone-serviss.lv

66

Fahrzeugwerk Bernard KRONE GmbH & Co. KG is a well-established manufacturer specializing in trailers and transport solutions, offering a broad range of services including spare parts, telematics, repair workshop locators, tire services, and customer support. The company targets transportation and logistics businesses, providing comprehensive after-sales and mobility services to ensure customer satisfaction and operational continuity. Their market position is strong within Europe, supported by a consistent brand presence and multiple subsidiaries in the Baltic region. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript and Cookiebot for consent management. The site demonstrates good mobile optimization, clear navigation, and professional design, reflecting a mature digital infrastructure. Analytics are implemented via Google Analytics with appropriate cookie consent mechanisms, indicating compliance with privacy regulations. From a security perspective, the site enforces HTTPS and includes a cookie consent banner, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or suspicious content were detected, and the WHOIS data for the subdomain is consistent with expected usage patterns. Overall, the security posture is solid but could be improved with additional headers and transparency. The overall risk assessment is low, with the website presenting a trustworthy and professional front for the company. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular audits of third-party scripts to further strengthen security and compliance.

H

Hamberger Flooring GmbH & Co. KG

haro.com

66

Hamberger Flooring GmbH & Co. KG, operating under the HARO brand, is a leading German manufacturer specializing in high-quality parquet, laminate, design, and wood flooring products. Established in 1950, the company has a strong market position in Germany and internationally, offering a broad product range supported by dealer networks and comprehensive product advice. The website reflects a mature digital presence with excellent content quality, clear navigation, and strong branding consistency. Technically, the site uses modern frameworks such as ProcessWire CMS, UIkit, and Alpine.js, combined with advanced analytics and consent management tools, ensuring a performant and privacy-conscious user experience. Security posture is robust with HTTPS enforcement and multiple security headers, although the absence of a publicly available security policy and incident response contacts suggests room for improvement. The missing WHOIS data is a transparency concern but does not detract significantly from the overall legitimacy given the professional presentation and detailed business information. Strategic recommendations include publishing explicit security policies, incident response details, and vulnerability disclosure mechanisms to enhance trust and compliance.

C

CargoFlex

cargoflex.eu

49

CargoFlex is a small European logistics company specializing in sustainable and CO2-neutral transportation solutions, primarily using bio-LNG fuel. Their services include express freight routes to Scandinavia, Switzerland, and the Baltics, targeting environmentally conscious businesses seeking green logistics options. The website is built on WordPress with Elementor, featuring a professional design and moderate performance. While HTTPS is properly configured and cookie consent is managed, the site lacks explicit privacy policies, terms of service, and security policies, which are important for compliance and trust. No blocking or WAF challenges were detected, allowing full content access for analysis.

The website www.culimeta.de is currently inaccessible due to a security block resulting in a 403 Forbidden response. The page displays a security system block message with a bot/human checkbox form, indicating that access is restricted by a web application firewall or similar security mechanism. Due to this, no business, contact, or compliance information is available for analysis. The domain is hosted on name servers associated with kasserver.com, a known hosting provider in Germany. Without access to the actual website content, it is not possible to assess the company's market position, services, or technical infrastructure. The security posture cannot be fully evaluated, but the presence of a security block suggests some level of protection is in place. Overall, the site’s risk assessment is limited by the lack of accessible data, and further investigation would require direct access or cooperation from the site owner.

S

SARSTEDT AG & Co. KG

sarstedt.com

50

SARSTEDT AG & Co. KG is a well-established German company specializing in manufacturing and distributing consumables and solutions for medical diagnostics, laboratory, clinic, transfusion, and laboratory automation. The company has a global presence with a broad product portfolio and a strong reputation in healthcare and scientific research sectors. Their website is professionally designed, content-rich, and supports multiple languages, reflecting a mature digital presence. The technical infrastructure is based on TYPO3 CMS with modern frontend technologies and includes privacy and cookie consent mechanisms, indicating compliance with GDPR requirements. Security posture is good with HTTPS and anonymized analytics, though some HTTP security headers are missing. The WHOIS data for the domain is missing or inaccessible, which is unusual for a company of this size and history, warranting further verification. Overall, the website is trustworthy, professional, and well-maintained, serving a specialized audience in healthcare and science.

N

NEXT Farming

nextfarming.com

58

NEXT Farming is a specialized provider of digital farming solutions targeting agricultural businesses of all sizes, primarily in Germany. Their offerings include software for cultivation planning, precision farming, remote sensing, machine communication, and other farm management services. The website is built on TYPO3 CMS and integrates modern marketing and analytics tools such as Google Tag Manager and Cookiebot, reflecting a mature digital infrastructure. The site is well-designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks published security policies and incident response contacts, which are areas for improvement. The absence of WHOIS data for the domain is unusual and slightly impacts trust, though the professional website presence suggests legitimacy. Overall, the site scores well on content quality, technical implementation, and security posture, with room to enhance privacy compliance and business credibility through more transparent contact and security information.

W

winkler

winkler.de

64

Winkler is a well-established German company specializing in commercial vehicle parts, workshop equipment, and related services. The website targets businesses and professionals in the transportation and agricultural machinery sectors, offering a comprehensive product range and services including hydraulics and online shopping. The company has a mature market presence supported by a domain registered since 1994. Technically, the website is built on TYPO3 CMS, uses modern tracking and marketing tools, and implements a cookie consent mechanism, reflecting a moderate level of digital maturity. Security posture is generally good with HTTPS enabled and domain transfer protection, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is basic, with no visible privacy policy or terms of service in the provided content. Overall, the website is professional, trustworthy, and safe for general audiences.

L

LUMAS

eu.lumas.com

77

LUMAS operates a professional e-commerce platform specializing in the sale of gallery-quality, hand-signed, limited edition art prints and objects. The company targets discerning art lovers and collectors across Europe and North America, supported by multiple regional subdomains and physical galleries. Their market position is that of a leading online photo art gallery with a curated selection of photography, painting, digital art, and lifestyle objects. Technically, the website employs modern JavaScript frameworks, third-party marketing and analytics tools such as Klaviyo and Cookiebot, and demonstrates excellent mobile optimization and performance. Security posture is strong with HTTPS enforcement, security headers, and consent management, though explicit security policies and incident response information are not publicly available. Overall, the website is professional, trustworthy, and compliant with GDPR, though WHOIS data for the subdomain is unavailable, likely due to privacy or subdomain usage. Strategic recommendations include publishing security and incident response policies, adding vulnerability disclosure mechanisms, and enhancing transparency around data protection officers.

S

Soul Body Balance - Berlin

soul-body-balance.de

41

Soul Body Balance - Berlin is a small wellness and psychological services provider focusing on yoga and psychological counseling primarily for Russian-speaking clients in Berlin and Riga. The website presents a professional and consistent brand image with clear service offerings including yoga classes, psychological consultations, workshops, and events. The business appears niche and locally focused with a stable market position since at least 2015. Technically, the website is built on WordPress with common plugins for SEO, social media integration, and cookie consent, showing moderate digital maturity. The site is mobile optimized and SEO friendly with structured data implemented. Security posture is adequate with HTTPS enforced and cookie consent present, but lacks advanced security headers and incident response information. No critical vulnerabilities or privacy compliance issues were detected. Overall, the website is trustworthy and safe for general audiences.

C

ColorExpert

color-expert.com

67

ColorExpert is a medium-sized manufacturing and retail company specializing in professional painting and surface protection tools. The company operates under the parent organization Storch-Ciret Group and targets both professional painters and DIY end users. Their product range covers surface protection, preparation, wallpapering, varnishing, wood protection, and painting accessories. The website is built on TYPO3 CMS and demonstrates a good level of digital maturity with modern technologies such as Google Tag Manager and Cookiebot for consent management. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and a clear privacy policy. However, the absence of a terms of service page and explicit security policy or incident response contacts are areas for improvement. Overall, the website is professional, trustworthy, and well-positioned in its market segment.

S

sennder Technologies GmbH

sennder.com

63

sennder Technologies GmbH operates as a leading digital freight forwarder in Europe, specializing in Full Truck Loads (FTL) logistics. The company provides shippers with access to a connected fleet of thousands of trucks, leveraging technology to optimize road freight logistics. Following the acquisition of the European Surface Transportation operations of C.H. Robinson, sennder has positioned itself among Europe's top 5 FTL players, indicating significant market presence and growth. Technically, the website is built using modern frameworks such as Nuxt.js and Vue.js, with Tailwind CSS for styling, ensuring a responsive and performant user experience across devices. The site employs JSON-LD structured data for SEO and integrates cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers are not detected, and no public security policy or incident response contacts are provided. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent, reflecting a baseline of security best practices. The absence of WHOIS data publicly reduces trust signals, but the professional branding, partnerships, and content quality support the legitimacy of the business. No vulnerabilities or malicious content were detected in the analysis. Overall, sennder presents a mature digital presence with strong business credibility in the transportation sector. Strategic improvements in transparency around security policies and contact information could enhance trust and compliance posture further.

B

BRABUS

brabus.com

69

BRABUS is a globally recognized luxury mobility brand specializing in high-performance vehicle tuning, supercars, boats, and lifestyle products. The company positions itself as a leader in modern, individual luxury with a strong German heritage. The website reflects a high level of professionalism and targets affluent customers interested in exclusive automotive and lifestyle offerings. Technically, the site is built on the Neos CMS platform using modern web technologies including PHP, jQuery, and integrates marketing and analytics tools such as HubSpot and Google Analytics. The site is mobile-optimized and provides a rich multimedia experience. Security posture is solid with HTTPS enforced, CSRF protections, and cookie consent mechanisms, although explicit security headers and policies are not clearly documented. WHOIS data for the domain is unavailable, which introduces some uncertainty about domain registration legitimacy, but the website content and branding strongly indicate a legitimate business. Overall, the site is well-designed, secure, and compliant with GDPR, making it a trustworthy platform for its target audience.

A

Alzchem Trostberg GmbH

creapure.com

57

Creapure.com is the official website for Creapure®, a premium brand of pure creatine monohydrate produced by Alzchem Trostberg GmbH in Germany. The company focuses on manufacturing ultrapure creatine for sports nutrition manufacturers worldwide, emphasizing quality, scientific validation, and trusted German origin. The website targets strength, competitive, and endurance athletes as well as manufacturers interested in using the Creapure® ingredient brand. Technically, the site is built on Drupal 7 with common web libraries and includes modern consent management tools to comply with privacy regulations. Security posture is good with HTTPS and consent mechanisms, though some security headers and explicit policies are not publicly visible. The WHOIS data for the domain is missing or unavailable, which raises some legitimacy concerns, but the professional website and consistent branding mitigate risk. Overall, the site is well-designed, content-rich, and trustworthy for its intended audience.

E

Erima GFL

gfl.info

52

Erima GFL is the official website for the German Football League, providing comprehensive information about American football in Germany including live game updates, team details, schedules, and ticket sales. The website targets fans and stakeholders of the sport within Germany and operates as a medium-sized sports league information platform. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies such as jQuery and Swiper.js for interactive content. The site is mobile optimized and demonstrates good SEO practices with structured data and meta tags. Security posture is solid with HTTPS enabled and domain transfer protections in place, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong, featuring a detailed GDPR-compliant privacy policy and cookie consent mechanism. No critical vulnerabilities or suspicious content were detected, and the site maintains a high level of professionalism and trustworthiness.

H

Hans im Glück Burgergrill & Bar

hansimglueck-burgergrill.de

59

Hans im Glück Burgergrill & Bar operates a professional and well-branded website focused on promoting their burger restaurant chain in Germany and neighboring countries. The site offers services including table reservations, online ordering, and a merchandise shop. The business targets a broad audience interested in dining and food delivery, with a strong emphasis on accessibility and multi-language support. Technically, the website is built on TYPO3 CMS and integrates modern marketing and analytics tools such as Google Tag Manager and Facebook Pixel, managed with user consent via Usercentrics. Accessibility is a key strength, with an advanced DigiAccess tool embedded to support various user needs. Security posture is good with HTTPS enforced, though security headers and explicit security policies are absent. No direct contact information or privacy policy pages were found in the provided content, which limits full privacy compliance assessment. Overall, the website is professional, trustworthy, and well-optimized for user experience and accessibility.

Les Deux Messieurs operates as a French bakery and café with physical locations in Munich and Wiesbaden, Germany. The business focuses on offering authentic French baked goods and café dining experiences, targeting customers who appreciate French culinary culture. The website is professionally designed, mobile-optimized, and includes strong accessibility features, enhancing user experience for diverse audiences. Technically, the site uses modern web technologies and HTTPS, ensuring secure communication. However, the absence of explicit privacy, cookie, and terms of service policies indicates gaps in compliance and transparency. Security posture is generally good, but could be improved by adding security headers and incident response contacts. Overall, the website is trustworthy and functional but would benefit from enhanced privacy and security disclosures.

M

Müller & Egerer Bäckerei und Konditorei GmbH

mueller-egerer.de

54

Müller & Egerer Bäckerei und Konditorei GmbH is a well-established regional bakery and café chain in Germany, operating since 1948 with over 70 branches primarily in northern Germany. The company offers a wide range of bakery products, confectionery, and café services, supported by customer loyalty programs and a mobile app. Their market position is strong locally, emphasizing tradition, quality, and sustainability. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and the Uikit framework, with progressive web app features and a service worker for enhanced user experience. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS enforced and cookie consent management implemented, though security headers and explicit security policies are absent. Privacy compliance is robust with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and safe for general audiences.

D

Dynamicweb Inc.

dynamicweb.de

61

Dynamicweb Inc. operates a comprehensive cloud-based e-commerce platform that integrates Product Information Management (PIM), Content Management System (CMS), marketing automation, and e-commerce functionalities into a single suite. The platform is designed to support B2B, B2C, and D2C commerce models with strong standard integrations to Microsoft Dynamics ERP systems, positioning Dynamicweb as a significant player in the e-commerce technology sector, particularly in the German market. Their extensive partner network and focus on composable commerce demonstrate a mature business model aimed at scalable and flexible digital commerce solutions. Technically, the website employs modern web technologies including JavaScript frameworks, Bootstrap for responsive design, and HubSpot for marketing and analytics. The platform embraces MACH architecture principles and supports headless CMS implementations, indicating a forward-looking technical infrastructure. The site is well-optimized for mobile devices and accessibility, with good SEO practices evident from meta tags and structured navigation. From a security perspective, the site enforces HTTPS and uses standard security practices, though explicit security headers and policies are not fully documented in the HTML content. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. However, the absence of a public security policy or incident response contact points to areas for improvement in transparency and readiness. Overall, Dynamicweb presents a professional, trustworthy, and technically sound online presence with a strong focus on e-commerce solutions. The risk profile is low, with no evident vulnerabilities or suspicious indicators. Strategic recommendations include enhancing security header implementation, publishing a security policy, and establishing a vulnerability disclosure program to further strengthen trust and compliance.

S

SCRAEGG GmbH

scraegg.com

43

SCRAEGG GmbH operates an e-commerce platform specializing in food products such as perfect scrambled eggs, porridge, and soups, targeting both private consumers and gastronomy businesses primarily in Germany. The website is professionally designed with clear navigation, multilingual support (German and English), and active social media engagement, positioning the company as a niche player in the retail food sector. The business model focuses on direct online sales complemented by recipe content and newsletter marketing to engage customers. Technically, the website leverages modern web technologies including Google Analytics, Google Tag Manager, and MailChimp for marketing automation. The underlying CMS appears to be Shopware, a popular e-commerce platform. The site is mobile-optimized and implements cookie consent mechanisms compliant with GDPR, reflecting a mature digital infrastructure. Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS, uses CSRF tokens, and manages cookies responsibly with user consent. However, there is room for improvement by enabling DNSSEC, adding security headers, and publishing formal security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, SCRAEGG presents a trustworthy and professional online presence with solid business credibility and compliance posture. Strategic enhancements in security transparency and technical hardening would further strengthen its risk profile and customer trust.

K

KamatGroup Handelsgesellschaft mbH

cafe-pampojila.de

61

Cafe de Pampojilá, operated by KamatGroup Handelsgesellschaft mbH, is a small German-based business specializing in premium Guatemalan highland coffee. The company emphasizes sustainable farming practices, social responsibility, and quality coffee production, supported by certifications such as Rainforest Alliance. The website presents a professional image with clear business and contact information, targeting coffee retailers and specialty buyers. Technically, the site uses a modern but straightforward stack including Bootstrap 4, jQuery, and third-party services like Cookiebot and Smartlook for consent management and analytics. Security posture is adequate with HTTPS and cookie consent but lacks visible advanced security headers or explicit security policies. Overall, the site is compliant with GDPR, offers a comprehensive cookie consent mechanism, and provides a user-friendly experience with good mobile optimization.

M

METRO AG

metro-campus.de

75

METRO Campus is a real estate and urban development project by METRO AG focused on creating a sustainable and innovative urban quarter in Düsseldorf, Germany. The website presents a professional and well-structured digital presence with clear information about the project, its vision, and latest news. The technical infrastructure leverages modern web technologies including Sitecore CMS, Bootstrap, and analytics tools such as Google Analytics and Siteimprove. The site is hosted on reputable infrastructure with Akamai nameservers and uses HTTPS with good security practices. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. However, explicit security policies and incident response information are not published. Overall, the website demonstrates a mature digital presence with a strong business credibility and good security posture.

M

METRO PROPERTIES

metro-properties.de

76

METRO PROPERTIES is the real estate arm of METRO AG, specializing in the active management, development, and maintenance of wholesale and retail properties internationally. The company leverages extensive retail and real estate expertise to increase the long-term value of its portfolio. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content focused on corporate real estate services. Technically, the site uses modern frameworks and analytics tools, hosted on a reputable CDN provider (Akamai), ensuring good performance and security. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site demonstrates high professionalism and trustworthiness, suitable for investors, partners, and real estate professionals.

M

METRO AG

metro-potentials.com

71

METRO Potentials is a corporate graduate management trainee programme operated by METRO AG, a large German retail company. The programme targets young professionals seeking international exposure and career development within retail management. The website is professionally designed, mobile-optimized, and provides comprehensive information about the programme, benefits, and application process. Technically, the site uses modern frameworks including Sitecore CMS, Google Analytics, and Siteimprove for analytics and performance monitoring. Security posture is good with HTTPS and cookie consent mechanisms, but lacks explicit security policies and incident response contacts. WHOIS data is missing, which raises some concerns about domain registration transparency. Overall, the site is trustworthy and well-maintained but could improve transparency and security disclosures.

M

METRO AG

miag.com

75

MIAG operates as a specialized service provider within the METRO AG group, focusing on comprehensive invoicing, payment guarantee, early payment, and resolution services for METRO's suppliers. The website presents a professional and well-structured digital presence, leveraging modern web technologies such as Sitecore CMS, Google Analytics, and Siteimprove for analytics and performance monitoring. The site is well-optimized for SEO, accessibility, and mobile responsiveness, providing a seamless user experience for its B2B audience. Security practices include HTTPS enforcement and cookie consent mechanisms, although explicit security headers are not detected in the provided data. The absence of WHOIS registration data for the domain www.miag.com is a notable anomaly that reduces domain trustworthiness, despite the strong branding and content alignment with METRO AG. Overall, the website demonstrates a mature digital infrastructure and a strong business credibility within the retail and finance sectors.

M

METRO AG

mpulse.de

76

MPULSE is the official online magazine of METRO AG, providing rich content focused on wholesale, gastronomy, and independent entrepreneurs. The website serves as a content marketing platform to engage METRO's target audience with industry insights, customer stories, and trends. The site is well-branded, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, it leverages modern web technologies including Bootstrap, Google Tag Manager, and Akamai CDN for performance and scalability. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the domain registration and website content are consistent and trustworthy, supporting METRO AG's brand integrity.

K

Kores

kores.de

73

Kores is a medium-sized retail company specializing in stationery and creative products, targeting German-speaking customers and international markets. The website presents a professional and well-structured platform showcasing a broad product range including glues, coloring materials, erasers, and office accessories. The technical infrastructure is based on WordPress with modern frontend technologies, providing good mobile optimization and user experience. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and external links suggest a legitimate business presence. Security posture is moderate with no detected security headers or privacy policies, indicating room for improvement in compliance and protection. Overall, the website is functional and trustworthy but requires enhancements in security and privacy transparency.

K

KAMAT Handelsgesellschaft mbH

kamat-group.de

63

KAMAT Handelsgesellschaft mbH operates as a specialized provider of coffee and ice cream solutions in Germany, offering a broad portfolio of products including coffee machines, vending machines, and ice cream concepts. The company targets B2B customers such as cafes, catering businesses, and retail outlets, providing comprehensive services including consulting, training, and technical support. Their market position is that of a medium-sized, regionally established player with multiple showrooms and a strong service orientation. Technically, the website employs modern web technologies such as Bootstrap and jQuery, with responsive design and moderate performance. Security measures include HTTPS, captcha-protected forms, and GDPR-compliant privacy policies, though some improvements in security headers and incident response transparency are recommended. Overall, the website reflects a professional and trustworthy business with good digital maturity and compliance posture.

K

KAMAT Handelsgesellschaft mbH

gel-matic.com

63

KAMAT Handelsgesellschaft mbH is a German-based company specializing in coffee and ice cream business solutions, offering a range of products including soft ice and frozen yogurt machines, toppings, and accessories, complemented by comprehensive services such as planning, training, and technical support. The company targets businesses and entrepreneurs in the hospitality and retail sectors, positioning itself as a reliable B2B supplier with multiple specialized concepts. Technically, the website employs a modern tech stack including Bootstrap and jQuery, with good mobile optimization and user experience. Security measures include HTTPS, captchas on forms, and GDPR-compliant privacy policies, though improvements in security headers and incident response transparency are recommended. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with moderate tracking via Google Analytics and advertising through Google AdWords. The domain appears legitimate with no signs of suspicious activity.

The website kroatische.de is an established online platform operated by eProgress s.r.o., providing comprehensive accommodation listings and travel information for Croatia. It targets travelers seeking direct contact with property owners to avoid commission fees. The platform is part of a broader network of regional accommodation portals in Central Europe, reflecting a consistent business model and brand presence since 2003. Technically, the site uses modern frontend technologies including Tailwind CSS and integrates Google Analytics and Google Ads for marketing and tracking. The site is hosted on European infrastructure with Forpsi nameservers, supporting its regional focus. Security posture is adequate with HTTPS and cookie consent mechanisms implemented, though some security headers are missing and no explicit incident response or security policies are publicly disclosed. Privacy compliance is good with GDPR-aligned cookie consent and privacy policy in German. Overall, the site is professional, trustworthy, and well-positioned in the hospitality sector for the German-speaking market.

The website www.slowakische.de is a specialized online platform operated by eProgress s.r.o., focusing on providing comprehensive information and direct accommodation booking options in the Slovakian mountain regions. Established since 2002, it serves primarily German-speaking tourists seeking commission-free lodging options such as hotels, pensions, apartments, and huts. The platform also offers additional services like weather updates, webcams, and last-minute deals, positioning itself as a trusted and niche hospitality service provider in the European travel market. Technically, the site employs modern web technologies including Tailwind CSS and integrates Google Analytics and Tag Manager for user tracking, with a GDPR-compliant cookie consent mechanism in place. The hosting is managed via Forpsi, a reputable European hosting provider, ensuring stable infrastructure.

Fleetcor Deutschland GmbH operates a professional website offering modern fleet management solutions tailored for German and European companies. The company provides a range of services including fuel cards, charging cards, telematics, and digital fleet management tools. The website positions Fleetcor as an authorized Shell partner with extensive acceptance networks across Europe, targeting businesses of all sizes. The technical infrastructure is modern, leveraging Next.js and React frameworks, and integrates multiple marketing and analytics tools with a cookie consent mechanism to comply with privacy regulations. Security posture is solid with HTTPS and bot protection, though some security headers could be enhanced. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

B

brain at work GmbH

brain-at-work.de

48

brain at work GmbH is a well-established German web agency specializing in website creation, online shops, SEO, and tailored online marketing solutions. With over 25 years of experience and a strong regional focus in Germany, the company demonstrates a solid market position supported by long-term client relationships and high customer satisfaction. Their service portfolio includes website and webshop development, SEO services, employee recruitment support, and accessibility solutions, reflecting a comprehensive digital marketing approach. Technically, the website is built on a proprietary CMS (bee.tools®), employs modern web technologies, and is hosted on reliable German infrastructure. The site is mobile-optimized and SEO-friendly, with good performance and accessibility standards. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks visible cookie consent mechanisms and published security policies, which are areas for improvement. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

F

Freudenberg Group

freudenberg.com

65

Freudenberg Group is a global enterprise specializing in innovative technical solutions across diverse industries such as manufacturing, transportation, healthcare, and energy. The company operates multiple business groups offering products ranging from sealing technologies and filtration to medical devices and cleaning solutions. Their market position is strong, supported by a large workforce and presence in over 60 countries. The website reflects a mature digital infrastructure using TYPO3 CMS, with modern consent management and analytics tools, indicating a high level of digital maturity. Security posture is solid with HTTPS and consent mechanisms, though some security headers and explicit policies could be improved. Overall, the website is professional, well-branded, and trustworthy, supporting the company's enterprise status.

F

FHCS GmbH

vileda-professional.com

62

Vileda Professional is a well-established international brand specializing in professional cleaning products and solutions. The website serves as a gateway directing users to country-specific localized sites, supporting a broad global presence. The business operates under FHCS GmbH and is part of the Freudenberg group, indicating a strong corporate backing and market position in the manufacturing and retail sectors. The target audience primarily consists of professional cleaning businesses and distributors worldwide. Technically, the website is built on a mature platform, likely SAP Commerce (Hybris), and employs modern technologies including Google Tag Manager, Usercentrics for consent management, and Akamai CDN for hosting. The site is mobile-optimized with good performance and basic accessibility features. Legal and privacy compliance is addressed with dedicated pages and a consent management platform, reflecting GDPR awareness. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data for the domain is a notable anomaly, reducing trust slightly, though the website content and branding appear legitimate and professional. Overall, the website demonstrates a solid business and technical foundation with room for improvement in security transparency and WHOIS data availability. Strategic recommendations include enhancing security headers, publishing security policies, and clarifying domain registration details to improve trust and compliance.

ept GmbH is a well-established manufacturer specializing in precision electronic connectors with over 50 years of experience. The company operates internationally with subsidiaries and partner sites in the USA, China, Czech Republic, and Italy, serving primarily the automotive and electronics manufacturing sectors. Their website reflects a professional and comprehensive product catalog, emphasizing quality and customization capabilities backed by multiple ISO certifications. Technically, the website is built on a modern CMS with responsive design and interactive elements such as product finders and multimedia content, indicating a mature digital presence. Security-wise, the site uses HTTPS but lacks advanced security headers and explicit privacy or cookie policies, which are areas for improvement. The absence of WHOIS data limits domain trust analysis but does not detract significantly from the company's apparent legitimacy based on content and certifications. Overall, the website is a reliable resource for industry professionals seeking high-quality connector solutions.

ept GmbH is a German-based manufacturer specializing in a wide range of industrial connectors including highspeed, miniaturized, rugged, EMC/shielding, power, and automotive connectors. The company offers both standard and customized connector solutions, targeting industrial clients and electronics manufacturers globally. Their website is professionally designed, multilingual, and provides clear contact information, reflecting a mature B2B business model with a medium-sized market presence. Technically, the website is built on the bee.tools® CMS platform, uses modern web standards (HTML5, CSS3, JavaScript), and is secured with HTTPS. The site is mobile-optimized and offers a good user experience with clear navigation. However, there is room for improvement in accessibility and SEO optimization. No analytics or tracking scripts were detected, indicating a minimal user tracking approach. From a security perspective, the site benefits from HTTPS and lacks exposed sensitive data. However, it lacks important security headers and explicit privacy or cookie policies, which are critical for GDPR compliance and user trust. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy and registration consistency, which should be addressed to enhance trust. Overall, the website presents a professional and trustworthy business front but requires improvements in privacy compliance, security headers, and domain registration transparency to strengthen its security posture and regulatory adherence.

ept GmbH is a German-based manufacturer specializing in a wide range of electronic connectors and connector solutions, serving industrial and manufacturing sectors globally. Their product portfolio includes highspeed, miniaturized, rugged, EMC/shielding, power, automotive, and customized connectors, indicating a strong focus on technical innovation and industry standards. The website supports multiple languages, reflecting an international market presence. Technically, the site is built on the bee.tools® CMS platform, uses modern web technologies including WebP and SVG images, and is mobile optimized. However, there is room for improvement in accessibility and SEO. Security posture is moderate with HTTPS enabled and use of secure image formats, but lacks visible security headers and explicit privacy or cookie policies. WHOIS data for the domain is unavailable, which raises some concerns about domain legitimacy, though the website content and branding are professional and consistent with a legitimate business. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.

ept GmbH is a German-based manufacturer specializing in electronic connectors and related solutions, serving primarily industrial and automotive sectors. The company offers a broad product portfolio including highspeed, miniaturized, robust, power, and automotive connectors, alongside customized solutions and competencies in injection molding, galvanizing, and SMT technologies. Their market position is that of an established medium-sized manufacturer with international subsidiaries and multilingual web presence. Technically, the website is built on the bee.tools® CMS platform, with modern HTML5 and JavaScript usage, and hosted likely by Deutsche Telekom. The site is mobile optimized with good navigation and professional design, though SEO and accessibility features are basic. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and formal security policies such as privacy, cookie, or vulnerability disclosure pages. No incident response contacts or security.txt files are present, which limits transparency and readiness indicators. No vulnerabilities or exposed sensitive data were found in the content. Overall, the website is professional and trustworthy with strong business credibility but could improve privacy compliance and security posture by adding formal policies and security headers. The risk level is moderate with no critical issues detected.

L

LUKAS-ERZETT GmbH & Co. KG

lukas-erzett.com

50

LUKAS-ERZETT GmbH & Co. KG is a well-established German manufacturer specializing in system solutions for milling, grinding, polishing, and cutting tools, with a strong global presence and over 85 years of experience. The company targets industrial sectors such as automotive, aerospace, energy, environment, construction, and craft industries, offering high-quality products and consulting services. Their website reflects a mature digital presence with comprehensive product information, multilingual support, and active marketing channels including newsletters and webinars. Technically, the site is built on WordPress with modern plugins and scripts, ensuring good performance and mobile optimization. Security measures include HTTPS, Content-Security-Policy headers, reCAPTCHA on forms, and a consent management platform, although DNSSEC is not enabled and no explicit security policy is published. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.

Regeneronpro.de is a professional healthcare portal likely operated by Regeneron Pharmaceuticals targeting healthcare professionals in Germany. The site provides product information, knowledge articles, and news updates relevant to the pharmaceutical sector. The website is built on a modern Salesforce Community Cloud platform using Lightning Web Runtime technology, integrating multiple third-party services for payments, analytics, and cookie consent. The technical infrastructure is robust, leveraging cloud hosting and secure content delivery. Security posture is strong with HTTPS, strict Content Security Policy, and secure cookie usage, although explicit privacy and terms of service documents are not found in the provided content. Overall, the site demonstrates a mature digital presence suitable for its professional audience.

Hilti Deutschland operates as a leading enterprise in the manufacturing and retail of construction tools, fastening systems, and related services, targeting professional construction businesses. The website reflects a mature digital presence with comprehensive product information, service offerings including fleet management and software solutions, and a strong brand identity consistent with the global Hilti Group. Technically, the site leverages modern frameworks such as Angular and Adobe Experience Manager, supported by robust analytics and consent management tools, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS enforcement, use of security headers, and no visible vulnerabilities, although explicit security policies and incident response details are not publicly disclosed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR, making it a reliable resource for its target audience.

R

Regeneron

regeneron.de

72

Regeneron Deutschland operates as a leading biotechnology company focused on leveraging scientific innovation to develop and provide new medicines for patients in need. The company holds a strong market position with multiple FDA and EMA approved drugs, reflecting over 30 years of scientific and medical expertise. Their digital presence is built on a modern Salesforce Experience Cloud platform, integrating advanced web technologies and compliance mechanisms such as cookie consent and GDPR adherence. The website is professionally designed, mobile optimized, and provides targeted content for patients, healthcare professionals, and potential employees. Security posture is robust with HTTPS, strict Content-Security-Policy, and no detected vulnerabilities, although explicit security policies and incident response information are not publicly disclosed. Overall, the site reflects a mature digital infrastructure aligned with corporate standards and regulatory requirements.

F

Forsta

confirmit.com

66

Forsta GmbH is a German-based technology company specializing in customer experience and market research technology solutions. Their website targets business clients seeking advanced data analytics and research tools to improve customer insights. The company positions itself as an established player in the B2B SaaS market with a focus on delivering comprehensive customer experience management platforms. The website is professionally designed, primarily in German, and provides clear information about their services and contact channels. Technically, the site is built on WordPress and leverages modern web technologies including New Relic for performance monitoring and Google Tag Manager for analytics. The site is mobile-optimized and includes privacy and cookie policies compliant with GDPR standards. Security-wise, the website enforces HTTPS and includes standard security headers, but lacks a dedicated security policy or incident response information. WHOIS data is unavailable, which slightly reduces trust but does not indicate malicious intent. Overall, the site demonstrates a mature digital presence with room for improvement in transparency around security and incident response.