Germany security reports

K

KÜS Technik GmbH

kues-technik.de

56

KÜS Technik GmbH is a specialized technical service provider in the automotive sector, officially recognized by the German Kraftfahrt-Bundesamt. The company offers expert services including part approvals, individual vehicle approvals, and technical assessments for manufacturers, importers, and private individuals. Their market position is supported by official designations and a broad portfolio of services related to vehicle parts and modifications. The website reflects a medium-sized enterprise with consistent branding and professional content tailored to a German-speaking audience. Technically, the site is built on WordPress with modern plugins and themes, optimized for SEO and mobile use, and includes privacy and cookie compliance mechanisms. Security posture is good with HTTPS and reCAPTCHA usage, though some security headers and policies could be enhanced. Overall, the site is trustworthy, professional, and well-maintained.

K

KÜS Fahrzeugüberwachung

kues-fahrzeugueberwachung.de

57

KÜS Fahrzeugüberwachung is a well-established German organization specializing in vehicle inspection and certification services. With a network of approximately 1,600 inspectors and experts, it provides a broad range of services including main vehicle inspections, emission testing, safety checks, and specialized certifications for gas-powered vehicles and hazardous goods transport. The website reflects a professional and comprehensive service offering targeted at vehicle owners and operators within Germany. The business operates within the transportation sector and is part of a larger corporate group with several related subsidiaries.

S

SachsenEnergie

sachsenenergie.de

59

SachsenEnergie is a regional energy provider based in Saxony, Germany, offering a broad range of services including electricity, natural gas, heating solutions, internet, and e-mobility products. The company targets private customers, business clients, municipalities, and the real estate sector, positioning itself as a comprehensive energy and telecommunications service provider with a strong regional focus. Their website reflects a mature digital presence with multiple customer portals and service options, supporting a modern business model centered on customer engagement and energy solutions. Technically, the site uses IBM WebSphere Portal technology combined with modern JavaScript frameworks and Google Tag Manager for analytics and marketing. The site is well-structured, mobile-optimized, and includes privacy and cookie consent mechanisms aligned with GDPR requirements. Security posture is good with HTTPS enforced and no obvious vulnerabilities detected, though some security headers could be improved. Overall, SachsenEnergie demonstrates a professional and trustworthy online presence consistent with its business sector and regional market.

V

Verkehrsverbund Oberelbe

vvo-online.de

54

Verkehrsverbund Oberelbe (VVO) operates as a regional public transportation authority providing integrated ticketing and mobility services for Dresden and its surrounding areas. The website serves as a comprehensive mobility portal offering timetable information, ticket sales, service updates, and accessibility features. The target audience includes residents and visitors relying on buses, trams, S-Bahn, and ferries within the VVO region. The business model focuses on facilitating seamless public transport usage through digital tools and customer service. Technically, the website employs a modern JavaScript stack with accessibility enhancements such as Eye-Able tools and uses Matomo analytics for privacy-conscious user tracking. The site is served over HTTPS with no visible security vulnerabilities and demonstrates good SEO and accessibility practices, though mobile optimization is basic. The content is well-structured, multilingual, and professionally presented, supporting a positive user experience. From a security perspective, the site benefits from HTTPS and secure form handling but lacks explicit security policies, incident response contacts, and a cookie consent mechanism, which are areas for improvement to enhance compliance and user trust. No critical vulnerabilities or suspicious content were detected, and WHOIS data aligns well with the business identity, supporting legitimacy. Overall, the website is a trustworthy and functional platform for regional public transport users, with recommendations to improve privacy compliance and security transparency to further strengthen its posture.

T

teilAuto

teilauto.net

58

teilAuto is a well-established carsharing provider operating primarily in the German states of Sachsen, Sachsen-Anhalt, and Thüringen. Founded in 1998, the company offers a range of vehicle classes with a pay-per-use model that includes fuel costs, accessible via a dedicated mobile app and web platform. The website reflects a professional and consistent brand image, emphasizing sustainability and community values, including a notable Gemeinwohl certification. Technically, the site is built on the Contao CMS with modern JavaScript libraries and integrates privacy-conscious analytics via Matomo. Security posture is solid with HTTPS enforced and domain transfer protections, though some enhancements like DNSSEC and security headers could improve resilience. Privacy compliance is strong, featuring a comprehensive privacy policy and cookie consent mechanism. Overall, the site is user-friendly, mobile-optimized, and trustworthy, with no signs of malicious content or vulnerabilities.

S

STIEBEL ELTRON GmbH & Co. KG

stiebel-eltron.com

60

STIEBEL ELTRON GmbH & Co. KG is a large enterprise operating internationally in the energy sector, specializing in efficient solutions for hot water, room heating, air conditioning, and renewable energy technologies such as heat pumps and ventilation systems. The company maintains a professional and comprehensive website that targets both general consumers and professionals in building services. Their market position is strong with subsidiaries and agencies in over 120 countries, reflecting a broad global footprint. Technically, the website is built on a modern stack including RequireJS, Modernizr, and Piwik PRO analytics, likely managed via Adobe Experience Manager CMS. The site is mobile optimized with good SEO and accessibility features, though some improvements in security headers could be made. Performance is moderate, with a well-structured navigation and rich content. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR compliance. However, the absence of WHOIS registration data raises concerns about domain transparency and trustworthiness. No critical vulnerabilities or exposed sensitive data were detected, but the lack of explicit security headers and incident response information suggests room for enhancement. Overall, the website presents a low risk with strong business credibility and privacy compliance, but domain registration opacity slightly reduces trust. Strategic recommendations include improving domain WHOIS transparency, adding security headers, and publishing a vulnerability disclosure policy to strengthen security posture and stakeholder trust.

Doepke Schaltgeräte GmbH is a well-established German manufacturer specializing in electrical safety products, particularly residual current devices (FI-Schalter), circuit breakers, and differential current monitoring systems. With nearly 70 years of experience, the company holds a strong market position as a leading expert in fault current protection technology. Their website offers comprehensive product information, training, downloads, and customer support, targeting professionals and businesses in the energy and electrical safety sectors. The company maintains a professional digital presence with multilingual support and active social media channels. Technically, the website is built on the TYPO3 CMS platform, utilizing modern frameworks like Bootstrap and FontAwesome. It integrates Google Analytics and Google Tag Manager with privacy-conscious configurations such as IP anonymization and user opt-out options. Cookie consent is managed via CookieFirst, ensuring GDPR compliance. The site is mobile-optimized and well-structured, providing a good user experience and SEO performance. From a security perspective, the site enforces HTTPS and implements privacy best practices but lacks explicit security headers and a published security or incident response policy. No vulnerabilities or suspicious elements were detected. The WHOIS data aligns with the company's claims, showing consistent domain registration without privacy protection, supporting the legitimacy of the business. Overall, Doepke's website demonstrates a mature digital infrastructure with strong business credibility and privacy compliance. Strategic improvements could include enhancing security headers, publishing a security policy, and establishing a vulnerability disclosure process to further strengthen trust and security posture.

T

Theben AG

theben.de

59

Theben AG is a well-established German company specializing in building automation products including KNX systems, DALI lighting control, presence and motion detectors, smart home solutions, time switches, and climate control devices. Founded in 1921, it holds a strong market position as an expert and innovator in energy-efficient building technology. The website reflects a professional and comprehensive digital presence targeting professional installers, OEM partners, and smart home users. Technically, the site uses SilverStripe CMS, integrates modern marketing and consent management tools, and demonstrates good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response details are absent. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy, well-branded, and content-rich, supporting Theben AG's credibility and market leadership.

STIEBEL ELTRON is a well-established international company specializing in building technology and renewable energy solutions, particularly heat pumps and ventilation systems. The company holds a strong market position as a technology leader with a comprehensive product and service portfolio targeting both end consumers and professional partners. Their website reflects a mature digital presence with extensive content, clear navigation, and professional branding. Technically, the site uses modern JavaScript libraries and analytics tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit incident response contacts and vulnerability disclosure policies could be improved. Overall, the website and business demonstrate high credibility and compliance with GDPR.

R

Roll..Profi

rollprofi.de

56

Roll..Profi is a German-based company specializing in professional cable reel systems, targeting industrial and commercial customers requiring cable management solutions. The website presents a basic but functional design using modern CSS frameworks, indicating a moderate level of digital maturity. However, the site lacks critical privacy and security policies, contact information, and security headers, which limits its security posture. The domain registration data is consistent and indicates a legitimate business presence. Overall, the website is safe and professional but requires improvements in privacy compliance and security best practices to enhance trust and compliance.

G

GEMA

gema.de

65

GEMA is a prominent collective rights management organization in Germany, serving over 100,000 members and millions of music users. The website reflects a professional and well-structured digital presence, leveraging modern technologies such as Liferay CMS, React, and Usercentrics for GDPR compliance. The content is primarily in German with English alternatives, targeting music creators and users. The site offers comprehensive information about membership, rights management, and licensing services, positioning GEMA as a key player in the German music industry. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security policies or incident response information publicly. Overall, the website is trustworthy, well-maintained, and compliant with privacy regulations, though it could improve transparency by publishing privacy policies and security contact details.

M

MSH Medical School Hamburg – University of Applied Sciences and Medical University

arts-and-social-change.de

54

The website represents the Arts and Social Change faculty of the MSH Medical School Hamburg, an educational institution offering interdisciplinary Bachelor and Master programs focused on art therapy, music therapy, social work, and related fields. The site targets prospective students and professionals interested in the intersection of arts, health, and social sciences. It provides detailed program information, events, and further education opportunities, positioning itself as a niche academic faculty within the German higher education sector. Technically, the website is built on the Contao Open Source CMS platform, utilizing modern web technologies including jQuery, Google Analytics, Google Tag Manager, and Hubspot for marketing and analytics. The site is hosted on servers associated with rzone.de and employs HTTPS with a good SSL configuration. Mobile optimization and SEO are well addressed, though accessibility features are basic. From a security perspective, the site enforces HTTPS, uses CSRF tokens in forms, and implements a GDPR-compliant cookie consent mechanism. However, it lacks visible security headers and does not provide explicit incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies. Overall, the website is professional, trustworthy, and well-suited for its educational purpose. Strategic improvements in security headers and incident response transparency could enhance its security posture and trustworthiness further.

Dresdner Verkehrsbetriebe AG operates the MOBI platform, a comprehensive multimodal mobility service in Dresden, Germany. The website presents a well-structured and professional digital presence highlighting integrated public transport, bike- and carsharing, and electric vehicle charging services. The company positions itself as a local leader in sustainable urban mobility, supported by partnerships with local government and recognized organizations. The site targets residents and visitors seeking flexible and environmentally friendly transportation options. Technically, the website employs modern web standards including responsive design, SVG icons, and optimized images with WebP support. While no explicit CMS or frameworks are detected, the site demonstrates good mobile optimization and SEO practices. However, there is room for improvement in accessibility and performance tuning. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. No security headers or incident response policies are visible, and no cookie consent mechanism is implemented despite GDPR relevance. The WHOIS data aligns with the business claims, showing consistent domain registration without privacy protection, indicating legitimacy. Overall, the website is trustworthy and professionally maintained, though enhancements in security policies and privacy compliance would strengthen its posture. The absence of tracking scripts suggests a privacy-conscious approach. Strategic recommendations include implementing security headers, cookie consent, and publishing security and incident response policies.

G

GIT SECURITY

git-sicherheit.de

49

GIT SECURITY is a specialized media portal focused on security-related topics including management, IT security, fire protection, and safety. It serves security professionals and decision-makers by providing news, articles, product information, events, webinars, whitepapers, and videos. The portal is affiliated with Wiley-VCH, a reputable publishing company, enhancing its credibility and market position within the security media niche. The website is professionally designed with consistent branding and good content quality, targeting a medium-sized audience primarily in Germany.

A

Alumni Association

alumni-association.de

57

The website represents an Alumni Association based in Germany, likely serving a small community of alumni members. The business appears to be a non-commercial or community-focused entity with limited public-facing services. The website is powered by TYPO3 CMS and integrates Cookiebot for cookie consent management, indicating a basic level of digital maturity and compliance with cookie regulations. However, the absence of explicit privacy and terms of service pages limits its compliance posture. Technically, the site uses modern web technologies but lacks visible security headers and SEO optimization, which could impact discoverability and security. The security posture is moderate with HTTPS implied but no advanced security practices evident. Overall, the site is functional but would benefit from enhanced compliance documentation and security hardening.

H

Hafencity Institut für systemische Ausbildung

hafencity-institut-systemische-ausbildung.de

59

The Hafencity Institut für Systemische Ausbildung (HISA) is a specialized educational institution based in Hamburg, Germany, offering certified systemic training programs including systemic counseling and mediation. The website reflects a professional and focused approach to education in systemic therapy, targeting individuals seeking advanced qualifications in this niche. The presence of certifications from recognized bodies such as DGSF and SG enhances its credibility and market position within the education sector. Technically, the website is built on TYPO3 CMS, leveraging modern frontend technologies and third-party integrations like Cookiebot for privacy compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Security-wise, the site enforces HTTPS and employs cookie consent management, though it lacks explicit security policies and incident response information. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements, making it suitable for its target audience.

H

HMU Health and Medical University

health-and-medical-university-duesseldorf-krefeld.de

54

HMU Health and Medical University is a modern private and state-recognized university located in Düsseldorf/Krefeld, Germany, offering innovative and interdisciplinary degree programs in health and medical fields including Humanmedizin, Psychologie, Sportwissenschaften, and Psychotherapie. It is part of the IRO Group Hochschulverbund, which includes several other medical and business schools, serving over 12,000 students. The university emphasizes practical training in partnership with Helios Klinikum Krefeld and fosters research and personal development in a collaborative academic environment. Technically, the website is built on the Contao CMS platform, uses modern JavaScript libraries and analytics tools, and implements GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS and CSRF protections, though some security headers could be improved. The WHOIS data is minimal but consistent with the hosting provider and domain usage. Overall, the website is professional, trustworthy, and well-optimized for users and search engines.

B

blau direkt GmbH

blaudirekt.de

70

blau direkt GmbH is a German-based company specializing in digital solutions for insurance brokers and financial intermediaries. Their core offering is an integrated software ecosystem that automates sales and administrative processes, enhancing efficiency and customer satisfaction. The company targets insurance brokers, banks, and financial institutions with products such as a broker management program, a customer app, and a marketplace with multiple integrations. Their market position is that of an innovative and comprehensive service provider within the German insurance technology sector. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and performance optimizations like WP Rocket. The site is mobile-optimized and includes GDPR-compliant cookie consent management via Borlabs Cookie. Social media presence and structured data enhance their digital maturity and SEO. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security headers and explicit security policies or incident response information. No vulnerabilities or suspicious content were detected. The WHOIS data is consistent and trustworthy, supporting the legitimacy of the domain and business. Overall, blau direkt GmbH presents a professional, secure, and business-focused online presence with room for improvement in security policy transparency and security header implementation.

V

Vereinigung zur Förderung des Deutschen Brandschutzes e.V.

vfdb.de

58

The website www.vfdb.de represents the Vereinigung zur Förderung des Deutschen Brandschutzes e.V., a German non-profit association dedicated to advancing fire protection. The organization provides research, education, statistical data, and geodata services primarily targeting professionals and institutions involved in fire safety. The site is professionally designed using TYPO3 CMS, with a clear navigation structure and mobile optimization. Cookie consent is managed comprehensively via Cookiebot, ensuring GDPR compliance. The technical infrastructure is modern and secure, with HTTPS enforced and appropriate security headers in place. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the domain registration and hosting details align well with the organization's profile, indicating legitimacy and trustworthiness.

The Deutscher Pflegerat e.V. is a well-established German non-profit association representing the interests of nursing professionals and midwives at the federal level. Founded in 1998, it serves as a political and professional voice advocating for healthcare policy improvements, professional education, and workforce development. The website offers comprehensive resources including press releases, event information, podcasts, and official documents, targeting healthcare professionals, policymakers, and the public in Germany. Technically, the site uses standard web technologies such as jQuery and Slick Carousel, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some advanced security headers and a cookie consent mechanism. WHOIS data confirms domain legitimacy and consistency with the organization's identity. Overall, the site is professional, trustworthy, and content-rich, supporting the organization's mission effectively.

K

KÜS

kues.de

58

KÜS is a well-established German organization specializing in vehicle and traffic safety services. The company operates multiple subsidiaries covering vehicle inspections, technical assessments, automotive expertise, training, data services, and safety consulting. Their market position is strong with a nationwide presence and a large team of vehicle inspection engineers. The website reflects a professional and consistent brand image with clear navigation and relevant content for their target audience of vehicle owners and automotive professionals. Technically, the site is built on WordPress with Elementor, uses modern libraries, and implements cookie consent mechanisms, indicating a moderate to good digital maturity. Security posture is solid with HTTPS and cookie consent, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy and professionally maintained, supporting KÜS's business credibility in the transportation sector.

W

Webhosting Franken

webhosting-franken.de

60

Webhosting Franken is a German-based web hosting provider specializing in high-performance NGINX hosting solutions, managed root and virtual servers, and classic PHP hosting. The company targets startups, small to medium businesses, and enterprises seeking reliable, secure, and eco-friendly hosting services. Their offerings emphasize speed, security, and customer service, supported by ISO 27001 certified data centers and 100% renewable energy usage. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, the site leverages modern technologies including NGINX, PHP versions 5.2 through 8.4, Apache2, NodeJS, and Matomo for analytics. The use of UKit framework ensures responsive design and good accessibility. Security best practices are evident with free SSL certificates, DDoS protection, app firewalls, and daily backups. However, some security headers could be explicitly implemented and documented. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. The security posture is robust with no visible vulnerabilities or exposed sensitive data. The domain WHOIS data is partially obscured due to DENIC privacy policies but shows consistent branding and active maintenance. No WAF or blocking mechanisms interfere with content access. Overall, the site scores high on content quality, technical implementation, security, privacy, and business credibility, making it a trustworthy and professional hosting provider. Strategic recommendations include enhancing security header implementation, publishing an incident response contact or security.txt file, and continuing to maintain transparency in privacy and security policies to further strengthen trust and compliance.

P

Pflegeausbildungsfonds Niedersachsen GmbH

abf-nds.de

54

Pflegeausbildungsfonds Niedersachsen GmbH operates a specialized online portal (PABF-Meldeportal) for reporting related to nursing education funding in Lower Saxony, Germany. The website serves a niche government-related audience, providing secure login access for fund administrators and stakeholders. The business is positioned as a small, essential entity within the government sector, focusing on nursing education funding administration. The portal is built on a custom platform powered by GRÜN eVEWA3, utilizing legacy and modern web technologies such as Bootstrap and jQuery. The site is mobile responsive and includes standard security features like HTTPS, CSRF tokens, and captcha for password resets. However, it uses an outdated jQuery version, which poses potential security risks. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, though terms of service and explicit security policies are absent. Overall, the website demonstrates a moderate level of digital maturity with room for technical and security improvements.

F

Freiwilligenakademie Niedersachsen

freiwilligenakademie.de

56

Freiwilligenakademie Niedersachsen is a non-profit organization dedicated to promoting and supporting volunteer engagement across the German state of Niedersachsen. It offers a broad range of educational and training programs for volunteers and coordinators, supported by state funding. The website is professionally designed using TYPO3 CMS, featuring responsive design and clear navigation, targeting volunteers, associations, and local government entities. Technically, the site uses modern web technologies and is well optimized for mobile devices, though some security headers and cookie consent mechanisms could be improved. Security posture is solid with HTTPS enabled and no visible vulnerabilities, but lacks explicit security policies or incident response information. Overall, the domain and website content are consistent and trustworthy for a small-sized non-profit entity.

Z

Zentrum KlimaAnpassung

zentrum-klimaanpassung.de

55

Zentrum KlimaAnpassung is a German government-affiliated non-profit organization focused on facilitating climate adaptation for municipalities and social institutions. The website provides advisory, educational, funding guidance, and networking services to its target audience. Technically, the site is built on Drupal 10, uses modern web technologies, and implements a cookie consent mechanism via Klaro. Security posture is good with HTTPS enabled and partial security headers present, though some improvements are recommended. The site is professional, well-branded, and trustworthy with active social media presence. However, explicit privacy policy and terms of service pages are not found, which slightly impacts privacy compliance scores.

E

Elektromarken. Starke Partner. e.V.

elektromarken.de

58

Elektromarken. Starke Partner. e.V. is a German association uniting 16 leading electrical brands to promote quality, innovation, and partnerships within the German electrical industry. The organization supports apprentices and master craftsmen through scholarships and recognizes outstanding electrical craft businesses with the ELMAR award. The website is professionally designed using HubSpot CMS, featuring modern technologies and good mobile optimization. Privacy and cookie policies are implemented with GDPR compliance, and the site uses HubSpot analytics and marketing tools for user engagement. Security posture is solid with HTTPS and cookie consent, though some security headers and policies could be improved. Overall, the domain registration and DNS setup are consistent with the business claims, indicating a legitimate and trustworthy entity.

P

Pavel Leonidov

pavel-leonidov.de

51

Pavel Leonidov operates as a freelance software and web developer based in Stuttgart, Germany, specializing in custom software solutions and web development primarily for small businesses and non-profit organizations. The website serves as a professional portfolio showcasing skills, certifications, and open-source projects, emphasizing affordable and tailored solutions. The business model is focused on individual freelance services with continuous client support and hosting. Technically, the website employs a modern technology stack including PHP, Java, JavaScript, and popular CMS platforms like TYPO3 and WordPress. Hosting is managed via domaincontrol.com nameservers, likely GoDaddy, with AWS mentioned for hosting infrastructure. The site is mobile-optimized and uses Google Analytics with privacy-conscious settings such as IP anonymization and cookie consent mechanisms. From a security perspective, the site enforces HTTPS and includes a cookie consent banner compliant with GDPR. However, it lacks advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The site demonstrates good privacy compliance but could improve by adding security policies and vulnerability disclosure information. Overall, the website is professional, trustworthy, and well-structured with a good balance of content quality, technical implementation, and privacy compliance. The risk level is low, with recommendations focusing on enhancing security headers and formalizing security policies to further strengthen the security posture.

O

Oscar Charlie GmbH

oscar-charlie.de

58

Oscar Charlie GmbH is a creative advertising agency based in Stuttgart, Germany, specializing in strategic communication, creative design, and digital product development. The company serves a diverse clientele ranging from local businesses to international market leaders, positioning itself as a trusted creative partner with a strong portfolio and long-term client relationships. The website reflects a professional and consistent brand image, targeting companies and brands seeking innovative marketing solutions. Technically, the site is built on modern frameworks including Next.js and React, integrated with Prismic CMS, and hosted with EuroDNS. It demonstrates excellent performance, mobile optimization, and SEO practices. Security-wise, the website enforces HTTPS, employs security headers, and integrates a cookie consent mechanism via Cookiebot, indicating good privacy compliance. However, explicit security policies and incident response contacts are not present, suggesting room for improvement in transparency and readiness. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

D

Dresdner Verkehrsbetriebe AG

dvb.de

58

Dresdner Verkehrsbetriebe AG operates as the primary public transportation provider in Dresden, Germany, offering a comprehensive range of services including tram, bus, ferry, and shared mobility options. The website serves residents and visitors by providing route planning, ticketing, and real-time service updates. The company maintains a strong market position as the main transit operator in the region. Technically, the website employs modern JavaScript libraries, integrates Matomo analytics for privacy-conscious tracking, and uses OpenStreetMap for geographic data. The site is accessible, well-structured, and provides a good user experience with basic mobile optimization and accessibility features. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and a published security policy or incident response contact. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though it could improve its security posture by adding missing headers and vulnerability disclosure information.

S

Sächsische Dampfschifffahrt

saechsische-dampfschifffahrt.de

51

Sächsische Dampfschifffahrt operates as a regional transportation and tourism company specializing in river cruises along the Elbe river in Germany. The company offers scheduled cruises, charter events, conference hosting, and onboard gastronomy services, targeting tourists and local travelers interested in scenic river journeys. The website is built on WordPress with multilingual support and employs modern web technologies including JavaScript and CSS. It features a cookie consent mechanism via the Borlabs Cookie plugin and uses Google Tag Manager for analytics. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal security policies. Privacy compliance is partial, with no explicit privacy or terms of service pages detected. Overall, the website is professional, user-friendly, and trustworthy, though improvements in privacy disclosures and security practices are recommended.

Z

Zentralverband der Deutschen Elektro- und Informationstechnischen Handwerke

dmh-eh.de

52

The Zentralverband der Deutschen Elektro- und Informationstechnischen Handwerke (ZVEH) operates the website dmh-eh.de to promote and organize the Deutsche Meisterschaften der E-Handwerke, a national competition for electrical trade apprentices and professionals. The site serves as an information hub for participants, sponsors, and the general public interested in the electrical trade sector in Germany. It is well-positioned as a central association with a clear focus on vocational excellence and youth development in the energy sector. Technically, the website uses a TYPO3 CMS platform hosted on rzone.de servers, leveraging modern JavaScript libraries and a consent management platform (Usercentrics) to comply with GDPR. The site integrates Google Tag Manager and TikTok analytics for tracking, with a moderate level of user tracking balanced by explicit consent mechanisms. The site is mobile-optimized and presents good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and uses consent management for privacy compliance. However, it lacks explicit security headers and published security policies or incident response contacts, which could be improved to enhance trust and resilience. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its audience effectively. Strategic improvements in security policy transparency and technical security headers would further strengthen its posture.

J

Jobware Online-Service GmbH & Co. KG

bewerbung2go.de

60

bewerbung2go.de is a German online platform operated by Jobware Online-Service GmbH & Co. KG that provides a comprehensive suite of tools and templates for job seekers to create professional application documents such as cover letters, resumes, and cover pages. The platform targets German-speaking job seekers and offers over 500 templates tailored to various professions. The website is well-designed, mobile-optimized, and uses modern web technologies including Drupal CMS and JavaScript libraries for enhanced user experience. Analytics are implemented via Piwik PRO, indicating a moderate level of user tracking. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Overall, the domain registration data aligns with the business, supporting legitimacy and trustworthiness.

U

Ultima Media Germany GmbH

media-manufaktur.com

58

Ultima Media Germany GmbH is a medium-sized German media company specializing in organizing professional congresses, seminars, and conferences. The company focuses on providing networking opportunities and delivering up-to-date industry knowledge to professionals and decision-makers. Their market position is supported by a significant number of annual events, participants, and speakers, establishing them as a reputable event organizer in the media sector. The website is built on TYPO3 CMS and incorporates modern web technologies including Google Tag Manager and GDPR-compliant consent mechanisms, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and privacy compliance, although formal security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, well-structured, and trustworthy, with clear contact information and partner affiliations. Strategic recommendations include enhancing security transparency and accessibility features to further strengthen trust and compliance.

GRITH AG is a small German technology company founded in 2003 specializing in project management, process management, IT infrastructure consulting, and custom software development. Their market position is niche-focused, targeting associations, clubs, and organizations with tailored intranet solutions and project management training. The website content is primarily in German and provides detailed descriptions of their services and partner platforms. Technically, the website is built with basic HTML and CSS, with some references to technologies used in their software development services such as C#/.NET and PHP/MySQL. However, the website lacks modern web practices such as mobile optimization and advanced SEO features. Security posture is weak due to the absence of HTTPS, security headers, and privacy compliance mechanisms, which poses risks for user data protection and trust. Overall, the site is functional but dated, with room for significant improvements in security and privacy compliance.

I

INSURVISION

insurvision.de

53

INSURVISION is a German-based company specializing in digital sales solutions for insurance companies and brokers. The website targets insurance professionals and offers digitalization services for insurance sales processes. The company positions itself as a niche digital service provider within the finance sector, focusing on enhancing insurance distribution through technology. The website is built on WordPress using Elementor and Yoast SEO, indicating a moderate level of digital maturity with good SEO practices and mobile optimization. However, the absence of visible privacy and cookie policies, security headers, and contact information suggests room for improvement in compliance and security transparency. The security posture is moderate with no detected blocking or WAF mechanisms, but lacks advanced security best practices. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security measures.

R

Rosa-Luxemburg-Stiftung Gesellschaftsanalyse und politische Bildung e. V.

rosaluxemburg.org

52

The website rosaluxemburg.org is a non-profit political education platform operated by the Rosa-Luxemburg-Stiftung Gesellschaftsanalyse und politische Bildung e. V., commemorating the 150th birthday of Rosa Luxemburg. It provides rich educational content focused on socialist theory, historical analysis, and political positions related to Rosa Luxemburg's legacy. The site targets politically engaged individuals, activists, and scholars interested in social justice and political education. Technically, the site is built on WordPress with modern SEO and font loading optimizations, delivering a good user experience with mobile responsiveness and clear navigation. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and DNSSEC are missing. No direct contact emails or phone numbers are published, but social media channels are actively linked. The domain registration is consistent with the organization's identity and shows no suspicious patterns. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

H

HERMANN-HENSELMANN-STIFTUNG

hermann-henselmann-stiftung.de

44

The Hermann Henselmann Stiftung is a small non-profit foundation dedicated to preserving and promoting the architectural and cultural legacy of Hermann Henselmann. The website serves as an informational and transactional platform offering publications, event information, and archival content primarily targeted at researchers, historians, and cultural enthusiasts. The foundation operates in a niche cultural sector within Germany. Technically, the website is built on WordPress with common plugins and uses HTTPS, providing a moderate level of performance and mobile optimization. However, it lacks advanced security headers and explicit privacy compliance mechanisms such as cookie consent banners. Security posture is adequate but could be improved with better header implementation and published security policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security transparency.

S

SPM SPORTPLATZ MEDIA GMBH

teamtip.net

49

Teamtip is a German-based online platform specializing in football prediction games, offering users the ability to create private prediction groups for major European leagues and international tournaments. The platform supports a free-to-use model with additional white label solutions for companies seeking marketing and user engagement tools. The business is positioned as a niche player in the sports media sector, targeting football fans, social groups, and corporate clients. Technically, the website employs modern web technologies including Vue.js and integrates a consent management platform to ensure GDPR compliance. The platform is accessible via web and mobile apps on iOS and Android, providing a good user experience with live score updates and customizable game rules. Security posture is solid with HTTPS enforced and domain transfer protections, though formal security policies and incident response contacts are not publicly documented. Overall, the website demonstrates good content quality, technical implementation, and privacy compliance, supporting a trustworthy and professional online presence.

S

SportlerPlus

sportlerplus.com

70

SportlerPlus is a German e-commerce retailer specializing in sports nutrition products such as protein powders and dietary supplements. The website is built on the Shopify platform, leveraging various third-party apps for customer reviews, product labeling, and upselling. The target audience primarily consists of fitness enthusiasts and athletes seeking high-quality nutrition products to enhance their performance. The site presents a professional design with good mobile optimization and clear navigation, supporting a positive user experience.

V

VEMA Versicherungsmakler Genossenschaft eG

vema.media

65

VEMAmedia is a specialized video production service brand under the VEMA Versicherungsmakler Genossenschaft eG, based in Karlsruhe, Germany. The company offers a range of video services including livestreams, recruiting videos, image films, and social media videos, supported by two professional studios. Their target audience primarily consists of businesses seeking to enhance their employer branding and recruitment efforts through high-quality video content. The website is professionally designed with clear navigation and good mobile optimization, reflecting a solid digital presence for a small media production business. Technically, the site uses modern JavaScript libraries such as jQuery and Slick Carousel, with standard CSS and HTML5, but lacks visible advanced frameworks or CMS identification. Security posture is moderate; HTTPS is implied, and forms include CSRF tokens, but no explicit security headers were detected in the provided data. Privacy compliance is basic with a privacy policy present but no visible cookie consent mechanism. WHOIS data is privacy protected, which is typical for small businesses, and no suspicious patterns were found. Overall, the site is trustworthy and professional but could improve security and privacy transparency.

V

VEMA Versicherungsmakler Genossenschaft eG

vematage.de

66

VEMA Versicherungsmakler Genossenschaft eG operates the VEMAtage website, which promotes annual insurance brokerage events and livestreams primarily targeted at insurance professionals in Germany. The company positions itself as a cooperative in the insurance brokerage sector, offering event organization and educational services. The website is professionally designed with clear navigation and consistent branding, supporting a medium-sized business presence. Technically, the site uses modern JavaScript libraries such as jQuery, bxSlider, and Slick Carousel, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and cookie consent implemented, though formal security policies and incident response details are absent. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

The website av-tarife.de is currently inaccessible, returning a 403 Forbidden error page that denies access to all users. This prevents any direct analysis of the site's content, metadata, or business information. The domain is hosted on Schlund Technologies' nameservers, a German hosting provider, which aligns with the domain's German country code top-level domain (ccTLD). Due to the lack of accessible content, no privacy, cookie, or terms of service policies are available, and no contact or business details can be extracted. The site does not display any scripts, analytics, or advertising technologies, indicating minimal or no public-facing content at this time. From a technical perspective, the site appears to be blocked or restricted, possibly due to server configuration or access control policies. No specific web application firewall (WAF) vendor challenge was detected, but the generic 403 error suggests intentional access denial. Security headers and SSL configuration details are not available from the provided data, limiting the security posture assessment. The WHOIS data shows consistent domain registration with no privacy protection, hosted by a reputable German provider, supporting legitimacy but not providing further business insights. Overall, the security posture cannot be fully assessed due to the lack of accessible content. The site currently scores very low on content quality, technical implementation, security, privacy compliance, and business credibility. There are no indications of adult or questionable content, and the site is rated safe in terms of content safety. Strategic recommendations include resolving access issues to enable content availability, implementing security best practices, publishing privacy and cookie policies, and providing clear contact information to improve trust and compliance.

The website bildungsportal-niedersachsen.de is currently inaccessible due to a Cloudflare security challenge page employing Turnstile captcha, which blocks direct access to the site's content. This prevents extraction of meaningful business, contact, or policy information. The domain appears legitimate and consistent with a regional educational portal in Germany, but no detailed business or security policies are visible. The technical infrastructure includes Cloudflare's security services, indicating a focus on protection against automated threats. However, the lack of accessible content limits the ability to assess the site's compliance, security posture, or business credibility comprehensively.

F

FreiwilligenServer Niedersachsen

freiwilligenserver.de

61

FreiwilligenServer Niedersachsen is the official volunteering and civic engagement portal operated under the auspices of the Niedersachsen state government in Germany. It provides comprehensive information, services, and resources related to volunteering, including the Ehrenamtskarte volunteer card, engagement atlases, training programs, and funding databases. The portal targets a broad audience including volunteers, organizations, and government entities, positioning itself as a trusted government resource in the non-profit and civic sector. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and integrates modern web technologies such as jQuery, Cookiebot for cookie consent management, and Matomo for privacy-conscious analytics. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Hosting appears to be managed by Niedersachsen state infrastructure, enhancing trust and reliability. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms compliant with GDPR, and employs Matomo analytics to minimize privacy risks. While explicit security headers are not fully visible in the HTML, the overall posture is strong with no evident vulnerabilities or exposed sensitive data. However, the site lacks a publicly visible security policy or incident response contact, and no security.txt file was found. Overall, FreiwilligenServer Niedersachsen presents a professional, trustworthy, and well-maintained digital presence aligned with government standards. It effectively balances user privacy, accessibility, and content quality, making it a reliable resource for its target audience.

The website agksv.de represents the Arbeitsgemeinschaft der kommunalen Spitzenverbände Niedersachsens, a regional governmental association in Lower Saxony, Germany. The site provides minimal content focused on representing municipal top associations, with external links to partner municipal organizations. The business model is non-commercial and oriented towards coordination and representation within the public sector. The website is basic and static, lacking modern web features or interactive elements. Technically, the site uses simple HTML with an outdated character set and a meta generator indicating PhotoImpact, suggesting an older or minimally maintained site. There is no evidence of modern CMS, frameworks, or analytics tools. Mobile optimization and accessibility are poor, and no security headers or HTTPS status were detected from the provided data. From a security perspective, the site lacks HTTPS, privacy policies, cookie consent mechanisms, and contact information, which are critical for compliance and trust. No security best practices or incident response information is present. The domain WHOIS data is consistent and appropriate for a governmental association, with no suspicious indicators. Overall, the website poses a low security risk due to its static nature and lack of data collection but suffers from poor privacy compliance and outdated technical implementation. Strategic improvements in security, privacy, and technical modernization are recommended to enhance trust and compliance.

Krankenhaus-CIRS-Netz Deutschland 2.0 is a specialized German healthcare platform focused on reporting and learning from safety-relevant incidents in hospitals. It serves as an interprofessional and interdisciplinary tool to promote overregional learning and risk management in clinical settings. The website targets hospital staff and medical professionals, providing a structured environment for incident reporting and knowledge sharing. The platform is positioned as a niche service within the German healthcare sector, supported by recognized partner organizations.

D

Deutsches Krankenhaus Verzeichnis

deutsches-krankenhaus-verzeichnis.de

53

The Deutsches Krankenhaus Verzeichnis is a well-established German hospital directory providing comprehensive search and comparison services for hospitals across Germany. It targets patients, relatives, and medical professionals seeking detailed hospital information and transparency. The platform offers multiple search modalities including location-based, structural, and accessibility-focused searches, supported by a modern and responsive web interface. The business is operated by bokonet GmbH and maintains a strong market position as a trusted healthcare information portal. Technically, the website leverages modern web technologies such as Bootstrap 5, jQuery, Highcharts, and integrates Cookiebot for GDPR-compliant cookie management. The use of TYPO3 CMS is implied, supporting structured content management. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate and could benefit from further optimization. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious activities were detected in the content or WHOIS data. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, the website presents a low-risk profile with a professional and trustworthy appearance. Strategic improvements include enhancing security headers, publishing security policies, and providing explicit contact information for incident response to further strengthen trust and compliance.

P

Pflegeausbildungsfonds Niedersachsen GmbH

ausbildungsfonds-niedersachsen.de

48

Pflegeausbildungsfonds Niedersachsen GmbH is a government-related entity responsible for managing the financing of the new nursing training profession in Lower Saxony, Germany. The website serves as an information hub providing legal foundations, procedural details, and official publications related to nursing education financing. The company operates a secure online portal for data collection, accessible via an external login link. The organization holds ISO 9001 certification, indicating a commitment to quality management. Technically, the website is built on TYPO3 CMS with Bootstrap, offering good mobile responsiveness and accessibility. The site is well-structured with clear navigation and professional design, although no advanced analytics or advertising tools are detected, reflecting a focus on information dissemination rather than marketing. Security posture is moderate with HTTPS enforced but lacking explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were found. Privacy compliance is adequate with a privacy policy and cookie consent mechanism present, though no terms of service or incident response contacts are published. Overall, the website is trustworthy and professional, serving its niche government function effectively. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure would enhance its security maturity and stakeholder confidence.

The Niedersächsische Krankenhausgesellschaft e.V. (NKG) is a large non-profit association representing all hospitals in the German state of Niedersachsen. It serves as a key stakeholder in healthcare policy, hospital advocacy, and member services, supporting over 159 hospitals and approximately 120,000 employees. The website provides comprehensive information about the association's goals, committees, health policy positions, and services such as hospital search and seminars. The target audience includes healthcare professionals, hospital administrators, policymakers, and patients within Niedersachsen. Technically, the website is built on the Contao Open Source CMS platform and employs modern JavaScript libraries such as jQuery, Swiper.js, and Mmenu for enhanced user experience. The site is mobile-optimized with good SEO practices and accessibility features, although some improvements in accessibility could be made. The site uses HTTPS with a strong SSL configuration and implements cookie consent mechanisms compliant with GDPR. Security-wise, the site demonstrates good practices including CSRF protection cookies and HTTPS enforcement. However, it lacks explicit security headers and a published security policy or vulnerability disclosure program. The WHOIS data is unavailable or malformed, which slightly reduces domain trustworthiness, but the professional presentation and clear contact details support legitimacy. Overall, the website is a credible and professional digital presence for a significant healthcare association in Germany, with moderate technical sophistication and good privacy compliance. Strategic improvements in security headers and incident response transparency are recommended to enhance trust and security posture.

The analyzed website www.bznb.de currently serves a 404 error page indicating the requested page was not found. The page references 'Webhosting Franken' and mentions high-speed NGINX hosting services based in Germany, suggesting the business operates in the web hosting sector. However, the lack of accessible content, contact information, and policies limits the ability to fully assess the business or its market position. Technically, the site is hosted on servers associated with webhosting-franken.de, but no CMS, analytics, or security headers are detected. The security posture is weak due to missing HTTPS confirmation and absence of security best practices. Overall, the site appears to be a placeholder or misconfigured page rather than a fully operational business website.