Germany security reports

B

Bücher Pustet

pustet.de

67

Bücher Pustet is a well-established regional bookstore chain in Bavaria, Germany, with a nearly 200-year history. The company operates multiple physical stores and a comprehensive online shop offering books, eBooks, audiobooks, calendars, games, and related products. Their services include community events, gift vouchers, and specialized offerings for schools, libraries, and corporate clients. The website reflects a mature retail business with a focus on customer engagement and regional presence. Technically, the website uses modern web technologies including Bootstrap and FontAwesome, with a custom CMS managing rich content modules. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security is well-implemented with HTTPS and multiple security headers, but lacks visible privacy and cookie policies, which are important for GDPR compliance. The security posture is strong with no detected vulnerabilities or exposed sensitive data. However, the absence of public incident response information and vulnerability disclosure mechanisms suggests room for improvement in transparency and preparedness. Overall, the site is trustworthy and professional but should enhance privacy compliance and user consent mechanisms. Strategically, Bücher Pustet should prioritize publishing comprehensive privacy and cookie policies, implement consent banners, and provide clear security and incident response information to strengthen user trust and regulatory compliance. Enhancing accessibility and continuous security audits will further improve the site's quality and resilience.

Bergwelt Valtin is a small retail business based in Germany specializing in ski equipment fitting and customization services. Their offerings include ski boot widening, custom footbed fitting using advanced technologies, and specialized ski boot fitting systems. The website is built on WordPress and uses common plugins such as Contact Form 7 and WP-JQuery-Lightbox, indicating a standard small business digital infrastructure. The site is accessible, uses HTTPS with valid SSL, but lacks advanced security headers and privacy compliance mechanisms such as cookie consent banners. No explicit contact emails or phone numbers are provided on the main pages, which may impact user trust and communication. Overall, the website presents a professional and relevant experience for its target audience but could improve in privacy and security practices.

Müller Handels GmbH & Co. KG operates a large retail and e-commerce platform primarily serving the German market and neighboring German-speaking countries. The company offers a wide range of products including perfumes, cosmetics, toys, multimedia, and household goods, positioning itself as a comprehensive drugstore and lifestyle retailer. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency, targeting general consumers with a focus on convenience and variety. Technically, the website leverages modern web technologies such as Next.js and React, combined with Usercentrics for cookie consent management and Google Tag Manager and Facebook Pixel for analytics and marketing. The platform is mobile-optimized and performs moderately well, with good SEO and accessibility features. Hosting details are not explicitly disclosed, but the infrastructure supports a robust e-commerce experience. From a security perspective, the site enforces HTTPS and integrates consent mechanisms for privacy compliance. While explicit security headers and policies are not fully visible, no critical vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or vulnerability disclosure page suggests room for improvement in transparency and incident response readiness. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security header implementation, and providing clear incident response contacts to further strengthen trust and compliance.

F

FunRun 2025

funrunsuedwest.de

44

FunRun 2025 is a German event website dedicated to organizing and promoting the FunRun running events, targeting hobby and frequent runners as well as Nordic walkers. The site provides event information, race results, photo galleries, and news updates, positioning itself as a local/regional event organizer. Technically, the website is built on WordPress 6.0.1 using the Avada theme, with jQuery and Leaflet.js for interactive features, and integrates hCaptcha for form security. The site is served over HTTPS, indicating a good baseline for secure communications. However, it lacks advanced security headers and formal privacy or cookie policies, which are critical for GDPR compliance and user trust. No contact emails or phone numbers are explicitly provided, limiting direct communication channels.

F

Falck Deutschland

falck.de

10

Falck Deutschland is a prominent healthcare and emergency services provider operating in Germany, offering ambulance and rescue services. The website demonstrates a solid digital presence with compliance to GDPR through a comprehensive cookie consent mechanism and integration of advanced analytics tools such as Microsoft Application Insights and Google Tag Manager. The technical infrastructure is modern, leveraging reputable third-party services and hosted on EuroDNS-managed domains. Security posture is generally good with HTTPS enforced and telemetry in place, though there is room for improvement in security headers and explicit security policies. Contact and legal information such as terms of service and incident response contacts are not readily visible, which could be enhanced to improve trust and compliance. Overall, the website is professional, well-branded, and targets a general audience seeking healthcare and emergency services in Germany.

P

psn media GmbH & Co. KG

psnmedia.de

10

psn media GmbH & Co. KG is a well-established digital agency based in Rostock, Germany, operating since 2003. The company offers a comprehensive portfolio of digital services including web design, web development, app development for iOS and Android, individual software solutions, corporate design, and cross-media marketing campaigns. Their client base spans from medium-sized enterprises to large corporations and public institutions, positioning them as a versatile and reliable partner in the digital transformation space. The website reflects a professional and consistent brand image with clear navigation and rich content tailored to business clients seeking digital innovation. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and slick carousel for UI components, alongside analytics and tracking tools including Google Analytics, Facebook Pixel, and Mouseflow. The site uses HTTPS with good SSL configuration and integrates a consent management platform to comply with GDPR requirements. While the site lacks explicit security headers and a public security policy, it demonstrates a solid baseline security posture with no visible vulnerabilities or exposed sensitive data. From a security perspective, the site benefits from encrypted communications and user consent mechanisms for tracking. However, it could improve by implementing additional HTTP security headers and publishing incident response contacts or security policies. The WHOIS data aligns well with the website's claims, showing consistent domain registration and no suspicious patterns, supporting the legitimacy of the business. Overall, psn media presents a trustworthy and professional digital presence with strong business credibility and good privacy compliance. The site is well-optimized for user experience and mobile devices, making it suitable for its target audience of businesses seeking digital agency services.

R

Regensburger Universitätsstiftungen

regensburger-universitaetsstiftung.de

45

The Regensburger Universitätsstiftungen website represents a non-profit foundation platform dedicated to supporting the University of Regensburg through funding and promotion of research, teaching, and international exchange. The foundation acts as a central hub for private and corporate donors aiming to enhance the university's profile and academic excellence. The website content is well-structured, professionally designed, and primarily targeted at university faculty and potential funders. Technically, the site is built on WordPress with the Foundation CSS framework and modern JavaScript libraries, ensuring good mobile responsiveness and user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in security headers and incident response disclosures. Privacy compliance is adequate with a clear privacy policy but lacks a cookie consent mechanism. Overall, the site is trustworthy, professional, and serves its educational and funding facilitation purpose effectively.

Brücken-Center Ansbach GmbH operates a regional shopping center located in Ansbach, Germany, offering a wide range of retail shops, gastronomy options, and services including parking and voucher sales. The website is built on the Contao CMS platform and integrates modern frontend technologies such as jQuery, Bootstrap 5, and Slick Carousel. It employs Google Tag Manager for analytics and Cookiefirst for cookie consent management, demonstrating a commitment to privacy compliance. The site is well-structured, mobile-optimized, and provides clear contact information and social media links, enhancing user trust and engagement. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. Overall, the website reflects a professional and trustworthy digital presence for a medium-sized retail business.

S

Südwestpark Nürnberg

suedwestpark.de

10

Südwestpark Nürnberg operates a large business park offering flexible office and commercial rental spaces primarily targeting companies in the Nuremberg metropolitan area. The website presents a professional and consistent brand image with a focus on sustainability, mobility, and modern work culture. Technically, the site is built on TYPO3 CMS with modern frontend libraries, providing a good user experience and mobile optimization. Security posture is moderate with HTTPS usage but lacks explicit security headers and incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and well-positioned in the real estate market segment it serves.

G

Glende.Consulting GmbH & Co. KG

glende-consulting.de

55

Glende.Consulting GmbH & Co. KG is a specialized consulting firm based in Germany focusing on data protection and information security services. Their offerings include external data protection officer services, audits, NIS-2 compliance consulting, cyber risk assessments, and executive training. The company positions itself as a trusted partner for businesses needing to comply with evolving EU regulations such as GDPR and NIS-2. The website reflects a professional and consistent brand image with clear contact information and membership in relevant industry associations, indicating a credible market presence. Technically, the website is built on Joomla! CMS with UIkit and Yootheme frameworks, ensuring a modern and responsive user experience. Accessibility features are implemented, and the site uses HTTPS with a good SSL configuration. However, some security headers are missing, and no cookie consent mechanism is present, which could be improved for better compliance and security posture. Security-wise, the site demonstrates good practices such as CSRF tokens and no exposed sensitive data. The absence of explicit incident response or vulnerability disclosure policies suggests room for enhancement in transparency and readiness. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. The risk assessment indicates a low threat level with no suspicious content or vulnerabilities detected. Strategic recommendations include implementing cookie consent, adding security headers, and publishing clear security and incident response policies to strengthen trust and compliance.

T

Thomas Engbert

engbert.de

48

Thomas Engbert is a small German-based communications design business specializing in visual and digital solutions, including UI/UX design and Joomla CMS development. The company serves a European clientele across various sectors such as economy, shipping, healthcare, and sports. The website is professionally designed with excellent content quality and clear navigation, reflecting a mature digital presence. Technically, the site uses Joomla CMS with YOOtheme Pro and UIkit frameworks, ensuring modern and responsive design. Security posture is good with HTTPS enabled and CSRF tokens present, though the absence of explicit privacy and cookie policies and security headers indicates room for improvement. Overall, the domain registration is consistent and trustworthy, with no blocking or WAF detected, supporting a high legitimacy score.

D

DBRD Akademie GmbH

reanimation.de

54

DBRD Akademie GmbH operates the website reanimation.de, providing specialized ACLS and resuscitation training courses aligned with American Heart Association standards. The company targets healthcare professionals involved in acute patient care, offering practical workshops and certification courses. The website is professionally designed with clear navigation and accessibility features, reflecting a mature digital presence. Technically, it leverages Joomla CMS with modern UIkit framework and includes interactive elements such as course registration forms integrated via external APIs. Security posture is solid with HTTPS enforced and CSRF protections, though some security headers and explicit policies could be improved. Contact information is transparent, and trust signals include recognized certifications and partnerships with reputable organizations. Overall, the site is a credible and well-maintained platform for healthcare education.

D

DBRD Akademie GmbH

12-leads.de

54

12-Leads.de is a specialized educational platform operated by DBRD Akademie GmbH, focused on providing structured EKG assessment courses for emergency medical professionals in Germany. The website offers detailed course schedules, pricing, and booking options, targeting paramedics and healthcare providers. The business is well-established with a domain age consistent with its founding year and maintains a professional online presence with clear contact information and partner affiliations. Technically, the site is built on Joomla CMS with modern UI frameworks and demonstrates good accessibility and mobile optimization. Security posture is solid with HTTPS and CSRF protections, though it lacks some advanced security headers and explicit incident response policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy, professional, and well-suited for its educational mission.

D

DBRD Akademie GmbH

tecc-germany.de

54

TECC Germany, operated by DBRD Akademie GmbH, is a specialized educational provider offering Tactical Emergency Casualty Care courses tailored for police, fire services, personal protection, and rescue personnel in Germany. The website presents detailed course offerings, schedules, and pricing, establishing a clear market position as a niche training provider in tactical emergency medical care. The business model focuses on in-person and scenario-based training with transparent pricing and no sponsorship conflicts. Technically, the website is built on Joomla CMS with Yootheme templates and UIkit framework, incorporating modern web technologies such as Typed.js and Google Fonts. The site is mobile-optimized and includes accessibility features, providing a good user experience. However, some improvements in security headers and cookie consent mechanisms could enhance compliance and security posture. Security-wise, the site enforces HTTPS and uses CSRF tokens, with no visible sensitive data exposure. The absence of explicit security policies and incident response contacts is noted. The domain registration data is consistent with the business claims, showing legitimacy and stability. Overall, the site demonstrates a solid security posture with room for improvement in privacy compliance. The overall risk assessment is low, with recommendations focusing on enhancing privacy compliance, adding security headers, and publishing security policies to strengthen trust and regulatory adherence.

D

DBRD Akademie GmbH

tccc-germany.de

56

DBRD Akademie GmbH operates the website tccc-germany.de, providing official Tactical Combat Casualty Care (TCCC) training courses licensed by the NAEMT. The company targets military medical personnel, infantry, special forces, and police officers preparing for foreign deployments. Their business model centers on delivering specialized medical training and certification services, positioning themselves as a trusted and official provider in Germany. The website content is professionally presented in German, with clear navigation and comprehensive course information.

P

PHTLS Deutschland

phtls.de

54

PHTLS Deutschland is a specialized educational provider focused on PreHospital Trauma Life Support training for emergency medical personnel in Germany. The website offers detailed course information, schedules, and booking options, positioning itself as a key player in trauma care education. The technical infrastructure is based on Joomla CMS with modern frontend libraries, providing a responsive and accessible user experience. Security posture is solid with HTTPS and CSRF protections, though some HTTP security headers could be improved. Privacy compliance is good with a comprehensive privacy policy and GDPR adherence, but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-suited for its target audience.

D

DBRD Akademie GmbH

gems-deutschland.de

54

GEMS Germany, operated by DBRD Akademie GmbH, specializes in providing geriatric education for emergency medical services personnel in Germany. The website offers detailed information about their GEMS courses, including provider and instructor training, with clear pricing and scheduling. The business targets EMS professionals, nursing staff, and doctors, positioning itself as a niche educational provider in the healthcare sector. The website is built on Joomla CMS with modern UIkit framework and includes accessibility features, reflecting a moderate to good level of digital maturity. Security posture is solid with HTTPS and CSRF protections, though improvements in security headers and incident response disclosures are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR, though it lacks a cookie consent mechanism. The domain registration aligns well with the business identity, supporting legitimacy.

D

DBRD Akademie GmbH

epc-germany.de

53

EPC Deutschland, operated by DBRD Akademie GmbH, provides specialized Emergency Pediatric Care training courses in Germany targeting preclinical emergency responders. The website is professionally designed using Joomla CMS with modern UIkit framework, offering good mobile optimization and accessibility features. The business is well positioned in the healthcare education sector with clear contact details and partner affiliations. Security posture is solid with HTTPS and CSRF protections, though lacking some security headers and incident response disclosures. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and functional with room for security and compliance improvements.

D

DBRD Akademie GmbH

emfrt.de

56

The website emfrt.de represents the Emergency Medical Fire and Rescue Training (EMFRT) program operated by DBRD Akademie GmbH, a German educational organization specializing in emergency medical and rescue training. The site targets fire departments, authorities, and organizations with security tasks, offering practical and intensive courses that combine preclinical emergency medicine, technical rescue, and firefighting. The business is positioned as a specialized training provider with recognized certifications and strong partnerships, including Weber Rescue and Siegerland Airport. The courses are certified and include international certificates such as PHTLS for First Responders. Technically, the website is built on Joomla CMS with Yootheme templates and uses modern frontend technologies like jQuery, Leaflet.js, and UIkit. The site is mobile optimized, accessible, and performs moderately well. Structured data in JSON-LD format is implemented for SEO and organizational clarity. The hosting provider is not explicitly identified, but HTTPS is enforced with good SSL configuration. From a security perspective, the site uses HTTPS and includes CSRF tokens and email obfuscation techniques. However, it lacks explicit security headers and published security or incident response policies. There is no vulnerability disclosure or security.txt file. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected, which could be a GDPR compliance gap. Overall, the website is professional, trustworthy, and well-aligned with its business goals. The domain WHOIS data is consistent and legitimate, supporting the business's credibility. Strategic improvements in privacy compliance and security transparency would enhance the site's security posture and regulatory adherence.

D

DBRD Akademie GmbH

amls.de

56

AMLS Deutschland is a specialized provider of Advanced Medical Life Support courses in Germany, operating under the DBRD Akademie GmbH and affiliated with the Deutscher Berufsverband Rettungsdienst e.V. The website offers detailed course information, schedules, and booking options targeting emergency medical personnel and healthcare providers. The business is well positioned in the healthcare education sector with a clear focus on acute medical training for internal and neurological emergencies. Technically, the website is built on Joomla CMS with modern UIkit frontend frameworks, providing good mobile optimization and accessibility features. Security posture is solid with HTTPS and CSRF protections, though some security headers and explicit policies could be improved. Privacy compliance is strong with a comprehensive privacy policy and terms of service, but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and serves its niche audience effectively.

H

HeroShift

heroshift.app

71

HeroShift is a specialized software solution focused on automated shift planning, absence management, and time tracking for emergency services, nursing, and healthcare sectors in Germany. The platform offers cloud-based, GDPR-compliant tools designed to reduce administrative overhead and improve operational efficiency. The website is professionally designed using WordPress and Elementor, providing a clear and user-friendly experience with good mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though some security best practices like explicit security headers and incident response information are missing. Overall, the site reflects a trustworthy and professional business with room for improvement in privacy compliance and security transparency.

S

SERAPIS Medical GmbH

serapis-medical.de

61

SERAPIS Medical GmbH is a specialized healthcare transportation service provider based in Ludwigsburg, Germany. The company focuses on qualified patient transport, emergency medical support, and international patient repatriation. Their website reflects a professional and consistent brand image, targeting patients and healthcare providers who require reliable medical transport services. The business operates a small-scale model with a clear regional focus and offers key services such as ambulance service, regular patient transport, and medical repatriation with professional care. Technically, the website is built on a modern WordPress platform using Elementor and JupiterX theme, supported by plugins like Complianz for GDPR compliance. The site is mobile-optimized and performs moderately well, with good SEO and basic accessibility features. The technical infrastructure is sound, though some improvements in security headers and incident response documentation could enhance the security posture. Security-wise, the site enforces HTTPS and uses a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in security maturity. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. The risk level is low, but strategic enhancements in security policies and transparency would strengthen the company’s security and compliance posture further.

M

M&M Lifeline

mum-lifeline.de

64

M&M Lifeline is a specialized provider of certified seminars and training programs primarily targeting healthcare professionals and nursing staff in Germany. Established in 2003, the company offers a variety of in-house, online, and presence seminars focusing on emergency response, first aid, and nursing-related topics. Their market position is supported by over 20 years of experience and certification by recognized bodies such as the MDK. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their audience. Technically, the website is built on WordPress using modern plugins and frameworks such as Avia Framework and WPForms. It employs HTTPS with excellent SSL configuration and includes GDPR-compliant cookie consent mechanisms. Performance is moderate with good mobile optimization and basic accessibility features. Analytics are implemented via Jetpack Statistics, with moderate user tracking and good privacy compliance. From a security perspective, the site enforces HTTPS and uses cookie consent but lacks explicit security headers and a dedicated security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company's history and no privacy protection, enhancing trustworthiness. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic improvements could focus on enhancing security headers, publishing a security policy, and improving accessibility to further strengthen the security and user experience.

A

AusfallReserve RD GmbH

ausfallreserve.com

66

AusfallReserve RD GmbH is a specialized service provider in the healthcare sector focusing on emergency medical services in Germany. The company offers personnel services to maintain emergency medical coverage during staff shortages, positioning itself as a reliable and responsible partner in the rescue service industry. Their business model centers on providing qualified staff as a flexible reserve, supported by continuous training and development opportunities. The website reflects a professional and consistent brand image targeting healthcare organizations and professionals. Technically, the site is built on WordPress with a modern theme and essential SEO and privacy plugins, hosted under a reputable registrar. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, though some advanced security headers and policies could be improved. Overall, the site is accessible, well-structured, and compliant with GDPR requirements, with clear contact information and partner integrations for recruitment and training.

K

Kulturstiftung des Kreises Schleswig Flensburg

kultur-schleswig-flensburg.de

51

The Kulturstiftung des Kreises Schleswig Flensburg operates as a regional cultural foundation focused on supporting and promoting cultural activities within the Schleswig-Flensburg district in Germany. The website serves as an informational platform providing details on cultural events, funding opportunities, and community engagement. The organization positions itself as a non-profit entity with a clear public service mission, targeting residents and cultural participants in the region. Technically, the website is built on the WordPress CMS platform, utilizing common plugins such as LayerSlider, WPBakery Page Builder, Events Manager, and Real Cookie Banner Pro for cookie consent management. Hosting is provided by linevast.de, as indicated by the domain's nameservers. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features and solid SEO practices. From a security perspective, the website enforces HTTPS and implements a GDPR-compliant cookie consent mechanism. However, explicit security headers like Content-Security-Policy or X-Frame-Options are not detected, suggesting room for enhancement. No vulnerabilities or exposed sensitive data were found in the analysis. Privacy compliance is strong, with a comprehensive privacy policy and cookie management in place. Overall, the website presents a trustworthy and professional digital presence for a regional cultural foundation. It effectively balances user experience, privacy compliance, and technical implementation. Strategic improvements in security headers and expanded contact information could further strengthen its security posture and user trust.

A

Abfallwirtschaft Schleswig-Flensburg GmbH

asf-online.de

57

Abfallwirtschaft Schleswig-Flensburg GmbH operates as a regional public waste management service provider in Germany, focusing on waste collection, recycling, and environmental education for residents and businesses in the Schleswig-Flensburg area. The website serves as an information hub offering schedules, service details, and contact options, positioning the company as a trusted regional authority in waste management. Technically, the site is built on TYPO3 CMS with modern frontend technologies such as Bootstrap and jQuery, providing a responsive and accessible user experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting the company's credibility and public service mission.

R

Rettungsdienst des Kreises Schleswig-Flensburg Anstalt des öffentlichen Rechts

rettungsdienst-sl-fl.de

64

Rettungsdienst Schleswig-Flensburg is a public emergency medical service provider operating as an Anstalt des öffentlichen Rechts in the Schleswig-Flensburg district of Germany. The organization offers critical services including emergency rescue and patient transport, supported by a quality management system certified under regional standards. Their website targets local citizens and patients, providing essential information, emergency contacts, and service details. The site is professionally designed with good accessibility and navigation features, reflecting a mature digital presence for a public service entity. Technically, the website employs a modern tech stack including jQuery, Photoswipe, and Flexslider, integrated within the IKISS CMS platform. Accessibility tools such as EyeAble and Google Translate support inclusivity. Performance is moderate with good mobile optimization. The site uses HTTPS exclusively and implements a cookie consent mechanism aligned with GDPR requirements, though explicit security policies and incident response information are not published. Security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of detailed security policies and vulnerability disclosure mechanisms suggests room for improvement in transparency and incident readiness. The WHOIS data aligns with the website’s public service nature, showing consistent domain registration without privacy protection, enhancing trustworthiness. Overall, the website is a reliable and professional portal for emergency medical services in the region, with strong compliance and accessibility features. Strategic enhancements in security documentation and incident response communication would further strengthen its security posture and user trust.

Jugendberufsagentur Schleswig-Flensburg is a regional government-supported agency focused on assisting youth aged 14 to 25 in the Schleswig-Flensburg district of Germany with career orientation and entry into the workforce. The agency collaborates with multiple public entities including the local employment agency, job center, youth welfare services, and vocational training centers. The website is professionally designed using Joomla CMS with Gantry5 and UIkit frameworks, providing clear navigation and relevant content in German. Technical infrastructure is modern and secure with HTTPS and obfuscated emails to reduce spam. However, some security headers are missing and no explicit incident response or vulnerability disclosure mechanisms are present. Overall, the site demonstrates good privacy compliance with a cookie consent banner and a privacy policy page. The business credibility is high due to clear contact information and official partner links. No advertising or tracking beyond cookie consent is detected, and the content is safe for general audiences.

S

Sachverständigenradar

sachverstaendigen-radar.de

61

Sachverständigenradar operates a mobile application platform focused on the German crafts sector, providing users with an easy way to find qualified experts locally. The website supports this service with a professional, well-structured web presence that includes app store links and a comprehensive privacy policy. The technical infrastructure is modern, leveraging jQuery, Bootstrap, and a specialized CMS (ODAV), with self-hosted Matomo analytics ensuring privacy-conscious user tracking. Security posture is solid with HTTPS and cookie consent mechanisms, though the absence of security headers and explicit incident response policies suggests room for improvement. Overall, the site is trustworthy and well-positioned within its niche, serving a clear target audience effectively.

K

Kassenärztliche Vereinigung Schleswig-Holstein

kvsh.de

54

The Kassenärztliche Vereinigung Schleswig-Holstein (KVSH) operates as a regional healthcare self-administration body representing approximately 6,100 physicians and psychotherapists in Schleswig-Holstein, Germany. The website serves as an authoritative portal providing comprehensive information on medical billing, contracts, regulations, IT infrastructure in practices, and patient services. It targets medical professionals and patients within the region, offering detailed resources and guidance. The site is built on TYPO3 CMS, indicating a mature and stable technical infrastructure with good mobile optimization and accessibility. Security posture is solid with HTTPS enabled and secure form handling, though improvements are recommended in cookie consent and security header implementation. Overall, the website demonstrates high professionalism and trustworthiness appropriate for a public healthcare institution.

K

KZ-Gedenkstätte Husum-Schwesing | Erinnern und Handeln

kz-gedenkstaette-husum-schwesing.de

39

The website kz-gedenkstaette-husum-schwesing.de serves as an informational and memorial platform dedicated to the Husum-Schwesing concentration camp history. It targets a general audience interested in historical remembrance and education. The site operates on WordPress using the Divi theme and integrates OpenStreetMap for location services. The technical infrastructure is standard for small non-profit organizations, with moderate performance and basic mobile optimization. Security posture is limited, with no evident security headers or policies, and privacy compliance is minimal due to the absence of privacy and cookie policies. The domain WHOIS data is limited, showing only name servers from a hosting provider, with no detailed registrant information, which slightly reduces trust but is not uncommon for small organizations. Overall, the site is functional and professional but lacks advanced security and compliance features.

K

Kreismusikschule Nordfriesland

kreismusikschule-nordfriesland.de

40

The Kreismusikschule Nordfriesland website serves as the online presence for a regional music school in Germany, providing music education and related services. The site is built on WordPress using the Divi theme, indicating a moderate level of digital maturity with caching and font optimizations. The content is primarily in German and targets local residents interested in music education. While the website is functional and professionally designed, it lacks critical privacy and security documentation such as privacy and cookie policies, which are essential for GDPR compliance. No contact information or social media links were found in the provided content, limiting direct communication channels. The site uses HTTPS with a good SSL configuration but lacks security headers, which could be improved to enhance security posture.

L

Liedkunst im Schloss vor Husum

liedkunst-schloss-vor-husum.de

41

Liedkunst im Schloss vor Husum is a well-established cultural festival and masterclass event focused on the art of Lied (German art song), held annually at Schloss vor Husum in Germany. The organization offers educational masterclasses for singers and pianists, hosts concerts, and awards prizes, targeting classical music professionals and enthusiasts. The website reflects a small but reputable cultural entity with a 25-year history, emphasizing artistic excellence and community engagement. Technically, the site is built on WordPress with the Divi theme and multilingual support, indicating moderate digital maturity. The infrastructure includes HTTPS and CAPTCHA protections, but lacks advanced security headers and cookie consent mechanisms. No evident vulnerabilities or suspicious elements were found, though security and privacy policies could be enhanced. Overall, the site is professional, trustworthy, and safe for general audiences.

R

Raritäten der Klaviermusik

piano-festival-husum.com

44

The website represents the 'Raritäten der Klaviermusik' piano festival, a niche cultural event held annually in Husum, Germany, since 1987. It focuses on rare piano music outside the standard repertoire, offering concerts, exhibitions, and live CD productions. The site is bilingual and professionally designed, targeting classical music enthusiasts and cultural tourists. Technically, it is built on WordPress with the Divi theme and uses common web technologies such as jQuery and Google Fonts. The hosting and domain registration are consistent with the festival's German cultural identity. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is basic with a privacy and cookie policy present but no explicit consent mechanism. Contact information is clearly provided, enhancing business credibility.

N

Bin kurz beim Amt.

nordfriesland.digital

54

The website nordfriesland.buergerportal.sh is a government-operated citizen portal for the Nordfriesland district in Germany, providing digital access to administrative services. It is built on the TYPO3 CMS platform and incorporates accessibility features to support users with various disabilities. The site uses Matomo analytics with privacy-conscious settings and includes a cookie consent mechanism via Klaro. However, no explicit privacy policy or terms of service documents were found, which is a gap in compliance and transparency. WHOIS data is unavailable or protected, which is typical for privacy reasons but limits domain trust verification. Overall, the site demonstrates a moderate to good level of technical maturity and accessibility but could improve in privacy and security documentation.

T

timeacle GmbH & Co. KG

timeacle.com

68

timeacle GmbH & Co. KG operates a professional SaaS platform specializing in digital appointment booking and call-up systems, targeting sectors such as healthcare, banking, and public services. The company offers a modular system with a full version and enterprise modules, emphasizing customer convenience through mobile notifications and queue management. The website reflects a mature business with a domain age since 2012 and consistent branding. Technically, the site uses modern frontend technologies including Vue.js and Vuetify, ensuring a responsive and user-friendly experience. Security posture is good with HTTPS and GDPR compliance, though formal security policies and incident response information are not publicly available. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

V

Voith

voith.com

73

Voith is a family-owned enterprise specializing in industrial technology sectors such as drive technology, hydropower, and papermaking automation. The company positions itself as a responsible and sustainable technology provider with a global reach. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to industrial clients and partners. Technically, the site employs modern JavaScript libraries, Cookiebot for consent management, and Google Tag Manager for analytics, indicating a well-maintained infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of HTTP security headers and a public security policy suggests room for improvement. Privacy compliance is strong, with GDPR-aligned cookie consent and a detailed privacy policy. The lack of WHOIS data reduces transparency but does not significantly detract from the site's credibility given its professional presentation and business focus.

S

Swiss Life Deutschland

swisslife.de

69

Swiss Life Deutschland operates as a leading insurance and financial advisory provider in Germany, offering comprehensive insurance, pension plans, and financial consulting services. The website reflects a mature enterprise-level business with a strong market position and a clear focus on serving private and corporate clients. The content is professionally crafted in German, targeting the German market with consistent branding and trust indicators such as ISO certifications and GDPR compliance. The business model centers on insurance and holistic financial planning, supported by a well-established parent company, Swiss Life Holding AG.

S

Stadt Garching

garching.de

53

The website www.garching.de is the official municipal portal for the city of Garching, Germany. It provides comprehensive information and services related to city administration, politics, family and education, social services, housing, economy, mobility, nature and climate protection, culture, research, and religious sites. The site targets residents, visitors, and local businesses, offering key services such as online appointment booking and detailed local government information. The business model is public service with a focus on community engagement and transparency. Technically, the website uses a modern tech stack including jQuery, Bootstrap 5, Font Awesome, and integrates accessibility tools like ReadSpeaker and Google Translate. It is built on the EGOTEC CMS platform and hosted with DomainControl. The site is mobile-optimized, accessible, and SEO-friendly, with good performance and clear navigation. From a security perspective, the site uses HTTPS and employs email obfuscation to reduce spam. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident. There is no visible security policy or incident response contact, and no vulnerability disclosure mechanism is found. Privacy compliance is good with a comprehensive GDPR-compliant privacy policy, though cookie consent mechanisms are minimal. Overall, the website is trustworthy, professional, and safe for general audiences. It effectively serves its role as a municipal information and service portal. Strategic improvements include enhancing security headers, implementing cookie consent, and publishing incident response contacts to strengthen security posture and compliance.

S

Soulmade Hotel Garching GmbH + Co. KG

soulmade.me

59

Soulmade Hotel Garching GmbH + Co. KG operates a sustainable hospitality business in Garching near Munich, Germany, offering serviced apartments and hotel accommodations with a strong focus on eco-friendly practices and guest comfort. The website reflects a niche market position targeting business travelers and environmentally conscious guests, emphasizing long-term stays and local experiences. The company is well-established, with domain registration dating back to 2001, and maintains a consistent brand presence across digital channels. Technically, the website is built on WordPress, leveraging modern libraries such as Flickity for UI components and Dialogshift for chat functionality, with Google Tag Manager managing analytics and tracking under user consent. Security posture is solid with HTTPS enforced and cookie consent implemented, though improvements like enabling DNSSEC and adding security headers are recommended. Privacy compliance is strong, with comprehensive policies and a named data protection officer. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.

M

Montano Real Estate GmbH

montano.eu

56

Montano Real Estate GmbH is a specialized investment and asset management company focused on the German commercial real estate market. Founded in 2013, it offers tailored investment products and manages assets exceeding 1.6 billion euros, targeting institutional investors seeking secure and high-yield opportunities. The company emphasizes sustainable value creation and maintains partnerships with major players such as Carlyle Group and Beyond Real Estate Holding. The website is professionally designed with good navigation and mobile optimization, utilizing modern web technologies like Bootstrap and jQuery. However, it lacks explicit privacy and cookie policies, security headers, and visible contact information, which are areas for improvement. The domain registration is consistent with the business claims, indicating legitimacy and trustworthiness.

M

Metall Impex GmbH

metall-impex.com

46

Metall Impex GmbH is an established German company specializing in international trading of metals, non-ferrous metals, and raw materials. Founded in 1982 and based in Munich, the company focuses on supplying steel products and raw materials globally, supporting customers with marketing, logistics, and product financing solutions. The website reflects a professional B2B trading business with a clear market position in the manufacturing sector. Technically, the website is built on WordPress using well-known plugins and themes, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented, though improvements such as enabling DNSSEC and adding security headers are recommended. Overall, the website is trustworthy and compliant with GDPR, though it lacks explicit security policies and incident response contacts.

B

BEOS AG

giesserei-garching.de

46

The website represents a real estate project called GIESSEREI Garching, managed by BEOS AG, offering flexible and sustainable office and commercial spaces near Munich. The business targets companies seeking innovative hybrid workspace solutions in a prime location with strong infrastructure. The site is professionally designed, mobile-optimized, and uses modern web technologies including WordPress, Yoast SEO, and Matomo analytics. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Security posture is good with HTTPS and no visible vulnerabilities, though some security headers and policies could be improved. Overall, the domain and hosting setup are consistent and legitimate, supporting the business credibility.

G

Gasthof Neuwirt

gasthof-neuwirt.org

50

Gasthof Neuwirt is a traditional family-run hospitality business located in Garching, Germany, with a history dating back to 1904. The company operates a restaurant, beer garden, event hall, and guest rooms, targeting local residents and visitors seeking authentic Bavarian dining and lodging experiences. The website reflects a well-established local inn with consistent branding and a clear presentation of services. Technically, the site is built on WordPress using the Enfold theme and includes common plugins such as Yoast SEO and MonsterInsights for analytics. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and implements GDPR-compliant cookie consent mechanisms but lacks advanced security headers and DNSSEC. No incident response or vulnerability disclosure information is provided, which could be improved. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the business.

D

DN Wohnbau GmbH

dn-wohnbau.de

56

DN Wohnbau GmbH is a well-established real estate developer based in Munich, Germany, specializing in the development and construction of multi-family residential buildings and housing complexes. Founded in 1994, the company emphasizes quality craftsmanship and sophisticated architectural design through a long-term partnership with a dedicated architecture firm. Their market position is that of a trusted regional developer with a portfolio of completed, ongoing, and planned projects, targeting property buyers and investors seeking premium residential properties in Munich and surrounding areas. Technically, the website is built on the Webflow platform, leveraging modern web technologies including Google Tag Manager, Microsoft Clarity, Facebook Pixel, and Brevo for marketing automation. The site is well-optimized for performance, mobile responsiveness, and accessibility, with a professional design and clear navigation structure. Cookie consent and privacy compliance mechanisms are implemented effectively. From a security perspective, the site enforces HTTPS and uses Cloudflare Turnstile captcha for form protection, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, showing no privacy protection or suspicious registration patterns. Overall, DN Wohnbau GmbH presents a credible and professional online presence with good security and privacy practices. Strategic improvements could include publishing formal security and incident response policies and enhancing security headers to further strengthen their security posture.

B

Business Campus Management GmbH

businesscampus.de

51

Business Campus Management GmbH operates multifunctional office and business parks in Munich and surrounding areas, focusing on sustainable commercial real estate development and management. The company is part of the DV Immobilien Gruppe, a well-established real estate group with nearly 50 years of experience. Their business model centers on long-term portfolio growth, on-site management, and innovative real estate concepts targeting businesses seeking office and commercial spaces. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website uses the Contao CMS platform with common JavaScript libraries such as jQuery and Colorbox. It is moderately performant and mobile-optimized, with basic accessibility and SEO features. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and incident response policies are not published. Analytics usage includes Google Analytics with user consent. Overall, the website is trustworthy, compliant with GDPR, and free from blocking or WAF challenges. The domain registration aligns with the business group, supporting legitimacy. Recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to improve security maturity and transparency.

B

Baugesellschaft München-Land GmbH

bml-online.de

55

Baugesellschaft München-Land GmbH is a regional real estate company focused on providing housing solutions in the Landkreis München area. The company supports local municipalities by modernizing, renovating, and constructing residential properties, as well as managing residential and third-party rental properties. Their website is professionally designed using Drupal 10, featuring modern JavaScript libraries and Matomo analytics for performance and user insights. The site is well-optimized for mobile and accessibility, with clear navigation and relevant content for their target audience. Privacy compliance is well addressed with GDPR-aligned cookie consent and a comprehensive privacy policy. Security posture is moderate with HTTPS enforced and cookie management, but could be improved by adding security headers and formal security policies. Overall, the domain and hosting appear legitimate and consistent with the business profile, with no signs of suspicious activity or content blocking.

A

Adldinger Unternehmensgruppe

adldinger.de

51

Adldinger Unternehmensgruppe is a German construction and real estate company focused on building with tradition and solutions for the future. The website presents a professional and consistent brand image targeting general public and business clients in the real estate sector. The technical infrastructure is modern, leveraging Webflow CMS, JavaScript libraries such as Swiper.js, and third-party services like Cookiebot for cookie consent and Google Analytics for user tracking. Hosting is provided by rzone.de, consistent with the domain's WHOIS data. Security posture is adequate with HTTPS enabled and cookie consent implemented; however, the absence of explicit security headers and privacy policy pages indicates room for improvement. The website is accessible without WAF or security challenges, and no suspicious WHOIS patterns were detected, supporting the domain's legitimacy. Overall, the site scores moderately high in business credibility and technical implementation but should enhance privacy compliance and security best practices.

E

easybell GmbH

easybell.de

72

easybell GmbH is a German telecommunications provider specializing in internet and telephony services for private and business customers. The company offers a range of products including SIP Trunks, Cloud Telefonanlage, Microsoft Teams integration, and Home Office Connect solutions. With over 50,000 business customers and a parent company Dstny, easybell holds a solid market position in the telecommunications sector in Germany. The website reflects a professional and customer-focused business model emphasizing flexible contracts without minimum terms. Technically, the website is built on TYPO3 CMS and leverages modern web technologies such as jQuery and Bootstrap. It integrates multiple analytics and marketing tools including Matomo, Google Analytics, Microsoft Clarity, and Trustami for reputation management. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers are not detected, and there is no published security.txt or clear incident response contact, which are areas for improvement. The WHOIS data is limited due to DENIC privacy policies but consistent with the domain's German origin and business claims. Overall, easybell.de is a trustworthy and professionally managed website with strong business credibility and compliance posture. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and improving transparency on incident response contacts to further strengthen security and trust.

The website www.rostock.de serves as the official city portal for the Hanseatic and University City of Rostock, Germany. It provides comprehensive information on tourism, lifestyle, culture, activities, historical and maritime topics, targeting residents and visitors alike. The portal is positioned as a government entity's digital presence, offering key city-related services and information. Technically, the site is built on the Contao Open Source CMS platform, employs modern web technologies including lazy loading and cookie consent via Cookiebot, and integrates Google Tag Manager for analytics. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place; however, the absence of explicit security headers and a published security policy limits its security maturity. Privacy compliance is partial, with cookie consent present but no visible privacy policy or terms of service pages. WHOIS data indicates hosting within academic and government infrastructure, consistent with the city’s profile, though registrant details are minimal. Overall, the site is trustworthy and professional but would benefit from enhanced transparency in privacy and security policies.