Germany security reports

W

wallstreetONLINE

wallstreet-online.de

69

wallstreetONLINE operates a leading German financial and stock market portal offering real-time market data, news, analysis, and a large community platform for investors and finance enthusiasts. The website targets retail investors and market participants in Germany, providing comprehensive tools and content to support informed investment decisions. The platform is well-positioned as Germany's largest financial community with a broad range of services including stock quotes, news, forums, and mobile applications. Technically, the website employs modern web technologies such as Bootstrap, Highstock charts, and integrates privacy management and consent frameworks, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, integrates consent management, and uses Google Tag Manager with opt-out capabilities, though it lacks explicit security headers and published security policies. Overall, the site demonstrates a strong security posture with room for improvement in transparency and formal security documentation. The domain WHOIS data aligns with the website's business claims, indicating legitimacy and consistency. No blocking or WAF mechanisms were detected, allowing full content access and analysis.

D

Deutscher Ärzteverlag GmbH

aerzteblatt.de

70

Deutscher Ärzteverlag GmbH operates the website Deutsches Ärzteblatt, a leading German medical news and professional journal platform. The site provides current health policy news, medical research updates, and professional information targeting medical professionals and healthcare stakeholders. The business model is primarily media publishing with revenue from subscriptions and advertising. The website is well-positioned in the German healthcare media market with a strong reputation and comprehensive content offerings including ePaper and CME materials. Technically, the website uses modern web technologies including Next.js and React, hosted likely via GoDaddy's domain control services. It integrates advanced consent management tools such as Contentpass and Sourcepoint to ensure GDPR compliance. The site is optimized for performance, mobile responsiveness, and accessibility, providing a high-quality user experience. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements multiple security headers. It uses consent-based tracking and advertising scripts, minimizing privacy risks. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policy and incident response information are not publicly available, representing an area for improvement. Overall, the website demonstrates a mature digital presence with strong compliance and security posture, serving a professional audience with trustworthy content. Strategic recommendations include publishing detailed security policies, establishing incident response contacts, and enhancing transparency around vulnerability disclosures to further strengthen trust and security culture.

A

A–Gain Guide

a-gain.guide

53

A–Gain Guide is a digital platform focused on promoting sustainable fashion practices in Berlin and Hamburg by providing users with resources such as maps of repair shops, secondhand stores, and upcycling designers, as well as guides on clothing reuse and CO2 savings. The platform targets environmentally conscious consumers seeking to extend the life of their clothing. Technically, the website is built on Kirby CMS, uses modern JavaScript libraries like Glide.js for UI components, and integrates Matomo for privacy-respecting analytics. The site is well-structured, mobile-optimized, and includes cookie consent mechanisms aligned with GDPR requirements. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. WHOIS data is limited due to TLD restrictions but the domain appears legitimate and consistent with the business profile. Overall, the platform demonstrates a professional and trustworthy presence in the niche sustainable fashion market.

K

KAARISMA Recruitment GmbH

kaarisma-blue.de

61

KAARISMA BLUE Recruitment is a specialized recruitment agency based in Germany focusing on placing Servicetechniker and industrial technical professionals. The company positions itself as a modern headhunting service with a strong emphasis on matching candidates and employers harmoniously, particularly in sales and technical roles. Their business model revolves around active process support until successful hiring, targeting companies seeking qualified service technicians. The website content is professional, well-branded, and clearly communicates their value proposition. Technically, the site uses Kirby CMS and Matomo analytics, indicating a moderate level of digital maturity with some privacy-conscious tracking. Security posture is adequate with HTTPS enabled but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. Overall, the site is accessible, trustworthy, and serves its business purpose effectively.

K

Karlsruher Messe- und Kongress GmbH

offerta.de

63

offerta.de is the official website for the offerta trade fair, a major regional event held in Karlsruhe, Germany, organized by Karlsruher Messe- und Kongress GmbH. The platform provides comprehensive information about the event, including schedules, exhibitors, ticket sales, and thematic areas, targeting families and general visitors interested in shopping, enjoyment, and live events. The website demonstrates a strong market position as a leading regional event organizer with a focus on sustainability and regional products. Technically, the website is built on modern frameworks such as Vue.js, Nuxt.js, and Vuetify, ensuring a responsive and user-friendly experience. It integrates advanced privacy management tools like Usercentrics CMP and analytics services including Google Tag Manager and Hotjar, reflecting a mature digital infrastructure. The site is well-optimized for SEO and mobile devices, with good performance and accessibility standards. From a security perspective, the site enforces HTTPS and employs consent mechanisms for cookies, but lacks explicit security headers and a public security policy or incident response contact. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the website's claims, indicating legitimacy and trustworthiness. Overall, offerta.de presents a professional, secure, and privacy-compliant platform suitable for its business model. Strategic improvements could include enhancing security headers, publishing a security policy, and adding a security.txt file to further strengthen its security posture and trustworthiness.

R

ROMANZA Circusproduction

karlsruher-weihnachtscircus.de

52

Karlsruher Weihnachtscircus is a well-established regional Christmas circus event organized by ROMANZA Circusproduction in Germany. The website serves as an information and ticketing portal for the 16th edition of the show, targeting families and general audiences interested in festive live entertainment. The business model revolves around live event ticket sales and benefit concerts, positioning itself as a popular seasonal attraction in Baden. The website is professionally designed using WordPress and Elementor, with good mobile optimization and clear navigation. Social media integration and a dedicated ticket shop partnership enhance its digital presence. Technically, the site uses modern web technologies but lacks some advanced security headers and formal privacy or terms of service documentation. The SSL configuration is strong, and cookie consent is implemented, reflecting basic GDPR compliance. Overall, the site is trustworthy and safe for general audiences, with no adult or questionable content detected.

S

Stadt Karlsruhe

karlsruhe.de

69

The website www.karlsruhe.de serves as the official digital portal for the city of Karlsruhe, Germany, providing residents and visitors with access to a wide range of municipal services, information on city administration, social programs, environmental initiatives, cultural events, and mobility options. The site is well-positioned as a comprehensive government resource, targeting local citizens, businesses, and stakeholders. Technically, the site is built on the TYPO3 CMS platform, leveraging modern web technologies including SVG graphics and Matomo analytics configured with privacy in mind. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security-wise, the website enforces HTTPS and employs a cookie consent mechanism aligned with GDPR requirements, though it lacks explicit security policy and incident response disclosures. Overall, the site is trustworthy, professionally maintained, and compliant with relevant privacy regulations, with no detected blocking or WAF interference.

D

Deutsche Stiftung Denkmalschutz

denkmalschutz.de

48

The Deutsche Stiftung Denkmalschutz website represents a well-established non-profit organization dedicated to the preservation of cultural heritage and monuments in Germany. The site provides comprehensive information about their mission, projects, events, and donation opportunities, positioning them as the largest private initiative in their sector. The website is built on TYPO3 CMS, featuring modern design elements and good mobile optimization, reflecting a mature digital presence. Security posture is solid with HTTPS and secure forms, though there is room for improvement in security headers and cookie consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness, supported by recognized donation seals and transparent reporting.

S

Steuerkontor Weinert

steuerkontor-weinert.de

58

Steuerkontor Weinert is a well-established tax consultancy firm based in Rostock, Germany, with over 25 years of experience. The company specializes in digital financial and payroll accounting, personalized tax planning, and business consulting services tailored for commercial, freelance, and non-profit organizations primarily in the Mecklenburg-Vorpommern region. Their business model focuses on professional services with a strong emphasis on digital transformation and cooperative client relationships. The website reflects a consistent and professional brand image, supported by recognized certifications such as go-digital and Offensive Mittelstand. Technically, the site is built on the Contao CMS platform, uses modern web technologies including lazy loading for images, and integrates Google Tag Manager for analytics. Hosting is provided by Timme Hosting, consistent with the domain's WHOIS data.

G

Großmarkt Rostock GmbH

rostocker-weihnachtsmarkt.de

45

The Rostocker Weihnachtsmarkt website represents the largest Christmas market in Northern Germany, organized by Großmarkt Rostock GmbH. It serves a broad audience including visitors, families, vendors, and travel organizers by providing detailed event information, attractions, special actions, and an online shop for exclusive products. The business holds a strong market position as a leading regional event in the hospitality and retail sectors. Technically, the website employs modern frontend technologies such as Bootstrap and jQuery, hosted by Alfahosting, and includes a cookie consent mechanism and Google Analytics with privacy features enabled. Security posture is moderate with HTTPS enabled and privacy compliance evident, though improvements in security headers and incident response documentation are recommended. Overall, the site is professional, trustworthy, and well-structured, supporting a positive user experience.

P

pxmedia.PRO

pxmedia.pro

59

pxmedia.PRO is a German B2B service provider specializing in done-for-you marketing and recruitment solutions aimed at medium-sized companies in the DACH region. With over 15 years of experience, the company focuses on helping clients systematically acquire profitable new customers and qualified employees to enable sustainable growth. The website demonstrates a professional and consistent brand presence with strong customer testimonials and a clear value proposition. Technically, the site is built on WordPress with the Divi theme and uses modern tools such as Google Analytics and Borlabs Cookie for tracking and consent management. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is basic, with no explicit privacy policy page found, which is a notable gap. Overall, the domain registration is privacy protected but consistent with the business claims, and no suspicious patterns were detected.

S

seabirds.de GmbH

seabirds.de

46

seabirds.de GmbH operates a specialized flight school and charter service based at Flugplatz Oldenburg-Hatten, Germany. The company offers pilot training including PPL and LAPL licenses, sightseeing flights, and aircraft chartering. The website is professionally designed with clear navigation and relevant content targeting aviation students and enthusiasts. Technically, the site uses Bootstrap and jQuery with integrations for Google Analytics and Facebook SDK, though it employs an outdated jQuery version which poses some security risks. Security posture is moderate with HTTPS implied but lacking explicit security headers and incident response information. Privacy compliance is addressed with a cookie consent banner and a privacy policy linked in the imprint. Overall, the site is trustworthy and well-positioned locally but could improve technical security and transparency.

M

Maslaton Rechtsanwaltsgesellschaft mbH

quartermike4.de

55

Quarter Mike 4 is a specialized aviation consultancy led by Prof. Dr. Martin Maslaton, offering expert services in pilot training, language proficiency, UAV operations, flight simulation, aviation transactions, and regulatory approvals. The business targets aviation professionals and companies primarily in Germany, leveraging deep expertise and legal partnerships to provide comprehensive aviation-related consulting. The website is built on a modern WordPress and Elementor platform, featuring professional design and rich multimedia content. Security posture is adequate with HTTPS enabled, but lacks some security headers and formal privacy policies. No blocking or WAF mechanisms were detected, allowing full content access.

G

Gärtner von Eden e.G.

gaertner-von-eden.de

56

Gärtner von Eden e.G. is a professional garden design and construction company based in Germany, specializing in exclusive garden planning and landscaping services. The company targets private and commercial clients seeking high-quality garden solutions. Their website reflects a mature digital presence with a focus on user experience, SEO, and privacy compliance. Technically, the site is built on WordPress using the Divi theme, incorporating modern tools such as hCaptcha and Cookiebot for security and privacy. Security posture is good with HTTPS and security headers implemented, though the absence of a public security policy and incident response details suggests room for improvement. The domain WHOIS data is missing, which raises concerns about domain legitimacy, but the website content and business information appear consistent and professional. Overall, the site scores well on content quality and technical implementation but should address WHOIS transparency and security policy publication to enhance trust.

S

Sport Schreiner Tischtennis

sport-schreiner-tt.de

54

Sport Schreiner Tischtennis operates a specialized German-language e-commerce platform focused on table tennis equipment including blades, rubbers, tables, clothing, and accessories. The website is built on the Shopware 6 platform, leveraging modern web technologies and integrating analytics tools such as Matomo and Google Tag Manager. The site demonstrates good design quality, mobile responsiveness, and clear navigation, targeting table tennis players and enthusiasts primarily in Germany. Security posture is solid with HTTPS enforced and privacy-conscious analytics configurations, although explicit privacy and terms policies are not detected in the provided content. The domain WHOIS data is limited, with an unusual domain status and non-matching nameservers, which slightly reduces trust but does not indicate malicious intent. Overall, the site is professional, trustworthy, and well-positioned within its niche market.

J

JAKO AG

jako.de

69

JAKO AG operates a professional e-commerce platform specializing in sportswear and equipment for men, women, and children. The company targets sports teams, clubs, and individual consumers, offering a wide range of customizable sports apparel and accessories. The website demonstrates a mature digital presence with modern search capabilities, multi-language support, and integration of trusted third-party services such as Trusted Shops for customer assurance. Technically, the site employs contemporary JavaScript libraries and analytics tools, ensuring a responsive and user-friendly experience across devices. Security measures include HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, but the overall site professionalism and trust signals mitigate this concern. Strategic recommendations include enhancing transparency around security policies and providing clear contact information to improve user trust and compliance posture.

D

digitales MV

digitalesmv.de

67

digitales MV is a government-supported digital innovation and community platform focused on Mecklenburg-Vorpommern, Germany. It serves as a hub for information dissemination, event promotion, and fostering digital competencies across various sectors including government, business, and academia. The platform is well-positioned regionally with strong branding and partnerships, leveraging modern web technologies such as Drupal 10 and integrating multimedia and interactive widgets to engage its audience effectively. Technically, the website is well-implemented with good mobile optimization, accessibility, and SEO practices, though hosting provider details are not explicit. Security posture is strong with HTTPS and security headers in place, but lacks explicit security policies or incident response information. Privacy compliance is robust with clear cookie consent mechanisms and a comprehensive privacy policy in German. Overall, digitales MV presents a professional, trustworthy, and content-rich digital presence aligned with its mission to promote digital transformation in the region.

L

Landesportal Mecklenburg-Vorpommern

studieren-mit-meerwert.de

47

The website 'Studieren mit Meerwert' serves as a comprehensive regional education portal promoting universities and study programs in Mecklenburg-Vorpommern, Germany. It targets prospective and current students, including international visitors, by providing detailed information about study opportunities, campus life, and career prospects. The platform is operated under the Landesportal Mecklenburg-Vorpommern, reflecting a public sector educational initiative with a strong regional focus. Technically, the site is built on TYPO3 CMS and employs modern web technologies such as jQuery, YouTube iframe API, and Typekit fonts. It features a responsive design with good accessibility and SEO practices. Cookie consent is implemented with an opt-in mechanism, ensuring GDPR compliance. The site integrates social media channels and interactive elements like study program search and multimedia galleries. From a security perspective, the website uses HTTPS and obfuscates email addresses to prevent spam. However, it lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or malicious content were detected. The WHOIS data aligns with the website's regional educational purpose, showing consistent domain usage and hosting. Overall, the website demonstrates a high level of professionalism, content quality, and user experience, with minor recommendations to enhance security headers and publish vulnerability disclosure information.

+

+Pluswerk AG

pluswerk.ag

62

Pluswerk AG is a leading full-service digital agency specializing in open-source technologies such as TYPO3, Pimcore, and Shopware. With a strong presence in Germany and other European countries, the company serves a broad B2B audience including enterprises, public sector, and educational institutions. Their service portfolio covers consulting, UX/UI design, corporate websites, e-commerce solutions, online marketing, and cloud hosting, positioning them as a comprehensive digital transformation partner. The website reflects a mature, professional brand with consistent messaging and multiple industry certifications and awards. Technically, the website is built on TYPO3 CMS with integrations of Pimcore and Shopware technologies. It employs modern web standards, is mobile-optimized, and uses privacy-respecting analytics tools like Matomo and Visitor Analytics. The site includes a GDPR-compliant cookie consent mechanism and multilingual support, enhancing user experience and compliance. Performance and SEO optimizations are well implemented, contributing to a fast and accessible user interface. From a security perspective, the site enforces HTTPS and demonstrates good security hygiene with no exposed sensitive data or vulnerable libraries detected. However, explicit security headers like X-Frame-Options and a published security policy or incident response contacts are absent, representing areas for improvement. The WHOIS data is unavailable due to privacy protection, which is common and justified for this business type, and does not detract from the site's legitimacy. Overall, Pluswerk AG's website presents a trustworthy, professional digital presence with strong business credibility and a solid security posture. Strategic enhancements in security transparency and incident response readiness would further strengthen their risk management and trustworthiness.

P

pxMEDIA.de GmbH

pxmedia.de

45

pxMEDIA.de GmbH is a specialized online marketing agency based in Germany, focusing on systematic personnel recruiting, employer branding, and customer acquisition for ambitious medium-sized enterprises. The company positions itself as a partner for sustainable business success, offering consulting, conception, implementation, and ongoing support services. Their market niche is well-defined, targeting the medium-sized business sector with tailored digital marketing solutions. The website demonstrates a professional and consistent brand image, supported by award recognition and client testimonials. Technically, the site is built on WordPress with modern plugins and integrations such as Wistia for video hosting and Google Maps API for location services. Hosting is provided by Alfahosting, a reputable German hosting provider. Security posture is solid with HTTPS enforced and CAPTCHA protection on forms, though explicit security headers and incident response policies are absent. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism in place. Overall, the website is well-designed, mobile-optimized, and trustworthy, with no signs of suspicious or adult content.

G

GlücksSpirale

gluecksspirale.de

60

GlücksSpirale is a well-established German lottery organization offering various lottery ticket options with significant prizes, including immediate and long-term monthly winnings. The business model integrates social responsibility by funding welfare, monument restoration, and sports projects, positioning itself as a socially conscious lottery provider. The website reflects a mature digital presence with modern technologies such as React and Next.js, hosted on reliable infrastructure including Amazon S3 and Deutsche Telekom DNS servers. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is evident through cookie consent mechanisms and a comprehensive privacy policy. Overall, the site demonstrates high trustworthiness and professionalism suitable for its regulated gambling industry context.

W

Whistleblowing Experte

whistleblowing-experte.de

55

Whistleblowing Experte operates a specialized digital whistleblower reporting and compliance management platform targeted primarily at small and medium-sized enterprises (KMU) in Germany. The company offers a comprehensive compliance tool integrated with qualified legal support and an ombudsperson network, positioning itself as a niche provider in the compliance and whistleblowing sector. The website is professionally designed using the Contao CMS, with modern web technologies and responsive design ensuring good user experience across devices. The technical infrastructure is hosted by Timme Hosting and includes Google Tag Manager for analytics. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and explicit incident response policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is trustworthy and functional but would benefit from enhanced privacy and security disclosures.

J

Julia Boldt Fotografie

juliaboldt.de

55

Julia Boldt Fotografie is a small, locally focused photography and photo training business based in Rostock, Germany. The company offers relaxed photoshoots and photo workshops primarily targeting individuals and families interested in nature photography. The website is professionally designed using WordPress with the Divi theme and integrates e-commerce capabilities via WooCommerce, enabling product sales or bookings. The technical infrastructure includes modern web technologies and consent management tools, reflecting a mature digital presence for a small business. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms implemented, although no explicit security policy or incident response information is published. Overall, the website demonstrates good privacy compliance and business credibility with clear contact information and comprehensive policies. The domain registration data aligns well with the website content, indicating legitimacy and consistency.

U

Uplift Founders

upliftfounders.com

59

Uplift Founders is a specialized coaching service focused on empowering startup founders to scale their businesses faster by addressing both the inner psychological aspects and the outer strategic business challenges. Founded in 2023 and based in Germany, the company targets seed-stage founders approaching Series A funding as well as bootstrapped founders with significant traction. Their offerings include a proprietary Founder Audit, shift sessions, a Clarity Program for bi-weekly coaching, and an intensive Series A Co-Pilot mode for hands-on support. The website is professionally designed, mobile-optimized, and rich in content, including detailed FAQs and client testimonials, which enhance trust and credibility. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and Swiper.js for UI components, alongside Matomo for privacy-conscious analytics. The domain is registered with a reputable registrar and secured with HTTPS, although DNSSEC is not enabled. No major security vulnerabilities or exposed sensitive data were detected. However, the site lacks some security headers and a cookie consent mechanism, which are recommended for enhanced compliance and security. Overall, the security posture is solid but could be improved by implementing additional HTTP security headers, enabling DNSSEC, and publishing formal security and incident response policies. The business credibility is high due to transparent contact information, professional content, and consistent branding. No adult or questionable content is present, making the site safe for general audiences.

K

Karlsruher Kind

karlsruher-kind.de

64

Karlsruher Kind is a regional magazine targeting parents and children in the Karlsruhe area, providing editorial content, event calendars, and community engagement features. The website is built on WordPress with a modern plugin ecosystem supporting event management and user interaction. The technical infrastructure includes HTTPS, security headers, and structured data for SEO, reflecting a mature digital presence. Security posture is strong with no evident vulnerabilities or exposed sensitive data, though privacy compliance could be improved by publishing explicit privacy and terms policies. Overall, the site is professional, trustworthy, and well-positioned in its niche market.

R

rabbitAI

rabbitai.de

59

rabbitAI is a specialized technology company providing high-precision training data and ground truth solutions for computer vision engineers and AI developers. Their offerings focus on device-specific ground truth data capture and augmentation to accelerate AI algorithm development, particularly in 3D perception, XR, and in-cabin sensing applications. The company positions itself as a reliable partner for enhancing AI reliability and safety through superior training data. Technically, the website is hosted on AWS infrastructure, uses modern web technologies including HTML5, CSS3, JavaScript, and employs Matomo analytics with privacy-conscious configurations. The site is well-designed, mobile-optimized, and SEO-friendly, providing a professional user experience. However, some technical improvements such as adding security headers and explicit cookie consent mechanisms could enhance security and compliance. From a security perspective, the site enforces HTTPS and avoids cookie tracking, indicating a good baseline security posture. No critical vulnerabilities or exposed sensitive data were detected. The absence of a security policy, incident response contacts, or vulnerability disclosure mechanisms suggests room for maturity in security governance. Overall, rabbitAI presents a trustworthy and professional online presence with a strong focus on AI training data solutions. Strategic improvements in privacy compliance and security best practices would further strengthen their digital maturity and trustworthiness.

K

Kinder Praxis & Klinik

kinder-und-klinik.de

52

Kinder Praxis & Klinik is a specialized pediatric dental practice and clinic located in Böblingen, Germany, focusing on dental care for children and teenagers. The practice emphasizes creating a child-friendly, anxiety-free environment with a comprehensive range of dental services including prophylaxis, caries treatment, milk tooth crowns, and oral surgery. The website presents a professional and well-structured digital presence with detailed service descriptions and a strong focus on patient comfort and education. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, and Matomo analytics, hosted on a reputable DNS provider. Security posture is good with HTTPS enforced and no visible vulnerabilities, though cookie consent and explicit security policies are lacking. Overall, the site is trustworthy and professionally maintained, serving a local healthcare niche effectively.

K

KAARISMA Recruitment GmbH

kaarisma.de

63

KAARISMA Recruitment GmbH is a specialized recruitment agency based in Berlin, focusing on headhunting and recruiting sales professionals for permanent positions. The company emphasizes harmony between candidates and their work environment, targeting both Fach- und Führungskräfte and companies seeking sales talent. Their market position is that of a niche, specialized recruitment service with a modern and professional online presence. Technically, the website is built on Kirby CMS, hosted on Hetzner infrastructure, and uses Matomo for analytics, indicating a moderate to advanced digital maturity. Security posture is good with HTTPS enabled and no visible vulnerabilities, though security headers and explicit incident response policies are not evident. Overall, the website is professional, trustworthy, and compliant with GDPR, with clear privacy and cookie policies. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and expanding contact information visibility.

M

Manuel Deutsch

manuel-deutsch.de

53

Manuel Deutsch operates as a freelance web developer and web designer based in Stuttgart, Germany, offering professional web development, SEO, UX, and frontend services primarily to agencies and businesses in the Stuttgart and Ludwigsburg regions. The website showcases a strong portfolio of client projects and testimonials, positioning Manuel as a trusted partner for digital agencies and companies seeking high-quality, customized web solutions. Technically, the site leverages modern frameworks such as Vue.js and React, uses Kirby CMS for content management, and is hosted on netcup servers, indicating a mature and modern digital infrastructure. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though the site lacks explicit security headers and formal privacy or cookie policies, which are areas for improvement. Overall, the website is professional, well-designed, and trustworthy, but could enhance compliance and security transparency to further strengthen its risk profile.

C

Circular City – Zirkuläre Stadt e.V.

circular.berlin

57

Circular Berlin is a small non-profit organization dedicated to accelerating Berlin's transition towards a circular city. Their core activities include knowledge building, community development, education, and practical programs focused on the circular economy. The organization positions itself as a key local actor fostering sustainable urban metabolism through research and community engagement. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting circular economy practitioners and the broader community in Berlin. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, enhanced by plugins such as Yoast SEO and Matomo for analytics. Hosting and domain registration are transparent and consistent with the organization's profile. The site is moderately performant and well-optimized for mobile devices, with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and uses clientTransferProhibited domain status to prevent unauthorized transfers. However, DNSSEC is not enabled, and some recommended security headers are missing. The cookie consent mechanism is GDPR compliant, using CookieYes for user consent management. No explicit security or incident response policies are published, and no vulnerability disclosure or security.txt file is found. Overall, the website presents a trustworthy and professional digital presence for a non-profit organization. Strategic recommendations include enabling DNSSEC, implementing additional security headers, publishing a security policy, and enhancing incident response readiness to further strengthen security posture and trust.

3

321 MED GmbH

321med.com

50

321 MED GmbH operates a specialized healthcare software platform focused on digitizing and automating patient reception and administrative workflows for medical practices, clinics, and healthcare centers primarily in Germany. The company offers a comprehensive SaaS solution that includes appointment management, digital check-in, AI-powered telephone assistance, and workflow automation, targeting a broad range of medical specialties. The website demonstrates a mature market position with over 3,500 healthcare providers and 5 million patients served, supported by strong media presence and user testimonials. Technically, the website employs a modern technology stack including jQuery, Usercentrics for consent management, Google Tag Manager, and Facebook Pixel for analytics and marketing. Hosting and DNS services involve Cloudflare and Cronon GmbH, with HTTPS enforced and cookie consent mechanisms in place. The site is mobile-optimized with good SEO and accessibility basics, though some improvements in security headers and DNSSEC are recommended. From a security perspective, the site shows good practices such as GDPR compliance and encrypted connections but lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the business claims, showing legitimacy and stability. Overall, 321 MED presents a professional, trustworthy, and well-structured digital presence aligned with its healthcare software business. Strategic enhancements in security transparency and DNS security would further strengthen its posture.

3

321 MED GmbH

321med4.com

50

321 MED GmbH operates a specialized healthcare software platform focused on digitizing and automating patient reception and administrative workflows for medical practices, clinics, and related healthcare facilities. The company has established a strong market presence in Germany with over 3,500 healthcare providers and 5 million patients served. Their flagship product, the Online-Rezeption, offers a comprehensive suite of features including appointment management, digital check-in, AI-powered telephone assistance, and workflow automation, tailored specifically for healthcare environments. The website is professionally designed, content-rich, and well-branded, reflecting a mature and credible business.

P

PREVIMED

kinderarzt-gilching.de

51

PREVIMED is a specialized pediatric and adolescent medical practice based in Gilching, Germany, focusing on comprehensive healthcare services for children from infancy through teenage years. The website serves as a health forum offering detailed information on pediatric care, prevention, diagnostics, and specialized treatments such as allergy and diabetes management. The practice positions itself as a modern, prevention-focused healthcare provider with a strong emphasis on supporting parents and children through various developmental stages. Technically, the website is built on WordPress using the Avada theme and integrates SEO and cookie consent tools, reflecting a moderate to advanced digital maturity. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms in place, although some enhancements like a security.txt and incident response contacts could improve readiness. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable resource for its target audience. Strategic recommendations include enhancing security policies, improving accessibility, and adding explicit incident response information to further strengthen trust and compliance.

H

Hausarztzentrum Aubing

haz-aubing.de

53

Hausarztzentrum Aubing is a small local healthcare provider based in Munich, Germany, offering comprehensive general medical and internal medicine services. The website presents a professional image with clear descriptions of services, a team of doctors, and accessible contact information. The business targets families and individuals seeking primary care and preventive health services. Technically, the site is built on WordPress with common plugins and uses HTTPS, ensuring secure communication. However, there is room for improvement in security headers and privacy compliance mechanisms. The presence of third-party scripts for online reception introduces some risk that should be managed carefully. Overall, the site is functional, trustworthy, and serves its intended audience well.

KARLINSKI is a small, self-employed graphic design business based in Mecklenburg, Germany, offering a range of creative services including logo design, corporate identity, print and web design, and production support. The website serves as a professional portfolio and contact point, targeting local businesses, cultural institutions, and agencies. The technical infrastructure is based on WordPress with common plugins for SEO and contact forms, hosted on kasserver.com. While the site is functional and well-structured with good content quality and GDPR-compliant privacy and cookie policies, it uses outdated WordPress and plugin versions, which pose potential security risks. No advanced security policies or incident response mechanisms are evident. Overall, the site is trustworthy and professional but would benefit from technical updates and enhanced security measures.

P

Peene Kies GmbH

peenekies.de

45

Peene Kies GmbH is a medium-sized German company specializing in the extraction, processing, and supply of surface mineral raw materials, primarily serving the construction and energy sectors in Northeast Germany. The company positions itself as a market leader with a long history dating back to 1923. Their website reflects a professional business model focused on sustainable production of building materials and renewable energy solutions. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, indicating a mature digital presence with good SEO and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and headers could be improved. No vulnerabilities or suspicious elements were detected. Overall, the website is trustworthy and compliant with GDPR, though direct contact details like emails and phone numbers are not explicitly listed, relying instead on contact forms. Strategic recommendations include enhancing security headers, publishing incident response information, and adding a vulnerability disclosure policy to further strengthen trust and compliance.

L

Land Mecklenburg-Vorpommern

ecohesionportal-mv.de

57

The eCohesion-Portal Mecklenburg-Vorpommern is a government-operated web platform designed to facilitate electronic communication and data exchange between funding recipients and regional authorities or intermediaries. It primarily supports the management of approved funding projects within the region, co-financed by the European Union through the European Regional Development Fund. The portal itself does not process data but serves as a communication interface, targeting regional stakeholders involved in funding processes. Technically, the website employs a modern front-end stack including Bootstrap 5.1.3, jQuery, and Popper.js, ensuring responsive design and usability. The site implements a Content-Security-Policy header with restrictive directives, although the use of 'unsafe-inline' and 'unsafe-eval' weakens its security posture. No analytics or tracking technologies are detected, aligning with privacy-conscious government standards. The site lacks a cookie consent mechanism, which is a minor compliance gap given GDPR requirements. From a security perspective, the portal benefits from HTTPS and partial security header implementation but could improve by tightening CSP rules and adding additional headers such as HSTS and X-Frame-Options. No vulnerabilities or exposed sensitive data were identified in the analyzed content. WHOIS data confirms domain legitimacy and consistency with the regional government entity. Overall, the portal presents a trustworthy, professional, and functional government service with moderate technical sophistication and a good security baseline. Strategic improvements in security headers and privacy compliance would enhance its posture and user trust.

F

Mit profil anmelden

foerderportal-efre-mv.de

60

The website is a government-operated login portal for managing funding applications and grants in the Mecklenburg-Vorpommern region of Germany. It provides a secure authentication mechanism via the 'profil' system, allowing users to access and manage their funding online. The portal is targeted at applicants and stakeholders involved in regional funding programs, serving as a digital gateway for government services. Technically, the site uses standard HTML5 and JavaScript with a simple, functional design focused on login functionality. The site is mobile responsive at a basic level and includes accessibility features such as keyboard navigation and password visibility toggling. However, SEO optimization is minimal, and no advanced frameworks or CMS platforms are detected. From a security perspective, the site uses HTTPS and a POST method for login forms, but lacks visible security headers and CSRF protections. No privacy or cookie policies are present, which is a compliance gap. The WHOIS data aligns with regional network infrastructure, supporting legitimacy. No WAF or blocking mechanisms are detected, indicating full accessibility. Overall, the site is functional and moderately secure but would benefit from enhanced security headers, privacy compliance improvements, and richer metadata. The risk level is moderate with no critical vulnerabilities detected.

T

TBI Technologie-Beratungs-Institut GmbH

tbi-mv.de

52

The TBI Technologie-Beratungs-Institut GmbH is a regional government-affiliated institution focused on supporting research, development, and innovation in Mecklenburg-Vorpommern, Germany. It provides funding program management, digitalization support for SMEs, and knowledge transfer platforms. The website is built on TYPO3 CMS with modern frontend technologies and includes a cookie consent mechanism respecting user privacy. Contact information is clearly provided, and the site displays trust signals such as EU funding logos and government ministry affiliations. Security posture is solid with HTTPS and privacy-conscious analytics, though some security headers and policies could be improved. Overall, the site is professional, trustworthy, and well-suited for its target audience of regional businesses and research entities.

I

Invest in Mecklenburg-Vorpommern GmbH

invest-in-mv.de

55

Invest in Mecklenburg-Vorpommern GmbH operates as a regional investment promotion agency focused on attracting and supporting investments in the German state of Mecklenburg-Vorpommern. The website provides comprehensive information and services including location analysis, funding advice, and business establishment support, targeting investors and companies interested in the region. The site is professionally designed, well-structured, and uses modern technologies such as TYPO3 CMS, Bootstrap, and UIkit, ensuring good user experience and mobile optimization. Security posture is strong with HTTPS, security headers, and secure forms, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a trustworthy and professional front for the investment promotion entity.

S

Staatliche Ämter für Landwirtschaft und Umwelt Mecklenburg-Vorpommern

stalu-mv.de

61

The website www.stalu-mv.de serves as the official portal for the Staatliche Ämter für Landwirtschaft und Umwelt (State Offices for Agriculture and Environment) in Mecklenburg-Vorpommern, Germany. It provides information on regulatory enforcement, agricultural support, environmental protection, and related public services. The site targets citizens, agricultural businesses, and governmental stakeholders within the region. The business model is that of a public governmental agency delivering regulatory and support services. The website is well-structured, professionally designed, and consistent with government branding, offering good content relevance and navigation clarity. Technically, the site uses standard web technologies including HTML5, CSS, and JavaScript, hosted on official regional servers (mvnet.de). It appears to be built on a custom or proprietary CMS platform. The site is mobile-optimized and accessible, with moderate performance. SEO practices are adequately implemented, though no advanced frameworks or analytics services are detected. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, no explicit security headers or incident response policies are published, and no cookie consent mechanism is present, which are areas for improvement. The WHOIS data aligns well with the website's governmental purpose, indicating a legitimate and consistent domain registration. Overall, the website presents a low-risk profile with a solid business credibility and good content quality. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security policies, and implementing security headers to strengthen the security posture.

GSA Gesellschaft für Struktur- und Arbeitsmarktentwicklung is a government-affiliated organization based in Mecklenburg-Vorpommern, Germany, focused on labor market development, vocational training, and business consulting. The website provides news updates, service information, and resources primarily for regional businesses, job seekers, and policymakers. The organization offers services such as funding for training, business consulting, and support for startups and workforce transformation. The site is built on TYPO3 CMS with a moderate technical infrastructure and uses standard web technologies including Bootstrap and jQuery. It employs a cookie consent mechanism and disables analytics tracking by default, reflecting a privacy-conscious approach. Security posture is adequate but could be improved by adding security headers and updating legacy libraries. No critical vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, serving a medium-sized public sector entity.

W

WERK3 Werbeagentur GmbH & Co. KG

werk3.de

54

WERK3 Werbeagentur GmbH & Co. KG is a small, full-service advertising agency based in Rostock, Germany. The company specializes in marketing strategies, corporate design, campaign conception, and website development, positioning itself as a creative and award-winning agency within the regional media sector. The website reflects a professional and consistent brand image, targeting businesses and organizations seeking comprehensive marketing solutions. Technically, the website is built on TYPO3 CMS and leverages a modern technology stack including jQuery, Bootstrap, and various JavaScript libraries for enhanced user experience and interactivity. Analytics and marketing tools such as Matomo, Google Tag Manager, and Facebook Pixel are integrated, with a clear cookie consent mechanism ensuring GDPR compliance. The site demonstrates good mobile optimization and SEO practices, though accessibility could be improved. From a security perspective, the website enforces HTTPS and employs cookie consent but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent with the website's claims, indicating a legitimate and trustworthy online presence. Overall, the website scores well in content quality, technical implementation, privacy compliance, and business credibility, with recommendations to enhance security headers, publish formal security policies, and improve accessibility to further strengthen its security posture and user trust.

Filmmuseum Potsdam is a cultural and educational institution dedicated to film history, exhibitions, and cinema programming. The website serves as a portal for visitors to explore exhibitions, digital content, and research projects related to film culture. The institution targets a general audience interested in film and cultural heritage, operating primarily as a non-profit entity within the media and education sectors in Germany. The website is built on idbase CMS 5.5 and uses a combination of jQuery, Bootstrap, and other JavaScript libraries to deliver a responsive and interactive user experience. Cookiebot is integrated for GDPR-compliant cookie consent management. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, but the use of outdated JavaScript libraries and lack of visible security headers suggest room for improvement. No explicit privacy policy or terms of service pages were found in the provided content, which is a compliance gap. Overall, the website is professional and trustworthy but would benefit from enhanced privacy disclosures and updated technical components.

The website www.filmbildung-brandenburg.de represents a small educational service provider, Stefan Röske, specializing in film and media education workshops and digital literacy. The business targets educators and learners interested in practical media applications such as podcasts, explainer videos, and digital tools. The website is built on WordPress and hosted likely on a German hosting provider, with a moderate performance and good mobile optimization. However, the site lacks critical privacy and cookie policies, and no direct contact emails or phone numbers are provided, only a contact form. Security posture is basic with HTTPS enabled but missing security headers and incident response information. WHOIS data is minimal and lacks registrant transparency, which slightly reduces trustworthiness. Overall, the site is professional and content-rich but would benefit from enhanced privacy compliance and security best practices.

V

VDI Wissensforum GmbH

vdiconference.com

70

VDI Wissensforum GmbH operates a professional website offering international conferences, congresses, and courses targeted at engineers and technical specialists. The company positions itself as a leading provider in continuing education within the engineering sector, primarily serving the German market. The website content is well-structured, professionally designed, and optimized for both desktop and mobile users, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS and integrates modern marketing and analytics tools such as Google Tag Manager, Cookiebot for consent management, and reCAPTCHA for form security. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers could be improved. The absence of publicly available WHOIS data for the domain raises concerns about domain registration legitimacy, which should be further investigated. Overall, the website demonstrates strong privacy compliance and business credibility, with clear contact information and social media engagement.

Voucherbooking.de is an e-commerce platform focused on selling vouchers or gift certificates, primarily targeting a general German-speaking audience. The website is built using Angular 11 and hosted on Hetzner servers, indicating a modern but basic technical infrastructure. The site content is minimal with placeholder legal links and lacks explicit contact or security policy information. Security posture is weak due to missing security headers and absence of cookie consent mechanisms, which also impacts GDPR compliance. No WAF or blocking mechanisms were detected, allowing full content access for analysis.

D

Datenwerkbank

datenwerkbank.de

54

Datenwerkbank is a small, specialized web service provider based in Stuttgart, Germany, founded in 2024 by Manuel Deutsch, a freelance web developer with over 10 years of experience. The company focuses on website maintenance, support, and optimization services primarily for WordPress and Kirby CMS platforms, targeting agencies and medium-sized businesses. Their offerings include regular updates, backups, SEO optimization, hosting with green energy, and personalized support, delivered through clear service packages with transparent pricing. The website reflects a professional and trustworthy brand with strong customer references and a clean, responsive design. Technically, the website employs modern web standards including responsive images, SVG graphics, and privacy-conscious analytics via Matomo with cookies disabled. Hosting is provided by netcup, a reputable German provider, and the site uses HTTPS with canonical URLs for SEO. While the site lacks explicit security headers and a cookie consent mechanism, it demonstrates good privacy practices and GDPR compliance through its privacy policy and minimal tracking. From a security perspective, the site shows good practices such as regular backups and CMS updates included in service packages, but could improve by implementing security headers and publishing a security policy or incident response contact. No vulnerabilities or suspicious WHOIS patterns were detected, and the domain registration aligns with the business founding date, supporting legitimacy. Overall, Datenwerkbank presents a secure, professional, and privacy-aware web presence suitable for its target market. Strategic improvements in security headers and cookie consent would enhance compliance and trust further.

D

Deutsches Rotes Kreuz

drk-guestrow.de

48

The website www.drk-guestrow.de represents the Kreisverband Güstrow e.V. branch of the Deutsches Rotes Kreuz (German Red Cross), a well-established non-profit humanitarian organization. The site provides comprehensive information about their social services, community engagement, courses, and donation opportunities, targeting the general public, volunteers, and donors. The content is professionally presented with consistent branding and clear navigation, supporting a positive user experience. Technically, the site is built on TYPO3 CMS, employs modern web standards, and shows good mobile optimization and accessibility. Security posture is adequate with HTTPS assumed and cookie consent mechanisms in place, though explicit security headers and incident response policies are not published. WHOIS data confirms domain legitimacy and consistency with the organization's identity. Overall, the site is trustworthy, compliant with GDPR, and serves as an effective digital presence for the local DRK branch.

D

DRK Kreisverband Rostock e.V.

drk-rostock.de

56

DRK Kreisverband Rostock e.V. is a regional branch of the German Red Cross, providing humanitarian aid, social services, and community support in Rostock and surrounding areas. The organization focuses on emergency rescue, care for seniors, support for people with disabilities, and volunteer engagement. The website reflects a mature digital presence with a professional design, clear navigation, and compliance with GDPR and cookie consent regulations. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates Google Analytics via Google Tag Manager. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response information are absent. WHOIS data confirms domain legitimacy and consistency with the organization's identity. Overall, the site is trustworthy, well-maintained, and serves its target audience effectively.