Germany security reports

S

Selecdoo

selecdoo.me

56

Selecdoo is a German-based affiliate marketing platform founded in 2017, offering businesses a risk-free and flexible way to generate revenue through partner programs. The platform targets publishers, influencers, and advertisers, providing tools for commission tracking, campaign management, and publisher support. Technically, the website is built on modern frameworks such as Next.js and hosted on Vercel, ensuring good performance and mobile optimization. Security posture is adequate with HTTPS and domain transfer protections, but lacks published security policies and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy with room for improvement in compliance and security transparency.

C

ClickEshop

clickeshop.de

59

ClickEshop is a small technology company specializing in providing a proprietary platform for creating professional websites and webshops, including hosting, email, and domain services. With over 18 years of market presence and thousands of successful projects, it targets small to medium businesses and individuals seeking easy-to-use, customizable web solutions. The website is well-designed, mobile-optimized, and offers multilingual support, enhancing user experience and accessibility. Technically, the platform uses modern web standards such as HTML5, CSS3, and JavaScript with jQuery, and enforces HTTPS for secure communications. However, it lacks visible security headers and published privacy or cookie policies, which are important for compliance and trust. Contact information is clearly provided, including email, phone, and a contact form, supporting customer engagement. Overall, the site demonstrates a moderate to good security posture but would benefit from enhanced privacy compliance and security best practices.

P

Planetary Quantum GmbH

planetary-quantum.net

50

Planetary Quantum GmbH is a German technology company specializing in managed Docker hosting and application hosting platforms. Their services cater primarily to startups, agencies, developers, and enterprise teams seeking reliable, secure, and GDPR-compliant hosting solutions. The company emphasizes its Berlin-based infrastructure with redundant data centers, ensuring performance and data protection aligned with European regulations. The website reflects a professional and consistent brand image, offering clear information about their products, solutions, and support services. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern plugins such as Slider Revolution and Plausible Analytics for performance and minimal user tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some security best practices like security headers and cookie consent mechanisms could be improved. From a security perspective, the site uses HTTPS with a strong SSL configuration and avoids exposing sensitive data. The absence of WHOIS data for the domain is a notable concern, potentially indicating a newly registered or unregistered domain, which slightly impacts trustworthiness. No signs of WAF blocking or security challenges were detected, and the site does not expose vulnerabilities or sensitive information. Overall, Planetary Quantum GmbH presents a credible and professional online presence with room for improvement in privacy compliance and security hardening. The lack of WHOIS data should be investigated further to confirm domain legitimacy and registration status.

onlinevhs@BW is a regional online education platform serving the Volkshochschulen (adult education centers) in Baden-Württemberg, Germany. It offers a wide variety of online courses spanning languages, professional development, fitness, finance, pedagogy, and societal topics. The platform targets a broad general audience interested in personal and professional growth through accessible online learning. The business model revolves around providing digital access to Volkshochschulen courses, positioning itself as a key regional educational resource. Technically, the website is built on TYPO3 CMS with Bootstrap and modern JavaScript libraries, ensuring a responsive and accessible user experience. Analytics are implemented via Matomo and Google Tag Manager with some privacy-conscious configurations such as cookie disabling and consent checks. Security posture is strong with HTTPS and some best practices, but the absence of publicly linked privacy and cookie policies, terms of service, and contact information reduces compliance and trust levels. No vulnerabilities or suspicious content were detected, and the domain registration aligns well with the business purpose and location. Overall, the site is professional and functional but would benefit from enhanced privacy and compliance disclosures to improve user trust and regulatory adherence.

Q

QUACERT Gesellschaft zur Zertifizierung von Qualitätsmanagement-Systemen mbH

azwv.de

47

QUACERT Gesellschaft zur Zertifizierung von Qualitätsmanagement-Systemen mbH operates a professional website focused on AZAV certification and quality management for labor market service providers in Germany. The company positions itself as a specialized certification body offering accreditation services, consulting, and training related to labor market integration and vocational education. The website content is well-structured, informative, and targeted at education and labor market institutions seeking AZAV compliance. Technically, the site uses Joomla CMS with common libraries such as jQuery and Bootstrap, providing a moderate performance and good mobile responsiveness. Security posture is adequate but could be improved by implementing security headers and cookie consent mechanisms. The domain WHOIS data is minimal but consistent with the business profile, and no blocking or WAF mechanisms interfere with content access. Overall, the site demonstrates a good level of professionalism and trustworthiness appropriate for a small specialized certification entity.

L

Landesnetzwerk Weiterbildungsberatung Baden Württemberg

lnwbb.de

46

The Landesnetzwerk Weiterbildungsberatung Baden Württemberg (LN WBB) is a regional network providing free, neutral, and personalized continuing education counseling services to individuals in Baden-Württemberg, Germany. The website serves as a portal to locate advisory centers, access FAQs, and obtain information about continuing education opportunities. It targets individuals seeking guidance on professional development and lifelong learning. The business operates as a non-profit network with a focus on accessibility and regional presence. Technically, the website is built on WordPress 6.8.1 using the Enfold theme and several plugins including Yoast SEO for search optimization, Borlabs Cookie for consent management, and Maps SVG for interactive maps. The site demonstrates good mobile optimization, accessibility features, and SEO practices. The use of modern JavaScript libraries and structured data enhances its digital maturity. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms. However, no explicit security headers were detected, and there is no published security policy or incident response contact. No vulnerabilities or exposed sensitive data were found in the analyzed content. The domain registration is consistent with the website's purpose and age, supporting legitimacy. Overall, the website presents a professional, trustworthy, and user-friendly platform for continuing education counseling in the region. Strategic improvements include publishing privacy and security policies, enhancing security headers, and adding vulnerability disclosure information to strengthen compliance and trust.

L

Landesanstalt für Landwirtschaft, Ernährung und Ländlichen Raum Schwäbisch Gmünd

lel-web.de

63

The Landesanstalt für Landwirtschaft, Ernährung und Ländlichen Raum Schwäbisch Gmünd operates as a regional government agency providing comprehensive information, advisory services, and publications related to agriculture, nutrition, and rural development in Baden-Württemberg, Germany. The website serves a diverse audience including agricultural professionals, policymakers, educators, and the general public interested in these sectors. It offers thematic content ranging from market data to quality assurance tools and educational programs, positioning itself as a trusted regional authority. Technically, the website employs modern web technologies such as jQuery, jQuery UI, FontAwesome, and lazy loading for images, indicating a moderate level of digital maturity. The CMS appears to be custom or proprietary, tailored to the institution's needs. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured navigation. From a security perspective, the site uses HTTPS and includes security tokens in forms, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the website is professional, trustworthy, and content-rich, but could improve in privacy compliance and security transparency to enhance user trust and regulatory adherence.

B&W NetworX GmbH & Co. KG is a small regional IT service provider based in Sinzheim, Germany, specializing in Windows and Unix/Linux technologies. Their business model focuses on delivering IT consulting, infrastructure services, data protection consulting, and ERP solutions to local businesses. The website is professionally designed with clear navigation and content relevant to their target audience. Technically, the site runs on WordPress 4.9.23 with common plugins such as Contact Form 7 and a cookie notice, indicating basic digital maturity. However, the WordPress version is outdated, which may expose the site to security vulnerabilities. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and published security policies. The absence of WHOIS data is a significant concern, as it prevents verification of domain legitimacy and age, impacting trustworthiness. Overall, the site is functional and professional but would benefit from technical and security improvements.

Z

Zimper Media GmbH

messe-kommunal.de

53

Messe KOMMUNAL is a well-established professional trade fair organized by Zimper Media GmbH, targeting municipal decision-makers such as mayors and administrative officials. The event features over 140 exhibitors, a comprehensive program of lectures, and networking opportunities, positioning itself as a key platform for municipal innovation and collaboration in Germany. The website reflects a mature digital presence with modern technologies and clear branding. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

E

EMAS geprüftes Umweltmanagement

emas.de

44

The website www.emas.de serves as an authoritative information portal for the European Eco-Management and Audit Scheme (EMAS), primarily targeting organizations interested in environmental management and sustainability in Germany and Europe. It provides comprehensive resources including news, events, publications, and access to software and platforms supporting EMAS implementation. The site is well-positioned as a government/non-profit sector resource with strong trust indicators such as official branding and testimonials from recognized organizations. Technically, the website is built on TYPO3 CMS with modern frontend technologies including jQuery, Bootstrap, and Slick Carousel. It is hosted on DomainControl nameservers, uses HTTPS, and demonstrates good mobile optimization and accessibility. SEO practices are well implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and uses secure forms with validation. However, it lacks explicit security headers and does not publish incident response or vulnerability disclosure information, which are areas for improvement. No vulnerabilities or malicious content were detected. Overall, the website presents a low risk profile with a strong professional and trustworthy presence. Strategic recommendations include implementing cookie consent mechanisms, adding security headers, and publishing security policies to enhance compliance and trust.

D

Deutscher Nachhaltigkeitskodex (DNK)

deutscher-nachhaltigkeitskodex.de

59

The Deutscher Nachhaltigkeitskodex (DNK) website serves as a comprehensive platform providing free support for companies, especially small and medium-sized enterprises (SMEs), to comply with the EU's Corporate Sustainability Reporting Directive (CSRD). It offers a modular suite of services including a digital reporting platform, checklists, helpdesk support, and sector-specific guidance. The DNK is backed by the German Federal Ministry for Economic Affairs and Climate Action (BMWK) and developed by the Council for Sustainable Development (RNE), positioning it as a trusted and authoritative resource in the sustainability reporting domain. Technically, the website employs modern web technologies such as Bootstrap and jQuery, integrates Google Maps for interactive features, and uses Consentmanager.net for GDPR-compliant cookie management. Analytics are handled via Piwik (Matomo), reflecting a moderate level of user tracking balanced with privacy considerations. The site is mobile-optimized, accessible, and SEO-friendly, with a consistent and professional design that enhances user experience. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, though explicit security headers like Content-Security-Policy are not evident. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is minimal but consistent with the site's official nature, supported by government and recognized sustainability organizations. Overall, the site demonstrates a strong security posture with room for improvement in explicit security policies and incident response disclosures. The overall risk assessment is low, with the site presenting a trustworthy, professional, and compliant platform for sustainability reporting. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining up-to-date third-party components to sustain and improve the security and compliance posture.

The website 'Wasser-Risiko-Check' is a public service platform operated by Stadtentwässerungsbetriebe Köln, aimed at providing residents and building owners in selected municipalities of North Rhine-Westphalia with an online tool to assess flood risks related to heavy rain, high water, and groundwater. The platform offers an interactive map, a questionnaire, and downloadable PDF forms to help users understand their building's vulnerability and potential protective measures. The project is publicly funded and cooperates with multiple local municipalities, positioning itself as a niche governmental risk advisory service. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, OpenLayers for mapping, and Usercentrics for GDPR-compliant consent management. The site is mobile-optimized and provides a user-friendly interface with clear navigation. However, no CMS or advanced frameworks were detected, and hosting appears to be managed via generic servers. Performance is moderate with room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS and integrates consent management, but lacks explicit security headers and detailed security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is well addressed with clear privacy and cookie policies. Business credibility is supported by clear branding, contact email, and governmental cooperation, though no phone contacts or social media links are provided. Overall, the website is a trustworthy, well-structured public service tool with good content quality and privacy compliance. Security posture is adequate but could be enhanced by adding security headers and incident response information. The domain WHOIS data is minimal but not suspicious, consistent with a public service project. Strategic recommendations include improving security headers, adding terms of service, and enhancing transparency around security policies.

S

StEB Köln

hw-karten.de

49

The website hw-karten.de is a government-affiliated platform operated by StEB Köln, providing flood hazard maps and related public safety information primarily for residents and local authorities in Germany. It offers interactive GIS-based mapping services focusing on flood, groundwater flooding, and heavy rain events. The site is well-branded with consistent government imagery and provides links to official resources and publications. Technically, the site is built using modern JavaScript frameworks such as Vue.js and Vuetify, with mapping functionality powered by OpenLayers and Visdom libraries. The hosting appears to be managed via known server providers, with no blocking or WAF detected, ensuring full accessibility.

S

StEB Köln (Stadtentwässerungsbetriebe Köln)

regenkompass.de

51

The Regenkompass website is a public sector initiative managed by StEB Köln, focusing on sustainable rainwater management and climate adaptation strategies for the city of Cologne. It serves as an informational platform targeting residents and stakeholders interested in environmental urban planning, offering detailed content on green roofs, facade greening, de-sealing, and rainwater usage. The site positions itself as a local leader in promoting sustainable urban water management practices. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, jQuery, and Usercentrics for cookie consent, complemented by Google Analytics 4 for user tracking. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Hosting appears to be with Your-Server.de, a known German hosting provider. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, with no visible vulnerabilities or exposed sensitive data. However, security headers are not explicitly detected, and no incident response or vulnerability disclosure information is provided, indicating room for improvement in security transparency. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. The domain registration data is minimal but consistent with the official nature of the site. Strategic recommendations include enhancing security headers, publishing incident response contacts, and expanding transparency on security policies.

S

Stadtentwaesserungsbetriebe Koeln, AoeR

parkweiher.koeln

65

The website 'parkweiher.koeln' is an official public service platform managed by the Stadtentwässerungsbetriebe Köln, AöR, focusing on the 15 urban park ponds in Cologne. It provides comprehensive information about the ponds, their ecological importance, recreational activities, and related multimedia content. The site targets local residents and visitors interested in nature and urban green spaces. Technically, the site employs modern web technologies including Matomo for privacy-conscious analytics and Usercentrics for GDPR-compliant cookie management. The site is well-structured, mobile-optimized, and accessible, with clear navigation and professional design. Security posture is good with HTTPS enforced and cookie consent blocking third-party content until approval, though some security headers could be improved. WHOIS data aligns well with the website's public service nature, showing consistent registration details and no suspicious patterns. Overall, the site demonstrates a mature digital presence for a government entity with strong privacy and compliance adherence.

K

kr3m. media GmbH

kr3m.com

56

kr3m. media GmbH is a German-based company specializing in providing HTML5 gaming platforms primarily targeting large publishers and media companies. Their flagship product, the Playground, enhances reach through SEO, customer engagement, and subscription generation. The company positions itself as a market leader in the HTML5 games sector with a focus on white-label partnerships. Technically, the website is built on WordPress with modern plugins such as WooCommerce and Elementor, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly but lacks explicit privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing advanced security headers and DNSSEC. Overall, the domain age and WHOIS data support the legitimacy of the business. Recommendations include improving privacy compliance, adding security headers, and publishing clear contact and incident response information.

weber.cloud is a German-based managed hosting and cloud solutions provider operating since 2016 with a strong focus on data sovereignty and high-quality service. The company offers specialized hosting services including Managed Hosting, AI Hosting, custom cloud solutions, and professional IT services, targeting businesses, online shops, and public institutions primarily in Germany. Their infrastructure is hosted in their own data center in Balingen, Germany, emphasizing compliance with German data protection laws. Technically, the website is well-implemented using modern frameworks like Bootstrap and jQuery, with good performance and mobile optimization. Security posture is solid with HTTPS, secure forms, and cookie consent mechanisms, though some improvements like DNSSEC and security.txt are recommended. The domain WHOIS data aligns well with the business claims, showing legitimacy and consistency. Overall, the website reflects a professional, trustworthy, and compliant cloud service provider with a clear market niche.

weber.cloud, operated by weber.digital GmbH, is a German-based managed hosting and cloud solutions provider founded in 2016. The company operates its own data center in Balingen, Germany, emphasizing data sovereignty, GDPR compliance, and high-quality managed hosting services including specialized TYPO3 hosting, shop hosting, AI hosting, and professional services. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content targeting businesses, online shops, and public institutions. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and analytics tools like Google Analytics and Facebook Pixel, with a strong focus on privacy and cookie consent mechanisms. Security posture is good with HTTPS enforced and secure form handling, though DNSSEC is not enabled and some security headers are missing. The domain registration is consistent and transparent, reinforcing trustworthiness. Overall, the website reflects a mature, professional cloud hosting provider with strong regional presence and compliance focus.

M

Ministerium für Ernährung, Ländlichen Raum und Verbraucherschutz Baden-Württemberg

bawue-zu-tisch.de

62

The website 'Baden-Württemberg zu Tisch' is an official government platform managed by the Ministry of Nutrition, Rural Areas and Consumer Protection of Baden-Württemberg. It promotes regional food products, sustainable nutrition, and community engagement aligned with the state's nutrition strategy. The site targets residents of Baden-Württemberg across all age groups and provides information on projects, offers, news, and downloadable resources related to nutrition and sustainability. The platform is well-branded, consistent, and trustworthy, featuring endorsements from government officials and accessibility options such as easy language and sign language.

E

edudip

edudip.com

59

Edudip is a German-based company founded in 2010 that provides interactive webinar software and online training solutions. The platform targets training leaders, presenters, and participants, offering a collaborative and engaging learning experience. The website demonstrates a professional and consistent brand presence, with a focus on ease of use, interactivity, and corporate branding options. Technically, the site is built on WordPress with the Divi theme and uses modern web technologies and plugins to enhance user experience and SEO. Security posture is generally good with HTTPS enforced and domain transfer protection, but lacks DNSSEC and explicit security headers. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a clearly accessible privacy policy and terms of service pages. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and stability.

S

Städtische Volkshochschule Hechingen

vhs-hechingen.de

51

The Städtische Volkshochschule Hechingen operates as a municipal adult education provider offering a wide range of courses and community learning opportunities. The website reflects a well-maintained digital presence with a focus on accessibility, user engagement, and comprehensive educational content. The institution holds an AZAV certification, underscoring its commitment to quality education. Technically, the site is built on TYPO3 CMS with modern libraries such as jQuery and Bootstrap, and integrates a GDPR-compliant cookie consent mechanism via Klaro. Analytics are handled through Matomo, respecting user privacy. Security posture is solid with HTTPS enforced and CAPTCHA protection on forms, though security headers could be improved. Overall, the site is trustworthy, professional, and serves its regional educational mission effectively.

The Universalschlichtungsstelle des Bundes is an official German federal arbitration body providing neutral dispute resolution services to consumers and businesses. The website clearly communicates its mission to help resolve disputes out of court, targeting both consumers and companies. It operates as a government-affiliated entity, offering services such as case submission and informational resources. The site is built on TYPO3 CMS with modern web technologies and includes multilingual support, enhancing accessibility and user experience. Technically, the website employs a solid infrastructure with TYPO3 CMS, Bootstrap 5, and Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS enforced and a comprehensive cookie consent mechanism, although explicit security headers and a published security policy are absent. No vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR. The domain registration data aligns well with the website's official nature, supporting legitimacy. However, the absence of terms of service and incident response information suggests areas for improvement in transparency and security readiness. Strategic recommendations include implementing security headers, publishing a security policy and incident response contacts, and establishing a vulnerability disclosure process to enhance trust and security posture further.

L

Landeszentrum für Ernährung Baden-Württemberg

landeszentrum-bw.de

60

The website lern-bw.de serves as the official online presence of the Landeszentrum für Ernährung Baden-Württemberg, a government-affiliated center dedicated to nutrition education and promoting sustainable, health-conscious community catering. It targets a broad audience including educators, caregivers, nutrition professionals, parents, and seniors. The site offers educational materials, event information, and certification programs such as the BeKi certificate for nutrition-conscious kindergartens. The platform is positioned as a regional authority in nutrition education within Baden-Württemberg, supported by the Ministry of the Interior for Digitalization and Municipalities.

M

Ministerium für Ernährung, Ländlichen Raum und Verbraucherschutz Baden-Württemberg

von-daheim.de

61

The website 'Von Daheim BW' is a regional campaign operated by the Ministry for Nutrition, Rural Areas, and Consumer Protection of Baden-Württemberg, Germany. It aims to promote awareness and consumption of regional food products by highlighting the families and stories behind these products. The site targets consumers within the Baden-Württemberg region and serves as an informational platform to strengthen local product recognition and support. The campaign is positioned as a government initiative with a clear focus on regional food and consumer education. Technically, the website employs a proprietary CMS used by Baden-Württemberg state agencies, leveraging jQuery and jQuery UI libraries, and integrates Matomo analytics for privacy-conscious user tracking. The site is moderately performant, mobile-optimized, and accessible, with basic SEO practices in place. Hosting appears to be managed by state infrastructure, ensuring reliability. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism that restricts cookies to technically necessary ones by default. However, explicit security headers and incident response policies are not published, representing areas for improvement. No vulnerabilities or suspicious patterns were detected, and WHOIS data aligns with the official government entity, supporting legitimacy. Overall, the website is professional, trustworthy, and compliant with GDPR principles, though it could enhance transparency by publishing detailed security and incident response policies. The site is safe for general audiences, with no adult or questionable content detected.

L

Landeszentrum für Ernährung Baden-Württemberg

ernaehrung-bw.de

60

The website 'lern-bw.de' represents the Landeszentrum für Ernährung Baden-Württemberg, a regional government-affiliated center focused on nutrition education and promoting sustainable, healthy community catering. It targets a broad audience including educators, catering professionals, parents, and seniors. The site offers educational materials, events, and information to support nutrition education across various life settings. Technically, the site uses a custom CMS with modern JavaScript libraries such as jQuery, Matomo for analytics, and Google Maps API. The site is mobile-optimized and accessible with good SEO practices. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, but lacks explicit security headers and published security policies. Privacy compliance is limited due to missing privacy and cookie policies. WHOIS data is minimal but domain appears legitimate for a government-related entity. Overall, the site is professional, trustworthy, and safe for general audiences.

C

Chemische und Veterinäruntersuchungsämter (CVUA) Stuttgart

cvuas.de

61

The website www.cvuas.de serves as an official information portal for the Chemische und Veterinäruntersuchungsämter (CVUA) Stuttgart and associated government veterinary and chemical testing authorities in Baden-Württemberg, Germany. It provides comprehensive information on food safety, veterinary diagnostics, pesticide monitoring, and related public health services. The site targets a broad audience including consumers, professionals, and government stakeholders, positioning itself as a trusted regional government entity with a strong focus on consumer protection and animal health. Technically, the website employs standard web technologies including HTML, CSS, JavaScript, and Font Awesome icons. It uses HTTPS with a basic Content Security Policy to secure form actions. The site shows moderate performance and basic mobile optimization, with clear navigation and good content relevance. However, it lacks advanced security headers and cookie consent mechanisms, which are recommended for enhanced security and privacy compliance. From a security perspective, the site demonstrates a good baseline with HTTPS and CSP but could improve by implementing additional security headers and publishing incident response and vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is a professional, trustworthy government portal with good content quality and business credibility. Strategic improvements in security headers, privacy compliance, and mobile optimization would enhance its security posture and user trust.

M

Ministerium für Ernährung, Ländlichen Raum und Verbraucherschutz Baden-Württemberg

verbraucherinfo-bw.de

63

The website 'verbraucherinfo-bw.de' is an official consumer information portal managed by the Ministry of Food, Rural Areas and Consumer Protection of Baden-Württemberg, Germany. It provides statutory information on food and feed safety, including official control results and regulatory updates. The site targets consumers within the Baden-Württemberg region, offering transparency and compliance with legal obligations under German and EU law. The business model is public service and government information dissemination, with a medium-sized scope consistent with regional government operations. Technically, the site employs a modern JavaScript stack including jQuery and jQuery UI, with privacy-conscious analytics via Matomo. The hosting and DNS infrastructure appear stable and government-affiliated. The site is mobile-optimized and accessible, with good SEO basics and consistent branding. Performance is moderate but acceptable for a government portal. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms aligned with GDPR. However, explicit security headers are not detected, and no published security or incident response policies are found. No vulnerabilities or exposed sensitive data were identified in the HTML content. The privacy policy and cookie policy are comprehensive and GDPR compliant. Overall, the site presents a low-risk profile with strong trust indicators typical of government portals. Recommendations include enhancing security headers, publishing incident response information, and adding explicit contact details for security and data protection officers to improve transparency and compliance.

U

Untersuchungsämter-BW

ua-bw.de

62

The website www.ua-bw.de serves as the official information portal for the Untersuchungsämter-BW, a consortium of chemical and veterinary investigation offices in Baden-Württemberg, Germany. It provides authoritative information on food safety, animal health, and related regulatory activities, targeting both the general public and professionals. The portal features news updates, reports, job postings, and educational resources, positioning itself as a trusted government source in the region. Technically, the site employs standard web technologies including HTML, CSS, JavaScript, and Font Awesome icons. The design is professional and consistent, with clear navigation and categorized content. However, mobile optimization and accessibility are basic, and no modern CMS or advanced frameworks are detected. Performance is moderate, with no evident analytics or tracking scripts, indicating a privacy-conscious approach. From a security perspective, the site uses a Content-Security-Policy header restricting form actions to the same origin, which is a positive measure. However, other common security headers are missing, and HTTPS enforcement status is unclear from the data. There is no visible cookie consent mechanism or detailed privacy policy on the main page, which may present compliance risks under GDPR. No incident response or vulnerability disclosure information is provided. Overall, the website is a credible and authoritative government portal with good content quality and business credibility. Security and privacy compliance could be improved by implementing comprehensive security headers, HTTPS enforcement, cookie consent, and explicit privacy documentation. These enhancements would strengthen trust and regulatory adherence.

V

Verbraucherzentrale Baden-Württemberg

vz-bawue.de

59

Verbraucherzentrale Baden-Württemberg is a well-established regional consumer protection organization providing independent advice, information, and advocacy services to consumers in Baden-Württemberg, Germany. The website serves as a comprehensive portal offering educational content, consultation services, project information, and access to various consumer-related resources. It targets a broad audience including consumers, students, parents, seniors, and refugees. The organization positions itself as a trusted non-profit entity with a strong regional presence and multiple service offerings.

V

Verbraucherkommission Baden-Württemberg

verbraucherkommission.de

62

The Verbraucherkommission Baden-Württemberg is an official independent expert commission advising the Baden-Württemberg state government on consumer policy matters. Founded in 2005, it focuses on topics such as data protection, digital consumer protection, energy, finance, and agriculture. The website serves as an information portal for consumers and policymakers, providing updates, background information, and recommendations. Technically, the site uses a government-specific CMS with modern JavaScript libraries and Matomo analytics, hosted likely by a state IT provider. Security posture is generally good with HTTPS and cookie consent, but the presence of a 500 internal server error on the main content page indicates backend issues that need resolution. No direct contact emails or phone numbers are publicly listed, and no explicit security or incident response policies are found. Overall, the domain registration and website content are consistent and legitimate, reflecting a trustworthy government entity.

V

Verbraucherzentrale

fakeshop-finder.de

60

Verbraucherzentrale.de operates as a leading German consumer protection organization providing educational resources and tools such as the Fakeshop-Finder to help consumers identify fraudulent online shops. The website is well-structured, professionally designed, and targets German consumers seeking trustworthy information on online shopping safety. Technically, the site is built on Drupal 10 with modern JavaScript libraries and integrates Matomo analytics for user tracking while maintaining GDPR compliance through clear privacy and cookie policies. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. WHOIS data is minimal but the strong branding and government affiliation support legitimacy. Overall, the site is a trustworthy, high-quality resource for consumer protection.

M

MEHRWERK GmbH

mehrwerk.net

57

MEHRWERK GmbH is a German-based technology company specializing in software-based business process optimization, with a strong focus on process mining and data analytics. The company positions itself as a reliable partner for businesses seeking to enhance operational efficiency through advanced analytics and business intelligence solutions. Their website reflects a professional B2B service model, targeting corporate clients interested in digital transformation and process improvement. The company maintains an active digital presence with multiple social media channels and promotes related partner platforms such as mpmX for process mining.

K

KölnTourismus GmbH

koelntourismus.de

61

KölnTourismus GmbH operates as the official tourism organization for the city of Cologne, Germany, providing comprehensive visitor information, event promotion, and cultural guidance. The website serves tourists and visitors with relevant content about sightseeing, museums, and local events, positioning itself as a trusted and authoritative source for tourism in the region. The business model focuses on promoting the city's attractions and facilitating visitor engagement. Technically, the website is built on TYPO3 CMS, a robust and widely used content management system, hosted on Schlund Technologies infrastructure. The site demonstrates good mobile optimization, accessibility, and SEO practices. Cookie consent is managed via Cookiebot, indicating compliance with GDPR requirements. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses a consent management platform, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious content were detected. The domain registration data aligns well with the website's claims, supporting legitimacy. Overall, the website presents a professional and trustworthy front for KölnTourismus, with minor gaps in privacy and security documentation. Strategic improvements in security headers, privacy policy publication, and incident response transparency would enhance the site's security posture and compliance standing.

S

Stadtportal koeln.de

koeln.de

65

The website www.koeln.de serves as the official city portal for Cologne, Germany, providing comprehensive information about the city, including events, sightseeing, and leisure activities. It targets residents and visitors, positioning itself as a trusted government-related information hub. The site employs a modern WordPress CMS infrastructure with popular plugins such as Rank Math SEO and Cookiebot for privacy compliance. Hosting appears to be regional, consistent with the domain's geographic focus. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers and policies could be improved. No critical vulnerabilities or blocking mechanisms were detected, and the site maintains a professional and trustworthy appearance suitable for its audience.

S

Stadtentwässerungsbetriebe Köln, AöR

steb-koeln.de

58

Stadtentwässerungsbetriebe Köln, AöR is a municipal water management and wastewater service provider operating in Cologne, Germany. The organization focuses on wastewater treatment, flood protection, and environmental water body maintenance, serving a broad audience including residents, property owners, and job seekers. Their market position is that of a key public service entity with a medium-sized operational scale. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its target groups. Technically, the website employs modern web technologies including React, jQuery, and Matomo analytics, complemented by a robust consent management platform (Usercentrics) ensuring GDPR compliance. Hosting appears stable with reputable nameservers. The site is mobile-optimized and uses HTTPS with good security practices, although some security headers could be improved. From a security perspective, the site demonstrates a solid posture with encrypted connections, privacy-focused analytics, and cookie consent mechanisms. However, it lacks explicit security policies and incident response contacts, which could enhance trust and preparedness. No vulnerabilities or suspicious elements were detected in the content or WHOIS data. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It effectively supports the organization's mission and public service role, with recommendations to enhance security headers and publish formal security policies for further maturity.

S

Stadt Frankfurt am Main

deinhausderdemokratie.de

65

The website deinhausderdemokratie.de is an official government platform operated by the Stadt Frankfurt am Main to promote the Haus der Demokratie project near the Paulskirche. It serves as an information and citizen participation portal, offering educational content, event information, and opportunities for public engagement in democratic processes. The site targets a broad audience including underrepresented groups, emphasizing inclusivity and accessibility. Technically, the site is built on modern frameworks such as Next.js and uses AWS infrastructure, ensuring good performance and scalability. Security practices include HTTPS enforcement, session management, and user content moderation, though explicit security headers and incident response policies could be improved. Privacy compliance is strong with GDPR adherence, cookie consent, and transparent data handling. Overall, the site is professional, trustworthy, and well-aligned with its civic mission.

M

mainziel.de

mainziel.de

56

mainziel.de is an official municipal traffic and mobility information platform for Frankfurt am Main, providing comprehensive multimodal transport data including live public transport, bicycle routes, parking, and event-related traffic updates. The platform is built on TYPO3 CMS and uses modern web technologies such as jQuery, OpenLayers, and Matomo analytics configured with privacy protections. The website is well-designed, mobile-optimized, and offers a good user experience with clear navigation and relevant content for residents and visitors. Security posture is moderate with HTTPS and privacy-respecting analytics, but lacks explicit security headers and published security policies. No privacy policy or terms of service were detected in the provided content, though cookie consent is managed via Cookiebot. WHOIS data indicates municipal hosting consistent with the website's purpose, supporting legitimacy. Overall, the site is trustworthy and serves as a valuable public service resource.

S

Stadt Frankfurt am Main

ffm.de

67

The website www.ffm.de is the official citizen participation platform of the City of Frankfurt am Main, Germany. It provides a comprehensive set of services including current participation projects, a defect reporting system (Mängelmelder), an ideas platform, and detailed information about city projects. The platform targets residents of Frankfurt and aims to facilitate transparent and inclusive civic engagement. The business model is a public service operated by the city administration, supported by a technical partner, init AG Berlin, hosting the platform in an ISO 27001 certified data center in Germany. The website is well-branded, professionally designed, and offers excellent content quality and navigation.

M

Metropolregion Hannover Braunschweig Göttingen Wolfsburg GmbH

metropolregion.de

41

Metropolregion Hannover Braunschweig Göttingen Wolfsburg GmbH is a regional development organization focused on networking people, companies, science, and municipalities within the metropolitan region of Germany. The website serves as a platform to facilitate cooperation, project development, and information dissemination in key sectors such as mobility, healthcare, and real estate. The organization positions itself as a regional leader fostering innovation and collaboration across multiple domains. Technically, the website is built on WordPress using Oxygen Builder, integrates modern consent management via Usercentrics, and employs Google Tag Manager and GetResponse for analytics and marketing. The site is mobile-optimized with good SEO practices and consistent branding. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit privacy, terms, and security policies. Overall, the website reflects a professional and trustworthy regional government entity with moderate digital maturity and compliance.

G

Gingco Communication GmbH & Co. KG

die-region.de

58

Die-Region.de is an official regional portal serving the Braunschweig-Wolfsburg area in Germany, providing comprehensive information on local businesses, job offers, leisure activities, and cultural events. The website targets residents, visitors, job seekers, families, and students, positioning itself as a central hub for regional engagement and information dissemination. It is supported by regional partners and stakeholders, enhancing its credibility and reach. Technically, the site is built on TYPO3 CMS, a robust and widely used content management system, complemented by modern frontend technologies such as Swiper.js for interactive elements and Matomo for privacy-conscious analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience across devices. From a security perspective, the website enforces HTTPS, implements key security headers, and provides a cookie consent mechanism compliant with GDPR. However, it lacks explicit security policy pages, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and security posture. Overall, the site is trustworthy, professionally maintained, and compliant with relevant privacy regulations, making it a reliable resource for its audience. Strategic improvements in security transparency and contact information could further strengthen its position.

I

Infrastruktur Akademie

infrastruktur-akademie.de

62

Infrastruktur Akademie is a German-based educational and networking platform focused on sustainable infrastructure development, particularly in the energy and transportation sectors. The organization offers seminars, events, and lectures tailored to practitioners and professionals in the infrastructure field, fostering a regional community for knowledge exchange and professional growth. The website is well-structured, professionally designed, and targets infrastructure experts, beginners, and experienced professionals from various organizations and municipalities. Technically, the website is built on WordPress using modern themes and plugins such as Astra and Beaver Builder, with Borlabs Cookie managing GDPR-compliant cookie consent. The site employs HTTPS with good SSL configuration and integrates Google Analytics and Google Tag Manager for analytics and marketing purposes. Mobile optimization and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site demonstrates good practices including HTTPS enforcement and cookie consent mechanisms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not clearly detected and could be improved. No vulnerabilities or exposed sensitive data were found. The domain registration data is consistent with the website content, indicating a legitimate and trustworthy entity. Overall, the website presents a low-risk profile with strong compliance to privacy regulations and a professional online presence. Strategic recommendations include enhancing security headers, adding explicit security policies, and providing clearer direct contact information to improve trust and incident response readiness.

W

weber.digital GmbH

weber.digital

55

weber.digital GmbH is a German-based digital agency specializing in digital transformation, product development, and digital marketing services. Established in 2015, the company targets businesses seeking to modernize and innovate their digital presence. The website reflects a professional and consistent brand image, with comprehensive privacy and cookie policies indicating GDPR compliance. Technically, the site uses modern web technologies including custom fonts and JavaScript libraries like Swiper.js, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and domain lock statuses, though additional HTTP security headers and a published security policy would enhance trust. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.

C

CONVOTIS GmbH

convotis.ch

76

CONVOTIS GmbH is a large German IT services company specializing in digital transformation through its three main business areas: Business IT, Platform IT, and Managed IT. The company supports over 1,000 employees across 26 locations in 8 countries, serving more than 2,400 customers globally. Their offerings include business applications such as SAP and HR services, cloud and security solutions, digital workplace management, and advanced platform integration with AI and data analytics. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to business clients. Technically, the site is built on WordPress with Elementor and integrates modern marketing and analytics tools like HubSpot and Google Tag Manager, ensuring good SEO and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data for the domain is a notable anomaly that slightly impacts trust but does not detract from the overall professionalism and legitimacy of the business. Strategic recommendations include publishing formal security and incident response policies and enhancing HTTP security headers to further strengthen trust and compliance.

T

TeeGschwendner

teegschwendner.de

66

TeeGschwendner operates a professional e-commerce platform specializing in premium loose teas and related accessories, targeting primarily the German-speaking market. The website presents a well-structured, content-rich experience with clear navigation and multilingual support. The business model combines physical retail stores with an online shop, leveraging trusted third-party services such as Trusted Shops and PAYBACK to enhance customer trust and loyalty. Technically, the site uses modern JavaScript libraries, Google Tag Manager for analytics, and Usercentrics for consent management, hosted on servers associated with Intersolute. Security posture is strong with HTTPS enforced and consent mechanisms in place, though explicit security headers and policies are not publicly visible. Privacy compliance is partially demonstrated through cookie consent but lacks visible privacy policy and terms of service pages in the provided content. Overall, the domain registration data aligns well with the website content, indicating legitimacy and consistency.

B

bedrop - Shop für Propolis, Geleé Royal & Manuka Honig | Hier kaufen – bedrop.de

bedrop.de

72

Bedrop.de is an e-commerce website specializing in natural bee products such as Propolis tinctures, Gelee Royal capsules, pollen, and Manuka honey. The site targets consumers interested in natural health supplements and bee-derived products, positioning itself in a niche market within Germany. The business operates on the Shopify platform, leveraging a modern tech stack including jQuery, Alpine.js, and various marketing and analytics tools like Klaviyo, Yotpo, and Facebook Pixel. The website demonstrates good technical maturity with mobile optimization and SEO best practices. Security posture is solid with HTTPS, Shopify Payments integration supporting 3DS, and a comprehensive cookie consent mechanism, although it lacks published privacy and security policies. Overall, the site is professional and trustworthy but could improve transparency by publishing privacy, terms, and incident response information.

F

FRED & FELIA

fredfelia.com

69

FRED & FELIA operates a premium e-commerce platform specializing in high-quality wet dog and cat food, emphasizing natural ingredients and sustainable packaging. The company targets German-speaking pet owners seeking premium pet nutrition. The website is built on Shopify, leveraging modern e-commerce technologies and integrates multiple marketing and analytics tools with user consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. The WHOIS data is missing, which raises some legitimacy concerns, but the professional site design, trust badges, and customer reviews support business credibility. Overall, the site presents a low-risk profile with room for improvement in transparency and security documentation.

L

LERROS

lerros.com

71

LERROS operates a professional e-commerce platform specializing in men's fashion apparel primarily targeting the German market. The website offers a broad range of products including plus sizes and accessories, supported by fast delivery and easy returns. The company maintains a consistent brand presence with active social media channels and comprehensive privacy and cookie policies, indicating a mature digital presence. Technically, the site is built on Shopify using a modern theme and integrates multiple marketing and analytics tools such as Klaviyo and Facebook Pixel, ensuring robust marketing and customer engagement capabilities. Security posture is strong with HTTPS enforced and multiple security headers present, although explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS registrant data introduces some uncertainty regarding domain registration transparency, but the operational website and professional presentation mitigate major concerns. Overall, LERROS presents as a credible mid-sized retail business with a solid technical foundation and good compliance practices.

N

netgo group

netgo.de

58

netgo group is a well-established German IT service provider specializing in comprehensive IT and software solutions that enable digital transformation for businesses across various industries. The company offers a broad portfolio including cloud infrastructure, IT security, software development, workplace solutions, and managed IT services. Recognized by multiple industry awards and certifications, netgo positions itself as a trusted partner for enterprises seeking to modernize and secure their IT environments. Technically, the website is built on the HubSpot CMS platform, leveraging modern analytics and marketing tools such as Google Tag Manager, Cookiebot, and Matomo, ensuring good digital maturity and privacy compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though the absence of explicit security policies and incident response contacts suggests room for improvement. Overall, the domain registration data aligns well with the website's claims, indicating legitimacy and consistency. The site is professionally designed, mobile-optimized, and user-friendly, supporting a high level of trust and business credibility.

G

Geoportal Baden-Württemberg

geoportal-bw.de

57

Geoportal Baden-Württemberg operates a regional government geospatial data portal providing access to geospatial data, thematic maps, and metadata services primarily for politics, administration, economy, science, and the public in Baden-Württemberg, Germany. The portal is well-positioned as a trusted regional government platform supporting the national GDI-DE and INSPIRE initiatives. Technically, the website is built on a modern Angular framework with Material Design components and uses OpenLayers for map rendering, indicating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS implied but lacks visible security headers and explicit security policies. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, the website is professional, trustworthy, and safe for general audiences, but could improve transparency and security practices.

L

LEO-BW

leo-bw.de

61

LEO-BW is a regional educational and cultural portal dedicated to providing comprehensive information about Baden-Württemberg's history, culture, and environment. It offers rich multimedia content, advanced search capabilities, and thematic modules targeting researchers, students, and the general public interested in regional studies. The website is positioned as an authoritative source for landeskunde (regional studies) in the German southwest, supported by partnerships with cultural and governmental institutions. Technically, the site is built on the Liferay CMS platform, utilizing modern JavaScript libraries such as jQuery, Bootstrap, and Metal.js. The infrastructure supports multilingual content and map-based search features, indicating a mature digital presence. Performance and mobile optimization are good, with accessibility features implemented. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and visible privacy or cookie policies, which are important for GDPR compliance. No incident response or vulnerability disclosure information is provided, representing areas for improvement. Overall, the website is trustworthy and professionally maintained, but it should enhance privacy compliance and security transparency to better align with modern standards and user expectations.