Germany security reports

K

Keltenland BW

keltenland-bw.de

54

Keltenland BW is a small cultural and educational website dedicated to exploring the history and culture of the Celts in Baden-Württemberg, Germany. The site provides informative content aimed at a general audience interested in regional history and Celtic heritage. The business model is informational, focusing on cultural education without evident commercial transactions. Technically, the website is built on WordPress using the Avada theme and several plugins for SEO, accessibility, and cookie management, indicating a moderate level of digital maturity. The site is mobile-optimized and includes structured data for enhanced SEO performance. Security-wise, the website uses HTTPS and implements cookie consent mechanisms, but lacks published privacy policies, terms of service, and security incident response information, which are areas for improvement. Overall, the site is accessible, trustworthy for its niche, but would benefit from enhanced compliance and security documentation to improve user trust and regulatory adherence.

D

Digitalakademie@bw

digitalakademie-bw.de

60

Digitalakademie@bw is a government-affiliated digital academy initiative focused on supporting municipalities, counties, and the state of Baden-Württemberg in their digital transformation journey. The organization offers a variety of services including workshops, informational events, and projects centered around Artificial Intelligence and digital skills tailored for public administration. The website reflects a strong regional government presence and commitment to advancing digital governance and innovation in the public sector. Technically, the website is built on WordPress using the Divi theme framework, enhanced with modern JavaScript libraries such as jQuery and Leaflet.js for interactive maps. SEO is managed via Rank Math, and user privacy is respected through Borlabs Cookie consent management. Hosting appears to be provided by Deutsche Telekom infrastructure, aligning with the official nature of the site. The site is mobile-optimized, accessible, and performs moderately well. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The domain registration data is consistent with the website's government affiliation, enhancing trustworthiness. Overall, the site presents a professional, trustworthy, and well-maintained digital presence for a government digital academy, with recommendations to enhance security headers and publish formal security policies to further strengthen its posture.

R

Referat 72 – Digitalisierungsstrategie

digital-laend.de

71

digital.LÄND is the official digitalization strategy platform of the Baden-Württemberg state government, providing comprehensive information and resources related to digital transformation initiatives. The website serves as a central communication hub targeting citizens and businesses within the region, positioning itself as a trusted government source for digital strategy. The platform is supported by modern technical infrastructure including WordPress CMS, enhanced security via Wordfence, and privacy compliance through Real Cookie Banner Pro and Matomo analytics. The site demonstrates a mature digital presence with excellent SEO, accessibility, and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and active firewall protections. Privacy compliance is robust, featuring detailed cookie consent mechanisms and GDPR-aligned policies. Overall, the website reflects a professional, secure, and trustworthy government digital service.

M

Ministerium für Ernährung, Ländlichen Raum und Verbraucherschutz Baden-Württemberg

verbraucherportal-bw.de

59

The Verbraucherportal Baden-Württemberg is an official government consumer protection portal providing comprehensive information and services related to consumer rights, food safety, animal protection, research, and education. It serves the residents of Baden-Württemberg with authoritative content and links to partner organizations. The website employs modern web technologies including jQuery, Matomo analytics, and asynchronous script loading, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS enforced, though there is room for improvement in security headers and explicit privacy compliance mechanisms. No signs of WAF blocking or suspicious content were detected, and the WHOIS data aligns well with the official nature of the site. Overall, the portal is trustworthy and professionally maintained, though it would benefit from clearer privacy and cookie policies.

M

Mittwald CM Service GmbH & Co. KG

mittwald-status.de

62

Mittwald CM Service GmbH & Co. KG operates a professional status page providing real-time system status and incident history for its hosting and cloud services. The company is positioned as a medium-sized technology provider in Germany, offering key services such as mail systems, hosting platforms, cloud systems, and a customer center. The website is well-structured and designed to communicate service availability clearly to its customers. Technically, the status page leverages modern web technologies including HTML5, CSS3, JavaScript, and is hosted on a platform provided by Statuspal with DNS managed via Cloudflare. The site demonstrates good performance and mobile optimization, though accessibility and SEO features are basic. No CMS or complex frameworks are detected, indicating a focused and lightweight implementation. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a published security policy or incident response contacts, which are recommended for enhanced security posture. No WAF or blocking mechanisms interfere with content accessibility, allowing full analysis. Overall, the website is trustworthy and professional, with minor improvements recommended in privacy compliance (cookie consent) and security best practices. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

F

Feldwerk – Blühpatenschaften! Sei ein Held, bestell ein Feld!

feld-werk.de

55

Feldwerk operates an e-commerce platform focused on environmental conservation through flower field sponsorships, targeting environmentally conscious consumers primarily in Germany. The website is built on WordPress with WooCommerce and uses a modern tech stack including jQuery, FontAwesome, and various plugins to enhance functionality. The site implements GDPR-compliant cookie consent and a custom reCAPTCHA solution to protect user interactions. Security posture is generally good with HTTPS enforced, but lacks some security headers and explicit privacy and security policies. Contact information is not directly available on the site, which may affect user trust. Overall, the site is professionally designed with good user experience and mobile optimization, but could improve in privacy transparency and security hardening.

C

CAS Software AG

fair.digital

46

fair.digital is a German-based initiative founded in 2019 by CAS Software AG, focused on certifying digital products and services that adhere to principles of data protection, transparency, and fairness. The website serves as a platform to promote these certified products and provide information to manufacturers and users seeking GDPR-compliant and fair digital solutions. The initiative positions itself as a niche certification authority in the European digital technology sector, emphasizing digital sovereignty and user rights. Technically, the website is built on WordPress with modern plugins such as WooCommerce and WPBakery, hosted by InterNetX GmbH. It demonstrates good mobile optimization and a professional design, though some accessibility features could be improved. Security-wise, the site uses HTTPS and domain locking but lacks a cookie consent mechanism and explicit security policies, which are recommended for full GDPR compliance. Overall, the website is trustworthy, well-branded, and provides clear contact information via email and address, though no phone contact is provided.

Z

ZDF Zweites Deutsches Fernsehen

zdf.social

60

ZDF.social is a Mastodon instance operated by Zweites Deutsches Fernsehen (ZDF), a major German public broadcaster. The platform provides decentralized social media services leveraging the open-source Mastodon software, targeting a general audience interested in public broadcasting and social media engagement within the fediverse. The website is professionally designed with consistent branding and clear contact information, reflecting the organization's reputable market position. Technically, the site runs Mastodon version 4.3.8 with modern JavaScript and React-based front-end components. It uses WebSockets for real-time communication and is hosted on DNS servers under the zdf.de domain. The site is mobile optimized and performs moderately well, though there is room for improvement in SEO and accessibility features. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled, and security headers are not explicitly present in the HTML content. There is no visible security or incident response policy, and cookie consent mechanisms are absent, which could be improved to enhance GDPR compliance. Overall, the website presents a low-risk profile with strong business credibility and a good security posture. Strategic improvements in security headers, DNSSEC, and privacy compliance would further strengthen its position.

M

MBmedien Group GmbH

mbmedien.de

61

MBmedien Group GmbH is a German B2B marketing services company specializing in lead generation, data services, and content marketing with over 30 years of experience. Their website showcases a comprehensive portfolio including account-based marketing, intent data, webinars, and a large proprietary B2B database. The company targets B2B marketers and enterprises seeking precise and data-driven marketing solutions. Technically, the website is built on WordPress with Elementor and Yoast SEO, hosted on Hetzner infrastructure, and includes modern tracking and cookie consent mechanisms. Security posture is good with HTTPS and domain transfer protections, though DNSSEC is not enabled and no explicit security or privacy policies are published. Overall, the website is professional, well-branded, and trustworthy with strong social media presence and partner relationships, notably with Heise Medien.

L

Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI Bawü)

xn--baw-joa.social

67

BaWü.social is a Mastodon social networking instance operated by the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI Bawü), a governmental data protection authority in Germany. The platform serves as a privacy-focused, non-commercial social media service targeting residents and stakeholders in Baden-Württemberg interested in data protection and transparent communication. The website is well-branded, consistent, and provides a good user experience with a focus on privacy and federated social networking. Technically, the site runs Mastodon version 4.3.6 with modern web technologies including React and WebSocket streaming. The infrastructure appears stable and moderately performant with good mobile optimization. Security practices include HTTPS enforcement and subresource integrity, though some security headers are missing. Privacy compliance is good with a clear privacy policy, but lacks a cookie consent mechanism and terms of service. The security posture is solid with no visible vulnerabilities or exposed sensitive data. The WHOIS data confirms legitimacy with consistent registration details matching the governmental entity. No advertising or tracking services are detected, supporting the privacy-centric mission. Overall, the site is trustworthy, safe, and professionally maintained. Strategic recommendations include adding explicit security headers, implementing cookie consent, publishing a security policy and incident response contacts, and adding a vulnerability disclosure or security.txt file to enhance transparency and security readiness.

C

CONVOTIS GmbH

lynet.de

76

CONVOTIS GmbH is a large, established IT services company based in Germany, specializing in digital transformation through its three core business areas: Business IT, Platform IT, and Managed IT. The company supports clients globally with a workforce of approximately 1,000 employees across 26 locations in 8 countries. Their service portfolio includes business applications such as SAP and HR services, cloud and security solutions, digital workplace management, and advanced platform integration with AI and data analytics. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to business customers seeking IT modernization and efficiency gains. Technically, the site is built on WordPress with Elementor and integrates marketing and analytics tools like HubSpot and Google Tag Manager, indicating a modern digital infrastructure. Security posture is good with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. WHOIS data is unavailable, which slightly impacts trust but is not uncommon for corporate domains. Overall, CONVOTIS presents as a credible and professional IT partner with a strong market position.

M

Mecklenburgisches Staatstheater

mecklenburgisches-staatstheater.de

53

Mecklenburgisches Staatstheater is a regional cultural institution in Germany offering a wide range of theater performances including music theater, ballet, drama, and youth theater. The website serves as a portal for event information, ticket sales, and educational theater programs, targeting a general audience interested in performing arts. Technically, the site is built on the Contao CMS platform, utilizing common JavaScript libraries such as jQuery and Slick Slider to enhance user experience. The website is mobile-optimized and provides good navigation and content relevance. Security posture is moderate with HTTPS enabled but lacks visible security headers and explicit privacy policies, which are areas for improvement. No WAF or blocking mechanisms were detected, and the domain registration appears legitimate though limited WHOIS data is available. Overall, the site is professional, trustworthy, and safe for general audiences.

S

SIS - Schweriner IT- und Servicegesellschaft mbH

sis-schwerin.de

46

SIS - Schweriner IT- und Servicegesellschaft mbH is a medium-sized municipal IT service provider based in Schwerin, Germany, serving local governments, schools, and public institutions primarily in Westmecklenburg. With over 280 employees, the company offers a broad range of IT services including application management, IT infrastructure, user support, digital education, and information security management. The website reflects a professional and comprehensive digital presence with clear service descriptions and a focus on regional digital transformation. Technically, the site is built on WordPress with modern plugins and analytics tools, showing good SEO and mobile optimization. Security posture is solid with HTTPS and privacy policies in place, though some improvements like cookie consent and security headers are recommended. Overall, the company demonstrates a strong market position as a trusted IT partner for public sector clients in its region.

J

Joyn

joyn.de

61

Joyn is a prominent German media streaming platform operated by ProSiebenSat.1 Digital GmbH, offering free and premium video content primarily to German-speaking audiences in Germany, Austria, and Switzerland. The website content analyzed focuses on informing users about geo-restrictions when accessing Joyn services from abroad, reflecting licensing constraints. Technically, the site is built on modern frameworks such as Next.js with GraphQL APIs and hosted on AWS infrastructure, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and cookie consent mechanisms could be improved. Privacy compliance is evident through a comprehensive privacy policy, but cookie consent and terms of service are not explicitly found on this page. Overall, the site is professional, trustworthy, and well-optimized for mobile and accessibility.

F

funk (Content-Netzwerk von ARD und ZDF)

funk.net

64

The website play.funk.net is a content network operated by the German public broadcasters ARD and ZDF, targeting young audiences aged 14 to 29. It offers a wide range of video content, podcasts, and channels covering various topics such as politics, culture, comedy, and social issues. The site demonstrates a professional and consistent brand presence with high-quality content and a modern, responsive design. Technically, it leverages React and Material UI frameworks, with good mobile optimization and SEO practices. However, explicit privacy and cookie policies are not evident in the provided content, and WHOIS data for the domain is unavailable, which slightly impacts trustworthiness. Security headers and explicit security policies are not visible, suggesting room for improvement in security posture. Overall, the site is legitimate, well-branded, and content-rich, but could enhance transparency and security compliance.

P

phoenix

phoenix.de

59

phoenix.de is the official website of the German public television channel 'phoenix', operated under the umbrella of ZDF, a major public broadcaster in Germany. The site offers a rich array of political and historical documentaries, talk shows, and live streaming services targeting a general audience interested in current affairs and history. The website demonstrates a professional and consistent brand presence with high-quality content and clear navigation. Technically, the site employs AngularJS and SixCMS for content management, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage and no visible sensitive data exposure, but lacks explicit security headers and formal privacy and cookie policies. Analytics are implemented via piano-analytics, indicating moderate user tracking. WHOIS data confirms domain legitimacy and alignment with the parent organization ZDF. Overall, the site is trustworthy and well-positioned in the German public media landscape.

Z

ZDFheute

zdfheute.de

58

ZDFheute is a prominent German news media platform providing comprehensive news coverage, videos, livestreams, and analyses across politics, sports, and other domains. It operates under the ZDF brand, a major public broadcaster in Germany, positioning it as a trusted and authoritative source of information. The website demonstrates a mature digital infrastructure leveraging modern web technologies such as Next.js and React, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit privacy and cookie policies are not evident in the provided content. Overall, the site is professional, trustworthy, and well-maintained, serving a broad general audience with high-quality news content.

Z

ZDF

zdfinfo.de

63

ZDFinfo is a German public broadcasting service offering a wide range of documentaries, reports, and educational content primarily targeting a general audience interested in knowledge and culture. It operates under the ZDF umbrella, a major and reputable public broadcaster in Germany. The website demonstrates a mature digital presence with a modern React and Next.js technology stack, optimized for performance and mobile devices. Privacy and cookie consent mechanisms are well implemented, reflecting compliance with GDPR requirements. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policy and incident response information are not found. Overall, the domain and website are legitimate and trustworthy, with a high-quality user experience and professional content presentation.

Z

ZDF

zdfneo.de

64

ZDFneo is a digital streaming platform operated by the German public broadcaster ZDF, offering a wide range of entertainment content including series, movies, documentaries, and talk shows. The platform targets a general German-speaking audience and positions itself as a leading source of innovative and quality media content. The website demonstrates a strong brand presence consistent with ZDF's reputation and public service mandate. Technically, the site leverages modern web technologies such as React and Next.js, ensuring fast performance, mobile optimization, and good accessibility. The presence of comprehensive privacy and cookie consent mechanisms reflects a mature approach to data protection and compliance with GDPR requirements. From a security perspective, the site uses HTTPS with good SSL configuration and enforces cookie consent, but lacks some advanced security headers and a public vulnerability disclosure policy. No WAF or blocking mechanisms were detected, and no critical vulnerabilities were found in the visible content. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy regulations. Strategic improvements could include publishing a security.txt file and enhancing security headers to further strengthen the security posture.

T

Technology Research Hub

technology-research-hub.de

51

Technology Research Hub is a German-based technology research and vendor comparison portal focused on providing high-quality studies, precise comparisons, and vendor insights to business and IT decision makers. The platform offers independent professional user ratings and detailed analyses to assist companies in selecting appropriate software solutions and IT service providers. The website is professionally designed, regularly updated, and uses modern WordPress technologies including Elementor and Yoast SEO to ensure good content presentation and search engine optimization. Hosting is provided by Hetzner, a reputable German hosting provider. Security posture is adequate with HTTPS enabled and cookie consent implemented, though there is room for improvement in security headers and explicit privacy and security policies. Overall, the site is trustworthy, business-focused, and safe for general audiences.

M

MACH AG

mach.de

68

MACH AG is a specialized software provider focused on digital transformation solutions for public administration and municipalities in Germany. Their offerings include ERP systems, financial management software, online services, and process management platforms tailored to the needs of government entities. The company positions itself as a trusted partner for digitalization in the public sector, serving both larger and smaller institutions. The website is professionally designed, well-structured, and provides comprehensive information about their products, services, and events such as training and webinars. Technically, the site uses modern web technologies including JavaScript, SVG graphics, lazy loading, and integrates Cookiebot for cookie consent and Google Tag Manager for analytics. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, MACH AG demonstrates a mature digital presence with a high level of professionalism and trustworthiness.

K

Kommunix GmbH

kommunix.de

56

Kommunix GmbH is a medium-sized, family-run software company specializing in developing and distributing software solutions for municipal administrations in Germany. Founded in 1991 and headquartered in Unna, Nordrhein-Westfalen, the company employs over 80 staff members dedicated to supporting public sector clients with modern, user-friendly software. The website reflects a professional and consistent brand presence, targeting municipal government entities and public administration sectors. Technically, the site is built on WordPress with Elementor and includes a comprehensive cookie consent mechanism, indicating good digital maturity and compliance with GDPR requirements. Security posture is solid with HTTPS enforcement and security headers, though there is room for improvement by publishing explicit security policies and incident response information. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

N

NOLIS GmbH

nolis.de

60

NOLIS GmbH is a well-established German company specializing in digital transformation solutions for municipalities and public sector organizations. With over 25 years of experience and more than 400 municipal clients, NOLIS offers a comprehensive suite of services including a proprietary content management system (NOLIS | CMS), an E-Government software suite, digital citizen services, recruiting solutions, and GIS-based cartography. Their business model focuses on B2B SaaS and consulting, targeting public administrations to streamline and modernize their digital presence and processes. Technically, the website demonstrates a modern and professional infrastructure utilizing HTML5, CSS3, JavaScript, and various libraries such as Swiper.js for UI components and CookieDough for cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. The proprietary CMS and integration of multiple digital services indicate a robust technical ecosystem tailored for government clients. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR. The software suite supports advanced security features like single sign-on and two-factor authentication. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. No vulnerabilities or security issues were detected in the analyzed content. Overall, NOLIS GmbH presents a trustworthy, professional, and technically sound digital presence consistent with its business claims. The domain registration data aligns with the company branding and history, supporting legitimacy. Strategic recommendations include enhancing transparency around security policies and incident response to further strengthen trust and compliance.

V

Vogtlandkreis

vogtlandkreis.de

64

Vogtlandkreis operates as a regional government authority in Germany, providing a broad range of public services including administration, citizen support, tourism, and social services. The website serves as an official portal for residents and visitors, offering information on politics, local economy, events, and public announcements. It maintains a strong market position as a trusted governmental entity with a focus on accessibility and user engagement through social media and multilingual support. Technically, the website is built on a CMS platform (likely IKISS) with a modern JavaScript stack including jQuery, Flexslider, and accessibility tools like EyeAble and ReadSpeaker. Hosting appears to be managed by Deutsche Telekom, indicated by the nameservers. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Privacy and cookie policies are implemented with user consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. The domain WHOIS data aligns well with the official nature of the site, reinforcing legitimacy. Overall, Vogtlandkreis.de is a professional, trustworthy government website with good content quality and technical implementation. Strategic improvements in security transparency and policy publication would further strengthen its posture and user confidence.

H

Hansestadt Lübeck

luebeck.de

59

The website luebeck.de serves as the official city portal for the Hansestadt Lübeck, Germany. It provides comprehensive information and services for residents, tourists, and businesses, including citizen services, city hall information, cultural events, and urban development. The site is well-structured with extensive navigation and uses a variety of modern web technologies and libraries, including jQuery, Font Awesome, and the LYNET Content Manager CMS. The technical infrastructure indicates a moderate level of digital maturity with good mobile optimization and accessibility features. From a security perspective, the site uses HTTPS and implements a cookie consent banner, demonstrating basic privacy compliance. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns with the CMS and DNS providers used, supporting the legitimacy of the domain as an official municipal website. Overall, the website is professional, trustworthy, and safe for general audiences, with a good balance of content quality and technical implementation. Strategic enhancements in security transparency and privacy documentation would further strengthen its posture.

A

AWB Abfallwirtschaftsbetriebe Köln GmbH

awbkoeln.de

58

AWB Abfallwirtschaftsbetriebe Köln GmbH is a well-established municipal waste management company serving the Cologne region in Germany. The company provides comprehensive services including waste disposal, street cleaning, winter services, bulky waste collection, and recycling. Their market position is strong as a regional public service provider with a long tradition and certifications such as ISO 9001 and Entsorgungsfachbetrieb. The website reflects a professional and user-friendly digital presence, leveraging TYPO3 CMS and modern accessibility tools to serve a broad audience including residents and businesses in Cologne. Technical infrastructure is robust with modern frameworks and compliance with GDPR and cookie consent regulations. Security posture is solid with HTTPS enforcement and cookie management, though some security headers could be explicitly confirmed. Overall, the website and business demonstrate high credibility and trustworthiness.

S

Stadt Friedrichshafen

friedrichshafen.de

51

The Stadt Friedrichshafen website serves as the official digital presence of the city government of Friedrichshafen, Germany. It provides comprehensive information and services for residents, tourists, and businesses, including citizen services, tourism, cultural events, economic development, and municipal news. The site is well-branded, professionally designed, and targets a broad audience including local citizens and visitors. The business model is that of a municipal government entity focused on public service and community engagement. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery, Bootstrap, Swiper, and Slick Slider for interactive and responsive user experience. It employs Matomo for analytics, ensuring privacy-conscious data collection. The site demonstrates good mobile optimization, accessibility features, and SEO practices, contributing to a positive digital maturity profile. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. However, explicit security policies and incident response contacts are not publicly disclosed, representing an area for improvement. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns with the official city identity, supporting legitimacy and trustworthiness. Overall, the website presents a low-risk profile with strong content quality and privacy compliance. Strategic recommendations include publishing formal security policies, enhancing security headers, and providing incident response information to further strengthen trust and security posture.

S

SSP AG

ssp.ag

48

SSP AG is a leading German architectural and engineering firm specializing in integral planning, with approximately 200 employees across multiple offices in Bochum, Karlsruhe, Aachen, Berlin, and Münster. The company emphasizes attractiveness, adaptability, and energy efficiency in its projects, positioning itself as a top integrative planning office in Germany. Their website reflects a professional and modern digital presence built on WordPress, enhanced with SEO and cookie management tools, and supported by a GDPR-compliant privacy framework. The site is well-structured, mobile-optimized, and regularly updated with news and project highlights. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. WHOIS data is privacy-protected, which is common and justified for this business type, and no suspicious patterns were detected. Overall, SSP AG demonstrates a mature digital infrastructure aligned with its market position and business needs.

B

Berthold Becker GmbH

ib-becker.com

51

Berthold Becker GmbH is a well-established German engineering and civil construction firm specializing in sustainable infrastructure solutions such as water supply, wastewater management, road and traffic infrastructure, flood protection, and BIM management. The company operates primarily in Rheinland-Pfalz and Nordrhein-Westfalen and has a strong regional presence with over 50 years of experience. Their website reflects a professional and consistent brand image, targeting municipalities, public sector planners, and construction professionals. Technically, the website is built on WordPress with modern themes and plugins, including Borlabs Cookie for consent management, and is hosted under the IONOS SE registrar. Security posture is good with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is moderate due to the absence of a privacy policy and terms of service pages. Overall, the website is trustworthy and well-maintained with active content updates and good SEO practices.

S

Stadt Braunschweig

braunschweig.de

61

The website www.braunschweig.de is the official digital presence of the city of Braunschweig, Germany. It serves as a comprehensive portal for residents, businesses, tourists, and other stakeholders, providing extensive information on city life, economy, politics, culture, and tourism. The site offers various online services and links to related portals, reflecting a mature and well-structured municipal digital infrastructure. The business model is focused on public service and community engagement, positioning the city as a transparent and accessible government entity. Technically, the website is built on the Sitepark Information Enterprise Server platform, utilizing modern web technologies including JavaScript, CSS, SVG graphics, and the Flickity carousel for interactive content. The site is mobile-optimized and accessible, with good SEO practices and performance. Analytics are implemented via Piwik with privacy-conscious settings, disabling cookies and respecting Do Not Track signals. From a security perspective, the site enforces HTTPS and employs some security best practices, though additional headers like Content-Security-Policy and Strict-Transport-Security could enhance protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by a comprehensive privacy policy, though cookie consent mechanisms could be improved. Contact information is primarily provided via a contact form, with no explicit emails or phone numbers on the homepage. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance suitable for a government entity. Recommendations include enhancing security headers, adding incident response and vulnerability disclosure information, and implementing cookie consent mechanisms to further strengthen privacy compliance and user trust.

S

Stadt Frankfurt am Main

frankfurt.de

55

The website frankfurt.de is the official city portal for Frankfurt am Main, Germany, providing comprehensive information and services related to city administration, public services, events, and citizen engagement. It serves a broad audience including residents, visitors, and businesses, positioning itself as a key digital gateway for municipal services and cultural information. The portal offers a variety of services such as online forms, event listings, and participation platforms, reflecting a government-focused business model with a strong emphasis on public accessibility and transparency. Technically, the site employs modern web technologies including Bootstrap, FontAwesome, and media streaming libraries, ensuring a responsive and accessible user experience. The site demonstrates good mobile optimization and SEO practices, although it appears to use a custom or proprietary CMS. Performance is moderate, with no critical technical issues detected. Accessibility features such as skip links and language translation support are present, enhancing usability. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and does not provide explicit security policies or incident response contacts. No vulnerability disclosure or security.txt files were found, indicating room for improvement in transparency and security communication. Privacy compliance is weak, with no privacy or cookie policies detected in the provided content, which could be a compliance risk under GDPR. Overall, frankfurt.de is a trustworthy and professional government portal with strong business credibility and good technical implementation. To enhance its security posture and privacy compliance, it should publish clear privacy and cookie policies, implement security headers, and provide incident response information. These improvements would strengthen user trust and regulatory adherence.

B

Bayern Tourismus Marketing GmbH

tourismuswissen.bayern

52

Bayern Tourismus Marketing GmbH operates tourismwissen.bayern as an official educational and marketing platform for the Bavarian tourism sector. The company is institutionally supported by the Bavarian government and serves as a central hub for tourism stakeholders, offering digital courses, networking, and marketing resources. The website is built on the Moodle LMS platform, featuring a professional design, accessibility options, and GDPR-compliant privacy and cookie policies. Technically, the site uses modern JavaScript libraries and analytics tools like Matomo, ensuring privacy-conscious user tracking. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Overall, the platform is trustworthy, well-maintained, and aligned with its business goals.

RCE Medien GmbH & Co. KG is a German media company specializing in event data processing and publication solutions, serving municipalities, medium-sized businesses, tourism associations, and publishing houses. With approximately 30 years of market presence, it positions itself as the largest event data center in the German-speaking region, offering a suite of products including RCE-Event, RCE-Freizeitplaner, and consulting services. The website reflects a professional business model focused on B2B services with a clear target audience in the public and media sectors. Technically, the website is built on the Contao Open Source CMS and employs several JavaScript libraries such as jQuery 1.11.3, Google Analytics, and Google Tag Manager. While the site is accessible and moderately optimized for mobile and SEO, it uses outdated libraries that may pose security risks. The site lacks advanced accessibility features and comprehensive SEO optimization. From a security perspective, the site uses HTTPS and anonymizes IPs in Google Analytics, but it lacks critical security headers and uses an outdated jQuery version with known vulnerabilities. There is no visible cookie consent mechanism or published security and incident response policies, indicating room for improvement in compliance and security posture. Overall, the website is functional and professional but would benefit from technical modernization, enhanced security practices, and improved privacy compliance to strengthen trust and reduce risk.

The DSN GROUP operates a professional job portal focused on data protection and IT security careers, primarily targeting German-speaking job seekers. The website provides information about the company, job listings, and contact options, positioning itself as a niche player in the privacy and security recruitment market. The presence of related companies in the footer indicates a broader corporate group structure. Technically, the site uses modern JavaScript libraries such as jQuery and jQuery UI, and is built on the rexx systems platform, suggesting a mature but specialized infrastructure. The website is served over HTTPS, ensuring secure communications, but lacks visible security headers and cookie consent mechanisms, indicating areas for improvement in security posture and privacy compliance. No forms or direct contact emails are present on the main page, but a contact page is linked, suggesting controlled data collection. Overall, the site is professional, trustworthy, and safe for general audiences.

D

datenschutz notizen | News-Blog der DSN GROUP

datenschutz-notizen.de

46

The website 'datenschutz notizen | News-Blog der DSN GROUP' is a specialized German news blog focusing on data protection, information security, and compliance topics. It serves a niche audience of data protection officers, compliance professionals, and organizations interested in legal and technical updates in these fields. The site is professionally designed, regularly updated, and uses structured data to enhance SEO and content discoverability. Technically, it is built on WordPress with modern plugins and frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and security plugins, though it lacks some advanced security headers and explicit incident response policies. Privacy compliance is mostly good, but the absence of a cookie consent mechanism is a notable gap. Overall, the site is trustworthy, professional, and well-positioned in its market niche.

T

t3n

t3n.de

63

t3n is a leading German digital business magazine providing news, analysis, and insights on e-business, social media, web technology, and future digital trends. The website serves a professional audience interested in digital transformation and technology innovations. It operates a multi-channel business model including print and online publishing, events, podcasts, and an e-commerce shop. The site is built on the Neos CMS platform with a modern PHP framework and hosted on Google Cloud infrastructure. It demonstrates good digital maturity with responsive design, SEO optimization, and GDPR-compliant consent management. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers and privacy policies are not clearly presented in the analyzed content. Overall, the site is professional, trustworthy, and well-positioned in the German digital media market.

S

SAT.1

sat1.de

57

SAT.1 is a prominent German media company providing news, entertainment, and TV programming content through its official website. The site integrates live TV streaming and video-on-demand services, prominently linking to the Joyn platform, a major streaming partner. The website is well-branded, professionally designed, and targets a general audience interested in current news and entertainment. Technically, the site uses modern web technologies including Next.js and React, ensuring fast performance and excellent mobile optimization. Privacy compliance is managed via Usercentrics, providing a consent mechanism for cookies and tracking. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. Overall, the domain registration data aligns with the website's branding and hosting, indicating legitimacy and trustworthiness.

V

viind GmbH

viind.com

59

viind GmbH is a specialized provider of modular chatbot and voicebot solutions, focusing on automated communication for government agencies and enterprises. Their website presents a professional and comprehensive portfolio of services tailored to sectors such as administration, health departments, banking, insurance, and telecommunications. The company emphasizes flexibility, security, and future-oriented technology in their offerings. The digital infrastructure is built on a modern WordPress CMS with Elementor and various plugins, ensuring a responsive and SEO-optimized user experience. The site includes GDPR-compliant privacy and cookie policies with explicit consent mechanisms, reflecting a mature approach to data protection. Security posture is generally good with HTTPS enforced, though explicit security headers could be improved. The absence of WHOIS data is a notable anomaly, potentially indicating privacy protection or registration issues, which slightly impacts trustworthiness. Overall, the website is well-designed, content-rich, and targets a professional audience effectively.

F

Willkommen | Familien-App Freudenstadt

familien-app-freudenstadt.de

43

The Familien-App Freudenstadt website serves as a digital platform aimed at supporting families within the Landkreis Freudenstadt region in Germany. It provides information on family support services, event calendars, and social institutions relevant to parents, children, and youth. The platform is likely supported or endorsed by local government authorities, as indicated by references to the Landrat and official logos. Technically, the site is built using modern web frameworks such as Nuxt.js and Tailwind CSS, ensuring a responsive and user-friendly experience. Security posture is adequate with HTTPS enabled, but could benefit from enhanced security headers and explicit privacy compliance mechanisms. Overall, the site presents a trustworthy and professional resource for its target audience, though it lacks explicit contact details and cookie consent features.

The Kreisvolkshochschule Freudenstadt operates as a regional adult education provider in Germany, offering a wide range of courses including languages, health, career development, and cultural programs. The website reflects a well-structured and community-oriented institution with a clear focus on accessibility and user engagement. The technical infrastructure is based on a custom CMS platform with modern web technologies, providing good mobile optimization and accessibility features. Security posture is adequate with HTTPS enforced and secure form handling, though there is room for improvement in security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the website is professional, trustworthy, and serves its educational mission effectively.

J

jugend-technik-schule

jugend-technik-schule-fds.de

43

Jugend-Technik-Schule is a German educational institution specializing in providing hands-on STEM courses and workshops for children and youth. The website showcases a variety of courses focused on natural sciences and technology, aiming to inspire and educate young learners in these fields. The institution positions itself as a regional leader in youth STEM education with a clear focus on practical learning experiences. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and Brizy page builder, hosted likely by agenturserver. The site is mobile-optimized and SEO-friendly, with a professional design and clear navigation. Security-wise, the site uses HTTPS and a cookie consent mechanism via Usercentrics, but lacks some security headers and formal privacy and terms policies, which are recommended for compliance and trust. Overall, the domain registration data aligns well with the website content, indicating legitimacy and consistency. The site is safe for general audiences with no adult or explicit content.

N

Nationalpark Schwarzwald

nationalpark-schwarzwald.de

70

The Nationalpark Schwarzwald website represents a well-established governmental entity focused on nature conservation, education, and public engagement in the Black Forest region of Germany. The site offers comprehensive information about the park, including visitor centers, events, educational programs, and research initiatives. It is supported by the Ministry for Environment, Climate and Energy of Baden-Württemberg, indicating strong institutional backing and legitimacy. Technically, the website is built on TYPO3 CMS with modern web technologies such as jQuery, Bootstrap, and Leaflet for maps. It incorporates accessibility features, responsive design, and SEO best practices, providing a good user experience across devices. The site uses Matomo for analytics and implements a cookie consent mechanism compliant with GDPR requirements. From a security perspective, the site enforces HTTPS, uses Google reCAPTCHA for form protection, and has a cookie consent banner. While explicit security headers are not clearly visible in the HTML, the overall posture is solid with no exposed sensitive data or vulnerabilities detected. The WHOIS data aligns with the site's public sector nature, showing no suspicious patterns. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its audience effectively. Minor improvements in security headers and publishing a security policy could enhance its security maturity further.

U

Umwelt- und Energieagentur Landkreis Karlsruhe

energieagentur-kreiska.de

46

The Umwelt- und Energieagentur Landkreis Karlsruhe (UEA LK) operates as a regional government agency dedicated to implementing the climate goals of the zeozweifrei 2035 initiative for the Karlsruhe district. The website serves as an informational and engagement platform targeting residents and stakeholders interested in environmental and energy sustainability. The agency positions itself as a key regional player in energy and environmental policy implementation, offering consulting and public outreach services. Technically, the website is built on WordPress, leveraging popular plugins such as Yoast SEO and Google Analytics for optimization and analytics. Hosting is provided by PixelX, as indicated by the nameservers. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features. Cookie consent mechanisms and a comprehensive privacy policy indicate compliance with GDPR requirements. From a security perspective, the site enforces HTTPS and employs cookie consent but lacks explicit security headers and a published security or incident response policy. No vulnerabilities or suspicious content were detected. The domain registration data is limited but consistent with a government-related entity, hosted on professional infrastructure. Overall, the website presents a professional and trustworthy digital presence for a government environmental agency, with room for improvement in security policy transparency and technical security hardening.

R

Regionalentwicklung Mittelbaden Schwarzwaldhochstraße e. V.

leader-mittelbaden.de

47

Regionalentwicklung Mittelbaden Schwarzwaldhochstraße e. V. operates as a non-profit organization focused on strengthening rural areas in the Mittelbaden region of Germany through the EU LEADER funding program. The website serves as an information hub for regional development projects, funding opportunities, and community engagement initiatives. It targets local residents, project initiators, and governmental stakeholders, positioning itself as a key regional development facilitator. Technically, the website is built on WordPress with a modern theme and plugins supporting SEO, event management, and contact forms. The infrastructure supports moderate performance and good mobile optimization, though hosting details are not explicitly disclosed. Structured data and meta tags are well implemented, enhancing search engine visibility. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security policies or incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. The site does not display social media links or terms of service, which could enhance user trust. Overall, the website is professional, trustworthy, and serves its purpose well, but could improve in privacy compliance and security transparency to better align with GDPR and best practices.

W

Wirtschaftsregion Mittelbaden e.V.

wirtschaftsregionmittelbaden.de

44

Wirtschaftsregion Mittelbaden e.V. is a regional economic development association serving the Mittelbaden area in Southwest Germany, including the Stadtkreis Baden-Baden and Landkreis Rastatt. The organization focuses on fostering economic growth, supporting career and education initiatives, and enhancing regional infrastructure and quality of life. With over 80 members and a community of approximately 290,000 people, WRM acts as a collaborative network of municipalities, companies, and credit institutions. The website provides information about their services, events, and regional initiatives but lacks explicit privacy, cookie, and security policies.

A

Abfallwirtschaftsbetrieb des Landkreises Rastatt

awb-landkreis-rastatt.de

52

The Abfallwirtschaftsbetrieb des Landkreises Rastatt is a regional government entity responsible for waste management services in the Landkreis Rastatt area of Germany. The organization focuses on progressive waste policies, fair waste fees, and high recycling rates, serving local residents and businesses. Their website provides comprehensive information on services such as waste container registration, collection schedules, and recycling education, supported by a mobile app and digital tools. The site is well-branded and consistent with government standards, targeting the local population effectively. Technically, the website is built on the cEasy CMS platform, utilizing modern JavaScript libraries like Swiper.js for interactive elements and FontAwesome for icons. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Hosting appears to be German-based, aligning with the organization's regional focus. Privacy and cookie compliance are well implemented, including a consent mechanism and detailed privacy policy. From a security perspective, the site enforces HTTPS and employs cookie consent but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the website's regional government identity, showing no suspicious patterns. Overall, the security posture is solid but could be improved with additional headers and transparency. The overall risk assessment is low, with no signs of malicious content or compliance issues. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to strengthen trust and compliance further.

L

Landratsamt Reutlingen

ganzesachemachen.de

45

The website ganzesachemachen.de serves as the official career portal for Landratsamt Reutlingen, a regional government authority in Germany. It provides comprehensive information on current job openings, training and study opportunities, and employee benefits, targeting prospective employees and trainees. The site emphasizes family-friendly work conditions, flexible working hours, and professional development, positioning itself as an attractive employer in the public sector. The content is well-structured, professionally presented, and supported by employee testimonials and multimedia content to enhance engagement. Technically, the site is built on WordPress with a modern tech stack including UIkit, Owl Carousel, and Borlabs Cookie for privacy management. It uses HTTPS with good SSL configuration and integrates Google Tag Manager with consent mechanisms. The site is mobile-optimized and accessible, with embedded videos and maps controlled via cookie consent blockers to comply with privacy regulations. From a security perspective, the site follows best practices such as enforcing HTTPS and managing cookie consent. While explicit security headers are not fully confirmed, no vulnerabilities or exposed sensitive data were detected. The WHOIS data indicates generic hosting providers but aligns with the site's government affiliation, suggesting legitimacy. No WAF or blocking mechanisms interfere with content access. Overall, the website demonstrates a strong security posture, good privacy compliance, and professional business credibility. It effectively supports the Landratsamt Reutlingen's recruitment and employer branding efforts, with recommendations to enhance security headers and maintain regular updates to sustain its secure and compliant status.

L

Landkreis Rottweil

seniorenarbeit-kreis-rottweil.de

52

The website www.seniorenarbeit-kreis-rottweil.de serves as an official government portal for senior citizen services and care in Landkreis Rottweil, Germany. It provides comprehensive information on care support, elderly assistance, and related community services, targeting senior citizens and their families within the region. The site is well-structured, accessible, and offers clear navigation to various service areas such as care counseling, housing options for seniors, and community support programs. Technically, the website is built on the cEasy CMS platform, utilizing modern web technologies including JavaScript and CSS. It demonstrates good mobile optimization and accessibility features, with a moderate performance profile. The presence of a cookie consent mechanism and privacy policy indicates attention to privacy compliance, although no explicit terms of service or security policies are published. From a security perspective, the site enforces HTTPS and employs cookie consent controls, but lacks visible security headers and published incident response contacts. No vulnerabilities or suspicious content were detected. The WHOIS data aligns with the website's government nature, showing consistent domain registration without privacy protection, supporting legitimacy. Overall, the website presents a trustworthy and professional government service portal with good content quality and privacy compliance. Strategic improvements include enhancing security headers, publishing security and incident response policies, and adding terms of service to strengthen user trust and compliance posture.

W

WIR FÜR GESUNDHEIT GMBH

wir-fuer-gesundheit.de

48

WIR FÜR GESUNDHEIT GMBH operates the largest German cross-provider healthcare network offering enhanced medical services and private patient comfort through its PlusCard product. The company targets employees, employers, clinics, and families in Germany, providing flexible health insurance tariffs and access to a broad network of approximately 450 partner clinics. The website is professionally designed using Drupal 10, integrates modern marketing and analytics tools such as Google Analytics, Google Tag Manager, and Pardot, and is hosted behind Akamai CDN infrastructure. Contact information is clearly presented, but explicit privacy and terms of service pages are missing. Cookie consent mechanisms are implemented, indicating some level of GDPR compliance.

C

Clinotel Krankenhausverbund

clinotel.de

54

Clinotel Krankenhausverbund is a German healthcare network uniting public and non-profit hospitals to collaboratively improve quality, processes, and innovation. The website presents a professional and consistent brand image targeting hospitals and patients in Germany, emphasizing transparency and shared best practices. The digital infrastructure includes multiple internal platforms and public portals supporting communication, quality reporting, and career opportunities. Technically, the site uses a CMS likely REDAXO, with common JavaScript libraries and moderate performance. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. Overall, the site is trustworthy and well-structured, supporting Clinotel's position as a leading hospital network in Germany.