Germany security reports

I

International Shooting Sport Federation - ISSF

issf-sports.org

65

The International Shooting Sport Federation (ISSF) operates as the global governing body for Olympic shooting sports, providing governance, event organization, athlete rankings, and promotional activities. The website serves athletes, officials, and shooting sport enthusiasts with comprehensive news, event calendars, and educational resources. The ISSF maintains a strong market position as the authoritative organization in its niche, supported by partnerships with Olympic and anti-doping agencies. Technically, the website is built on a modern Next.js and React stack, delivering fast performance and excellent mobile optimization. The site employs HTTPS and a cookie consent mechanism, reflecting a mature digital infrastructure. However, some security best practices such as DNSSEC and security headers could be improved. From a security perspective, the site shows good posture with no visible vulnerabilities or exposed sensitive data. The absence of explicit security policies or incident response contacts is a gap. Privacy compliance is well addressed with a clear privacy and cookie policy, including GDPR consent mechanisms. Overall, the ISSF website is professional, trustworthy, and well-aligned with its organizational identity. Strategic improvements in security transparency and contact information would enhance trust and compliance further.

N

Naturpark Zittauer Gebirge e. V.

naturpark-zittauer-gebirge.de

43

Naturpark Zittauer Gebirge e. V. operates as a non-profit organization dedicated to preserving and promoting the unique cultural and natural landscape of the Zittauer Gebirge region in Saxony, Germany. The website serves as an informational portal offering details about nature experiences, educational programs, regional development, and recreational opportunities. The organization targets nature enthusiasts, families, schools, and tourists interested in the cultural and natural heritage of the area. The business model focuses on conservation, education, and community engagement rather than commercial activities. Technically, the website is built on the proprietary BLUEPAGE-CMS platform and utilizes modern web technologies including jQuery, lazy loading for images, and responsive design tailored for desktop, tablet, and mobile devices. Hosting is provided via kasserver.com nameservers. The site demonstrates moderate performance and good SEO practices, though accessibility features are basic. No advanced analytics or tracking tools are detected, reflecting a privacy-conscious approach. From a security perspective, the website enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and published incident response or vulnerability disclosure policies. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is limited but does not raise immediate concerns. Overall, the security posture is good but could be improved with additional headers and transparency. The overall risk assessment is low given the nature of the organization and the content provided. Strategic recommendations include enhancing security headers, publishing incident response contacts, and considering a vulnerability disclosure policy to improve trust and security culture. The website is professional, trustworthy, and well-suited for its audience and purpose.

3

3mag

3mag.eu

33

3mag is a regional multilingual magazine serving the three-country border region of Germany, Czech Republic, and Poland. It focuses on cultural events, lifestyle, and regional stories, targeting residents and visitors interested in the Neisse Euroregion. The website is professionally designed with good content quality and clear navigation, supporting multiple languages and featuring a rich set of articles and event information. Technically, the site uses modern web technologies including JavaScript, CSS, and Matomo analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some security headers and a formal security policy. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and well-positioned as a niche regional media outlet.

L

Landkreis Görlitz

gis-lkgr.de

54

The website gis-lkgr.de serves as the official geoportal for Landkreis Görlitz, a regional government entity in Germany. It provides a comprehensive set of geographic information system (GIS) services including parcel and address searches, map printing, coordinate tools, and access to OGC services. The portal targets residents, local government officials, planners, and public users interested in geographic and cadastral data of the Landkreis Görlitz region. The business model is a public service offering free access to official geographic data, positioning itself as a trusted government resource. Technically, the website is built using ExtJS 4 framework and proprietary GIS software components (cardo.Map3Lib). It employs AJAX for dynamic content loading and uses HTTPS for secure communication. The site demonstrates moderate performance and basic mobile optimization. Accessibility and SEO optimizations are present but could be improved. The content is well-structured and professionally presented, with consistent branding aligned with Landkreis Görlitz. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks several recommended security headers such as Content-Security-Policy and X-Frame-Options. There is no visible cookie consent mechanism, which is a GDPR compliance gap. Incident response and security policies are not explicitly provided. No vulnerabilities or suspicious domains were detected. Overall, the security posture is adequate but could benefit from enhancements. The overall risk assessment is low, with the site appearing trustworthy and legitimate as an official government portal. Strategic recommendations include implementing security headers, adding cookie consent mechanisms, providing explicit security and incident response policies, improving mobile responsiveness, and regularly auditing third-party libraries. These steps will enhance compliance, security posture, and user trust.

L

Landkreis Görlitz

landkreis.gr

55

Landkreis Görlitz operates an official regional government website providing comprehensive information and services related to district administration, economy, tourism, education, and social affairs. The site targets residents and visitors of the Landkreis Görlitz region in Germany, offering multilingual content and online citizen services including appointment scheduling and online applications. The website is built on the active-City CMS platform and employs modern JavaScript libraries such as jQuery and Klaro for cookie consent, alongside Matomo for privacy-conscious analytics. From a technical perspective, the website demonstrates moderate performance and basic mobile optimization. Accessibility features are present but could be improved. Security practices include the use of S/MIME certificates for secure email communication and a GDPR-compliant cookie consent mechanism. However, the site lacks explicit HTTP security headers, a published security policy, and a vulnerability disclosure program, which are areas for improvement. Overall, the website is trustworthy and professional, with clear contact information and consistent branding. The domain registration data aligns well with the website content, supporting legitimacy. The security posture is adequate but could be enhanced by implementing recommended best practices. Privacy compliance is good, reflecting adherence to GDPR requirements. Strategic recommendations include enhancing security headers, publishing security and incident response policies, improving mobile and accessibility features, and establishing a vulnerability disclosure process to strengthen the site's security maturity and user trust.

N

net-Com AG

active-city.net

56

net-Com AG operates as a specialized provider of municipal content management systems (CMS) and portal software, branded as active-City. The company targets public sector clients such as municipalities, cities, and counties, offering modular and scalable solutions to manage and present local government information online. With over 200 administrations in Germany and abroad as customers, net-Com AG holds a strong market position as a leader in the municipal CMS sector. Their offerings include a comprehensive suite of modules for citizen services, news, event management, and mobile apps, supporting modern multichannel content distribution.

L

Landkreis Görlitz

kreis-goerlitz.de

55

Landkreis Görlitz operates an official regional government website providing comprehensive information about district administration, services, tourism, education, and social topics. The site targets residents and visitors of the Görlitz district in Germany, offering multilingual content and online services such as appointment scheduling and online applications. The website is built on the active-City CMS platform and incorporates modern web technologies including jQuery, Klaro for cookie consent, and Matomo for privacy-focused analytics. Hosting is provided by plesk11.ncserve.de. Security practices include the use of S/MIME certificates for secure email communication and a cookie consent mechanism compliant with GDPR. However, explicit security headers and vulnerability disclosure policies are not evident, suggesting room for improvement in security posture. Overall, the website is professional, trustworthy, and serves as a reliable information portal for the district.

Z

Zittauer Stadtentwicklungsgesellschaft mbH

stadtentwicklung-zittau.de

48

The Zittauer Stadtentwicklungsgesellschaft mbH is a small, regionally focused municipal development company established in 1992, specializing in city and regional development, tourism, and urban renewal in Zittau, Germany. The website reflects a professional and consistent brand presence with clear navigation and relevant content targeting local citizens, businesses, and public institutions. Technically, the site uses a modern tech stack including Bootstrap and jQuery, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking explicit security headers and incident response information. Overall, the domain and website appear legitimate and trustworthy with no signs of blocking or suspicious activity.

M

Marketing-Gesellschaft Oberlausitz-Niederschlesien mbH

oberlausitz.com

50

The website www.oberlausitz.com serves as the official regional tourism marketing platform for the Oberlausitz region in Germany. It provides comprehensive information about cultural heritage, nature, family activities, events, and accommodation options, targeting tourists and families interested in exploring the region. The site is professionally designed with consistent branding and rich content, including multilingual support and extensive multimedia galleries. Technically, it is built on TYPO3 CMS with modern JavaScript libraries and includes GDPR-compliant cookie consent mechanisms and analytics tracking via Matomo and Google Analytics. Security posture is good with HTTPS enforced and secure forms, though some security headers could be improved. The absence of WHOIS registration data for the domain is a notable concern, reducing trust from a domain legitimacy perspective, but the website content and external references strongly indicate a legitimate official entity. Overall, the site is a well-maintained, user-friendly, and trustworthy resource for regional tourism promotion.

S

Stadt Zittau

zittau.de

58

The website zittau.de serves as the official digital presence of the city of Zittau, Germany. It provides comprehensive information and services related to tourism, culture, citizen services, education, and economic development. The site targets residents, tourists, and businesses within the Dreiländerregion, offering event calendars, administrative resources, and city news. The business model is that of a government portal, focusing on public service and information dissemination. Technically, the site is built on Drupal CMS, employs Matomo for privacy-respecting analytics, and uses modern web technologies such as FontAwesome and CookiesJSR for cookie management. The site is mobile-optimized and accessible, with good SEO practices and structured navigation. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could enhance protection. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is robust, with clear privacy and cookie policies and GDPR adherence. Business credibility is high given the official nature of the site and consistent branding. Overall, the site scores well on content quality, technical implementation, security, privacy, and business credibility, making it a trustworthy and professional municipal website.

A

AUTO BILD

autobild.de

63

AUTO BILD operates a comprehensive German-language automotive portal offering test reports, car market listings, and buying advice. The website serves a large audience of automotive consumers and enthusiasts, providing extensive content including news, reviews, and a used car marketplace with over 700,000 listings. The platform is well-positioned in the German automotive media sector with a strong brand presence and professional digital infrastructure. Technically, the website employs modern JavaScript frameworks (likely Vue.js), uses a robust CDN and DNS provider (Akamai), and integrates advanced consent management for GDPR compliance. The site is mobile-optimized, fast-loading, and SEO-friendly, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS, uses security headers, and manages user consent effectively. However, it lacks publicly accessible privacy policies, terms of service, security policies, and incident response contacts, which are important for compliance and user trust. No critical vulnerabilities or suspicious WHOIS patterns were detected, indicating a legitimate and secure operation. Overall, AUTO BILD's website is a professional, trustworthy, and content-rich platform with room for improvement in transparency and compliance documentation.

The website represents the Tourismuszentrum Naturpark Zittauer Gebirge GmbH, a regional tourism organization promoting the Zittauer Gebirge area in Oberlausitz, Germany. It provides comprehensive information on outdoor activities, cultural events, family vacations, and accommodation options, targeting tourists and families interested in nature and regional culture. The site is well-structured with clear navigation and localized content in German. Technically, the site uses a modern stack including jQuery, Slick Slider, Matomo analytics, and Elfsight widgets, running on the Contao CMS platform. The hosting and domain registration are stable and transparent, with no privacy protection, indicating legitimacy. Security posture is adequate with HTTPS and domain transfer protection, but lacks advanced security headers and explicit security policies. Privacy compliance is good with a visible privacy policy and cookie consent mechanism. Overall, the site is professional, trustworthy, and suitable for its audience.

B

Bundesanstalt für Straßen- und Verkehrswesen

bast.de

64

The Bundesanstalt für Straßen- und Verkehrswesen (BASt) is a German federal government research institute specializing in road and traffic safety, infrastructure, vehicle technology, and traffic engineering. It operates under the Federal Ministry for Digital and Transport and provides authoritative research, publications, and quality assessments to support transportation infrastructure and safety in Germany. The website serves as a comprehensive portal for research outputs, news, and public information targeting professionals, government bodies, and the general public. Technically, the website is built on the Government Site Builder CMS, featuring modern HTML5, CSS3, and JavaScript technologies. It is well-optimized for mobile devices, accessible, and SEO-friendly. The site uses HTTPS with excellent SSL configuration, though security headers are not explicitly detected in the HTML content. Privacy and cookie policies are clearly presented with GDPR compliance, and a cookie consent mechanism is implemented. From a security perspective, the site shows good practices with no visible vulnerabilities or exposed sensitive data. However, it lacks a published security policy or incident response contact details and does not provide a security.txt file for vulnerability disclosures. The domain registration and DNS setup align with German government and research networks, reinforcing legitimacy and trustworthiness. Overall, the BASt website is a professional, trustworthy, and secure government portal with excellent content quality and user experience. Strategic improvements could include enhancing security headers and publishing explicit security policies to further strengthen its security posture.

D

DMSB – Deutscher Motor Sport Bund e.V.

bahnsport-deutschland.de

57

Bahnsport Deutschland is the official website for the German motor sports federation's Bahnsport discipline, operated by the Deutscher Motor Sport Bund e.V. The site serves as a comprehensive information hub for enthusiasts, athletes, and clubs involved in motor sports in Germany, providing news, event schedules, results, and official documents. The website demonstrates a solid market position as a national governing body platform with a clear focus on accessibility and user experience. Technically, the site is built on TYPO3 CMS, employs modern web standards, and integrates accessibility tools to support diverse user needs. Security posture is strong with HTTPS enforcement, security headers, and bot protection via Google reCAPTCHA, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR, though improvements could be made in transparency around security and vulnerability disclosures.

A

ADAC Südbayern e.V.

motorsport-suedbayern.de

57

ADAC Motorsport Südbayern is a regional non-profit organization focused on motorsport activities, youth engagement, and club services within the Südbayern region of Germany. The website serves as a portal for information, event registration, and community engagement for motorsport enthusiasts and local clubs. It leverages TYPO3 CMS with modern SEO and consent management tools to provide a professional and compliant digital presence. The site demonstrates good technical infrastructure with moderate performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the website is trustworthy and well-positioned to serve its target audience effectively.

T

TopSoft UG

smartarget.online

61

Smartarget.online is a technology-focused SaaS platform operated by TopSoft UG, Germany, providing no-code apps and widgets to enhance website user engagement and increase sales. The platform supports multiple languages and integrates with popular platforms like Wix, WordPress, and Ecwid, positioning itself as a versatile solution for website owners and businesses. The website demonstrates a professional design with clear navigation and calls to action, reflecting a mature digital presence. Technically, the site uses modern web technologies including Bootstrap and Cloudflare CDN, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and standard security headers, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy and legitimate, with room for improvement in privacy and security transparency.

M

MSC Abensberg e.V.

msc-abensberg.de

51

MSC Abensberg e.V. is a well-established motorsport club based in Abensberg, Germany, with a rich history dating back to 1928. The club specializes in speedway racing and hosts significant international events such as the FIM Speedway Grand Prix Qualifying rounds. It also emphasizes youth development and community engagement, serving over 500 members. The website reflects a professional and consistent brand image, providing comprehensive event information, news updates, and membership details. Technical infrastructure includes modern web technologies, integration of Google Maps for location services, and Google Analytics for visitor tracking, complemented by a GDPR-compliant cookie consent mechanism. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in security headers and explicit security policies. Overall, the site is user-friendly, mobile-optimized, and trustworthy, supporting the club's community and promotional goals effectively.

The website coldrecycling.eu serves as a specialized knowledge-sharing platform focused on cold recycling technologies in road infrastructure, aiming to promote sustainability and circular economy principles within Europe. It is initiated by reputable European research organizations including FEHRL, Germany’s BASt, and Denmark’s DTI. The platform facilitates collaboration through quarterly online meetings and disseminates research to accelerate adoption of cold recycling methods. Technically, the website employs a moderately modern tech stack including Bootstrap 3, jQuery 1.9.1, and Google reCAPTCHA, but uses an outdated jQuery version that poses security risks. The site is served over HTTPS with a Content-Security-Policy header and includes a cookie consent mechanism with detailed cookie information. However, it lacks a published privacy policy, terms of service, and incident response information, which are important for compliance and trust. Overall, the site is professional and trustworthy but could improve in privacy compliance and security modernization.

V

VisionSpace Intelligent Systems UG

karel.ai

62

VisionSpace Intelligent Systems UG operates the website karel.ai, offering an AI-powered conversational assistant named Karel designed to support operations of complex and critical systems. The assistant provides functionalities such as answering operational questions, predictive analytics, task automation, explainable AI reasoning, skill teaching via API, and team collaboration. The company is positioned as a niche technology provider with backing from the European Space Agency incubation program and EU funding, targeting operators and managers in aerospace and industrial sectors. The website is professionally designed, mobile-optimized, and includes EU trust signals, but lacks explicit security and incident response policies. The technical infrastructure leverages modern front-end technologies including Bootstrap, jQuery, FontAwesome, and Google Analytics, with moderate performance and basic SEO and accessibility features. Security posture is adequate with HTTPS implied and cookie consent implemented, but could be improved by adding security headers and vulnerability disclosure mechanisms. Overall, the website and business present a credible and professional front with room for enhanced security transparency and compliance documentation.

K

KNDS Deutschland GmbH & Co. KG

kmweg.de

62

KNDS Deutschland GmbH & Co. KG is a leading European defense technology company specializing in the development, production, and support of military land systems. As part of the KNDS group, formed by the merger of Krauss-Maffei Wegmann and Nexter, the company offers comprehensive solutions including armored vehicles, artillery systems, training, logistics, and customer service. Their market position is strong, serving armed forces in over 50 countries with a broad product portfolio and extensive expertise. Technically, the website is built on modern frameworks such as Next.js and React, with cloud-hosted media assets and integrated analytics via Matomo. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. From a security perspective, the site uses HTTPS, domain protection statuses, and cookie consent mechanisms, though it lacks explicit public security policies or incident response contacts. No vulnerabilities or suspicious activities were detected, and the WHOIS data confirms domain legitimacy and consistency with the business history. Overall, the website presents a professional, trustworthy, and secure digital presence aligned with the company's stature in the defense industry. Strategic improvements could focus on enhancing security transparency and formalizing vulnerability disclosure processes.

HORNBACH Baumarkt AG operates a large-scale retail and e-commerce platform specializing in home improvement, garden, and construction products primarily serving the German market and neighboring countries. The website is professionally designed, well-structured, and optimized for performance and mobile devices, reflecting a mature digital infrastructure. The company leverages modern technologies including StencilJS, Usercentrics for consent management, Dynatrace for real user monitoring, and Coveo for search analytics, indicating a high level of digital maturity. Security posture is strong with HTTPS enforcement, security headers, and cookie management, although explicit security policies and incident response contacts are not prominently published. Overall, the website demonstrates high trustworthiness and compliance with GDPR, supported by comprehensive privacy and cookie policies. The domain registration data aligns well with the business claims, reinforcing legitimacy. Strategic recommendations include publishing a dedicated security policy, incident response information, and vulnerability disclosure to further enhance transparency and security culture.

F

FORVIA HELLA

hella.com

74

FORVIA HELLA is a large, internationally positioned automotive supplier specializing in high-performance lighting technology and vehicle electronics. The company also offers a broad portfolio of services and products for spare parts, workshops, and special vehicle manufacturers. The website reflects a professional corporate presence with comprehensive information for partners, investors, and job seekers. Technically, the site uses modern web technologies including JavaScript, Bootstrap, and Piwik PRO analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and privacy compliance evident through detailed policies and cookie consent mechanisms, though explicit security headers and incident response contacts are absent. The WHOIS data is missing, which slightly reduces trust but the overall site content and branding strongly support legitimacy. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and improving accessibility features.

K

KNDS Deutschland GmbH & Co. KG

knds.de

62

KNDS Deutschland GmbH & Co. KG is a leading European manufacturer and system supplier of military land systems, offering a broad portfolio of armored vehicles, artillery, and support systems. The company operates within the French-German KNDS group, serving over 50 countries worldwide with integrated solutions including development, production, logistics, training, and maintenance. The website reflects a mature digital presence built on modern technologies such as Next.js and React, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and domain protections, though improvements like DNSSEC and explicit security policies could enhance trust. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site projects professionalism and credibility consistent with a large defense manufacturing entity.

S

STI Group

sti-group.com

54

STI Group is a large, Germany-based manufacturer specializing in sustainable packaging and point-of-sale display solutions. The company emphasizes innovation and environmental responsibility, offering fiber-based, plastic-free packaging for food and non-food products. Their market position is strong, supported by multiple certifications and awards, and they operate multiple production sites across Europe and Asia Pacific. Technically, the website is built on TYPO3 CMS with modern frontend libraries and includes comprehensive cookie consent and privacy management, reflecting good digital maturity. Security posture is solid with HTTPS and reCAPTCHA usage, though improvements in security headers and incident response transparency are recommended. Overall, the website is professional, user-friendly, and trustworthy, but the lack of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy.

R

Rheinmetall AG

rheinmetall.com

67

Rheinmetall AG is a leading integrated international technology group headquartered in Düsseldorf, Germany, specializing in defense systems and innovative industrial technologies for civilian markets. The company positions itself as a key player in the defense industry while driving sustainable innovation across multiple sectors. The website reflects a professional corporate presence with comprehensive information about its business sectors, sustainability goals, and corporate responsibility. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not publicly available. Privacy compliance is well addressed with GDPR-aligned privacy and cookie policies and a consent management platform. The absence of WHOIS registration data is a transparency concern but does not detract significantly from the overall legitimacy given the professional presentation and trust signals. Strategic recommendations include publishing detailed security policies, improving transparency on domain registration, and enhancing incident response contact information.

KNDS is a leading European defense manufacturer specializing in military land systems, formed by the association of Krauss-Maffei Wegmann and Nexter. The company operates globally with over 10,000 employees and a strong product portfolio including main battle tanks, armored vehicles, artillery, and advanced training solutions. Their market position is strong within the European defense sector, supported by a large order backlog and significant turnover. Technically, the website is built on modern frameworks such as React and Next.js, with privacy-conscious analytics via Matomo and comprehensive cookie consent management through Cookiebot. Security posture is good with HTTPS enforced and domain registration consistent with the business profile. However, there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is professional, secure, and compliant with GDPR, reflecting a mature and credible business entity.

H

HENSOLDT AG

hensoldt.net

65

HENSOLDT AG is a leading German technology company specializing in defense and security electronics, with a strong presence across multiple domains including Air, Land, Sea, Space, and Cyber. The company offers manufacture-independent system integration, innovative radar, optronics, and electronic warfare products, as well as comprehensive services and training. Positioned as a European market leader with global reach, HENSOLDT targets government and defense sectors with advanced sensor solutions. The website infrastructure is built on modern technologies such as SvelteKit and hosted on Vercel, ensuring fast performance, mobile optimization, and good accessibility. The site employs HTTPS with strong security headers and integrates analytics and consent management tools, reflecting a mature digital presence. Security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the absence of a public security policy or vulnerability disclosure page and missing WHOIS domain registration data introduce some concerns. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website is professional, trustworthy, and well-maintained, though the domain registration inconsistency warrants further verification. Strategic recommendations include publishing explicit security policies and incident response contacts to enhance transparency and trust.

H

Hoermann

hoermann-akademie.com

62

Hoermann-Akademie is an educational platform affiliated with the Hoermann brand, providing training and knowledge resources primarily targeting professionals and learners in Germany. The website uses modern web technologies including Vue.js, Bootstrap 5, and Kendo UI, indicating a moderate level of digital maturity. The site is mobile optimized and moderately performant but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is legitimate and professionally branded but could improve in privacy and security practices to better align with GDPR and industry standards.

K

Karriere im Familienunternehmen

karriere-familienunternehmen.de

55

The website 'Karriere im Familienunternehmen' serves as a specialized job board and information portal targeting job seekers interested in careers within leading German family-owned companies. It offers thousands of job listings and career-related content tailored to this niche market segment. The site positions itself as a trusted platform for connecting candidates with family businesses in Germany, leveraging a focused business model centered on employment opportunities and employer branding within this sector. Technically, the website is built on the Drupal CMS platform, utilizing standard web technologies such as HTML5, CSS3, JavaScript, and Font Awesome icons. It integrates Google Analytics for user tracking and employs Cookiebot for cookie consent management, indicating a moderate level of digital maturity. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. From a security perspective, the website enforces HTTPS, ensuring encrypted communication. However, it lacks several recommended security headers such as Content-Security-Policy and X-Frame-Options, which could enhance protection against common web attacks. No vulnerability disclosure or incident response information is provided, and no privacy or cookie policies were detected in the analyzed content, which may raise compliance concerns under GDPR. Overall, the website presents a professional and trustworthy front for its business niche but would benefit from enhanced privacy compliance and security hardening. Strategic improvements in these areas would strengthen user trust and regulatory adherence.

L

Lehnen Websolutions GmbH & Co. KG

resavio.com

49

RESAVIO is a German-based company offering a comprehensive cloud-based hotel management software suite that integrates property management, channel management, online booking, and digital guest services. The company targets a broad range of accommodation providers including hotels, pensions, hostels, holiday apartments, and camping sites. With over 15 years of experience, RESAVIO positions itself as a trusted solution for direct booking optimization and online distribution. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content to its target audience. Technically, the website uses modern web technologies with a custom-built platform, ensuring good performance and mobile responsiveness. Security is well addressed with HTTPS and CSRF protection, though some advanced security headers and explicit security policies are not publicly visible. Privacy compliance is strong, with comprehensive privacy and cookie policies and a consent mechanism in place. The security posture is solid with no visible vulnerabilities or exposed sensitive data. The domain registration data aligns well with the business claims, enhancing trustworthiness. Social media presence and client testimonials further reinforce credibility. Overall, the website and business demonstrate a mature digital presence with good security and privacy practices. Strategically, RESAVIO should consider publishing explicit security policies and incident response contacts, enhancing security headers, and possibly adding a security.txt file to improve transparency and vulnerability management. These steps would further strengthen trust and compliance in the hospitality software market.

M

Mast-Jägermeister SE

jaegermeister.com

62

Mast-Jägermeister SE operates the official website for Jägermeister, a globally recognized premium herbal liqueur brand established in 1935. The website serves as a comprehensive platform for brand storytelling, product information, and e-commerce, targeting adult consumers interested in nightlife and premium spirits. The company maintains a strong market position with consistent branding and a professional digital presence. Technically, the website leverages modern web technologies including React and Next.js, hosted on Vercel with Contentful CMS integration. The site demonstrates excellent performance, mobile optimization, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, includes an age gate to restrict underage access, and implements standard security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a dedicated security policy or vulnerability disclosure page suggests room for improvement in transparency and incident response readiness. Overall, the website presents a low-risk profile with strong business credibility and compliance with privacy regulations such as GDPR. Strategic recommendations include enhancing security transparency, publishing incident response contacts, and continuous monitoring of third-party scripts to maintain security posture.

Mast Jägermeister SE operates a corporate website primarily focused on the Jägermeister brand, a well-known alcoholic beverage. The site enforces strict age verification to comply with legal requirements for alcohol marketing, targeting adult users. The business is positioned as a large, established player in the alcoholic beverage sector, with a professional and consistent brand presence. The website content is relevant and well-structured, supporting responsible consumption messaging. Technically, the website is built on a modern WordPress platform using popular plugins such as Yoast SEO, Slider Revolution, and Borlabs Cookie for privacy compliance. The hosting and DNS are managed by CSC, a reputable provider. Performance and mobile optimization are adequate, though accessibility features are basic. SEO practices are well implemented. From a security perspective, the site uses HTTPS with good SSL configuration and includes an age gate as a security and compliance measure. However, no explicit security headers were detected in the HTML content, and there is no published security policy or incident response contact information. Cookie consent is implemented properly, indicating good privacy compliance. Overall, the website presents a low risk profile with strong business credibility and privacy compliance. Recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to improve transparency and security posture.

3

3RIDES – Das Rad-Event im Dreiländereck

3rides.de

46

3RIDES.de is a German-based cycling event website focused on organizing and promoting cycling races and rides in the Dreiländereck region, including internationally recognized UCI Gravel and Gran Fondo World Series events. The site targets cycling enthusiasts, athletes, and families interested in cycling activities, offering event information, race results, training programs, and expo details. The website is built on WordPress with modern plugins and technologies, providing a good user experience with mobile optimization and clear navigation. However, explicit privacy and cookie policies are not found, and no direct contact information is visible, which may impact user trust and compliance. Security posture is adequate with HTTPS enabled but lacks visible security headers and formal security policies. Social media integration is strong, enhancing community engagement and marketing reach.

I

Interspiro

interspiro.de

65

Interspiro is a well-established company specializing in premium respiratory protection and safety equipment for professional sectors including firefighting, diving, military, and rescue services. With nearly a century of history and technological innovation, the company serves a global market with a strong presence in Germany and other regions. The website reflects a mature digital infrastructure built on Dynamicweb CMS and modern JavaScript libraries, offering detailed product information and eLearning services. Security posture is generally good with HTTPS and cookie consent mechanisms, though improvements in security headers and explicit policies could enhance trust. Overall, the site is professional, well-branded, and compliant with GDPR requirements.

M

McRent

mcrent.eu

58

McRent is a leading motorhome and campervan rental company operating primarily in Europe and New Zealand, offering a wide range of new vehicles with comprehensive insurance and unlimited mileage. The company positions itself as Europe's largest motorhome rental provider with over 100 stations worldwide, targeting travelers seeking freedom and comfort in their holiday experiences. The website is professionally designed, mobile-optimized, and provides clear navigation and extensive content to support customer decision-making and booking processes. Technically, the site leverages modern JavaScript frameworks, consent management platforms, and interactive map services, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and privacy compliance evident through GDPR-aligned policies and cookie consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and accessible online presence. Overall, McRent demonstrates a solid business credibility and technical maturity suitable for its market segment.

M

McRent

mcrent.de

53

McRent is a prominent European motorhome and campervan rental company, offering a broad fleet of new vehicles and comprehensive services including insurance and professional maintenance. The company operates over 120 stations across Germany, Europe, and New Zealand, targeting travelers seeking flexible and comfortable road trip experiences. Their website is well-designed, mobile-optimized, and rich in travel inspiration content, supporting a strong user experience and clear navigation. Technically, the site uses modern JavaScript frameworks, structured data, and integrates third-party services for maps, consent management, and payment processing. Security posture is solid with HTTPS and privacy compliance evident, though some security headers could be improved. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

H

Hörmann

hoermann.de

59

Hörmann is a leading European manufacturer specializing in doors, gates, frames, and drive systems, targeting private homeowners, architects, and industrial clients. The website reflects a mature digital presence built on TYPO3 CMS, with a strong focus on user experience, multilingual support, and compliance with European privacy regulations. The technical infrastructure includes modern web technologies and integrates Google Analytics with user opt-out mechanisms, demonstrating a balanced approach to analytics and privacy. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response contacts are not prominently published. Overall, the site is professional, trustworthy, and well-aligned with the company's market position.

I

ifa systems AG – Patientenverwaltungssoftware für Augenärzte

ifasystems.de

52

ifa systems AG is a specialized software provider focused on delivering clinic and practice management solutions for ophthalmologists. Their flagship product, the ifaNX Augeninformationssystem, is a web- and cloud-based system tailored to the needs of eye care professionals. The company positions itself as a niche leader in healthcare IT, specifically targeting eye clinics and practices in Germany. The website reflects a professional and consistent brand image, with comprehensive information about their offerings and clear contact channels. Technically, the website is built on WordPress with modern plugins and frameworks such as WPBakery Page Builder and PixFort Core. It integrates advanced analytics tools including Google Analytics 4 and Hotjar, alongside a robust cookie consent management system compliant with GDPR. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and employs consent mechanisms for data privacy. While explicit security headers are not fully confirmed, no critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the business information, reinforcing the legitimacy of the domain and company. Overall, the website presents a low-risk profile with strong compliance and professional digital presence. Strategic improvements in security headers and accessibility would further strengthen their posture.

A

AlpacaCamping

alpacacamping.de

59

AlpacaCamping operates a specialized online platform offering over 4,000 private motorhome and camper parking spots primarily in Germany and neighboring countries. The business targets outdoor enthusiasts and camper travelers seeking unique and private camping experiences with instant booking capabilities. The website demonstrates a solid market position within the niche of private camping site bookings, supported by positive trust signals such as high Google review ratings and media mentions. Technically, the site employs modern web technologies including Laravel Livewire, Mapbox for geolocation, and Usercentrics for consent management, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement, CSRF protection, and security headers, though explicit security policies and incident response information are not published. Overall, the site is professional, user-friendly, and compliant with GDPR requirements, though it could improve transparency around security and incident handling.

Nitro Snowboards operates a well-established e-commerce platform specializing in snowboarding equipment including snowboards, bindings, and boots. Founded in 2002, the company has a strong market presence in the snowboarding industry, targeting enthusiasts and sports consumers primarily in Germany and Europe. The website is built on the Shopify platform, leveraging modern web technologies and third-party integrations such as Cookiebot for cookie consent management and Mailchimp for marketing communications. The site demonstrates good design quality, mobile optimization, and SEO practices, providing a positive user experience.

M

Maloja

maloja.de

59

Maloja is a German-based e-commerce retailer specializing in high-quality outdoor and cycling apparel. The website targets German-speaking outdoor enthusiasts and cyclists, offering a broad range of products for women, men, and youth. The business model focuses on sustainable and authentic outdoor clothing, positioning itself as a premium brand in the niche market. The website is built on Magento with the Hyvä theme, leveraging modern JavaScript frameworks such as Alpine.js and integrating Google Tag Manager for analytics. Usercentrics CMP is used for cookie consent management, indicating attention to privacy compliance. Security posture is generally good with HTTPS enforced and anti-CSRF measures in place, but lacks visible security headers and published security policies. WHOIS data for the domain is unavailable, which raises moderate concerns about domain registration transparency. Overall, the website is professional, well-structured, and provides a good user experience, but could improve in privacy disclosures and security transparency.

C

CARAVANA

caravana.de

52

CARAVANA operates as a German online marketplace specializing in the sale of motorhomes and caravans, connecting buyers with dealers across Germany. The platform offers tools such as smart filters, a configurator, and dealer finder to facilitate the purchase process for end consumers interested in recreational vehicles. The website is professionally designed with a consistent brand presence and targets the transportation sector within Germany. Technically, the site is built using modern frameworks like Next.js and React, hosted on webgo.de infrastructure, and employs Matomo for analytics. While the site demonstrates good content quality and user experience, it lacks visible privacy and cookie policies, explicit contact information, and security headers, which are important for compliance and trust. The security posture is moderate with HTTPS usage implied but could be improved by adding security headers and incident response information. Overall, the domain appears legitimate with consistent hosting and no suspicious WHOIS data, but the absence of key compliance documents and contact details suggests room for improvement in privacy and security transparency.

D

Dethleffs

dethleffs.com

73

Dethleffs is a well-established company specializing in caravanning products including motorhomes, campervans, and urban campers, targeting families and outdoor enthusiasts. The website reflects a mature digital presence with a professional design, consistent branding, and comprehensive cookie consent mechanisms, indicating a strong commitment to privacy and user experience. Technically, the site leverages modern tools such as Pimcore CMS, Google Tag Manager, Matomo Analytics, and Cookiebot for consent management, demonstrating a good level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit incident response policies. Overall, the site is trustworthy and business credible, though the absence of WHOIS data slightly reduces transparency. Strategic recommendations include enhancing security headers, publishing a security.txt file, and improving accessibility compliance.

E

Erwin Hymer Group

erwinhymergroup.com

71

Erwin Hymer Group is a large, established company specializing in leisure and mobility experiences, primarily through manufacturing and distributing leisure vehicles and related services. The website reflects a professional digital presence with a clear focus on its 24 brands and services such as rental, finance, and service. The company targets consumers interested in camping and mobility solutions, positioning itself strongly in the transportation and leisure sector in Germany. Technically, the website uses modern tools including Pimcore CMS, Google Analytics, Google Tag Manager, and Cookiebot for compliance, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and published security policies are lacking. Privacy compliance is well addressed with a comprehensive privacy policy and GDPR-aligned cookie consent. However, the absence of WHOIS data and explicit contact information slightly reduces overall trust. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving accessibility and contact transparency to further strengthen security and compliance. Overall, the website is professional, secure, and compliant with privacy regulations, suitable for its business domain.

B

BVA BikeMedia

radsport-rennrad.de

40

Radsport-Rennrad.de is a professional German-language cycling magazine website operated by BVA BikeMedia. It offers comprehensive content focused on road cycling, training, tactics, product tests, and event coverage. The site targets active cycling enthusiasts and competitive cyclists, positioning itself as a reputable media brand in the cycling niche. The business model revolves around magazine sales, subscriptions, and digital content delivery, supported by a well-structured online presence and partner ecosystem. Technically, the website is built on WordPress with modern SEO and cookie consent plugins, hosted on INWX infrastructure. It employs standard web technologies including jQuery and slick sliders for enhanced user experience. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, the site is trustworthy, professionally maintained, and provides valuable content to its audience.

B

BVA BikeMedia

radfahren.de

50

radfahren.de is a well-established German online media platform specializing in cycling, E-Bikes, trekking, and related lifestyle content. It serves a dedicated audience of cycling enthusiasts by providing news, product tests, travel guides, and magazine publications. The website is part of BVA BikeMedia, a recognized media company in the cycling sector, with a strong market position supported by professional content and a consistent brand presence. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and SEO optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. The site is fully accessible without WAF or blocking mechanisms, indicating stable hosting and infrastructure. Overall, radfahren.de demonstrates a mature digital presence with strong business credibility and compliance with privacy regulations.

A

aufsiemitgebrüll

aufsiemitgebruell.de

63

aufsiemitgebrüll is a small communication and design studio based in Berlin, Germany, focusing on societal awareness and creative services. The website is built on the Squarespace platform, leveraging modern web technologies and integrated cookie consent management via Cookiebot to comply with GDPR requirements. The business presents clear contact information and a professional online presence, targeting a German-speaking audience. Technically, the site is well-structured with good mobile optimization and performance, hosted on Cloudpit infrastructure. Security posture is strong with HTTPS and HSTS enabled, though explicit privacy and terms of service policies are missing, representing compliance gaps. Overall, the site is trustworthy and professionally maintained, with room for improvement in privacy disclosures and incident response readiness.

P

Philipp Veller

vellip.berlin

57

Philipp Veller operates a professional web development portfolio website based in Berlin, targeting clients seeking frontend and backend web development services. The site showcases a variety of projects including web apps for NGOs, government platforms, and AI tools, positioning Philipp as a skilled freelance developer in the technology sector. The technical infrastructure leverages modern frameworks such as React and Gatsby, with content managed via Sanity.io, ensuring a performant and mobile-optimized user experience. Security posture is adequate with HTTPS enabled and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partial, lacking cookie consent mechanisms and explicit GDPR indicators. Overall, the website is trustworthy, professional, and well-structured, suitable for attracting clients in the German market.

B

Berliner Süden

berlinersueden.de

62

Berliner Süden is a small, Germany-based web development company specializing in accessible, user-centered, and design-focused websites. Their portfolio includes projects for cultural institutions and architectural firms, indicating a niche market focus. The website is built on WordPress and hosted with Gandi, reflecting a modern and reliable technical infrastructure. The site is well-structured, mobile-optimized, and provides clear contact information, enhancing user experience and trust. From a security perspective, the website uses HTTPS with an excellent SSL configuration, but lacks security headers and formal security policies. No incident response or vulnerability disclosure information is provided, which could be improved to enhance security posture. Privacy compliance is adequate with a GDPR-compliant privacy policy, though no cookie consent mechanism is present. Overall, the website presents a professional and trustworthy image with good technical implementation and business credibility. The absence of tracking and advertising scripts suggests a privacy-conscious approach. Strategic improvements in security headers, cookie consent, and security policies would further strengthen the site's security and compliance standing.

A

april agentur

aprilagentur.de

62

April Agentur is a small creative agency based in Germany specializing in user-friendly and contemporary web development, brand design, photography, motion design, print, and social media marketing. The company targets businesses and organizations seeking tailored communication strategies and high-recognition branding solutions. Their portfolio includes diverse clients, indicating a solid market position within the media and creative sector. Technically, the website is built on WordPress, utilizing modern JavaScript libraries and privacy-focused analytics (Matomo). The site is mobile-optimized and demonstrates good SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though lacking explicit privacy policies and security headers. Overall, the website is professional and trustworthy, but could improve compliance and security transparency.