Germany security reports

K

Kulturforum Witten

kulturforum-witten.de

42

Kulturforum Witten is a public cultural institution operating multiple cultural facilities and event venues in the city of Witten, Germany. It serves as a central hub for cultural activities including museums, libraries, music schools, and archives, supported by approximately 100 employees. The website reflects a well-established organization with a strong community and cultural focus, offering diverse programs and events. Technically, the site uses modern web technologies including Bootstrap, UIkit, and Matomo analytics, with good mobile optimization and accessibility features. Security practices include HTTPS, CSRF protection, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie consent. The domain WHOIS data is minimal but consistent with a legitimate public institution. Overall, the website is professional, trustworthy, and well-maintained.

S

Stadtmarketing Witten GmbH

stadtmarketing-witten.de

61

Stadtmarketing Witten GmbH operates a comprehensive tourism and local commerce website focused on the city of Witten, Germany. The company provides key services including tourist information, ticket sales for events, guided tours, and retail of souvenirs and vouchers. The website positions itself as the largest ticket provider in Witten for entertainment events such as concerts, festivals, and theater. The target audience includes tourists, local residents, and event attendees. The business model centers on service provision and retail within the hospitality and tourism sectors.

K

Kubus Software GmbH

vhs-wwh.de

42

The website www.vhs-wwh.de represents a regional adult education provider serving the Witten, Wetter, and Herdecke areas in Germany. It offers a broad portfolio of courses including languages, health, arts, and professional development, targeting lifelong learners and adults seeking continuing education. The business operates under the Kubus Software GmbH platform, leveraging TYPO3 CMS for content management and Matomo for privacy-conscious analytics. The site is well-structured with clear navigation and professional design, supporting a positive user experience. Contact information and legal pages such as privacy policy and terms of service are present, enhancing business credibility. Technically, the website uses a modern CMS and includes responsive design elements, with moderate performance and good SEO practices. Hosting is provided by kasserver.com, and the site is secured with HTTPS. However, there is no visible cookie consent mechanism, and security headers are not evident, which are areas for improvement. The presence of a demo login with credentials disclosed in a modal could pose a minor security risk if not properly managed. From a security perspective, the site demonstrates good baseline practices such as HTTPS and no exposed sensitive data. The use of Matomo analytics aligns with privacy best practices. Nonetheless, the absence of incident response contacts and security policies limits transparency in security readiness. No vulnerabilities or suspicious patterns were detected in the WHOIS data or site content, supporting a trustworthy profile. Overall, the website scores well in content quality, technical implementation, and business credibility, with moderate privacy compliance and security posture scores. Strategic improvements in cookie consent, security headers, and incident response transparency would enhance the security and compliance posture further.

A

Arsenal – Institut für Film und Videokunst e.V.

arsenal-berlin.de

55

Arsenal – Institut für Film und Videokunst e.V. is a well-established non-profit cultural institution based in Germany, specializing in film and video art. The organization operates a cinema, film archive, distribution services, and manages independent Berlinale sections such as Forum and Forum Expanded. Their target audience includes film enthusiasts, cultural institutions, and the general public interested in film culture. The website reflects a professional and consistent brand image with comprehensive content about their services and events. Technically, the website is built on TYPO3 CMS with jQuery and custom JavaScript. It demonstrates good mobile optimization, accessibility, and SEO practices. The site is served over HTTPS, ensuring secure communication, though it lacks some advanced security headers. No advertising or tracking technologies were detected, indicating a privacy-conscious approach. From a security perspective, the site maintains a good posture with HTTPS and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies, incident response information, and cookie consent mechanisms, which are areas for improvement to enhance compliance and user trust. Overall, the website is trustworthy, professionally maintained, and aligned with the institution's cultural mission. Strategic enhancements in privacy compliance and security policies would further strengthen its position and user confidence.

C

Copa Ca Backum/Copa Oase

copacabackum.de

65

Copa Ca Backum is a regional leisure and wellness center located in Herten, Germany, offering a broad range of services including swimming pools, sauna facilities, wellness massages, gastronomy, and family-oriented events. The website presents a professional and consistent brand image with clear navigation and comprehensive content tailored to families, sports enthusiasts, and wellness seekers. The business model focuses on hospitality and recreational services with a medium-sized market presence in the local region. Technically, the website is built on TYPO3 CMS and integrates modern tools such as Google Tag Manager, Google Analytics, and an accessibility assistant, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit incident response documentation. Overall, the site is trustworthy, GDPR compliant, and provides a good user experience with no adult or explicit content.

CreativWerkstatt Herten is a local educational and creative workshop provider based in Herten, Germany. The organization offers a variety of courses spanning creative arts, environmental education, dance, theater, science, and media, targeting a broad audience including schools and the general public. The website is professionally designed using WordPress and modern web technologies, providing a good user experience with clear navigation and mobile optimization. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and incident response information are absent. Overall, the website and domain registration details are consistent and legitimate, reflecting a trustworthy and credible educational service provider.

V

VHS Herten

vhs-herten.de

51

VHS Herten is a regional adult education provider in Germany offering a wide range of courses in politics, culture, health, languages, and integration. The website is professionally designed using WordPress with modern plugins and frameworks such as Bootstrap and Smart Slider 3, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though security headers and explicit security policies are not evident. The domain registration data aligns well with the website's claims, indicating legitimacy. Overall, the site is trustworthy and serves its educational mission effectively.

F

Förderverein für regionale Entwicklung e.V.

azubi-projekte.de

62

The Azubi-Projekte website represents a well-established non-profit initiative by the Förderverein für regionale Entwicklung e.V., focused on providing free website creation services to various community and educational organizations while supporting practical training for apprentices. The organization has a clear regional focus in Germany and targets a broad audience including municipalities, schools, social institutions, and small businesses. The website content is professionally presented, with clear navigation and relevant information about participation and program benefits. Technically, the site employs a proprietary CMS platform with common JavaScript libraries such as jQuery, Material Design Lite, and Slick Carousel, ensuring a modern and responsive user experience. The site includes a comprehensive cookie consent mechanism aligned with GDPR requirements, and contact information is prominently displayed. However, no explicit security policies or incident response contacts are published. From a security perspective, the site uses session management and captcha mechanisms to mitigate abuse, but lacks visible HTTP security headers and published security frameworks. No critical vulnerabilities or suspicious patterns were detected. The domain registration data is consistent with the business claims, supporting legitimacy. Overall, the website scores well in content quality, technical implementation, privacy compliance, and business credibility, with recommendations to enhance security headers and publish formal security policies to further strengthen trust and compliance.

G

Gemeindebibliothek Holzwickede

bibliothek-holzwickede.de

57

The website bibliothek-holzwickede.de serves as the official online portal for the Gemeindebibliothek Holzwickede, a public library in Germany. It provides comprehensive services including media search, event information, and account management for library users. The site targets the local community and general public, positioning itself as a trusted municipal resource. The business model is government-funded public service with a focus on educational and cultural offerings. Technically, the site is built on the DotNetNuke CMS platform integrated with the OCLC OPEN library management system. It employs modern JavaScript libraries such as jQuery and jQuery UI, and includes accessibility and mobile optimization features. The site performance is moderate, with good SEO and structured navigation. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, explicit security headers are not detected, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the content. The domain WHOIS data aligns with the website's purpose and shows no suspicious patterns, indicating legitimacy. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its community effectively. Strategic improvements in security headers and incident response transparency could enhance its security posture further.

T

Treffpunkt Villa (Einrichtung der Kinder- und Jugendförderung des Kreises Unna)

treffpunkt-villa.de

59

Treffpunkt Villa is a public youth and family service institution operated under the Kreis Unna government in Germany. It offers a broad range of community-oriented programs including youth counseling, leisure activities, educational support, and cultural integration initiatives targeting children, adolescents, and families in Holzwickede. The website is built on a modern Angular framework, hosted on official Kreis Unna infrastructure, and demonstrates good digital maturity with responsive design and privacy compliance. Security posture is solid with HTTPS and secure form handling, though additional security headers and explicit policies could enhance protection. Overall, the site reflects a trustworthy and professional public service entity with clear contact information and comprehensive content.

The Seniorenbeirat Holzwickede website serves as an informational platform for the senior advisory council of the Holzwickede community in Germany. It provides basic information and community engagement resources targeted at senior citizens and local residents. The site is built on WordPress using the Nirvana theme and hosted on netcup servers, reflecting a modest technical infrastructure suitable for a small local government entity. The website employs HTTPS and a cookie consent mechanism, demonstrating basic privacy compliance. However, it lacks comprehensive security policies, incident response contacts, and terms of service, which limits its security maturity. The content is minimal but relevant, with no signs of tracking or advertising beyond cookie management. Overall, the site is functional and moderately trustworthy but could benefit from enhanced security and privacy features.

W

wer denkt was GmbH

xn--mngelmelder-l8a.de

63

Mängelmelder.de is a German nationwide platform enabling citizens to report public infrastructure issues directly to their local municipalities. The platform facilitates transparent tracking of reported issues via web and mobile apps, promoting civic engagement and municipal responsiveness. The service operates on a voluntary basis by municipalities and is supported by the company wer denkt was GmbH. The website is professionally designed, mobile-optimized, and integrates interactive mapping and multimedia content to enhance user experience. Technically, the site leverages modern web technologies including Vue.js, OpenLayers for mapping, jQuery, and FontAwesome icons. Hosting is provided via Amazon AWS infrastructure, ensuring reliable performance and scalability. Analytics are handled through Matomo with a cookie consent mechanism respecting user privacy. The site demonstrates good SEO and accessibility practices, though some accessibility features could be improved. From a security perspective, the site enforces HTTPS and employs cookie consent for tracking scripts. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The WHOIS data is consistent and transparent, with no privacy protection or suspicious patterns, indicating a legitimate and trustworthy domain. Overall, Mängelmelder.de presents a solid digital presence with a clear civic mission, good technical implementation, and a moderate to strong security posture. Enhancements in security policy transparency and accessibility could further strengthen trust and compliance.

G

Gemeinde Holzwickede

holzwickede-kultur.de

61

The website www.holzwickede-kultur.de serves as the official cultural and volunteerism portal for the municipality of Holzwickede, Germany. It provides comprehensive information about local cultural events, volunteer opportunities, and community engagement initiatives. The site targets local residents and community members interested in cultural activities and civic participation. The business model is that of a government entity promoting local culture and volunteerism, with no commercial intent. The site is well-positioned as a trusted local resource with clear contact information and official branding. Technically, the website employs a municipal CMS platform with common web technologies such as jQuery, slick carousel, and Material Design Lite. The site is mobile-optimized, accessible, and includes SEO best practices. Cookie consent is implemented with detailed user controls, reflecting good privacy compliance. However, no advanced analytics or tracking services are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS and cookie consent mechanisms but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or suspicious patterns are detected. The WHOIS data aligns with a legitimate municipal domain, though detailed registrant info is limited. Overall, the security posture is adequate but could be improved with additional headers and documented policies. The overall risk is low given the nature of the site and its public sector context. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and maintaining privacy compliance. The site demonstrates good professionalism, trustworthiness, and community focus.

W

Wirtschafts- und Verlagsgesellschaft Gas und Wasser mbH

wvgw.de

52

Wirtschafts- und Verlagsgesellschaft Gas und Wasser mbH (wvgw) is a specialized German publishing company serving the energy and water sectors. The company provides expert publications, including Fachinformationen, Fachzeitschriften, and industry standards, targeting professionals, market partners, and consultants in these industries. Their market position is that of an established niche publisher with a medium-sized operation focused on delivering specialized content and services. The website reflects a professional business model centered on publishing, media, and related services such as event and project management. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site is mobile-optimized and includes SEO best practices, although performance is moderate. Security posture is solid with HTTPS enforced and a cookie consent mechanism implemented via Borlabs Cookie, but lacks explicit security headers and a published security policy. No vulnerabilities or exposed sensitive data were detected. Overall, the site is trustworthy and compliant with GDPR, featuring comprehensive privacy and cookie policies. The domain registration data is minimal but consistent with a legitimate business. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to improve transparency and security maturity.

I

INTEWA GmbH

intewa.com

52

INTEWA GmbH is an established German company specializing in water treatment, rainwater management, and water reuse solutions for both commercial and residential sectors. With over 30 years of experience and more than 115,000 projects worldwide, the company offers innovative products such as the AQUALOOP water reuse systems, DRAINMAX tunnels, and system separation devices compliant with DIN standards. The website reflects a mature digital presence built on TYPO3 CMS and Bootstrap, providing comprehensive product information and references. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the business content and certifications support its authenticity. Security posture is moderate with HTTPS usage but lacks explicit security headers and privacy compliance documentation. Overall, the site is professional, well-structured, and safe for general audiences.

D

DVGW

mein-regelwerk.de

53

DVGW operates a professional website providing the DVGW-Regelwerk, a foundational set of technical rules and DIN standards for the gas and water industries in Germany. The site targets professionals requiring authoritative regulatory content, offering online subscriptions and a shop for purchasing modules. The business is positioned as a trusted authority in the energy sector with consistent branding and quality content. Technically, the site is built on WordPress with Elementor and Yoast SEO, featuring modern plugins and a cookie consent mechanism. The SSL configuration is excellent, but some security headers are missing. Privacy compliance is partial due to the absence of a visible privacy policy or terms of service. Contact information is clearly presented, enhancing business credibility. Overall, the site is secure, professional, and well-structured, though improvements in privacy documentation and security headers are recommended.

The website www.technisches-sicherheitsmanagement.de represents the Technisches Sicherheitsmanagement (TSM) program operated by DVGW e.V., a prominent organization in the German energy sector. The site offers comprehensive information and services related to voluntary self-assessment and verification of technical safety management for gas and water supply companies. It positions itself as a trusted partner providing independent expert reviews, guidelines, and service coordination through its subsidiary DVGW Service & Consult GmbH. The business model focuses on compliance, efficiency, and transparency in technical process management, targeting medium to large energy sector enterprises in Germany. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries and frameworks such as jQuery and Bootstrap. It integrates Matomo analytics for user tracking and employs a cookie consent mechanism compliant with GDPR. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses cookie consent banners to manage privacy. However, explicit security headers are not detected, and no public incident response or vulnerability disclosure policies are published. No vulnerabilities or exposed sensitive data were found in the content. The domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness. Overall, the website presents a professional, trustworthy, and compliant digital presence for a specialized service in the energy sector. Strategic improvements in security headers, incident response transparency, and accessibility would further strengthen its posture.

The website verifHy.de is a professional platform operated by DVGW Service & Consult GmbH, focused on providing a smart database solution for verifying the hydrogen readiness of gas network components. It serves as a critical technical tool supporting the transition of gas networks to climate-friendly hydrogen, targeting gas network operators, manufacturers, and international partners. The site is well-branded, consistent, and provides clear navigation and relevant content aligned with its energy sector focus. Technically, the website is built on TYPO3 CMS with modern web technologies including jQuery and Bootstrap, hosted via INWX. It demonstrates good mobile optimization and SEO practices, though performance is moderate. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks explicit security headers and incident response information. Privacy compliance is adequate with linked comprehensive privacy and cookie policies on the parent DVGW site, though no active cookie consent mechanism is present. Contact information is clearly provided via phone and a login portal for database access. No social media or analytics tracking scripts were detected, indicating a privacy-conscious approach. Overall, the website presents a trustworthy and professional digital presence with minor areas for improvement in security headers, cookie consent, and incident response transparency. The domain registration data aligns well with the business, supporting legitimacy and trustworthiness.

V

Vimec

vimec.de

43

Vimec is a medium-sized company specializing in home lifts and platform lifts, with a strong international presence evidenced by 150,000 lift installations worldwide. The website targets the German market but is part of a broader international ecosystem with localized partner sites in multiple countries. The business model focuses on manufacturing and distributing accessibility and mobility solutions for residential environments. Technically, the website is built on WordPress using Elementor and Astra theme, with modern SEO and tracking tools implemented. Security measures include HTTPS, Google reCAPTCHA, and a cookie consent mechanism via Iubenda, but lack explicit security headers and published security policies. Overall, the site demonstrates good professionalism and moderate trustworthiness but would benefit from enhanced privacy and security disclosures.

S

Stadt Witten

witten.de

53

Stadt Witten operates as the official municipal government website for the city of Witten, Germany. It provides a broad range of public services, including administrative information, online citizen services, event calendars, and career opportunities. The site targets residents, local businesses, and visitors, positioning itself as a central hub for local governance and community engagement. The business model is that of a government entity focused on service delivery and public communication. Technically, the website employs a modern but straightforward technology stack with a focus on accessibility and user experience, including compliance with GDPR through cookie consent mechanisms and accessible design features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site is trustworthy, professional, and well-maintained, reflecting the standards expected of a municipal government portal.

S

Stadt Recklinghausen

recklinghausen.de

71

The website www.recklinghausen.de serves as the official online presence of the city of Recklinghausen, Germany. It provides comprehensive information and services related to city administration, politics, living, education, economy, culture, tourism, and public events. The site targets local residents, visitors, and businesses, positioning itself as a key municipal government resource. The business model is public service oriented, focusing on transparency and citizen engagement. Technically, the website employs a mix of JavaScript libraries including jQuery, EQCSS, Lightbox2, and Slick Slider, alongside Cookiebot for GDPR-compliant cookie management. Hosting is managed via INWX, a reputable German hosting provider. The site demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO optimization is basic but present. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism with blocking capabilities. However, additional security headers could be implemented to enhance protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent banner. The site uses multiple third-party advertising and tracking services, all managed under user consent. Overall, the website is professional, trustworthy, and well-aligned with its governmental purpose. Recommendations include enhancing security headers, improving accessibility, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

The website www.oberhausen.de serves as the official digital portal for the city of Oberhausen, Germany, providing residents and visitors with comprehensive information on city life, public services, tourism, and cultural events. The site is well-structured with clear navigation and a focus on accessibility and user experience. It employs modern web technologies including Matomo for analytics and Cookiebot for GDPR-compliant cookie consent management, reflecting a mature digital infrastructure. Security posture is adequate with HTTPS enforced and privacy-conscious analytics, though explicit security policies and contact information for incident response are not evident in the provided content. Overall, the site demonstrates a professional and trustworthy presence consistent with a municipal government entity.

S

Stadt Mülheim an der Ruhr

muelheim-ruhr.de

68

The website cms.muelheim-ruhr.de serves as the official digital portal for the city of Mülheim an der Ruhr, Germany. It provides comprehensive information and services related to city administration, cultural events, social services, urban development, and citizen engagement. The site targets residents, visitors, and local businesses, positioning itself as a trusted government resource with a broad range of public services and community information. The content is well-maintained, professionally presented, and highly relevant to its audience. Technically, the site is built on Drupal 11, leveraging modern web technologies such as Bootstrap 5, jQuery, and Matomo for privacy-conscious analytics. The hosting is managed via Versatel nameservers, indicating a stable and professional infrastructure. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience across devices. From a security perspective, the website enforces HTTPS and employs a cookie consent mechanism via Klaro, reflecting GDPR compliance. While explicit security headers are not visible in the HTML, the platform's inherent security features and absence of exposed sensitive data suggest a solid security posture. However, the site lacks published incident response contacts and vulnerability disclosure policies, which could be improved to enhance transparency and readiness. Overall, cms.muelheim-ruhr.de is a high-quality, trustworthy municipal website with strong content, technical maturity, and privacy compliance. Strategic recommendations include enhancing security header implementation, publishing security policies, and maintaining regular updates to Drupal and third-party components to sustain security and compliance.

G

Gemeinde Holzwickede

holzwickede.de

61

Gemeinde Holzwickede operates as the official municipal government website providing comprehensive information and services to residents and stakeholders of Holzwickede, Germany. The site offers access to municipal services such as online appointment bookings, service directories, contact information, and community news. It serves as a central hub for local government communication and citizen engagement. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and a specialized Verwaltungsportal CMS platform. It features responsive design, accessibility options like contrast modes and font resizing, and a cookie consent mechanism compliant with GDPR. The site integrates social media channels and provides structured navigation for ease of use. From a security perspective, the website enforces HTTPS, uses captcha mechanisms to mitigate abuse, and implements detailed cookie consent with opt-in/out categories. However, it lacks publicly available security policies, incident response contacts, and security.txt files. No critical vulnerabilities or exposed sensitive data were detected in the content. Overall, the website demonstrates a solid digital presence for a small government entity with good content quality, user experience, and privacy compliance. Strategic improvements in security transparency and incident response readiness would enhance trust and resilience.

S

Stadt Herten

herten.de

64

Stadt Herten operates an official municipal website providing comprehensive information and services to its citizens and visitors. The site covers a wide range of topics including citizen services, city administration, cultural events, and urban development. It targets residents and stakeholders of the city, offering online tools such as appointment scheduling and event calendars. The website is built on TYPO3 CMS and employs modern web technologies ensuring good accessibility and user experience. Security posture is adequate with HTTPS enforced and obfuscated email addresses, though it lacks explicit security policies or incident response contacts. Overall, the site is trustworthy and professionally maintained, reflecting the city's commitment to digital public service.

S

Stadt Herne

herne.de

56

Stadt Herne operates an official municipal government website providing comprehensive information and services to its citizens and visitors. The site covers a wide range of topics including city life, culture, education, integration, environment, and digitalization initiatives. It maintains a strong presence with official branding, social media integration, and a citizen service portal. Technically, the website employs a mature technology stack including Bootstrap, jQuery, and specialized tools like eTracker for analytics and ReadSpeaker for accessibility. The site is well-structured, mobile-optimized, and includes cookie consent mechanisms aligned with GDPR requirements. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding security headers and updating legacy libraries. Overall, the domain and content appear legitimate and trustworthy, consistent with a large government entity. Strategic recommendations include enhancing security headers, publishing a security policy, and modernizing JavaScript libraries to maintain security and compliance.

S

Stadt Essen

essen.de

60

The website www.essen.de is the official digital presence of the city of Essen, Germany, serving as a comprehensive portal for municipal services, news, and citizen engagement. It offers a wide range of information including job opportunities, city maps, cultural events, and social services, targeting residents, visitors, and businesses within the city. The site is well-branded with consistent city identity elements and maintains a high level of professionalism and content quality. Technically, the site employs modern web technologies such as jQuery, Bootstrap, ArcGIS for mapping, and integrates accessibility tools like ReadSpeaker. The cookie consent mechanism is robust and GDPR compliant, reflecting a mature approach to privacy and user data protection. The site is mobile optimized and accessible, with good SEO practices evident in meta tags and structured navigation. From a security perspective, the site enforces HTTPS and uses standard security headers to protect users. While no explicit security policy or incident response contacts are published, the site shows no signs of vulnerabilities or exposed sensitive data. The WHOIS data is limited due to DENIC's privacy restrictions but aligns with expectations for an official government domain, supporting the site's legitimacy. Overall, www.essen.de demonstrates a strong digital maturity for a government portal, balancing user experience, privacy compliance, and security. Strategic improvements could include publishing a dedicated security policy and enhancing security headers for further protection.

S

Stadt Duisburg

duisburg.de

59

The website duisburg.de serves as the official digital portal for the city of Duisburg, Germany, providing residents and visitors with comprehensive information about city services, events, tourism, and administrative functions. It positions itself as a key government resource with a broad range of public service offerings and community engagement initiatives. The site demonstrates consistent branding and a professional presentation aligned with municipal government standards. Technically, the site is built on the Information Enterprise Server platform by Sitepark GmbH, utilizing modern web technologies including SVG icons, accessibility plugins, and JavaScript frameworks. The site is mobile optimized and includes accessibility features enhancing usability for diverse users. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though explicit security headers and privacy policies are not clearly present in the provided content. Analytics are conducted via Matomo, indicating moderate user tracking with some privacy compliance gaps. Overall, the site is trustworthy and well-maintained, though improvements in privacy transparency and security headers would enhance compliance and user trust.

S

Stadt Dorsten

dorsten.de

56

The website www.dorsten.de serves as the official municipal portal for the city of Dorsten in Germany, providing comprehensive information and services related to local government, culture, education, social welfare, and economic development. It targets residents, visitors, and businesses within the city, offering a broad range of public services and community resources. The site is built on a modern open-source technology stack, primarily using the Neos CMS and Flow PHP framework, hosted on reputable infrastructure provided by Hetzner. The website demonstrates good digital maturity with responsive design, clear navigation, and integration of privacy-conscious analytics via Matomo. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in security headers and published security policies. Privacy compliance is moderate, with a cookie consent mechanism present but lacking an explicit privacy policy and terms of service. Overall, the site is professional, trustworthy, and safe for general audiences, reflecting the standards expected of a government entity.

S

Stadt Dinslaken

dinslaken.de

69

The Stadt Dinslaken website serves as the official digital presence of the city of Dinslaken, Germany, providing a broad range of municipal services, cultural information, and community engagement resources. It targets residents, visitors, and businesses, offering online service portals, event information, and contact points for city administration. The site is well-branded and professionally maintained, reflecting the city's identity and public service mission. Technically, the website is built on the Drupal CMS platform, utilizing modern JavaScript libraries and cookie consent management tools to ensure GDPR compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Analytics are implemented via eTracker, with user tracking balanced by privacy considerations. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms but lacks explicit HTTP security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the official city infrastructure, confirming legitimacy. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic improvements could focus on enhancing security headers and publishing formal security policies to further strengthen trust and resilience.

S

Stadt Castrop-Rauxel

castrop-rauxel.de

61

The website www.castrop-rauxel.de is the official municipal portal for the city of Castrop-Rauxel in Germany. It provides comprehensive information and services for residents, businesses, and visitors, including citizen services, event news, city planning, and digital applications. The site is built on Drupal 10 with modern frontend technologies and includes accessibility and mobile optimization features. The presence of a cookie consent mechanism via Klaro and the use of Matomo analytics with DoNotTrack respected indicate a privacy-conscious approach. However, explicit privacy policy and terms of service pages were not detected in the provided content. Security posture is moderate with HTTPS implied but lacking visible security headers or published security policies. The domain WHOIS data is consistent with a legitimate government entity, and no suspicious patterns were found. Overall, the site is professional, trustworthy, and serves as a key digital interface for the city government.

S

Stadt Bottrop

bottrop.de

54

Stadt Bottrop operates as the official municipal government website for the city of Bottrop, Germany. It provides comprehensive citizen services including online appointment booking, event calendars, political information, and social services. The website targets residents and citizens, offering a broad range of public sector services and information. The site is well-branded, consistent, and professionally maintained, reflecting its role as a trusted government portal. Technically, the website uses a Sitepark CMS platform with modern JavaScript libraries such as Slick Slider and TinyMCE. It integrates Matomo analytics for privacy-conscious user tracking with explicit consent mechanisms. The site is mobile-optimized, accessible, and SEO-friendly, ensuring good user experience across devices. From a security perspective, the site enforces HTTPS, uses cookie consent banners, and anonymizes analytics data. However, it lacks explicit security policies, incident response contacts, and security headers, which are recommended for enhanced security posture. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is a secure, compliant, and professional municipal portal with strong privacy practices and good user experience. Strategic improvements in security policy transparency and incident response readiness would further strengthen its trustworthiness and resilience.

C

CP/COMPARTNER

cp-compartner.de

54

CP/COMPARTNER is a well-established German communication agency specializing in sustainable and meaningful communication solutions for clients in politics, society, and the economy. With over 30 years of experience, the agency emphasizes strategic and creative communication that builds trust and simplifies complex topics. Their service portfolio is broad, including campaign management, design, content creation, digital tools, and public relations. The website is professionally designed, mobile-optimized, and uses TYPO3 CMS with integrated consent management and self-hosted analytics, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and formal security policies. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information, supporting strong business credibility.

E

Edeka Verband kaufmaennischer Genossenschaften e.V

verbund.edeka

66

The EDEKA-Verbund website represents a major German retail cooperative, providing a digital platform for business information, career opportunities, and corporate responsibility initiatives. The site is professionally designed with clear navigation and multimedia content, targeting entrepreneurs, employees, and students interested in the EDEKA cooperative network. The domain registration aligns well with the business entity, reinforcing the site's legitimacy. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with video streaming capabilities and integrated search functionality powered by third-party services like TagCommander and Sitesearch360. Hosting is managed via Akamai's CDN infrastructure, ensuring reliable content delivery. Mobile optimization and SEO practices are well implemented, though accessibility features are basic. From a security perspective, HTTPS is enforced, and domain status flags indicate transfer protection and auto-renewal. However, DNSSEC is not enabled, and no explicit security headers or incident response policies are published. Privacy compliance is strong, with comprehensive privacy and cookie policies and a consent mechanism in place. No vulnerability disclosure or security.txt files were found. Overall, the website demonstrates a solid security posture and compliance with GDPR, though improvements could be made in publishing security policies and enhancing DNS security. The site is trustworthy, professional, and safe for general audiences.

G

grandfilm produktion gmbh

grandfilm-produktion.de

42

Grandfilm Produktion GmbH is a small German media company specializing in international auteur film production and distribution. Founded in 2014, it operates primarily in Frankfurt and Nürnberg, focusing on festival-premiered films and co-productions with notable filmmakers. The website is built on WordPress using Elementor and jQuery, reflecting a modern but basic technical infrastructure. While the site is accessible and professionally designed, it lacks privacy and cookie policies, which are important for GDPR compliance. Security posture is moderate with HTTPS enabled but missing security headers. Contact information is clearly provided, enhancing business credibility. Overall, the website serves its niche audience well but could improve compliance and security practices.

DVGW Kongress GmbH is a specialized event organizer focused on the gas and water sectors in Germany. As a wholly owned subsidiary of the reputable DVGW association, it develops and manages innovative conferences, seminars, congresses, trade fairs, and online event formats. The company holds a strong market position within the energy and water industry, targeting professionals and stakeholders with a comprehensive portfolio of events and services including agency and sponsorship offerings. The website reflects a professional and consistent brand image with excellent content quality and clear navigation. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries and privacy-respecting analytics via Matomo. The site is mobile optimized and demonstrates good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website presents a trustworthy and professional digital presence aligned with its business objectives. The domain registration data is consistent with the business claims, enhancing legitimacy. Privacy and cookie policies are comprehensive and GDPR compliant, supporting strong privacy compliance. Strategic recommendations include publishing formal security and incident response policies, enhancing security headers, and maintaining regular audits of third-party scripts to further strengthen security and compliance posture.

I

IWW Analytik und Service

iww-analytik-und-service.de

52

IWW Analytik und Service is a specialized service provider focused on water analytics and related consulting services, primarily serving the water management sector in Germany. The company positions itself as a competent partner in water-related environmental services, targeting professional and organizational clients. The website is professionally designed using WordPress with the Divi theme and includes modern plugins such as Yoast SEO and Borlabs Cookie for SEO and privacy compliance respectively. Hosting is provided by netcup, a German hosting provider, which aligns with the company's geographic focus. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks explicit security headers and detailed privacy or terms of service documentation. Contact information is not directly visible on the homepage, which may impact user trust and compliance. Overall, the site is functional, well-structured, and suitable for its niche audience but would benefit from enhanced privacy and security disclosures.

The DVGW-Forschungsstelle am Engler-Bunte-Institut (DVGW-EBI) is a reputable research institution affiliated with the Karlsruhe Institute of Technology, focusing on innovations in gas and water to support the energy transition. The organization provides research, testing, and certification services primarily in the energy sector, emphasizing safety, environmental protection, and technical standards. The website reflects a mature digital presence with professional design, clear navigation, and bilingual support. Technically, it leverages TYPO3 CMS and integrates privacy-conscious analytics (Matomo) alongside a robust cookie consent mechanism. Security posture is solid with HTTPS and some security best practices, though explicit security policies and incident response contacts are absent. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements.

DVGW e.V. is a well-established German association specializing in the gas and water sectors, focusing on technical standards, safety, hygiene, and environmental protection. The website serves as a portal for vocational education and training, offering events, inhouse training, and certification services to professionals in the energy industry. The organization enjoys a strong market position with approximately 14,000 members and a history dating back to 1859. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and is hosted on INWX infrastructure. It features good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the website is professional, trustworthy, and provides comprehensive educational content for its target audience.

D

DVGW (Deutscher Verein des Gas- und Wasserfaches e.V.)

dvgw-regelwerk.de

58

The DVGW-Regelwerk Plus website serves as an authoritative platform for technical rules and standards in the gas and water sectors in Germany. Operated by the Deutscher Verein des Gas- und Wasserfaches e.V. (DVGW), a well-established organization founded in 1859, the site provides subscription-based access to regulatory documents and supports professionals in the energy industry. The business model centers on membership and paid access to technical standards, positioning DVGW as a key player in ensuring safety and compliance in the gas and water supply industry. Technically, the website is built on TYPO3 CMS with legacy JavaScript libraries such as jQuery 1.10.2 and Handlebars.js. The site is hosted on INWX nameservers and employs HTTPS with a cookie consent mechanism, reflecting a moderate level of digital maturity. Performance and mobile optimization are adequate but could benefit from modernization, particularly updating JavaScript libraries and enhancing accessibility features. From a security perspective, the site enforces HTTPS and uses cookie consent tools, but lacks explicit security headers and visible incident response policies. The login form uses POST method, and no sensitive data is exposed in the HTML. Analytics are handled via Matomo with moderate user tracking, aligned with privacy compliance. Overall, the security posture is good but could be improved by updating libraries, adding security headers, and publishing security policies. The overall risk assessment is low, with no signs of malicious content or suspicious domain registration. Strategic recommendations include modernizing the tech stack, enhancing security headers, publishing incident response and vulnerability disclosure information, and improving mobile and accessibility features to strengthen trust and compliance.

DVGW Service & Consult GmbH is a specialized service provider in the German energy and water sectors, offering consulting, IT services, management, and occupational safety solutions. The company operates as a subsidiary or closely affiliated entity of the DVGW association, which has a long-standing history since 1859. Their market position is that of a trusted expert providing technical and organizational support to energy and water industry stakeholders. The website reflects a professional and consistent brand image with clear service offerings and a focus on industry-specific solutions. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as jQuery and Bootstrap. It is mobile-optimized and provides a good user experience with clear navigation and relevant content. The site uses HTTPS and cookie consent mechanisms, indicating compliance with GDPR and privacy best practices. However, no explicit security policies or incident response contacts are published, which could be improved. From a security perspective, the site demonstrates a solid posture with no visible vulnerabilities or exposed sensitive data. The use of HTTPS and cookie consent scripts are positive indicators. The absence of security headers and formal security documentation suggests room for enhancement. No WAF or blocking mechanisms were detected, allowing full content accessibility. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy regulations. Strategic recommendations include publishing formal security and incident response policies, enhancing security headers, and providing direct contact information for security incidents to strengthen trust and compliance.

S

SEVEN SPORT s.r.o.

insportline.de

58

SEVEN SPORT s.r.o. operates the inSPORTline.de website, positioning itself as the largest manufacturer and seller of fitness equipment in Germany. The company offers a broad range of fitness, sports, moto, outdoor, health, beauty, and children's products through an e-commerce platform targeting German-speaking customers. The website features extensive product listings, promotional banners, and news articles relevant to fitness and sports enthusiasts. Technically, the site employs modern web technologies including jQuery, Bootstrap, Swiper.js, and Google Tag Manager, with performance optimizations such as lazy loading and deferred script loading. Hosting is provided by forpsi.cz, consistent with the company's Czech origins, while the site targets the German market. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy or terms of service pages detected. Overall, the site is professional, trustworthy, and well-structured, serving a large retail audience in the fitness sector.

G

GRANDFILM

grandfilm.de

48

Grandfilm is a German-based film distribution and production company specializing in independent and art-house cinema. Their website showcases a broad portfolio of films currently in cinemas, upcoming releases, and educational film content, targeting film enthusiasts, cinema operators, and educators. The business operates primarily in the media sector with a small company size and a niche market position in Germany. Technically, the website is built on WordPress with modern analytics and marketing integrations such as Google Analytics, Google Tag Manager, and Facebook Pixel, all implemented with GDPR-compliant cookie consent mechanisms. The site is mobile-optimized and well-structured, providing a good user experience and clear navigation. Security-wise, the site enforces HTTPS and uses cookie consent but lacks explicit security policy pages and some security headers, indicating room for improvement in security posture. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

F

Fünferfilm

fuenferfilm.de

37

Fünferfilm is a small independent film production company based in Hamburg, Germany, founded in 2016. The company focuses on producing artistic and narrative films by dedicated filmmakers, with a strong presence in film festivals and collaborations with various partners in the film industry. Their website showcases a portfolio of films, upcoming projects, and festival participations, targeting film enthusiasts and industry professionals. Technically, the website uses a straightforward tech stack including HTML5, CSS3, jQuery, and Swiper.js for interactive elements. It is hosted on a German hosting provider (kasserver.com) and uses HTTPS, ensuring secure communication. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. From a security perspective, the website enforces HTTPS but lacks important security headers and a cookie consent mechanism, which are important for GDPR compliance and overall security posture. No incident response or security policy information is provided, which could be improved to enhance trust and readiness. Overall, the website is professional and trustworthy with good content quality and business credibility. However, improvements in privacy compliance and security best practices are recommended to strengthen the security posture and regulatory adherence.

P

Port au Prince Film & Kultur Produktion GmbH

port-prince.de

40

Port au Prince is a specialized film production and distribution company based in Germany, operating through multiple GmbH entities focused on production, distribution, and media agency services. The company targets film professionals and enthusiasts, positioning itself as an award-winning niche player in the German film industry. The website reflects a professional and consistent brand image with clear business information and multiple contact channels. Technically, the site is built on WordPress with WooCommerce integration, leveraging modern plugins and tracking tools, and hosted on RZone servers. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks advanced security headers and explicit incident response information. Privacy compliance is partially addressed with a privacy policy but lacks a cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, with room for improvement in security and privacy transparency.

Weydemann Bros. is a German film production company established in 2008, specializing in producing films and series. Their website showcases completed and in-development projects, targeting film industry professionals and enthusiasts. The company maintains a consistent and professional online presence with clear branding and social media engagement on Facebook and Instagram. Technically, the website uses jQuery and Typekit fonts, is hosted via DomainControl (GoDaddy), and is moderately optimized for performance and mobile devices. Security posture is adequate with HTTPS enabled and domain status locks, but lacks DNSSEC and visible security headers, which are recommended for enhanced protection. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and professionally maintained, with room for improvements in security and privacy practices.

Déjà-vu film UG is a small German film distribution company specializing in art-house and cinephile films. The website showcases current and repertory films with detailed descriptions and festival accolades, targeting film enthusiasts and cultural institutions. The company maintains partnerships with several VoD platforms, enhancing its distribution channels. Technically, the website uses legacy JavaScript libraries such as jQuery and custom carousel and lightbox scripts, hosted on 1blu.de servers. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS assumed but no visible security headers or modern protections. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is clearly presented, supporting business credibility.

R

RED BALLOON FILM GMBH

redballoonfilm.de

47

Red Balloon Film GmbH is a small, creative media company based in Hamburg, Germany, specializing in film production with a focus on children, family entertainment, and arthouse content. The company collaborates with talent and partners to deliver unique film projects, some of which have premiered at prestigious international film festivals such as Venice and Berlinale. Their website reflects a professional and consistent brand image, targeting film industry professionals and arthouse audiences. Technically, the website is built on WordPress using the Semplice theme, leveraging common JavaScript libraries like jQuery and GSAP for animations. Hosting is provided via rzone.de, and the site uses HTTPS with an excellent SSL configuration. Performance is moderate with good mobile optimization, though SEO and accessibility could be improved. No analytics or advertising scripts were detected, indicating minimal user tracking. From a security perspective, the site enforces HTTPS but lacks visible security headers and cookie consent mechanisms, which are important for compliance and protection. No incident response or security policy information is provided, which could be a gap in transparency and readiness. The WHOIS data is limited but does not raise immediate concerns, though more detailed registrant information would improve trust. Overall, the website is professional and trustworthy with good content quality and business credibility. However, improvements in privacy compliance, security headers, and incident response transparency are recommended to enhance security posture and regulatory adherence.

EDEKA is a leading German supermarket chain with a strong online presence offering weekly offers, recipes, nutrition information, and sustainability initiatives. The website reflects a mature digital infrastructure using modern technologies such as React and Next.js, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and aligned with the business's market position.

AIDA Cruises operates a professional and comprehensive website focused on cruise vacations and travel services primarily targeting the German-speaking market. The company offers a wide range of cruise options, detailed travel preparation information, and ship details, positioning itself as a leading cruise operator in Germany. The website is built on Adobe Experience Manager, leveraging modern web technologies and content delivery networks for performance and scalability. User privacy is managed via a Usercentrics consent platform, indicating compliance with GDPR requirements. Security posture is strong with HTTPS and reputable hosting, though explicit security policies and incident response contacts are not publicly visible. Overall, the site demonstrates high professionalism and trustworthiness suitable for a large enterprise in the transportation and hospitality sectors.