Germany security reports

D

Deutsche Wohnen

deutsche-wohnen.com

72

Deutsche Wohnen is a major real estate company operating primarily in Berlin, Germany, focusing on residential property rental and management. The company positions itself as one of the largest landlords in Berlin, providing livable neighborhoods and urgently needed housing. The website reflects a professional and consistent brand image with a clear focus on its core business. Technically, the site uses modern web technologies including JavaScript, Cookiebot for cookie consent management, and Econda for analytics. The site is mobile-optimized and uses HTTPS, ensuring secure communication. Security posture is good with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published security policies. Privacy compliance is moderate with a cookie banner present but no explicit privacy policy or terms of service detected in the provided content. The domain WHOIS data is unavailable, which raises some concerns about domain registration transparency, but the website content and branding suggest a legitimate business. Overall, the site is professional and trustworthy with room for improvement in security transparency and privacy documentation.

G

GASAG-Gruppe

gasag-gruppe.de

59

GASAG-Gruppe is a well-established energy company based in Berlin, Germany, with a history dating back to 1847. The company operates primarily in the energy sector, focusing on sustainable and climate-neutral energy solutions including the supply of green gas and electricity, energy services, and renewable energy production. The website reflects a mature digital presence with modern technologies such as Usercentrics for consent management and Google Tag Manager for analytics, hosted on Microsoft Azure DNS infrastructure. The site is professionally designed, mobile-optimized, and provides comprehensive corporate information and navigation. Security posture is strong with HTTPS enforced and consent mechanisms in place, although explicit security policies and incident response contacts are not publicly detailed. Overall, the website and domain registration data indicate a legitimate and credible business with a strong regional market position.

G

GASAG DEALS

gasagdeals.de

66

GASAG DEALS operates a discount and partner deals platform primarily targeting GASAG customers in Germany. The website offers a variety of deals with over 50 partners and discounts up to 50%, positioning itself as a value-added service for energy customers. The business model focuses on customer retention and engagement through exclusive offers. The company appears to be medium-sized with a market presence since 2020, leveraging digital channels and social media for outreach. Technically, the website is built on WordPress using popular plugins such as Yoast SEO, WPBakery Page Builder, and Borlabs Cookie for cookie consent management. Hosting is supported by Microsoft Azure DNS infrastructure, indicating a reliable and scalable environment. The site demonstrates good mobile optimization and SEO practices, though performance is moderate and accessibility is basic. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA and Facebook Pixel with consent mechanisms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are missing, and there is no visible security policy or incident response information. Cookie consent is properly implemented, but privacy policy and terms of service are not found, which may impact compliance. Overall, the website is professional, trustworthy, and safe for general audiences. The main risks relate to incomplete privacy and security documentation. Strategic improvements in security headers, privacy disclosures, and incident response readiness would enhance the site's security posture and compliance standing.

G

GASAG AG

gasag.de

57

GASAG AG is a well-established German energy company with a history dating back to 1847. The company provides a broad range of energy-related services including green electricity (Ökostrom), gas tariffs, solar solutions, heating, and mobility services such as electric vehicle charging. The website targets both private and business customers, emphasizing sustainability, fair pricing, and reliability. The company holds a strong market position in Berlin and Germany with a large customer base and a focus on renewable energy expansion. Technically, the website employs modern web technologies including JavaScript modules, Usercentrics for consent management, Google Tag Manager for analytics, and AB Tasty for A/B testing. Hosting is managed via Microsoft Azure DNS, indicating a robust infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. From a security perspective, the site uses HTTPS and integrates consent management, but lacks explicit security policies, incident response information, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the company's claims, showing a legitimate and longstanding domain registration. Overall, GASAG's website reflects a mature digital presence with good security and privacy practices, though improvements could be made by publishing comprehensive privacy and security policies and providing clearer contact information for data protection and incident response.

D

Diakonie Deutschland

sozial-o-mat.de

65

Diakonie Deutschland is a prominent evangelical non-profit organization in Germany focused on social welfare, advocacy, and support services. The website provides election decision aids such as the Sozial-O-Mat to help voters compare social-political positions of parties and the organization. The site targets German voters interested in social policy and welfare issues. Technically, the website is built on TYPO3 CMS, uses modern JavaScript frameworks, and integrates consent management via Usercentrics alongside analytics tools like Google Analytics and Matomo. The site is hosted with Cloudflare DNS and employs HTTPS with strong SSL configuration. Security posture is solid with no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Business credibility is high, supported by consistent branding, partner affiliations, and professional content. Overall, the website is well-designed, accessible, and trustworthy, serving its non-profit mission effectively.

D

Dresden Marketing GmbH

dresden-magazin.com

62

Dresden Magazin is the official city magazine for the Dresden Elbland region, published by Dresden Marketing GmbH. It provides rich content focused on culture, events, gastronomy, family, and leisure activities, targeting residents and visitors interested in the region. The website is well-branded, professionally designed, and consistently maintained, reflecting a strong regional marketing presence supported by public funds. The business model centers on content publishing and regional promotion, leveraging digital media and social channels to engage its audience. Technically, the website runs on WordPress 6.8.1 with modern plugins such as Yoast SEO Premium and Borlabs Cookie for SEO and privacy compliance. It uses jQuery and Slick Carousel for interactive elements and integrates Google Analytics and Google Tag Manager for user tracking. The site is mobile-optimized with good navigation and accessibility features, although some accessibility aspects could be improved. Hosting details are not explicit but DNS servers suggest a reputable provider. From a security perspective, the site enforces HTTPS with a good SSL configuration and employs cookie consent mechanisms compliant with GDPR. However, DNSSEC is not enabled, and security headers are not explicitly detected, indicating room for improvement. No vulnerabilities or exposed sensitive data were found. The WHOIS data is transparent and consistent with the business, showing a domain age appropriate for the company's history. Overall, Dresden Magazin presents a trustworthy, professional, and secure online presence with strong compliance to privacy regulations. Strategic recommendations include enabling DNSSEC, adding security headers, publishing a security policy, and establishing a vulnerability disclosure process to further enhance security posture and trust.

FUNKE Mediengruppe operates one of Germany's largest media houses, offering a wide range of career opportunities across various media sectors including magazines, regional media, digital, and logistics. The website serves as a professional recruitment and employer branding platform targeting professionals, students, trainees, and apprentices interested in media careers. Technically, the site is built on the Contao CMS platform and integrates modern analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and GDPR-compliant consent mechanisms, although some security headers and explicit security policies are not evident. Overall, the site is professional, well-branded, and trustworthy, with no signs of blocking or malicious activity.

K

KiKA

kika.de

58

KiKA is a well-established German public children’s television channel jointly operated by ARD and ZDF, providing a broad range of children’s series, films, games, and creative content. The website reflects a mature digital presence with excellent content quality and a clear focus on its target audience of children and families. The technical infrastructure leverages modern web technologies such as Next.js and React, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Privacy compliance is robust with comprehensive privacy and cookie policies and GDPR adherence. Overall, KiKA presents a trustworthy and professional online presence consistent with its public broadcaster status.

R

Robert Bosch Smart Home GmbH

bosch-smarthome.com

71

Robert Bosch Smart Home GmbH operates a professional and well-branded website offering smart home products and solutions targeted primarily at European consumers. The company is a subsidiary of the Bosch Group, a well-established global technology leader. The website demonstrates a mature digital presence with modern technologies such as AngularJS and Google Tag Manager, and it provides comprehensive privacy and cookie policies aligned with GDPR requirements. However, the absence of WHOIS registration data is unusual for a corporate domain and may warrant further investigation. Security posture is strong with HTTPS and CSRF protections, though explicit security headers and incident response information are lacking.

B

BSH Hausgeräte GmbH

bsh-group.de

66

BSH Hausgeräte GmbH is a leading global manufacturer of household appliances, operating as a subsidiary of the Bosch Group. The company offers a comprehensive portfolio of products and brands, emphasizing innovation, sustainability, and customer service. The website reflects a mature digital presence with extensive content tailored for consumers, partners, and job seekers. Technically, the site leverages modern frameworks such as React and Next.js, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and external vulnerability reporting mechanisms in place. Privacy compliance is well addressed with clear policies and consent management. The main risk factor is the absence of WHOIS data, which slightly impacts domain trust but is mitigated by strong corporate branding and external trust signals.

H

Holtzbrinck Buchverlage GmbH

holtzbrinckverlage.de

62

Holtzbrinck Buchverlage GmbH is a prominent German publishing group managing several well-known imprints including Rowohlt, S. Fischer, Argon, Kiepenheuer & Witsch, and Droemer Knaur. The website serves as a corporate portal presenting these subsidiaries and their publishing activities, targeting a general audience interested in literature and media. The business model centers on book publishing and author representation, positioning Holtzbrinck as a major player in the German media industry. Technically, the site employs modern JavaScript frameworks (Vue.js) and integrates consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and consent mechanisms, though some security headers and explicit policies are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, with no signs of blocking or malicious content.

B

Bundesfachverband Essstörungen e.V.

bundesfachverbandessstoerungen.de

43

The Bundesfachverband Essstörungen e.V. website serves as a professional and comprehensive resource dedicated to eating disorders in Germany. It targets healthcare professionals such as doctors, therapists, and counselors, as well as affected individuals and their families. The association provides access to research, therapy resources, events, and networking opportunities, positioning itself as a leading non-profit entity in the healthcare sector focused on eating disorders. The website content is well-structured, informative, and consistent with the organization's mission. Technically, the website is built on the Weblication CMS platform and hosted on servers associated with kasserver.com. It employs standard web technologies including JavaScript and Google Analytics with IP anonymization, alongside a cookie consent mechanism compliant with GDPR. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS (assumed though not explicitly confirmed), has secure form handling, and respects user privacy with consent banners. However, explicit security headers such as CSP and HSTS are not evident, and no formal security policy or incident response information is published. No vulnerabilities or suspicious content were found, indicating a generally sound security posture but with room for improvement in header implementation and transparency. Overall, the website is trustworthy, professional, and safe for general audiences. It effectively supports its non-profit mission with clear privacy compliance and relevant content. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen trust and compliance.

D

Deutsche Gesellschaft für Essstörungen e.V.

dgess.de

47

The Deutsche Gesellschaft für Essstörungen e.V. (DGESS) is a German non-profit organization dedicated to advancing research, prevention, diagnosis, and treatment of eating disorders. The website serves as an information hub for researchers, clinicians, affected individuals, and their families, offering details about the society's activities, scientific congresses, and membership. The organization holds a reputable position within the healthcare sector in Germany, focusing on scientific collaboration and advocacy. Technically, the website is built on Joomla CMS with modern libraries such as jQuery and Font Awesome, providing a good user experience with mobile optimization and clear navigation. However, there is room for improvement in performance and security headers implementation. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit incident response information. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and safe for general audiences.

B

Bayerischer Rundfunk

ardalpha.de

60

ARD alpha is an educational media platform operated by Bayerischer Rundfunk, a reputable public broadcaster in Germany. The website offers a wide range of learning resources including articles, videos, and podcasts targeting students, young adults, and the general public interested in education and knowledge. The content is professionally curated and presented with consistent branding and high-quality media assets. Technically, the site uses modern JavaScript libraries and tracking tools with some consent mechanisms, though explicit privacy and cookie policies are not clearly published on the main page. Security posture is moderate with no visible security headers or incident response information, but no critical vulnerabilities or blocking mechanisms were detected. Overall, the site is trustworthy, well-maintained, and serves as a valuable educational resource.

K

kajomi GmbH

kajomi.de

71

kajomi GmbH is a German-based company specializing in providing a reliable and flexible newsletter and email marketing platform. With over 20 years of experience, kajomi offers a comprehensive SaaS solution that enables businesses to create, send, automate, and analyze newsletters with a strong emphasis on data security and GDPR compliance. The company positions itself as a top German provider in the email marketing sector, targeting businesses and marketers seeking efficient and secure newsletter distribution services. Their platform integrates with popular social media lead generation tools and offers personal support to clients. Technically, the website is built on WordPress with modern plugins and libraries such as WPBakery Page Builder, jQuery, and Borlabs Cookie for consent management. The site is well-optimized for SEO and mobile devices, with good performance and accessibility standards. The use of Google Tag Manager and Google Analytics indicates a moderate level of user tracking balanced with privacy considerations. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms to comply with privacy regulations. While no explicit security headers were detected in the provided data, the site shows no signs of exposed sensitive data or vulnerabilities. The WHOIS data aligns well with the business claims, showing consistent registration and no privacy protection, which supports legitimacy. Overall, kajomi GmbH demonstrates a mature digital presence with strong compliance and security postures suitable for its business model. Recommendations include enhancing security headers, publishing explicit security policies, and adding a vulnerability disclosure mechanism to further strengthen trust and security.

M

Mercedes-Benz Bank

mercedes-benz-bank.de

68

Mercedes-Benz Bank is a specialized financial institution providing automotive financing, leasing, insurance, and banking services primarily for Mercedes-Benz customers in Germany. The website reflects the corporate branding and targets a German-speaking audience interested in automotive financial products. The technical infrastructure leverages modern web technologies including web components and jQuery, hosted on Mercedes-Benz's asset domains. However, the site lacks visible privacy and cookie policies, and SEO is limited by restrictive robots meta tags. Security posture is minimal with no detected security headers or incident response information. Overall, the site is functional but could improve in compliance and security transparency.

W

Whirlpool Deutschland

whirlpool.de

71

Whirlpool Deutschland operates as a major retailer and service provider for household appliances in Germany, offering a wide range of kitchen and laundry products. The website reflects a mature digital presence with comprehensive user interaction tracking and cookie consent mechanisms, indicating compliance with GDPR and privacy regulations. The technical infrastructure leverages modern analytics and monitoring tools such as Google Analytics, Google Tag Manager, OneTrust, and New Relic, supporting a robust digital marketing and performance monitoring strategy. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response information are not publicly available. Overall, the website is professional, trustworthy, and well-optimized for user experience and compliance.

Mercedes-Benz Mobility AG operates the Mercedes pay GmbH, a digital payment platform integral to the Mercedes-Benz Group's mobility and digitalization strategy. The platform supports seamless, secure payment transactions across over 40 markets, facilitating e-commerce, in-car payments, and vehicle purchases within the Mercedes ecosystem. The website reflects a mature digital infrastructure with modern technologies such as jQuery, Google Tag Manager, and Usercentrics for consent management, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS enforcement and privacy compliance, though explicit security policies and incident response contacts are absent. WHOIS data is unavailable, which slightly impacts transparency but does not detract significantly from the site's legitimacy given the strong corporate branding and contact information. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

Kajomigenerator.de is a technology-focused website providing a client login portal for a service named Kajomi Generator. The site appears to serve clients who require generation or management of specific data or content, though no detailed business description or public-facing content is provided. The website's market position and business scale appear small and focused on a niche client base. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, and an older version of CKEditor (4.5.10). The site shows basic mobile optimization and accessibility but lacks modern SEO and comprehensive technical enhancements. The presence of an API hostname using HTTPS suggests secure backend communication, but no explicit security headers or advanced frameworks are detected. From a security perspective, the site has some basic protections such as password input masking and HTTPS usage implied by API calls. However, the use of an outdated CKEditor version and absence of security headers or CSRF protections indicate potential vulnerabilities. No privacy, cookie, or terms of service policies are present, limiting compliance with GDPR and other regulations. No contact or incident response information is publicly available. Overall, the site is functional but basic, with moderate trustworthiness based on WHOIS data consistency. Strategic improvements in security hardening, privacy compliance, and business transparency are recommended to enhance credibility and reduce risk.

C

Civey GmbH

civey.com

73

Civey GmbH is a German-based company specializing in digital market and opinion research, providing real-time survey data and analytics services primarily to businesses, media, political organizations, and marketing professionals. Established in 2009, Civey has positioned itself as a leading provider in the German market research sector, offering a range of services including real-time polling, market studies, and data consulting. The website reflects a professional and comprehensive business presence with clear navigation and high-quality content tailored to its target audience. Technically, the website is built on modern web technologies including React and Next.js, hosted and secured via Cloudflare services. It employs Google Tag Manager for analytics and OneTrust for consent management, indicating a mature digital infrastructure with good performance, mobile optimization, and SEO practices. Accessibility features are present, enhancing user experience across devices. From a security perspective, the site enforces HTTPS with strong SSL configurations and includes essential security headers. While no critical vulnerabilities or exposed sensitive data were detected, the absence of DNSSEC and a public security policy or incident response page suggests areas for improvement. Privacy compliance is robust, with clear GDPR-aligned privacy and cookie policies and visible consent mechanisms. Overall, Civey.com demonstrates a high level of professionalism, security, and compliance suitable for its business domain. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, and enhancing transparency around security policies and incident response to further strengthen trust and security posture.

The website webdesign-keller.de currently serves an HTTP 403 Forbidden error page indicating that access is denied. This prevents any meaningful content or business information from being accessed or analyzed. The domain is registered with domaincontrol.com name servers, a common hosting provider for small businesses, but no registrant details or company information are available. Due to the blocked content, no privacy, cookie, or terms of service policies are found, and no contact information or security policies are visible. The technical infrastructure details are minimal, with no detectable CMS, scripts, or analytics. Security posture cannot be properly assessed due to lack of accessible content and missing security headers or SSL information. Overall, the site appears to be a small business domain with limited online presence and currently inaccessible content, resulting in a low trust and security score.

O

onvista bank - eine Marke der Commerzbank AG

onvista-bank.de

63

The onvista bank website represents a well-established online brokerage service brand under the Commerzbank AG umbrella, targeting retail investors and traders in Germany. The site offers a comprehensive range of financial products including funds, CFDs, options, certificates, and stocks, supported by a webtrading platform. The business model focuses on providing accessible and competitive online trading services with clear pricing and security information. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and includes cookie consent mechanisms, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and security-related informational content, though some improvements in security headers and incident response transparency are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR and related regulations.

O

onvista

onvista.com

65

Onvista is a well-established German financial portal offering comprehensive stock market data, news, and investment tools. The platform targets retail investors and financial market participants, providing real-time and delayed market data, portfolio management, broker comparison, and premium subscription content. The website demonstrates a mature business model with integrated brokerage services and a strong market presence in Germany. Technically, the site leverages modern frameworks such as React and Next.js, hosted on AWS infrastructure, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced, but lacks visible security headers and explicit security policies. Privacy compliance is limited due to missing visible privacy and cookie policies. Overall, the site is professional, trustworthy, and content-rich, but could improve transparency and compliance aspects.

Katharina Linnepe operates a professional website focused on communication expertise, including moderation, voice-over, coaching, feminist inspiration, and comedy. The business targets individuals and organizations seeking specialized communication services and feminist-themed entertainment. The website is built on the Jimdo CMS platform, leveraging modern web technologies and includes event announcements and book promotion, indicating active engagement with the audience. Technically, the site is moderately optimized with good mobile responsiveness and SEO practices but lacks visible advanced security headers and a privacy policy. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, although the website content and external partner links support its legitimacy. Overall, the security posture is moderate with room for improvement in compliance and security best practices.

S

Safer Sex Berlin

safersexberlin.com

58

Safer Sex Berlin is a grassroots non-profit organization dedicated to improving sexual healthcare access for women and genderqueer individuals in Germany. The organization focuses on advocacy, community programming, pop-up STI testing, and research to address systemic barriers and promote sexual health justice. The website is professionally designed using Squarespace, featuring clear navigation, mobile optimization, and a cookie consent mechanism. However, it lacks explicit privacy policy and terms of service pages, and no direct contact information is provided. The domain WHOIS data is unavailable, raising concerns about domain registration transparency. Overall, the digital presence is solid but would benefit from enhanced compliance documentation and verified contact details.

B

Bundesinstitut für Öffentliche Gesundheit (BIÖG)

bzga-essstoerungen.de

63

The website www.bzga-essstoerungen.de is operated by the Bundesinstitut für Öffentliche Gesundheit (BIÖG), a governmental public health institute in Germany focused on providing comprehensive information and support related to eating disorders. The site offers detailed educational content, counseling options, therapy guidance, and a database for finding local support centers. It targets a broad audience including affected individuals, families, and healthcare professionals. The business model centers on public health awareness and support services without commercial intent, positioning it as a trusted governmental resource in the healthcare sector. Technically, the website is built on TYPO3 CMS with a modern and accessible design, incorporating Bootstrap for responsive layouts and AblePlayer for media accessibility. It uses Matomo analytics configured for privacy compliance, including IP anonymization and consent-based data collection. The site demonstrates good mobile optimization, SEO practices, and accessibility features, reflecting a mature digital infrastructure suitable for public sector needs. From a security perspective, the site enforces HTTPS and employs a cookie consent mechanism aligned with GDPR requirements. However, it lacks publicly available security policies, incident response contacts, and security headers that could enhance its security posture. No vulnerabilities or suspicious activities were detected, and the WHOIS data aligns reasonably with the organizational identity, supporting legitimacy. Overall, the website scores well on content quality, privacy compliance, and business credibility, with moderate technical and security scores. Strategic improvements in security transparency and policy publication would further strengthen trust and resilience. The site is safe for general audiences, with no adult or inappropriate content detected.

K

Kiepenheuer & Witsch

kiwi-verlag.de

65

Kiepenheuer & Witsch is a well-established German publishing house specializing in literature and critical/popular non-fiction books since 1951. The website serves as a digital storefront and information portal for books, authors, and related publishing activities, targeting German-speaking readers and book enthusiasts. The business operates under the Holtzbrinck Publishing Group umbrella, indicating a strong market position in the media sector. Technically, the website employs modern web technologies including the Astro framework and Drupal CMS, hosted behind Cloudflare DNS services. It integrates Google Tag Manager for analytics and Usercentrics for GDPR-compliant cookie consent management, reflecting a mature digital infrastructure. The site is mobile-optimized with good SEO and accessibility features, although some accessibility aspects could be improved. From a security perspective, the site uses HTTPS with strong SSL configuration and Cloudflare protection. Security headers are partially implemented, and no critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public security policy or incident response contact limits transparency. Privacy compliance is supported by a cookie consent mechanism but lacks a clearly linked privacy policy or terms of service in the analyzed content. Overall, the website presents a professional and trustworthy digital presence with moderate to high scores in content quality, technical implementation, security posture, and business credibility. Strategic improvements include publishing explicit privacy and security policies, enhancing accessibility, and adding vulnerability disclosure mechanisms to further strengthen trust and compliance.

U

Ullstein Buchverlage GmbH

ullstein.de

58

Ullstein Buchverlage GmbH is a well-established German book publishing company founded in 1952, specializing in entertaining novels, thrillers, non-fiction, and biographies. The company operates multiple imprints and targets a broad audience interested in literature and books. Their website reflects a mature digital presence with modern technologies such as React and Next.js, hosted on Microsoft Online infrastructure. The site is professionally designed, mobile-optimized, and SEO-friendly, offering direct book sales and author-related services. Security posture is solid with HTTPS and some security headers, but lacks explicit privacy and cookie policies as well as incident response information. Social media integration is strong, enhancing trust and engagement. Overall, the website is credible and trustworthy but could improve privacy compliance and security transparency.

T

The Good Media Network GMN GmbH

dokumentale.de

63

The website www.doxumentale.de represents The Good Media Network GMN GmbH, hosting the International Documentary and Media Festival Berlin. It serves as a platform for documentary film enthusiasts and media professionals, offering festival programming, ticket sales, and editorial content. The site is well-branded and consistent, targeting a niche cultural audience with a focus on documentary films and social themes. Technically, the site is built on TYPO3 CMS with Bootstrap, integrating modern tools such as Matomo for analytics, Facebook Pixel for marketing, and Stripe for secure payment processing. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks some advanced security headers and published security policies. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. No direct contact emails or phone numbers are found on the homepage, but social media presence is active. Overall, the site is professional, trustworthy, and well-maintained, with room for improvement in security transparency and incident response readiness.

V

Verlag J.H.W. Dietz Nachf. GmbH

dietz-verlag.de

51

Verlag J.H.W. Dietz Nachf. GmbH is a well-established German publishing house specializing in political, social, and historical literature. With a history dating back to 1881, the company focuses on critical and scholarly works addressing topics such as democracy, right-wing extremism, social inequality, and the history of social democracy and National Socialism. The website reflects a professional and content-rich platform targeting readers interested in these fields, offering books, journals, podcasts, and newsletters. Technically, the website employs a modern yet straightforward tech stack including jQuery and FontAwesome, hosted on rzone.de servers. The site is mobile-optimized with good SEO practices and a clear navigation structure. Cookie consent mechanisms and privacy policies are implemented in compliance with GDPR, enhancing user trust and legal compliance. From a security perspective, the site uses HTTPS and cookie consent banners effectively but lacks explicit security headers and a public security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the business claims, showing consistent registration and domain age appropriate for the company's long history. Overall, the website presents a secure, trustworthy, and professional digital presence for a niche publishing business. Strategic improvements could include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure channel to further strengthen security posture and user confidence.

V

VIA Schankhalle Pfefferberg gGmbH

pfefferberg-theater.de

52

Pfefferberg Theater is a small, non-profit cultural institution based in Berlin, Germany, offering a diverse range of theatrical performances including contemporary circus, dance, family shows, and live literature readings. The organization emphasizes artistic quality and inclusivity, partnering with local gastronomy and cultural entities to enhance visitor experience. The website reflects a professional and consistent brand presence with clear navigation and relevant content for its target audience of arts and culture enthusiasts. Technically, the website employs modern web technologies including JavaScript libraries, CSS frameworks, and accessibility tools such as ReadSpeaker. It integrates third-party services like Vimeo for video content and Google Analytics for visitor tracking, while maintaining GDPR-compliant cookie consent mechanisms. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some security headers are not explicitly detected. From a security perspective, the site uses HTTPS and enforces cookie consent with granular user control, but lacks visible security policies or incident response information. No critical vulnerabilities or exposed sensitive data were found. The WHOIS data is partially consistent with the website's German location and business nature, with no suspicious patterns detected. Overall, the site presents a low-risk profile with good privacy compliance and a solid security posture. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

H

hauseins

hauseins.fm

45

Hauseins is a German podcast label specializing in producing and distributing journalistic podcasts covering politics, economy, science, and culture. The website presents a professional portfolio of diverse podcast shows targeting podcast enthusiasts interested in serious and entertaining content. The company appears to be a small but established player in the media sector, founded in 2017, with a consistent brand presence and positive testimonials from industry professionals. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and offering good mobile optimization and accessibility. Security posture is adequate with HTTPS enabled, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Contact and incident response information is not readily visible, which could be improved to enhance trust and compliance. Overall, Hauseins demonstrates a solid digital presence with room for security and privacy enhancements.

S

Steady

steady.fm

60

Steady is a platform dedicated to empowering independent media makers by providing an integrated ecosystem to build and manage membership communities. The website presents a professional and consistent brand image, targeting content creators who seek to monetize and engage their audience effectively. The business operates primarily in the media sector and is based in Germany, with a medium-sized market presence. Technically, the site is built using Framer, leveraging modern web fonts and structured data to enhance SEO and user experience. While the site uses HTTPS and shows good design and navigation, it lacks explicit privacy and cookie policies, as well as security headers, which are important for compliance and security posture. No blocking or WAF mechanisms were detected, and the WHOIS data aligns well with the business profile, indicating legitimacy. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security best practices.

U

USU Digital Consulting

usu-digitalconsulting.com

60

USU Digital Consulting is a large, established technology consulting firm based in Germany, specializing in digital transformation services including AI, process automation, digital customer experience, and e-government solutions. The company positions itself as a full-service provider with over 45 years of expertise and a strong focus on customer-centric, value-oriented consulting. Technically, the website is built on Drupal 10 and integrates multiple modern analytics and marketing tools with a robust consent management system, indicating a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though the absence of a public security policy or incident response contact is noted. The missing WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, but the professional website content and technology usage support the business credibility. Overall, the website is well-designed, accessible, and trustworthy, serving a professional business audience.

D

Der Lila Podcast

lila-podcast.de

42

Der Lila Podcast is a German-language feminist podcast platform established around 2016, focusing on feminist discourse, social justice, and political topics. It operates as a small non-profit media entity, funded primarily through crowdfunding platforms such as Steady and Patreon, and supplemented by book sales and live events. The website is professionally designed and well-maintained, offering rich content including podcast episodes, transcripts, and related resources. The target audience is German-speaking individuals interested in feminism and social activism. Technically, the site runs on WordPress with common podcasting plugins and integrates social media and crowdfunding widgets. Hosting is provided by Cloudpit, a reputable hosting provider.

F

FidAR – Frauen in die Aufsichtsräte e. V.

wob-index.de

39

FidAR – Frauen in die Aufsichtsräte e. V. operates as a non-profit organization focused on promoting gender equality in corporate leadership within Germany. The website wob-index.de serves as an analytical platform providing studies and rankings (Women-on-Board-Index) to monitor the implementation and acceptance of legally mandated gender quotas in supervisory boards and management positions of private and public companies. The organization is recognized as a standard setter in this niche, targeting companies, policymakers, and the public interested in gender parity in governance. Technically, the website employs modern web technologies including Bootstrap for responsive design and Chart.js with Chartisan for data visualization. It is hosted on servers associated with kasserver.com and uses HTTPS to secure communications. The site is well-structured, mobile-optimized, and provides clear navigation, although it lacks some advanced accessibility features and explicit cookie consent mechanisms. From a security perspective, the site enforces HTTPS and uses trusted external libraries but does not explicitly implement security headers or publish a security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is supported by a comprehensive privacy policy linked externally, but no cookie banner or GDPR consent mechanism is present. Overall, the website presents a professional and trustworthy front with high content quality and business credibility. Recommendations include enhancing privacy compliance with cookie consent, adding security headers, and publishing security-related policies to improve the security posture and user trust further.

O

onvista

onvista.de

65

Onvista is a well-established German financial portal providing comprehensive stock market data, news, and investment tools. It targets retail investors and financial market participants primarily in Germany. The platform offers real-time and delayed market data, portfolio management, broker comparison, and premium subscription content. Technically, the site uses modern frameworks such as React and Next.js, hosted likely on AWS infrastructure with CDN and security services. The website is fast, mobile-optimized, and well-structured, providing an excellent user experience. Security posture is strong with HTTPS and modern best practices, though explicit security policies and vulnerability disclosures are absent. Privacy compliance is limited due to missing visible privacy and cookie policies. Overall, the site is professional, trustworthy, and safe for general audiences.

F

FUNKE Mediengruppe

morgenpost.de

65

Berliner Morgenpost, operated by FUNKE Mediengruppe, is a well-established regional news media outlet providing current news and background information on politics, economy, and sports primarily focused on Berlin and Germany. The website offers a mix of free content supported by advertising and subscription-based premium content, including e-paper and podcasts. The target audience is general public interested in regional and national news. The company maintains a strong market position as a trusted news source in the German media landscape. Technically, the website employs a modern technology stack including JavaScript and TypeScript, with integrations for consent management, analytics, advertising, and subscription management. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Performance is moderate with asynchronous loading of third-party scripts to optimize user experience. From a security perspective, the site enforces HTTPS and uses consent management to comply with GDPR. While explicit security headers are not fully confirmed, best practices appear to be followed with no visible vulnerabilities or exposed sensitive data. The absence of a security.txt or explicit incident response contact is noted as an area for improvement. Overall, the website presents a low risk profile with strong compliance and professional operations. Strategic recommendations include enhancing security header implementation, publishing a vulnerability disclosure policy, and improving incident response transparency to further strengthen trust and security posture.

Hans-Böckler-Stiftung is a German non-profit foundation affiliated with the German Trade Union Confederation (DGB), focusing on labor participation, research funding, and scholarships. The website serves as an information portal for its institutes and services, targeting researchers, students, and labor organizations. The foundation maintains a solid market position within the non-profit sector in Germany, supported by multiple specialized research institutes. Technically, the website employs modern web standards, including HTML5, CSS3, and JavaScript, with integration of a consent management platform (Usercentrics) and Google Tag Manager for analytics. The site is well-structured, mobile-optimized, and accessible, with good SEO practices. Security posture is moderate, with HTTPS usage and cookie consent mechanisms, but lacks explicit security headers and published security policies. Overall, the website is professional and trustworthy, though it could improve transparency by publishing privacy policies, terms of service, and incident response contacts.

D

Design Keller Internetagentur Berlin

design-keller.de

45

Design Keller Internetagentur Berlin is a small, specialized internet agency based in Berlin, Germany, offering professional web design, web programming, and content management services primarily using TYPO3 CMS. The company targets local businesses and organizations seeking customized web solutions, including SEO and consulting. The website reflects a solid market position with a portfolio of diverse client projects and a consistent brand presence. Technically, the site uses legacy and modern web technologies, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit security policies. Overall, the site is professional and trustworthy but could improve privacy compliance and technical modernization. The domain registration data aligns well with the business claims, supporting legitimacy.

ressourcenmangel is a small media and communication agency based in Germany, specializing in producing video content, branding, and awareness campaigns primarily for government, healthcare, and energy sector clients. Their website serves as a showreel landing page showcasing various multimedia projects for notable institutional clients. The technical infrastructure uses modern frontend technologies such as Bootstrap, Swiper.js, and GSAP for smooth animations and user experience. Hosting is likely provided by GoDaddy based on nameserver data. Security posture is moderate with HTTPS assumed but lacking explicit security headers and policies. No user input forms or tracking scripts are present, reducing attack surface but also limiting user engagement features. Privacy and cookie policies are absent, which is a compliance gap. Overall, the website is professional and safe but could improve transparency and security practices.

A

Adacor Hosting GmbH

adacor.com

66

Adacor Hosting GmbH is a German-based technology company specializing in cloud solutions and AI journey consulting. Their services focus on private AI models, private cloud infrastructure, Azure, Kubernetes, and cloud consulting aimed at digital transformation for businesses. The company positions itself as a specialized cloud solutions provider with a medium-sized business footprint. The website reflects a professional and consistent brand image targeting business clients seeking advanced cloud and AI services. Technically, the site is built on WordPress with modern libraries such as jQuery and Font Awesome, and integrates analytics and marketing tools like Hotjar and Google Tag Manager. The site is mobile optimized and SEO friendly, though some accessibility features could be improved. Security posture is good with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published security policies. The absence of WHOIS data is a notable concern for domain legitimacy, requiring further verification. Overall, the website is professional and trustworthy but could enhance transparency and security documentation.

S

STRIVE Magazine

strive-magazine.de

68

STRIVE Magazine is a German-language digital magazine and e-commerce platform focused on female empowerment in business, career, finance, and psychology. The website is built on the Shopify platform, leveraging various Shopify apps and third-party JavaScript libraries to provide marketing, countdown timers, and form functionalities. The site targets a general audience interested in innovative economic stories and role models, positioning itself as a niche media outlet in the German market. Technically, the site is well-structured with modern technologies and good mobile optimization, hosted on Shopify's secure CDN infrastructure with HTTPS enforced. However, the absence of explicit privacy, cookie, and terms of service policies indicates gaps in compliance and transparency. Security posture is generally good due to Shopify's platform security, but additional security headers and formal policies would enhance trust. Overall, the website is professional and functional but would benefit from improved privacy compliance and clearer contact information to strengthen business credibility and user trust.

B

BERNET COMMUNICATION GMBH

kliemt.blog

59

Kliemt.blog is a specialized German labor law blog operated by BERNET COMMUNICATION GMBH, providing comprehensive legal insights, articles, and podcasts focused on labor law topics such as compliance, restructuring, and ESG. The website targets legal professionals and business decision makers interested in labor law developments. Technically, the site is built on WordPress with modern plugins and frameworks, delivering a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS and domain protection flags, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but should improve privacy and security practices.

L

Lightspeed Commerce

lightspeedhq.de

71

Lightspeed Commerce operates a leading POS and payment platform serving ambitious entrepreneurs across more than 100 countries, with a strong presence in Germany. The website reflects a mature digital infrastructure leveraging WordPress CMS, Tailwind CSS, and advanced marketing and analytics tools such as Google Tag Manager, Datadog RUM, and Visual Website Optimizer. The company demonstrates strong GDPR compliance with OneTrust cookie consent management and integrates reCAPTCHA Enterprise for bot protection. Security posture is robust with HTTPS enforcement and multiple security headers, though a dedicated security policy and incident response information are not publicly available. Overall, the site is professional, well-branded, and trustworthy, supporting a large enterprise business model in the technology and retail sectors.

B

BBBank

bbbank.de

61

BBBank is the largest cooperative private customer bank in Germany, offering modern digital banking services alongside a nationwide branch network. The website reflects a professional banking institution targeting private customers in Germany, with a focus on convenience and high-quality advisory services. The technical infrastructure uses modern JavaScript frameworks and integrates analytics and tracking tools such as Google Tag Manager and Bing tracking pixels. Security posture is adequate with HTTPS enabled and asynchronous loading of tracking scripts, but lacks visible security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies in the analyzed content. Overall, the website is trustworthy and professional but could improve transparency and compliance documentation.

G

Gewerkschaft Erziehung und Wissenschaft

gew-shop.de

49

The GEW Shop is an e-commerce platform operated by the Gewerkschaft Erziehung und Wissenschaft, a German educational union. The website offers a variety of union-related merchandise including promotional items, printed materials, office supplies, and campaign materials targeted primarily at union members and educational professionals. The platform positions itself as a niche provider within the education sector, supporting union activities and member engagement through its product offerings. The site is well-branded, consistent, and provides clear contact information and policies, enhancing user trust. Technically, the website is built on Magento 2 using the Smartwave Porto theme, incorporating modern web technologies such as jQuery, RequireJS, and Bootstrap. It is hosted on infrastructure associated with DomainControl (likely GoDaddy). The site is mobile-optimized and includes standard e-commerce functionalities such as shopping cart, user accounts, and search. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS, uses secure cookies, and includes CAPTCHA on login forms to mitigate automated abuse. However, it lacks explicit HTTP security headers and a public security policy or vulnerability disclosure mechanism. Matomo analytics is used for user tracking with moderate tracking levels and GDPR-compliant cookie management. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements could include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure channel to strengthen security posture and trust further.

#

#stayonboard

stayonboard.org

50

The website stayonboard.org represents a focused advocacy initiative aimed at legal reform in Germany to allow board members of stock corporations to temporarily pause their mandates during family-related absences without resigning. The initiative has achieved legislative success, positioning itself as a niche but impactful player in corporate governance reform. Technically, the site is built on WordPress with a modern tech stack including Matomo analytics and Borlabs Cookie for consent management. Security posture is generally good with HTTPS and domain transfer protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is moderate due to the absence of explicit privacy and terms of service pages. Overall, the site is professional, trustworthy, and serves a specialized audience effectively.

K

Käte Ahlmann Stiftung

kaete-ahlmann-stiftung.de

46

The Käte Ahlmann Stiftung is a German non-profit organization focused on mentoring success-oriented women entrepreneurs through its #TWINmentoring program. The website presents a professional and well-structured platform offering a year-long mentoring experience with experienced businesswomen, fostering personal and business growth. The target audience is women entrepreneurs seeking guidance and networking opportunities. Technically, the site is built on WordPress using common frameworks and plugins, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and CAPTCHA protections, though lacking advanced security headers and formal security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and credible with clear contact information and partner affiliations.