Germany security reports

1

13°

13-grad.com

50

13° is a German branding and communication agency specializing in transforming companies into brands, providing products with distinct identities, and crafting compelling stories. The agency serves a diverse clientele including large, medium, and small enterprises as well as public sector clients such as ministries, universities, cities, and foundations, primarily based in Mecklenburg-Vorpommern but operating nationwide. Their website reflects a professional and modern digital presence with multimedia content, client showcases, and testimonials. Technically, the site is built on WordPress with SEO and cookie consent plugins, and uses Matomo for analytics, indicating a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and incident response information could enhance their security maturity. Overall, the website is trustworthy, well-branded, and compliant with GDPR, supporting the agency's credibility and market positioning.

N

Neubrandenburger Stadtwerke GmbH

neu-sw.de

64

Neubrandenburger Stadtwerke GmbH operates the website neu-sw.de, serving as a regional utility provider in Neubrandenburg, Germany. The company offers a range of services including electricity, gas, district heating, water supply, and public bus transportation. The website targets both private and business customers, providing online services such as tariff calculation, customer portal access, and a dedicated mobile app. The business model focuses on utility provision and community engagement, positioning itself as a trusted local energy and transport provider. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as JavaScript and CSS with responsive design elements. The site demonstrates good performance and accessibility, with structured navigation and SEO-friendly metadata. Security practices include HTTPS enforcement and nonce usage for scripts, though some advanced security headers are missing. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service pages detected. The security posture is solid with no evident vulnerabilities or exposed sensitive data. WHOIS data confirms domain legitimacy and consistency with the business identity. No WAF or blocking mechanisms interfere with content access. Overall, the site is professional, trustworthy, and well-suited for its audience, though improvements in privacy disclosures and security headers are recommended. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing HTTP security headers, and providing explicit incident response contacts to strengthen trust and compliance.

N

Neubrandenburger Wohnungsgesellschaft mbH

neuwoges.de

49

Neubrandenburger Wohnungsgesellschaft mbH (NEUWOGES) is a medium-sized real estate company based in Germany, specializing in residential apartment rentals and property management in Neubrandenburg. The company offers a broad range of housing options including young living, senior living, single and family apartments, as well as social counseling and commercial leasing. The website reflects a well-established local market position with diversified services and multiple partner entities. Technically, the site is built on WordPress with modern JavaScript libraries and cookie consent management, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is strong with comprehensive policies and GDPR adherence. Overall, the website is professional, trustworthy, and well-optimized for users.

V

Veranstaltungszentrum Neubrandenburg GmbH

vznb.de

52

Veranstaltungszentrum Neubrandenburg GmbH operates as a key cultural and event management entity in Neubrandenburg, Germany. The company manages multiple event venues, offering a broad range of cultural, artistic, and sporting events, targeting local residents, tourists, and culture enthusiasts. Their business model centers on venue management, ticket sales, and event organization, positioning them as a significant regional player in the hospitality and cultural sector. Technically, the website is built on WordPress, leveraging standard plugins such as Borlabs Cookie for GDPR-compliant cookie management and Google Analytics for visitor tracking. The site demonstrates good mobile optimization, accessibility, and SEO practices, hosted on a provider indicated by the nameservers kasserver.com. Performance is moderate, with modern web technologies and no critical technical flaws detected. From a security perspective, the site enforces HTTPS with an excellent SSL configuration and employs a robust cookie consent mechanism. However, it lacks explicit security policies, incident response contacts, and advanced security headers, which are recommended for enhanced protection. No vulnerabilities or exposed sensitive data were found, indicating a solid baseline security posture. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It provides clear contact information and maintains consistent branding. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in security policy transparency and header implementation would further strengthen the security posture.

A

Alfred Kärcher GmbH & Co. KG

karcher.com

67

Alfred Kärcher GmbH & Co. KG operates a professional and comprehensive international website focused on cleaning technology products and services, including pressure washers, steam cleaners, and vacuum cleaners. The company is positioned as a global leader in the manufacturing sector with a strong brand presence and a wide range of offerings for both consumer and professional markets. The website demonstrates a mature digital infrastructure with modern technologies such as Bootstrap, Adobe DTM, and Bazaarvoice for customer reviews, indicating a high level of digital maturity. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. The absence of WHOIS data is notable but does not detract significantly from the overall trustworthiness given the professional presentation and comprehensive legal disclosures. Overall, the site is well-structured, accessible, and compliant with privacy regulations, supporting the company's enterprise-level stature.

GERMAN.SITE is a specialized online platform operated by GeoDok GmbH, offering a comprehensive database of commercial real estate locations primarily focused on Nordrhein-Westfalen, Germany's leading economic region. The platform supports investors and businesses by providing detailed geographic, infrastructural, and economic data to facilitate informed investment decisions. The website is professionally designed with consistent branding and clear navigation, targeting business users seeking commercial property in Germany and Europe. Technically, the site leverages JavaServer Faces with PrimeFaces, Bootstrap, and jQuery, hosted by Hetzner Online GmbH. While the site performs moderately well and includes cookie consent management via Cookiebot, there is room for improvement in mobile optimization and accessibility. The absence of CMS and modern SEO structured data suggests a traditional web application approach. From a security perspective, the site uses HTTPS and manages cookie consent effectively but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. No incident response or security policies are published, indicating potential gaps in transparency and readiness. The domain registration is stable and consistent with the business history, enhancing trustworthiness. Overall, the website presents a credible and professional business presence with moderate technical maturity and a solid privacy compliance posture. Strategic improvements in security headers, DNSSEC, and published security policies would strengthen the security posture and trust further.

AGIT Aachener Gesellschaft für Innovation und Technologietransfer mbH is a regional technology and innovation service provider based in Aachen, Germany. The company supports startups, established companies, and regional development initiatives by offering innovation consulting, patent and intellectual property services, business plan advice, financing support, and networking opportunities. Their market position is that of a key regional innovation facilitator within the Aachen technology ecosystem. The website is built on TYPO3 CMS and demonstrates a moderate to good level of digital maturity with active content updates and multilingual support. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

R

Region Aachen Zweckverband

regionaachen.de

51

Region Aachen Zweckverband is a regional development agency focused on improving the quality of life for residents in the Aachen region and neighboring countries. The organization coordinates structural development in economy, work, education, culture, health, and infrastructure for approximately 1.3 million inhabitants. The website reflects a professional government entity with a clear mission and regional focus. Technically, the site is built on WordPress with Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. Privacy awareness is demonstrated by the use of Matomo analytics and a cookie consent mechanism, although explicit privacy and terms policies are missing. Security posture is good with HTTPS enabled but could be improved with additional security headers and published policies. Overall, the site is accessible, safe, and trustworthy, serving its public sector audience effectively.

D

Deutscher Verband für Archäologie e.V.

dvarch.de

51

The Deutscher Verband für Archäologie e.V. (DVA) operates as a non-profit umbrella organization representing archaeological associations and related disciplines in Germany. It serves as a platform for collaboration, advocacy, and dissemination of archaeological knowledge, offering services such as coordinating funding programs, organizing professional committees, and publishing the 'Blickpunkt Archäologie' journal. The website reflects a well-structured, professional presence targeting archaeologists, researchers, and cultural heritage stakeholders. Technically, the website is built on TYPO3 CMS with Bootstrap and jQuery, delivering a responsive and accessible user experience. The site is hosted securely with HTTPS and includes standard meta tags for SEO and social sharing. However, there is room for improvement in security headers and privacy compliance, notably the absence of a cookie consent mechanism and formal security policies. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. The lack of a published security policy, incident response contacts, or vulnerability disclosure reduces transparency but does not indicate immediate risk. The WHOIS data is minimal but consistent with the organization's German identity, supporting legitimacy. Overall, the website is a credible, professional resource for the archaeology community with solid technical foundations and a good security posture. Enhancements in privacy compliance and formal security documentation would further strengthen trust and regulatory adherence.

L

Lukmann Consulting GmbH

alfright.eu

59

ALFRIGHT is a German-based company operated by Lukmann Consulting GmbH offering a digital GDPR compliance software solution called the DSGVO Website Butler. The platform automates website analysis for GDPR, BDSG, EU Cookie Directive, and TDDDG compliance, targeting companies across all industries and external data protection officers. The website positions ALFRIGHT as a trusted partner with multiple awards and certifications, emphasizing ease of use and rapid compliance. Technically, the site is built on WordPress with Elementor and Yoast SEO, incorporating modern web technologies and accessibility tools. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are absent. WHOIS data is privacy protected, which is typical for EU domains, and does not raise immediate concerns. Overall, ALFRIGHT presents a professional, trustworthy, and well-structured digital presence aligned with its business objectives.

A

Alfons W. Gentner Verlag GmbH & Co. KG

gentner.de

54

Alfons W. Gentner Verlag GmbH & Co. KG operates a specialized media publishing house focused on the building technology trade, serving professionals such as architects and technical planners. The company maintains a professional web presence with a clear focus on media services, events, and advertising within the energy and building sectors. Their market position is that of an established niche media provider with partnerships supporting the energy transition. Technically, the website is built on Drupal CMS, leveraging modern JavaScript libraries and Google Tag Manager for analytics and marketing. The site is mobile-optimized and accessible with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers and explicit security policies are absent. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

A

Alfons W. Gentner Verlag GmbH & Co. KG

gentnershop.de

48

Gentnershop.de is the online storefront for Alfons W. Gentner Verlag GmbH & Co. KG, a German media house specializing in publications related to craft, technology, and healthy living and working. The website offers subscription services and single-issue sales for various magazines and media products, targeting professionals and businesses in the energy and technical sectors. The company positions itself as a leading media brand in its markets, providing reliable products and solutions to support economic success. Technically, the site is built on Drupal 10 with Commerce 2, integrating modern marketing and privacy management SDKs such as Marfeel and a GDPR consent platform. The website is mobile-optimized and demonstrates good SEO and accessibility practices, though some accessibility features could be improved. Security-wise, the site enforces HTTPS and uses consent management for GDPR compliance but lacks explicit security headers and published security policies or incident response contacts. The WHOIS data is minimal but shows no signs of privacy protection or suspicious registration, supporting the legitimacy of the domain. Overall, the site is professional, secure, and compliant with privacy regulations, though it could enhance transparency around security policies and incident response.

W

WOGEMA Wohnungsgesellschaft Malchin mbH

wogema.de

59

WOGEMA Wohnungsgesellschaft Malchin mbH is a medium-sized real estate company based in Malchin, Germany, specializing in the rental, sale, and management of residential and commercial properties. The company emphasizes social and barrier-free housing solutions, serving residents and property clients in the Malchin region. Their business model focuses on providing comprehensive real estate services including property management, sales, and tenant support. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the website is built on the Mono CMS platform, utilizing modern web technologies such as JavaScript, jQuery, and Cookiebot for consent management. The site is mobile-optimized, accessible, and incorporates SEO best practices. Performance is moderate, with external dependencies on Google Analytics and other tracking services managed via explicit user consent. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms to comply with GDPR. However, security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and should be implemented to enhance protection. No critical vulnerabilities or exposed sensitive data were found. Incident response and security policies are not publicly documented, representing an area for improvement. Overall, the website presents a trustworthy and professional digital presence with good privacy compliance and moderate security posture. Strategic enhancements in security headers and incident response transparency would further strengthen the company's risk management and user trust.

R

Region Aachen

housing-emr.eu

46

Housing Monitor EMR is a regional government-backed project focused on providing transparent, cross-border housing market data for the Euregio Meuse-Rhine region. The website serves as a public resource aggregating demographic and housing industry statistics to support sustainable housing development. The project is led by Region Aachen and hosted by GeoDok GmbH, with partnerships across regional governments. Technically, the site uses standard web technologies with Matomo analytics for privacy-conscious user tracking. The site is accessible, mobile-optimized, and professionally designed, though it lacks some advanced SEO and accessibility features. Security posture is moderate with HTTPS implied but no explicit security headers or policies published. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism despite tracking usage. Overall, the site is trustworthy and legitimate, serving a niche government/non-profit role with good business credibility but room for improvement in security and privacy practices.

GeoDok Geoinformatik GmbH operates blis-online, a specialized business location information system designed to support municipalities, regions, and economic development agencies in managing and marketing commercial real estate. The platform integrates GIS technology with content management and offers modular features such as area monitoring, investor management, and integration with regional and international portals. With over 300 customers and recognition as a standard platform in NRW, Germany, blis-online holds a strong market position in its niche. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and jQuery, with external libraries like Font Awesome and Lightbox. The platform is cloud-based and mobile-optimized, though no major CMS or advanced frameworks are detected. Performance and SEO are adequate, but accessibility is basic. Security practices are moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. Security posture is generally sound with no visible vulnerabilities or exposed sensitive data. However, the absence of published security policies, incident response contacts, and cookie consent mechanisms indicates room for improvement in compliance and transparency. The WHOIS data is consistent and transparent, registered via a reputable German registrar, supporting the legitimacy of the domain and business. Overall, the website is professional, trustworthy, and well-aligned with its business objectives. Strategic improvements in security headers, privacy compliance, and incident response documentation would enhance its security posture and regulatory adherence.

GeoDok GmbH operates a specialized web platform focused on commercial real estate and industrial zones in the Aachen region of Germany. The site provides detailed search and mapping tools for businesses seeking commercial spaces, supporting regional economic development. The platform leverages modern web technologies including JavaServer Faces, PrimeFaces, Bootstrap, and OpenLayers for interactive mapping. Analytics are handled via Matomo, reflecting a moderate level of user tracking with some privacy considerations. Security posture is adequate but could be improved by implementing standard security headers and cookie consent mechanisms. The domain registration data aligns well with the website's regional focus and business purpose, supporting legitimacy. Overall, the site is professional and functional, serving a niche market effectively.

GERMAN.SITE is an online commercial real estate database platform focused on providing detailed information about available commercial properties primarily in North Rhine-Westphalia (NRW), Germany, and Europe. The platform supports businesses seeking investment locations by offering data on infrastructure, geographic location, and industry concentration, complemented by economic and industry atlases. The site is operated by GeoDok GmbH and partners with regional entities such as NRW.Global Business. Technically, the website is built on Java EE technologies using JSF and PrimeFaces, with modern frontend libraries like Bootstrap and jQuery. Cookie consent is managed via Cookiebot, reflecting GDPR compliance efforts. Security posture is moderate with room for improvement, particularly in implementing HTTP security headers and publishing security policies. Overall, the site is professional, well-branded, and trustworthy, serving a niche business audience effectively.

I

Invest in Mecklenburg-Vorpommern GmbH

investguide-mv.de

54

Invest in Mecklenburg-Vorpommern GmbH operates the Investguide MV website, a regional economic development platform providing a comprehensive database of over 300 commercial real estate locations in Mecklenburg-Vorpommern, Germany. The company supports businesses seeking to establish or expand operations in the region by offering detailed location data, expert consultation, and access to funding and networks. The website targets investors and companies interested in the region's strategic advantages such as skilled labor, infrastructure, and quality of life. Technically, the website employs common web technologies including jQuery, cookie consent scripts, lazy loading, and carousel plugins. It is mobile-optimized with good SEO practices and a clear navigation structure. The site uses HTTPS and implements a cookie consent mechanism compliant with GDPR, though explicit security headers are not evident from the provided data. From a security perspective, the site shows a moderate security posture with HTTPS enabled and no visible sensitive data exposure. However, the use of an older jQuery version and lack of detected security headers suggest room for improvement. No vulnerability disclosure or incident response information is provided, indicating potential gaps in formal security policies. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. The domain WHOIS data is minimal but consistent with the business claims. The site is free from adult or questionable content and provides clear contact information and social media presence. Strategic recommendations include enhancing security headers, updating libraries, and formalizing security and incident response policies.

A

AERZEN

aerzen.com

63

AERZEN is a well-established German manufacturer specializing in rotary lobe blowers, compressors, and turbo machinery with a history spanning over 150 years. The company targets industrial and energy sectors with high-quality engineering products and services. Their website reflects a mature digital presence built on TYPO3 CMS with modern frontend technologies, offering good user experience and mobile optimization. Security posture is strong with HTTPS, security headers, and CAPTCHA protections, although public security policies and incident response details are not disclosed. The absence of WHOIS data introduces some uncertainty about domain registration legitimacy, but the overall brand presence and certifications support trustworthiness. Strategic recommendations include publishing security policies and improving transparency around domain registration.

B

Bremicker Verkehrstechnik GmbH

bremicker-vt.de

34

Bremicker Verkehrstechnik GmbH is a leading German manufacturer specializing in traffic technology products and solutions since 1932. The company offers a broad portfolio including traffic signs, variable message signs, speed warning systems, parking management, and comprehensive training programs. With multiple locations and over 220 employees, Bremicker serves municipalities, traffic authorities, and related sectors with innovative and high-quality products. The website reflects a mature digital presence built on WordPress with Divi theme, integrating privacy-respecting analytics and modern UI/UX design. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and cookie consent mechanisms could be improved. Overall, the site demonstrates strong business credibility, professional content, and good compliance with GDPR requirements.

E

espas

espas.de

67

Espas GmbH operates a professional e-commerce platform specializing in playground equipment, play towers, sports equipment, and urban furniture, targeting municipalities, schools, and families primarily in Germany. The company emphasizes sustainability, German manufacturing, and quality, supported by a strong customer base of over 33,000 satisfied clients. The website is built on the Shopify platform, leveraging modern web technologies and third-party integrations such as Judge.me for customer reviews and hCaptcha for form security. The site is well-optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience. Security posture is strong with HTTPS, security headers, and secure payment processing, though explicit security and incident response policies are not publicly detailed. Overall, the business demonstrates a credible and trustworthy online presence with good privacy compliance and clear contact information.

A

Algeco GmbH

algeco.de

54

Algeco GmbH is a well-established German company specializing in the rental and sale of modular container buildings and related services. With over 60 years of experience and a broad European footprint, including 14 locations in Germany and multiple international subsidiaries, Algeco serves diverse sectors such as construction, education, healthcare, and retail. Their business model focuses on providing flexible, sustainable, and efficient space solutions supported by comprehensive 360° services including design, installation, and facility management. The website reflects a professional and mature digital presence with strong branding and clear service offerings. Technically, the website employs modern web technologies including Google Tag Manager, Matomo analytics, and Usercentrics for consent management, ensuring compliance with privacy regulations. The site is mobile-optimized, accessible, and performs moderately well. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the security posture is good but could benefit from publishing explicit security policies and incident response contacts. The site is free from adult or questionable content, targeting a general business audience. The domain registration data aligns with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, adding vulnerability disclosure information, and maintaining up-to-date third-party scripts to further strengthen security and trust.

A

Alfred Kärcher GmbH & Co. KG

kaercher.com

67

Alfred Kärcher GmbH & Co. KG is a globally recognized, family-owned enterprise specializing in manufacturing and distributing cleaning technology products, including pressure washers, steam cleaners, and professional cleaning machines. The company holds a strong market position as a leader in cleaning technology, serving both consumer and professional markets worldwide. Their website reflects a mature digital presence with comprehensive product information, support services, and corporate insights. Technically, the website employs modern web technologies such as Bootstrap, Adobe DTM, and OneTrust for consent management, ensuring a responsive and accessible user experience. Security-wise, the site enforces HTTPS and integrates cookie consent mechanisms, although explicit security headers could be more visible. The absence of detailed WHOIS data suggests privacy protection, which is reasonable for a large enterprise. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting Kärcher's brand reputation effectively.

E

ERNEUERBARE ENERGIEN

erneuerbareenergien.de

52

ERNEUERBARE ENERGIEN is a specialized German media outlet focused on renewable energy topics such as wind, solar, and bioenergy. It serves professionals, investors, municipalities, and energy providers with news, premium content, podcasts, and videos. The website is professionally designed and well-structured, supporting subscription and advertising business models. The parent company is Gentner Verlag, indicating a solid publishing background. Technically, the site runs on Drupal CMS with integration of multiple third-party advertising and tracking services managed through Google Tag Manager and a privacy management platform ensuring GDPR compliance. The site is mobile-optimized and accessible, with good SEO practices. Security posture is adequate with HTTPS and consent mechanisms, though explicit security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. Contact information is primarily via forms and subscription services, with no direct emails or phone numbers publicly listed. Social media presence is active across major platforms, enhancing trust and engagement. Overall, the site presents a credible, professional, and compliant digital presence in the renewable energy media sector.

C

C.A.R.M.E.N. e.V.

carmen-ev.de

45

C.A.R.M.E.N. e.V. is a German non-profit organization specializing in renewable energy, sustainable raw materials, and resource efficiency. The website serves as an information hub offering news, events, consulting services, and educational materials targeting professionals, researchers, and policymakers in the energy and sustainability sectors. The organization maintains a strong market position within Germany's renewable energy community, supported by active social media engagement and a comprehensive event calendar. Technically, the website is built on WordPress 6.8.1 with a modern tech stack including Yoast SEO Premium and the Modern Events Calendar plugin. It is hosted by iWelt AG, uses HTTPS with strong SSL configuration, and incorporates privacy and cookie consent mechanisms compliant with GDPR. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement, CAPTCHA on forms, and no visible vulnerabilities or exposed sensitive data. However, the site lacks a published security policy or vulnerability disclosure mechanism, which could be improved to enhance trust and incident readiness. Overall, the website is professional, trustworthy, and well-maintained, with no blocking or WAF interference detected. Strategic recommendations include implementing a security policy page, adding a security.txt file, and enhancing security headers to further strengthen the security posture.

S

Stepstone

stepstone.de

66

Stepstone is a leading online job portal primarily serving the German market, offering a platform for job seekers and employers to connect. The website provides access to over 150,000 current job listings and emphasizes helping users find the right job with top employers. The business model centers on recruitment services and job advertising. Technically, the site employs modern web technologies including React, Redux, and integrates advanced analytics and optimization tools such as Optimizely and Datadog RUM. The infrastructure is supported by Akamai CDN, ensuring fast and reliable content delivery. Security posture is strong with HTTPS enforcement and multiple security headers, though explicit security policies and incident response contacts are not publicly available. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a clearly accessible privacy policy and terms of service. Overall, the website is professional, well-branded, and trustworthy, with room for improvement in transparency and contact information.

M

Museum Dargun

museum-dargun.de

40

Museum Dargun is a regional cultural institution in Germany focusing on everyday history and local heritage with a large exhibition space and multiple thematic areas. The website serves as an informational portal for visitors, showcasing exhibits, events, and news. The technical infrastructure is basic, relying on static HTML and JavaScript with no modern CMS or frameworks detected. The site lacks mobile optimization and accessibility features, indicating limited digital maturity. Security posture is weak, with no HTTPS enforcement or security headers visible, and no privacy or cookie consent mechanisms implemented. Overall, the site is functional but outdated and requires modernization to improve security, privacy compliance, and user experience.

F

Förderverein des slawischen Brauchtums Neustrelitz e.V.

slawendorf-neustrelitz.de

45

Slawendorf Neustrelitz is a cultural heritage site and experiential village located at Zierker See in Germany, focusing on the historical period of Slavic settlement from the 6th to 12th centuries. The organization operates as a small non-profit entity under the Förderverein des slawischen Brauchtums Neustrelitz e.V., with ProKultur gGmbH as the parent company. The site offers visitors authentic historical experiences, workshops, and seasonal events, targeting families and cultural tourists. The website reflects a consistent brand and provides relevant information about opening hours, events, and the village's history. Technically, the website uses a traditional tech stack including jQuery and Bootstrap, hosted by webgo.de. The site is moderately optimized for performance and mobile devices, with good SEO practices evident in meta tags and structured navigation. However, the presence of multiple jQuery versions and lack of visible security headers indicate some technical debt and potential security risks. No CMS or advanced frameworks were detected. From a security perspective, the site employs cookie consent mechanisms and does not expose sensitive data in the HTML. The SSL configuration and security headers could not be fully assessed but should be verified and enhanced. No incident response or security policy documentation is present. The WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the site is safe, family-friendly, and trustworthy but could improve its security posture and technical modernization. The overall risk is low, with recommendations focusing on technical improvements, security hardening, and enhanced compliance documentation to strengthen trust and resilience.

S

Schloss Kummerow

schloss-kummerow.de

58

Schloss Kummerow is a cultural heritage site located in Mecklenburg-Vorpommern, Germany, offering photographic collections, exhibitions, and event hosting services including weddings and guided tours. The website targets visitors interested in cultural events and photography, positioning itself as a significant regional venue with a focus on baroque architecture and modern photographic art. The business model revolves around cultural tourism and event rental services. Technically, the site is built on WordPress with a mature plugin ecosystem including Yoast SEO, Borlabs Cookie for GDPR compliance, and Smart Slider 3 for visual content. Hosting is provided by kasserver.com, and the site uses HTTPS with good SSL configuration. Marketing and analytics tools include Facebook Pixel and Google Tag Manager, indicating moderate user tracking with GDPR-compliant consent mechanisms. Security posture is solid with HTTPS and cookie consent but lacks published security policies or incident response information. No critical vulnerabilities or suspicious WHOIS patterns were detected. Overall, the site is professional, well-branded, and trustworthy, serving a niche cultural audience effectively.

Staatliche Schlösser und Gärten M-V is an official government entity managing historic castles, gardens, and cultural heritage sites in Mecklenburg-Vorpommern, Germany. The website serves as a portal for visitors and tourists to explore events, tours, and digital museum experiences. It targets a broad audience including families, cultural tourists, and B2B tourism groups. The organization holds a strong market position as the official state institution for cultural heritage in the region. Technically, the website is built on WordPress 6.4.1 with a modern tech stack including jQuery, Swiper.js for sliders, Matomo for analytics, and Google reCAPTCHA v3 for form security. The site is hosted likely by mvnet.de, uses HTTPS with good SSL configuration, and implements cookie consent mechanisms for GDPR compliance. Mobile optimization and navigation are good, though accessibility could be improved. Security posture is solid with HTTPS, reCAPTCHA, and privacy-focused analytics, but lacks explicit security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is evident through a privacy policy and cookie banner, but terms of service and vulnerability disclosure are absent. Overall, the website is professional, trustworthy, and well-maintained, supporting the organization's mission to promote cultural heritage and tourism. Strategic improvements could focus on enhancing security headers, publishing security policies, and improving accessibility to further strengthen trust and compliance.

S

Schliemann-Museum

schliemann-museum.de

46

The Schliemann Museum Ankershagen is a cultural institution dedicated to preserving and presenting the life and work of Heinrich Schliemann, a notable archaeologist and businessman. The museum offers exhibitions, educational programs, and events targeting families, school groups, and cultural enthusiasts. It holds a respected position regionally with national cultural significance, operating under the MuSeEn gGmbH umbrella. The website reflects this mission with clear, well-structured content and a focus on accessibility and visitor information. Technically, the website is built on TYPO3 CMS with modern front-end frameworks like Bootstrap and jQuery, ensuring a responsive and user-friendly experience. Hosting is stable with German providers, and performance is moderate with good SEO and accessibility practices. The site employs a cookie consent mechanism compliant with GDPR, and integrates Google Tag Manager for analytics. From a security perspective, the site enforces HTTPS and uses cookie consent controls but lacks explicit published security policies or incident response contacts. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the website content and hosting, indicating legitimacy and trustworthiness. Overall, the website is professional, secure, and compliant with privacy regulations, serving its cultural and educational purpose effectively. Strategic improvements could include publishing formal security and incident response policies and enhancing security headers to further strengthen the security posture.

R

Regionalmuseum Neubrandenburg

museum-neubrandenburg.de

55

The Regionalmuseum Neubrandenburg is a regional cultural institution focused on preserving and presenting the history and traditions of Neubrandenburg and its surroundings. The website offers information about exhibitions, educational programs, events, and research activities, targeting local residents, families, schools, and cultural enthusiasts. The museum operates as a public or non-profit entity, providing accessible cultural content in German. Technically, the website uses a custom CMS likely provided by Advantic Systemhaus GmbH, with a technology stack including jQuery, Flexslider, and Highslide. While the site is functional and well-structured with good content quality and navigation, it uses outdated JavaScript libraries that pose potential security risks. The site includes a cookie consent banner and a privacy policy, indicating GDPR compliance efforts. Security posture is moderate, with no explicit security headers detected and unknown SSL configuration. Analytics are performed using Piwik (Matomo), respecting privacy considerations. Overall, the website is trustworthy and professional but would benefit from technical updates and enhanced security measures.

M

Museumsverein Malchin e.V.

museum-malchin.de

53

The Museum Malchin website represents a small, regional non-profit museum focused on the cultural and historical heritage of Malchin and the Mecklenburgische Schweiz region in Germany. The museum offers exhibitions and guided tours, targeting tourists and local visitors interested in regional history. The website is built on the IONOS MyWebsite platform, using standard web technologies such as HTML5, CSS3, and JavaScript with jQuery. It is hosted by IONOS and uses HTTPS, ensuring secure connections. However, the site lacks advanced security headers and privacy compliance mechanisms such as a privacy policy or cookie consent banner. Contact information is clearly provided, enhancing business credibility. No forms or tracking scripts are present, indicating minimal data collection.

H

Höhenburg Stargard

hoehenburg-stargard.de

47

Höhenburg Stargard is a historic medieval hill castle located in Northern Germany, serving as a cultural heritage site and tourist attraction. The website presents detailed information about the castle's history, visitor experiences, events, and services such as weddings and gastronomy. It targets history enthusiasts, families, and tourists interested in medieval culture and regional heritage. Technically, the site is built on WordPress using the Avada theme and Slider Revolution plugin, with Borlabs Cookie managing GDPR-compliant cookie consent. The site is well-optimized for mobile and SEO, with moderate performance and basic accessibility features. Security posture is good with HTTPS and cookie consent, though some security headers could be improved. No critical vulnerabilities or suspicious indicators were found. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting its role as a regional cultural and tourism platform.

Luftfahrttechnisches Museum Rechlin e.V. is a small non-profit museum located in Germany, dedicated to the history and technology of aviation and military developments in the Rechlin region. The museum operates in historic buildings formerly used by the Luftwaffe and later Soviet forces, offering exhibitions on German and Soviet aviation, shipbuilding, and military history. It is supported by two volunteer associations and funded through entrance fees, donations, and memberships. The museum also engages in digital innovation through an augmented reality project funded by the German federal government. Technically, the website is built on the Contao CMS platform with Bootstrap and jQuery, providing a modern, mobile-optimized user experience. The site includes a cookie consent mechanism and basic SEO metadata but lacks advanced security headers and analytics tracking. Hosting appears to be managed via your-server.de, a known hosting provider. From a security perspective, the site uses HTTPS and implements cookie consent, but no explicit security or incident response policies are published. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is minimal but consistent with a legitimate small non-profit entity. No WAF or blocking mechanisms interfere with content access. Overall, the website is professional, trustworthy, and suitable for its target audience of history and aviation enthusiasts. Recommendations include enhancing security headers, publishing security and incident response policies, and considering a vulnerability disclosure policy to improve trust and compliance.

L

Leea MV GmbH

leea-mv.de

59

Leea MV GmbH operates as a regional competence center for renewable energies in Mecklenburg-Vorpommern, Germany. The company focuses on education, awareness, and community engagement through its Erlebniswelt, Energie Lab, Leea Akademie, and event hosting services. The website reflects a medium-sized organization with a clear mission to promote renewable energy understanding and participation among the general public. The business model is primarily educational and event-based, targeting families, schools, and stakeholders interested in sustainability and energy topics. Technically, the website is built on WordPress 6.8.1 with common libraries such as jQuery and Bootstrap, and uses modern sliders and carousels for content presentation. Cookiebot is integrated for GDPR-compliant cookie consent management, indicating a mature approach to privacy compliance. The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms effectively. However, it lacks explicit security headers and does not provide a dedicated security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration data is consistent and trustworthy, supporting the legitimacy of the business. Overall, the website presents a professional and trustworthy digital presence with good privacy compliance and moderate technical sophistication. Strategic improvements in security headers, incident response transparency, and contact information clarity would enhance the security posture and user trust.

K

Kunstsammlung Neubrandenburg

kunstsammlung-neubrandenburg.de

57

Kunstsammlung Neubrandenburg is a regional cultural institution and art collection based in Neubrandenburg, Germany. The website serves as an information portal for exhibitions, events, and cultural programs, targeting art enthusiasts and the general public. The business model focuses on providing access to art and cultural heritage through exhibitions and educational activities. The website is professionally designed with consistent branding and clear navigation, reflecting a small but established institution.

W

Waren (Müritz) Kur- und Tourismus GmbH

waren-tourismus.de

49

Waren (Müritz) Kur- und Tourismus GmbH operates a comprehensive regional tourism website focused on the Mecklenburg Lake District in Germany. The site provides extensive information on accommodation, events, and visitor services, targeting tourists and visitors to the region. The business model centers on tourism promotion and facilitating bookings, positioning itself as a key regional tourism authority. The website content is well-structured, professionally designed, and consistent with the brand identity, offering a positive user experience with clear navigation and mobile optimization. Technically, the website is built on Drupal CMS, leveraging modern JavaScript libraries such as Leaflet for maps, Swiper for sliders, and Klaro for consent management. It integrates Google Analytics for visitor tracking with privacy-conscious settings like IP anonymization. The site uses HTTPS and demonstrates good security practices, although some security headers could be improved. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site enforces HTTPS and manages cookie consent effectively, aligning with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a published security policy or incident response contact suggests room for maturity in security governance. The WHOIS data is limited but consistent with a legitimate regional tourism entity. Overall, the website presents a trustworthy, professional, and user-friendly platform for regional tourism promotion. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility compliance to further strengthen the site's security posture and user trust.

I

Inselstadt Malchow

inselstadt-malchow.de

65

Inselstadt Malchow operates as a municipal government website serving the local community and tourists in the Mecklenburgische Seenplatte region of Germany. The site provides comprehensive information about local government services, tourism, events, and community resources. It is well-positioned as an official source for residents and visitors, with a clear focus on public administration and regional promotion. The website leverages a modern technical infrastructure based on Bootstrap, jQuery, and a specialized CMS platform (verwaltungsportal.de), hosted on rzone.de servers. The site is mobile optimized, accessible, and demonstrates good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies could be improved. Overall, the site is trustworthy, professional, and aligned with its governmental purpose.

K

Konzertkirche Neubrandenburg

konzertkirche-nb.de

49

Konzertkirche Neubrandenburg is a cultural venue located in the historic Marienkirche, offering a unique combination of acoustic and architectural experiences. The website serves as an information hub for concerts, visitor information, and cultural events, targeting music lovers and tourists in the region. The business model relies on event hosting, ticket sales, and public and private sponsorships. Technically, the site is built on WordPress with modern JavaScript libraries and includes a cookie consent mechanism compliant with GDPR. Security posture is solid with HTTPS and cookie management, though some security headers could be improved. Overall, the site is professional, accessible, and trustworthy, with no critical vulnerabilities detected.

M

Mecklenburgische Kleinseenplatte

klein-seenplatte.de

52

The website www.klein-seenplatte.de serves as a regional tourism portal for the Mecklenburgische Kleinseenplatte area in Germany. It provides visitors with information about the natural landscape, outdoor activities such as cycling, hiking, and water sports, as well as accommodation and event details. The site targets tourists and outdoor enthusiasts seeking to explore this scenic region. Technically, the website is built on Joomla CMS, utilizing common web technologies including jQuery, Google Analytics, and Facebook SDK for social media integration. The site is moderately optimized for mobile devices and SEO, with clear navigation and consistent branding. Security-wise, the site uses HTTPS with anonymized IP tracking in Google Analytics and includes CSRF tokens in Joomla scripts, but lacks advanced security headers and a vulnerability disclosure policy. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is functional, professional, and trustworthy for its purpose, though improvements in security and privacy compliance are recommended.

L

Literaturzentrum Neubrandenburg e.V.

literaturzentrum-nb.de

47

Literaturzentrum Neubrandenburg e.V. is a well-established cultural non-profit organization founded in 1971, dedicated to promoting literature and reading culture in Neubrandenburg and its region. It operates the Brigitte-Reimann-Literaturhaus, offering literary programs, archival resources, and exhibitions. The organization enjoys regional, national, and international recognition, supported by local government and cultural ministries. The website reflects this mission with clear content and a professional presentation. Technically, the website is built on Joomla CMS with Bootstrap 5 and jQuery, ensuring a modern and responsive design. Hosting is managed via kasserver.com, and the site employs HTTPS with a cookie consent mechanism, indicating awareness of privacy compliance. However, some security headers and advanced security policies are not evident, suggesting room for improvement. Security posture is moderate with no visible vulnerabilities or exposed sensitive data. Privacy compliance is good, with a privacy policy and cookie consent present. No incident response or vulnerability disclosure information is provided, which could be enhanced to improve trust. Overall, the website is trustworthy, professionally maintained, and suitable for its cultural non-profit purpose. Strategic recommendations include enhancing security headers, adding explicit security and incident response policies, and possibly integrating analytics with privacy considerations.

A

AGRONEUM Alt Schwerin

agroneum-altschwerin.de

45

AGRONEUM Alt Schwerin is a well-established open-air museum located in Alt Schwerin, Germany, dedicated to showcasing the agricultural history of Mecklenburg. With a history spanning over 60 years, the museum offers extensive exhibitions, workshops, events, and hospitality services including a restaurant and farm shop. The website reflects a regional cultural institution targeting families, school groups, and tourists interested in agriculture and history. The business model combines cultural heritage preservation with educational and hospitality services, positioning AGRONEUM as a key regional attraction with a consistent brand and trust indicators such as certifications and social media presence. Technically, the website is built on the Contao CMS platform, utilizing modern frontend technologies like jQuery and Swiper.js, hosted on a stable provider with good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is strong with clear GDPR-aligned policies and consent mechanisms. Overall, the site is professional, trustworthy, and content-rich, supporting the museum's mission effectively.

3

3 Königinnen Palais

3koeniginnen.de

45

3 Königinnen Palais is a cultural and historical exhibition center located on the Schlossinsel Mirow in Germany. It offers an interactive exhibition focused on the history of the Mecklenburg-Strelitz region and the lives of three princesses who became European queens. The site targets tourists, families, school groups, and history enthusiasts, providing guided tours, special exhibitions, events, a museum shop, and a café. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content in German. It uses the Contao CMS platform with modern frontend libraries such as jQuery and Swiper.js. Hosting is provided via rzone.de nameservers, indicating a stable infrastructure. The website enforces HTTPS and includes a GDPR-compliant cookie consent mechanism and privacy policy. Contact information is clearly presented, including phone, email, and physical address. Social media presence on Facebook and Instagram supports community engagement. However, no explicit security policy or incident response information is published, and no terms of service page was found.

C

come2print e.K.

campinginfo24.de

45

campinginfo24.de is a specialized media platform focused on providing an efficient supplier and manufacturer search service for campsite operators in Germany, Austria, and Switzerland. The platform combines an online directory with print and digital magazines, offering industry news and advertising opportunities. The business operates as a small media company under come2print e.K., targeting a niche market within the camping industry. Technically, the website is built on Drupal 7 with common modules and uses older JavaScript libraries, indicating some technical debt but overall functional infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and cookie consent mechanisms compliant with GDPR, but lacks advanced security headers and uses outdated JavaScript libraries, which pose potential risks. No explicit security policies or incident response contacts are published. Overall, the website is trustworthy and professional but could improve its security posture and technical modernization to reduce risks and enhance compliance.

C

come2print e.K.

planerinfo24.de

41

planerinfo24.de is a specialized media portal and magazine serving planners, architects, and municipalities primarily in Germany, Austria, and Switzerland. It offers a cross-media platform including print and digital magazines, an online portal for supplier and manufacturer searches, and advertising services. The business is operated by come2print e.K., a small media company founded in 2014. The website is professionally designed with good content relevance and clear navigation, targeting a niche audience in the architecture and planning sector. Technically, the site runs on Drupal 7 CMS with legacy jQuery libraries, hosted likely by 1&1 IONOS. While the site uses HTTPS and implements GDPR-compliant cookie consent, the use of outdated CMS and libraries poses security risks. No explicit security or incident response policies are published. Overall, the site is trustworthy and compliant but would benefit from modernization and enhanced security practices.

The website www.co2-ampelshop.de is an e-commerce platform operated by come2print eK, specializing in CO2 measuring devices targeted primarily at schools, kindergartens, and municipal institutions in Germany. The business has been established since at least 2013 and positions itself as a niche provider in the education sector for indoor air quality monitoring solutions. The site offers clear product information, legal pages, and customer contact options, reflecting a professional and focused business model. Technically, the website is built on WordPress with WooCommerce, utilizing common plugins such as Rank Math SEO and Contact Form 7. The site is moderately optimized for performance and mobile use, with good SEO practices including structured data. Hosting is provided via rzone.de, and the site uses HTTPS, though lacks advanced security headers and cookie consent mechanisms. From a security perspective, the site demonstrates basic best practices such as HTTPS and nonce tokens in forms but lacks published security policies, incident response contacts, and cookie consent banners, which are important for GDPR compliance. No critical vulnerabilities or malicious content were detected. The WHOIS data aligns well with the business claims, indicating legitimacy and consistency. Overall, the website presents a trustworthy and professional front for a small specialized e-commerce business. Improvements in security headers, privacy compliance (cookie consent), and incident response transparency would enhance the security posture and regulatory compliance.

N

neue energie

neueenergie.net

52

Neue energie is a specialized German media outlet focusing on climate protection and the energy transition, providing in-depth reports, interviews, and background information on renewable energy topics. The website demonstrates a professional and consistent brand presence with comprehensive content tailored to a broad audience interested in energy and environmental issues. Technically, the site employs modern JavaScript-based tools including ConsentFriend for cookie management and PiwikPro for analytics with privacy-conscious IP anonymization. However, the absence of WHOIS registration data raises questions about domain legitimacy, though the website content itself appears credible and well-maintained. Security posture is moderate with room for improvement in implementing security headers and explicit incident response policies. Overall, the site is accessible, well-structured, and GDPR compliant, but domain registration transparency should be addressed to enhance trust.

W

Windindustrie in Deutschland

windindustrie-in-deutschland.de

48

Windindustrie in Deutschland is a leading German industry portal dedicated to the wind energy sector, operated as a project of the Bundesverband WindEnergie (BWE). The website provides comprehensive expert knowledge, company directories, job listings, event information, and industry news, targeting professionals and companies involved in wind energy. It holds a strong market position as a specialized platform within Germany's renewable energy landscape. Technically, the website employs a modern tech stack including Google Tag Manager, Piwik PRO analytics, and Revive Adserver for advertising. It is hosted on Hetzner servers, uses HTTPS, and incorporates responsive design principles for mobile optimization. The site demonstrates good SEO and accessibility practices, though some security headers could be improved. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, the site could enhance its security posture by implementing additional HTTP security headers and ensuring robust form protections. Overall, the website presents a professional and trustworthy image with strong business credibility supported by its affiliation with BWE and active social media presence. The risk profile is low, with no indications of malicious activity or content safety concerns. Strategic recommendations include enhancing security headers, continuous monitoring of third-party scripts, and expanding direct contact information for improved user trust.

L

Landesverband der CDU Mecklenburg-Vorpommern

cdu-mv.de

50

The website for Landesverband der CDU Mecklenburg-Vorpommern serves as the official digital presence of the regional political party branch. It provides comprehensive information about the party's political decisions, organizational structure, events, and membership services, targeting citizens and politically engaged individuals in Mecklenburg-Vorpommern. The site features a podcast and news updates, enhancing engagement with its audience. Technically, the website is built on WordPress using the Divi theme and several plugins including Ultimate Member and Podlove Podcasting, indicating a mature and extensible infrastructure. The hosting appears to be managed via kasserver.com, a known hosting provider. Security-wise, the site enforces HTTPS, uses Google reCAPTCHA to prevent spam, and implements a GDPR-compliant cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected, though some security headers could be improved. Overall, the site demonstrates good privacy compliance and business credibility, with clear contact information and trust signals. The domain registration is consistent with the website's purpose and shows no suspicious patterns. Strategic recommendations include enhancing security headers, documenting incident response policies, and continuing regular updates to maintain security and compliance.