Germany security reports

Fachvereinigung Betriebs- und Regenwassernutzung e.V. (fbr) is a German non-profit association dedicated to promoting the use and management of operational and rainwater. The website serves as an information hub offering publications, campaigns, and advocacy aimed at professionals such as builders, municipal employees, planners, and experts in water sustainability. The organization holds a recognized position within Germany's environmental and water management sector, providing valuable resources and membership benefits. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and employs common web technologies including jQuery and Google Analytics for tracking. The site is moderately optimized for performance and mobile use, with a clear navigation structure and professional design. Privacy and cookie policies are present with consent mechanisms, reflecting basic GDPR compliance. From a security perspective, the site uses HTTPS and secure form inputs but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's purpose, showing consistent and transparent domain registration without privacy protection, appropriate for a non-profit entity. Overall, the website is trustworthy, professionally maintained, and provides valuable content to its target audience. However, improvements in security headers, incident response documentation, and enhanced accessibility could further strengthen its posture.

T

teampenta GmbH & Co. KG

teampenta.eu

48

teampenta GmbH & Co. KG is a small German consultancy specializing in digital strategy and brand consulting, aiming to foster business growth through integrated digital processes and brand development. The company targets businesses seeking comprehensive digital and branding solutions. The website is professionally designed using WordPress and Elementor, hosted by Vautron Rechenzentrum AG, and employs modern SEO and caching technologies. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks security headers and formal privacy or cookie policies, indicating room for compliance improvement. Overall, the site is safe, business-focused, and trustworthy, though privacy compliance and security practices could be enhanced.

D

Deutscher Stahlbau-Verband DSTV e.V.

deutscherstahlbau.de

56

The Deutscher Stahlbau-Verband DSTV is a prominent German industry association representing approximately 350 medium-sized steel construction companies, suppliers, engineering firms, and academic institutions. The organization focuses on advocacy, certification, knowledge sharing, and event organization within the steel construction sector. The website is built on TYPO3 CMS with a modern Bootstrap-based design, offering good mobile optimization and accessibility. It features comprehensive content relevant to its target audience of industry professionals and stakeholders. Security-wise, the site enforces HTTPS, employs a GDPR-compliant cookie consent mechanism, and uses Google Analytics with IP anonymization. However, it lacks explicit security policies and incident response contacts. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

V

Verband für Dämmsysteme, Putz und Mörtel e.V.

wdvs-planungsatlas.de

55

The website wdvs-planungsatlas.de is a specialized German platform providing free CAD details and technical construction resources focused on thermal insulation composite systems (WDVS). It is operated by the Verband für Dämmsysteme, Putz und Mörtel e.V., a construction industry association. The site targets architects, planners, and construction professionals seeking optimized construction details for energy-efficient building envelopes. The business model centers on offering free technical content and research reports to support planning and compliance with thermal protection standards. The site is positioned as a niche authoritative resource within the German construction sector. Technically, the website uses a traditional web stack with jQuery, jQuery UI, FancyBox, and Piwik/Matomo analytics. It employs cookie consent mechanisms and CSRF tokens in forms, indicating moderate digital maturity and privacy awareness. The site is mobile optimized with SVG graphics and structured navigation, though no CMS or hosting details are evident. Performance is moderate with room for improvement in security headers and advanced SEO. From a security perspective, the site uses HTTPS and cookie consent but lacks visible HTTP security headers such as CSP or HSTS. No vulnerability disclosure or incident response information is provided. The login form includes CSRF protection, but no phone or physical address contact details are listed, limiting direct support channels. WHOIS data is minimal but consistent with the site's German construction association identity. Overall, the security posture is moderate with recommendations to enhance header policies and publish security policies. The overall risk assessment is low; the site is professional, trustworthy, and compliant with GDPR through its privacy and cookie policies. Strategic recommendations include improving security headers, publishing terms of service and security policies, and enhancing contact transparency to strengthen trust and compliance.

C

Contec Deutschland GmbH

contec-de.com

57

Contec Deutschland GmbH is a medium-sized German company specializing in flat roofing, green roofing, energy solutions, and water management systems. Established in 2014, the company targets professional clients in construction and environmental sectors, offering a range of specialized services including flat roofs, roof greening, energy-efficient roofing, and water-related solutions. The website reflects a professional B2B business model with consistent branding and clear navigation. Technically, the site uses a Cloudrexx CMS with a mix of legacy and modern JavaScript libraries, including jQuery 1.9.1 and Bootstrap 3.3.7, and integrates marketing and analytics tools such as Google Tag Manager and Newsletter2Go. Security posture is generally good with HTTPS enforced and domain transfer protection, but could be improved by enabling DNSSEC and updating outdated libraries. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy and professionally maintained, though some technical and security enhancements are recommended.

C

Cobiax

cobiax.com

50

Cobiax is an international company specializing in voided slab technology for the construction industry, offering innovative and sustainable building solutions. Their product lines include Cobiax CLS and SL, supported by software tools like CQL for design and planning. The company targets architects, builders, and innovators, positioning itself as a leader with a 'Made in Germany' reputation and worldwide presence. The website is professionally designed using AMP technology, ensuring fast performance and excellent mobile optimization. Privacy compliance is addressed with a cookie consent mechanism and a comprehensive privacy policy. However, the absence of WHOIS data for the domain www.cobiax.com introduces uncertainty about domain registration legitimacy. Security posture is generally good with HTTPS and cookie consent, but lacks explicit security headers and published incident response information. Overall, the website reflects a mature digital presence with room for improvement in transparency and security disclosures.

C

ClayTec GmbH & Co. KG

claytec.de

53

ClayTec GmbH & Co. KG is a medium-sized, family-owned German company specializing in the production and distribution of sustainable clay-based building materials. With over 40 years of experience, the company positions itself as a leader in circular and climate-friendly construction solutions, targeting construction professionals, architects, and environmentally conscious consumers. The website reflects a professional and comprehensive digital presence, offering detailed product information, application techniques, and a partner network. Technically, the site is built on WordPress with modern JavaScript libraries and SEO optimizations, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.

C

CLAGE GmbH

clage.de

64

CLAGE GmbH is a German-based company specializing in decentralized warm water supply solutions, including a wide range of instantaneous water heaters, warm water storage, and Zip water systems. The company holds a market-leading position in small instantaneous water heaters and offers extensive product consultation, support, and training services. Their website is professionally designed, well-structured, and targets end consumers, architects, planners, and partners in the energy and water heating sector. Technically, the website uses a mix of legacy and modern JavaScript libraries, with moderate performance and good mobile optimization. Security posture is generally good with HTTPS enforced and cookie consent mechanisms, but lacks some advanced security headers and uses an outdated jQuery version, which could pose risks. The absence of WHOIS registration data is a concern but does not detract significantly from the website's credibility given the professional presentation and active content. Overall, the website demonstrates a mature digital presence with room for security and compliance improvements.

C

CarStorCon® Technologies GmbH

carstorcon.technology

51

CarStorCon® Technologies GmbH is a German-based innovative company specializing in climate-positive building materials, particularly CO2-neutral concrete and asphalt solutions using their proprietary Clim@Add® additive technology. The company targets manufacturers, builders, and architects aiming to decarbonize the construction industry. Their market position is that of a niche technology provider with certified CO2 neutrality, emphasizing sustainability and material innovation. Technically, the website is built on a modern WordPress platform with Elementor and Yoast SEO, supported by Google Analytics and Weglot for multilingual capabilities. Security posture is solid with HTTPS, domain locking, and cookie consent mechanisms, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is partial, with cookie consent present but no visible privacy policy or terms of service. Overall, the website is professional, well-branded, and trustworthy, with no signs of malicious content or blocking mechanisms.

C

C. Hasse & Sohn

hasse.info

54

C. Hasse & Sohn is a well-established German company specializing in roofing and building protection systems, including flat roof membranes, green roof solutions, building waterproofing, liquid plastics, and thermal insulation materials. With a history spanning over 150 years, the company serves construction professionals, architects, and planners, offering both products and technical consulting. Their market position is that of a reputable regional player with a specialized product portfolio and certifications such as ISO 50001. The website reflects a professional and consistent brand image, with comprehensive contact information and trust indicators like certification badges and a Kununu Top Company award. Technically, the site is built on WordPress with WooCommerce and the Enfold theme, leveraging modern web technologies and providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong, with a detailed privacy policy and cookie management. Overall, the site is trustworthy, professional, and well-maintained, supporting the company's business credibility and digital presence.

B

Betonwerk Büscher GmbH & Co. KG

zurueckfuerdiezukunft.de

61

Betonwerk Büscher GmbH & Co. KG operates the website zurueckfuerdiezukunft.de, focusing on sustainable construction materials, specifically recycling concrete products certified by the German Institute for Building Technology (DIBt). The company is a pioneer in Germany, offering innovative building elements made from 100% recycled natural stone substitutes, targeting construction firms and licensees interested in eco-friendly building solutions. The website is built on a modern WordPress platform with Elementor and Yoast SEO, ensuring good technical maturity and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, with clear contact information and social media presence supporting business credibility.

B

btf Innovationen für den Bau GmbH

btf-innovationen.de

46

btf Innovationen für den Bau GmbH is a specialized manufacturer and distributor of innovative building sealing and insulation products, focusing on impact sound insulation, moisture barriers, and waterproofing solutions for floors, walls, and roofs. The company targets construction professionals and distributors primarily in Germany, positioning itself as a niche innovator with strong partnerships. The website is built on TYPO3 CMS and employs modern web technologies, providing a professional and user-friendly experience with multilingual support. Security posture is solid with HTTPS and CAPTCHA protections, though some improvements in security headers and cookie consent mechanisms are recommended. Overall, the site reflects a credible and trustworthy business with comprehensive product information and clear contact channels.

B

bluMartin GmbH

blumartin.de

62

bluMartin GmbH operates a professional website focused on decentralized residential ventilation systems with heat recovery, targeting builders, architects, and installers primarily in Germany. The company positions itself as a specialized provider of energy-efficient ventilation solutions, offering products, planning support, and after-sales services. The website is well-structured, content-rich, and supported by certifications and customer testimonials, indicating a strong market presence in its niche. Technically, the site is built on WordPress using modern plugins and themes, with good mobile optimization and SEO practices. It employs lazy loading and integrates Facebook Pixel for marketing analytics. Security-wise, the site enforces HTTPS and cookie consent but lacks explicit security headers and a published security policy. No vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a mature digital infrastructure with good privacy compliance and business credibility. However, it could improve by publishing a formal security policy and enhancing HTTP security headers. The domain WHOIS data is minimal but consistent with the business profile, supporting legitimacy. Strategic recommendations include strengthening security posture, enhancing transparency on incident response, and maintaining up-to-date software to mitigate risks.

B

bito Aktiengesellschaft

bito-ag.de

51

bito Aktiengesellschaft is a well-established German manufacturer and distributor specializing in paints, floor coverings, and thermal insulation composite systems. With over 40 years of presence primarily in Berlin, Hamburg, and Brandenburg, the company serves professional audiences including painters, floor layers, architects, and planners. Their business model focuses on B2B sales combined with direct logistics to construction sites, positioning them as a reliable regional brand in the manufacturing and retail sectors. The website reflects this professional orientation with clear service offerings and contact information.

B

BIRCO GmbH

birco.de

52

BIRCO GmbH operates as a specialized manufacturer and system provider in the drainage and water management sector, focusing on sustainable solutions for rainwater treatment, retention, and infiltration. The company offers a broad portfolio of products including drainage channels, infiltration trenches, and related infrastructure components, supported by digital tools and project management services. Their website reflects a mature digital presence with comprehensive product information, clear navigation, and multi-language support targeting construction professionals and planners primarily in Germany and neighboring countries. Technically, the site is built on TYPO3 CMS with modern frameworks and includes robust security measures such as HTTPS and security headers. Privacy compliance is well addressed with explicit cookie consent mechanisms and detailed privacy policies. However, the site lacks a dedicated security policy and incident response contact details, which could enhance trust and transparency. Overall, BIRCO GmbH presents a professional, secure, and user-friendly online presence aligned with its business objectives.

B

Binné & Sohn GmbH & Co.KG

binne.de

54

Binné & Sohn GmbH & Co.KG is a medium-sized German manufacturer specializing in secure roofing solutions, including flat roof sealing, insulation, and green roofing products. The company operates with a strong regional presence in northern Germany, offering a comprehensive product range manufactured in-house and supported by technical planning and consulting services. Their website reflects a professional and consistent brand image, targeting construction professionals, architects, and contractors. Technically, the site is built on WordPress with modern optimization and consent management tools, ensuring good performance and compliance with privacy regulations. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be enhanced. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness.

B

BETOMAX Systems GmbH & Co. KG

betomax.de

51

BETOMAX Systems GmbH & Co. KG is a well-established German company specializing in intelligent products and solutions for constructive concrete and civil engineering. With over six decades of experience and presence in more than 25 countries, BETOMAX is a leading supplier in reinforcement technology, formwork technology, and bridge construction technology. Their target audience includes construction managers, planners, structural engineers, and precast concrete manufacturers. The company offers a broad portfolio of products and services tailored to the construction industry, emphasizing innovation and system solutions. Technically, the website is built on Concrete CMS and utilizes modern web technologies including jQuery and FontAwesome. The site features multimedia content such as product and image videos, and is optimized for mobile devices with good navigation and SEO practices. While the site uses HTTPS and includes anti-bot measures on forms, there is room for improvement in security headers and cookie consent mechanisms. From a security perspective, the website shows a moderate security posture with HTTPS enabled and some best practices observed. However, the absence of explicit security headers and cookie consent banners, as well as missing WHOIS domain registration data, indicate areas for enhancement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is professional and trustworthy but would benefit from improved transparency and security controls. The overall risk assessment is moderate with recommendations to strengthen domain registration transparency, implement comprehensive cookie consent, and enhance security headers. These steps will improve compliance, user trust, and resilience against potential threats.

B

BESCO - Berliner Steincontor GmbH

besco-gmbh.de

42

BESCO - Berliner Steincontor GmbH is a German-based company specializing in supplying natural stone products for public and private construction projects. With over 20 years of experience, the company offers tailored natural stone solutions under the belgrano® brand, supporting clients from planning through project completion. Their target audience includes municipalities, private builders, architects, and landscape architects. The website is professionally designed, multilingual, and provides comprehensive product and project information alongside clear contact options. Technically, the site is built on WordPress with modern frameworks like Bootstrap and includes SEO and tracking tools such as Yoast SEO and Google Tag Manager. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response details are absent. Overall, the site reflects a mature digital presence with good business credibility and compliance awareness.

B

Baumit GmbH

baumit.de

46

Baumit GmbH is a leading European manufacturer specializing in sustainable building materials including insulation, plasters, paints, and renovation systems. The company targets private customers and construction professionals, emphasizing quality, sustainability, and innovation. Their digital presence is supported by modern web technologies including Vue.js and jQuery, with a custom CMS and structured data for SEO. The website is professionally designed, mobile-optimized, and provides comprehensive product and service information. Security posture is good with HTTPS and cookie consent mechanisms, though improvements are recommended in enforcing Content-Security-Policy and enabling Google Consent Mode. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.

B

bauforumstahl

bauforumstahl.de

55

bauforumstahl is a leading German non-profit industry association dedicated to sustainable steel construction. The organization serves as a central hub connecting steel producers, construction companies, engineers, architects, and educational institutions. Their website offers comprehensive information on sustainability initiatives, technical standards, events, and membership benefits, positioning them as a key player in the German steel construction sector. Technically, the website is built on WordPress using the Avada theme and incorporates modern performance and security optimizations such as WP Rocket and Borlabs Cookie for consent management. Security posture is strong with HTTPS and multiple security headers, though minor CSP issues were detected. Privacy compliance is partial due to the absence of an explicit privacy policy page and terms of service. Overall, the site is professional, well-branded, and trustworthy, with clear navigation and mobile optimization. Strategic recommendations include publishing privacy and terms pages, tightening CSP, and adding incident response information.

P

Paul Bauder GmbH & Co. KG

bauder.de

47

Paul Bauder GmbH & Co. KG operates as a leading European manufacturer specializing in roofing systems including flat roofs, pitched roofs, green roofs, and photovoltaic solutions. The company targets architects, planners, roofers, and both industrial and private builders, positioning itself as a market leader in the energy and construction sector. Their website reflects a professional business model focused on manufacturing and supplying high-quality roofing materials and services. The presence of multiple localized websites indicates a broad international market reach.

B

Baubeschlag-Union GmbH & Co. KG

baubeschlag-union.de

62

Baubeschlag-Union GmbH & Co. KG operates as a cooperative group of 13 independent building hardware wholesalers serving crafts, industry, and municipal customers primarily in Germany. The company emphasizes regional proximity, trust-based long-term relationships, and expertise in various hardware and technical product categories. Their website is professionally designed using WordPress with Elementor and Neve theme, offering good mobile optimization and clear navigation. The site includes comprehensive GDPR-compliant privacy and cookie policies with an active consent mechanism. Security posture is solid with HTTPS and privacy plugins, though explicit security headers and incident response policies are absent. Overall, the website reflects a trustworthy medium-sized manufacturing sector business with strong compliance and professional presentation.

A

ARWEI Bauzubehör GmbH

arwei.de

49

ARWEI Bauzubehör GmbH is a well-established German manufacturer specializing in high-quality recessed matting and floor mat systems since 1952. The company targets architects, planners, homeowners, and construction professionals, offering custom solutions and accessories. Their market position is strong with over 60 years of experience and recognized certifications such as TÜV and DGNB. Technically, the website is built on the Contao CMS platform, using modern JavaScript libraries and privacy-conscious Matomo analytics. The site is mobile-optimized with a clear navigation structure and cookie consent implemented via Klaro. Security posture is good with HTTPS enabled and no visible vulnerabilities, though security headers could be improved. WHOIS data aligns with the business claims, showing a consistent and legitimate domain registration. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

ARIS Systeme GmbH is a specialized system provider and manufacturer focused on sustainable rainwater utilization and management solutions, including firefighting water supply systems. With over 20 years of experience, the company serves B2B clients such as planning offices, municipalities, and specialized trades. Their offerings include underground cisterns, pumping and pressure boosting systems, IoT-enabled products, and comprehensive project support from planning to commissioning. The company is well-positioned in the German energy and water management sector, reinforced by memberships in recognized sustainability and industry networks such as DGNB, fbr, NGA, and BNW. The website reflects a professional and consistent brand image with clear contact points and product information.

A

ArgillaTherm

argillatherm.de

52

ArgillaTherm is a small German company specializing in natural climate systems, offering multifunctional ceiling cooling and heating solutions with HUMID modules for effective humidity regulation. The website is built on WordPress using the Divi theme and incorporates modern technologies such as Google Tag Manager and Borlabs Cookie for analytics and cookie consent management. The technical infrastructure is solid with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit security policies. No privacy policy or terms of service were found, and contact information is not explicitly provided, which may impact user trust and compliance. Overall, the website is professional and relevant to its niche market but could improve in privacy and security transparency.

A

Arbonia Riesa GmbH

arbonia-solutions.com

50

Arbonia Riesa GmbH operates a multilingual corporate website targeting primarily German-speaking countries and Russia, presenting itself as a solutions provider likely in an industrial or manufacturing sector. The website is professionally designed with consistent branding and provides clear contact information and social media presence, supporting moderate business credibility. Technically, the site employs modern tools such as Google Tag Manager and Usercentrics for consent management, indicating a reasonable level of digital maturity. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is moderate with some best practices observed, but lacks visible security headers and a published privacy policy, which are critical for compliance and trust. Overall, the site is safe for general audiences and does not contain any adult or questionable content.

A

Start - Alufinish

alufinish.de

56

The website at alufinish.de appears to represent a small business based in Germany, likely involved in manufacturing or finishing services related to aluminum, inferred from the domain name. However, the website content is minimal and lacks substantive business descriptions, contact information, or user engagement features. The technical infrastructure is basic, built with standard HTML and CSS, and likely uses the Thrive Architect CMS platform. There is no evidence of modern security practices such as HTTPS enforcement or security headers, and no privacy or cookie policies are present, indicating low compliance with GDPR and other privacy regulations. Overall, the site demonstrates low digital maturity and limited online presence, which may impact user trust and business credibility.

M

Mitsubishi Polyester Film GmbH

alpolic.eu

64

The website www.alpolic.eu represents Mitsubishi Polyester Film GmbH, a well-established manufacturer specializing in aluminum composite panels with over 50 years of industry experience. The company targets a broad audience including construction and facade professionals, offering high-quality products with a focus on performance, corrosion protection, and design. The website is professionally designed with consistent branding and clear navigation, supporting multiple languages including German, English, and French. Technical infrastructure includes modern analytics tools such as Google Analytics and Matomo, integrated via Google Tag Manager, and a comprehensive cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and explicit incident response policies are recommended for improvement. The absence of publicly available WHOIS data due to privacy protection slightly reduces transparency but is common for corporate domains. Overall, the website demonstrates a mature digital presence with good privacy and security practices, supporting the company's credibility and market position.

P

Płyty warstwowe ARPANEL

arpanel.de

47

ARPANEL is a medium-sized manufacturing company specializing in the production of insulated sandwich panels for walls and roofs, primarily targeting the construction and building materials sector. Established in 2013, the company offers a range of products including PIR and mineral wool core panels, metal profiles, mounting accessories, and technical consulting services. The website is professionally designed, multilingual, and optimized for SEO, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and tracking tools, hosted on nazwa.pl infrastructure. Security posture is solid with HTTPS, reCaptcha, and cookie consent mechanisms, though some security headers and policies could be improved. Overall, ARPANEL presents a trustworthy and professional online presence aligned with its business operations.

D

DGNB GmbH

dgnb-system.de

56

DGNB GmbH operates as a leading non-profit organization specializing in sustainability certification for buildings and urban districts, positioning itself as a global benchmark in sustainable building practices. The website provides comprehensive information about the DGNB certification system, its benefits, criteria, and processes, targeting professionals and organizations in the construction and real estate sectors. The company offers certification services, educational programs, and consulting to promote sustainable building standards. Technically, the website is built on TYPO3 CMS, employs Matomo for analytics, and is hosted on agenturserver infrastructure, delivering a well-structured, mobile-optimized, and SEO-friendly user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and vulnerability disclosures are absent. Overall, the site reflects a mature digital presence with strong business credibility and trust indicators.

D

DGNB GmbH

dgnb-akademie.de

57

DGNB GmbH operates the DGNB Akademie, a central platform dedicated to education and certification in sustainable building and real estate management. The company offers a broad range of training programs, seminars, and certifications recognized nationally and internationally, targeting professionals in architecture, construction, and real estate sectors. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to its target audience. Technically, the site is built on TYPO3 CMS, uses Matomo for privacy-conscious analytics, and is hosted on agenturserver infrastructure, indicating a stable and modern setup. Security posture is strong with HTTPS enforced and secure login mechanisms, though some security headers could be improved. Overall, the site demonstrates high business credibility with clear contact information, trust signals like testimonials and certifications, and compliance with GDPR and cookie regulations. No blocking or WAF interference was detected, allowing full content accessibility.

M

MOSAIQ

mosaiq.com

61

MOSAIQ is a digital agency specializing in branding, user experience (UX), and technology solutions. The company targets businesses seeking professional digital projects such as websites, landing pages, and digital branding. The website presents a professional and consistent brand image, indicating a focused small-sized agency based in Germany. Technically, the website employs modern JavaScript frameworks and integrates Google Tag Manager and Flockler for analytics and content embedding, reflecting a moderate level of digital maturity. Security posture is moderate with HTTPS likely enabled but lacking visible security headers and explicit privacy or cookie policies, which are critical for compliance and trust. The absence of WHOIS data raises concerns about domain registration transparency, though the website content itself appears legitimate and professional. Overall, the site is functional and well-designed but would benefit from enhanced security and privacy compliance measures.

C

coding. powerful. systems. CPS GmbH

cps-it.de

61

coding. powerful. systems. CPS GmbH is a well-established digital agency based in Berlin, Germany, specializing in TYPO3 CMS solutions and comprehensive digital experiences. Founded in 2002, the company offers a broad range of services including full-stack development, consulting, hosting, UX/UI design, and accessibility, positioning itself as a leading TYPO3 partner with platinum membership status. Their long-standing client relationships and certifications underscore their market credibility and expertise. Technically, the website is built on TYPO3 CMS with a modern tech stack including PHP, Symfony, Docker, and GitLab, reflecting a mature and professional digital infrastructure. The site demonstrates good performance, mobile optimization, and excellent accessibility features. Security-wise, HTTPS is enforced, but the absence of visible security headers and public security policies suggests room for improvement. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and business-focused with minimal security risks detected.

T

Tescoma

tescoma.de

68

Tescoma is a well-established kitchenware and household products brand operating a professional e-commerce platform targeting German-speaking customers. The website offers a broad product range with over 2500 items, including kitchen utensils, cookware, and DIY sets. The company emphasizes quality, warranty, and direct manufacturer sales, supported by a customer loyalty program (Tescoma Club). Technically, the site uses modern frameworks like Next.js and integrates analytics and personalization tools such as Google Tag Manager, Microsoft Clarity, and Persoo. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced, though some security headers are not explicitly detected. Privacy and cookie policies are present and GDPR compliant, but explicit security policies and incident response contacts are not found. Overall, the site is trustworthy and professionally managed, with no signs of malicious content or suspicious domain registration patterns.

J

jfnetwork GmbH

jfnet.de

43

jfnetwork GmbH is a medium-sized German IT service provider specializing in intelligent process and IT solutions, consulting, integrated SaaS solutions, and e-commerce/database applications primarily for the automotive and fashion industries. With over 25 years of experience and a strong project portfolio, the company positions itself as a trusted partner in these sectors. The website reflects a professional and consistent brand image with clear contact information and business focus. Technically, the site is built on WordPress with modern libraries such as jQuery, Bootstrap, and Swiper.js, offering good mobile optimization and user experience. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and explicit incident response policies suggests room for improvement. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the website is trustworthy and professionally maintained, supporting the company's market position.

V

Veganstart

veganstart.de

68

Veganstart is a German-language non-profit platform affiliated with PETA, dedicated to supporting individuals transitioning to a vegan lifestyle. The website offers vegan recipes, product recommendations, and educational content delivered via email and a mobile app. It targets German-speaking audiences interested in sustainable and vegan living. The business model is educational and advocacy-focused, operating under the umbrella of PETA, a well-known animal rights organization. The site is professionally designed with consistent branding and good content quality, reflecting its non-profit mission. Technically, the website is built on WordPress with modern SEO and performance optimization plugins such as Yoast SEO and WP Rocket. It uses Cloudflare for DNS and CDN services, ensuring fast loading times and robust infrastructure. The site is mobile-optimized and accessible, with proper meta tags and structured data enhancing search engine visibility. Analytics and tracking are implemented via Google Analytics and Google Tag Manager, balanced with a OneTrust cookie consent mechanism to comply with privacy regulations. From a security perspective, the site enforces HTTPS and uses Cloudflare services, which provide a solid security foundation. While explicit security headers are not fully confirmed, no vulnerabilities or exposed sensitive data were detected in the HTML content. However, the site lacks a published security policy, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for transparency and trust. Overall, Veganstart presents a low-risk profile with a strong alignment between domain registration and business purpose. The site is trustworthy, professionally maintained, and compliant with GDPR-related cookie consent requirements. Strategic recommendations include enhancing security header implementation, publishing security and incident response policies, and adding vulnerability disclosure information to further improve trust and compliance.

D

DGNB GmbH

dgnb-navigator.de

49

DGNB GmbH operates the DGNB Navigator, a specialized online platform dedicated to sustainable building products. The platform connects manufacturers providing detailed sustainability data with architects, planners, and DGNB auditors, facilitating informed product selection and integration into DGNB certification processes. The website is professionally designed, multilingual (German and English), and supported by a mature CMS (TYPO3). It hosts a large ecosystem of partners and manufacturers, reinforcing its market position as a unique sustainability-focused product database in the construction sector. Technically, the site is well-structured and mobile-optimized, though it lacks some advanced security headers and explicit privacy/cookie policies. Security posture is moderate with HTTPS usage but could be improved with better header policies and incident response information. Overall, the site is trustworthy and serves a niche but important role in sustainable construction, with room for enhanced privacy compliance and security best practices.

Z

ZIA Zentraler Immobilien Ausschuss e.V.

zia-deutschland.de

45

ZIA Zentraler Immobilien Ausschuss e.V. is a leading German real estate industry association providing advocacy, events, publications, and networking services to stakeholders in the real estate sector. The website is professionally designed using WordPress with the Divi theme and integrates modern JavaScript libraries and Matomo analytics for user tracking. The site content is rich and relevant, targeting real estate professionals and policymakers. Security posture is good with HTTPS enforced, but lacks explicit security headers and incident response information. Privacy compliance is limited due to absence of privacy and cookie policies. Overall, the website is trustworthy and well-positioned in its industry.

Z

ZIA - Zentraler Immobilien Ausschuss

zia-innovationsradar.de

52

The ZIA-Innovationsradar website serves as a leading platform for innovative solutions in the German real estate sector, focusing on sustainability, digitalization, and investment themes. It is positioned as a key resource for industry professionals, investors, and academics interested in real estate innovation. The site presents well-structured content with a modern design, leveraging technologies like Tailwind CSS and Swiper.js to deliver a responsive and user-friendly experience. However, the technical infrastructure lacks visible advanced CMS or analytics integrations, indicating a relatively straightforward implementation. From a security perspective, the website uses HTTPS and is hosted on a known provider (kasserver.com), but lacks explicit security headers and visible privacy or cookie policies, which are critical for GDPR compliance and user trust. The absence of contact information and incident response channels further limits the security posture. WHOIS data is minimal, with no registrant details, which slightly reduces domain trustworthiness. Overall, the website is professional and relevant to its target audience but would benefit from enhanced privacy compliance, security best practices, and transparent contact information to improve trust and regulatory adherence.

F

Zugriff verweigert - 403 Fehler

finanztip.de

47

Finanztip.de is a German finance advice website aimed at providing consumer financial information and tips. The website is built on TYPO3 CMS and uses Cloudflare for hosting and security. However, the current content is inaccessible due to a Cloudflare 403 Access Denied error, likely triggered by VPN usage or suspicious IP detection. This blocking prevents a full analysis of the website's content, privacy policies, and security posture. The only contact information available is an editorial email address. The website appears to be a legitimate and established finance advice platform in Germany, but the WAF blocking limits visibility into its full technical and security implementations.

P

PETA Deutschland e.V.

peta.de

68

PETA Deutschland e.V. operates as Germany's largest animal rights organization, focusing on stopping animal cruelty, establishing animal rights, and promoting compassion towards animals. The organization targets a broad audience interested in animal welfare, vegan living, and activism. Their website reflects a mature digital presence with multilingual support and comprehensive campaign information. Technically, the site is built on WordPress with modern SEO and performance optimizations, leveraging Cloudflare for DNS and CDN services. Security posture is strong with HTTPS enforcement and security headers, though explicit privacy and security policies are not published. Overall, the site is professional, trustworthy, and well-positioned in its sector.

Faehrinfos.de is a small German niche informational portal providing free notifications via SMS and email about disruptions and important updates for selected ferry services in Germany. The website targets ferry users seeking timely information about ferry operations. Technically, the site uses a basic but functional tech stack including Bootstrap 3.3.7 and jQuery 1.12.4, hosted behind Cloudflare nameservers for DNS and likely CDN services. The site lacks modern security headers and explicit HTTPS confirmation in the provided data, indicating a weak security posture. Privacy compliance is minimal with a privacy policy and terms of service present but no cookie consent mechanism or GDPR compliance indicators. Contact information is not explicitly provided, limiting business credibility. Overall, the site is functional but basic in design and security, suitable for its niche but requiring improvements for trust and compliance.

W

Weiße Flotte GmbH

ostsee-bestattungen.de

59

Weiße Flotte GmbH operates a specialized service offering dignified sea burials from the port of Stralsund into the Prohner Wiek, targeting families and individuals seeking maritime funeral services. The company leverages over 60 years of tradition and experience, positioning itself as a trusted regional provider in the transportation and funeral service sector. The website reflects a professional and empathetic approach, emphasizing personal and discreet service. Technically, the site is built on TYPO3 CMS, hosted behind Cloudflare, and integrates Google Analytics and Tag Manager with proper consent mechanisms, indicating a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent, though some security headers and explicit policies could be enhanced. Overall, the site is well-structured, accessible, and compliant with GDPR requirements, supporting a trustworthy online presence for the business.

W

WindEnergy Network e.V.

wind-energy-network.de

55

WindEnergy Network e.V. operates as a leading industry network for wind energy in Northeast Germany, focusing on fostering collaboration among companies, political stakeholders, and industry professionals. The organization promotes Mecklenburg-Vorpommern as a prime location for wind energy projects, particularly offshore wind, and organizes key events such as the WindEnergy Stammtisch and Wind & Maritim conference. The website reflects a medium-sized non-profit association with a clear mission to support regional economic growth and renewable energy development. Technically, the website is built using the Astro framework with modern JavaScript modules and optimized images, hosted by Timme Hosting in Germany. The site demonstrates good mobile optimization and SEO practices but lacks some accessibility features and security headers. No analytics or tracking scripts were detected, indicating a minimal user tracking approach. From a security perspective, the site uses HTTPS but lacks visible security headers and published privacy or cookie policies, which are critical for GDPR compliance. No contact information or incident response channels are explicitly provided, limiting transparency and user trust in security matters. No vulnerabilities or suspicious patterns were detected in the content or WHOIS data. Overall, the website is professional and trustworthy for its target audience but would benefit from enhanced privacy compliance, security best practices, and clearer contact information to improve user confidence and regulatory adherence.

F

Fuchs & Eule Energy Experts, eine Marke der Valyria Technology GmbH

fuchs-eule.de

65

Fuchs & Eule is a German energy consulting company specializing in certified energy advice and funding support for residential and business clients. The company operates under the brand of Valyria Technology GmbH and offers personalized energy consulting services, including individual renovation plans and funding application assistance. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Next.js and React. It features strong trust indicators including certifications, partner logos, and positive customer testimonials. Privacy and cookie policies are implemented with consent management, supporting GDPR compliance. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities. Overall, the website presents a credible and professional digital presence aligned with its business objectives.

The website foodsystemchange.org is registered to NAHhaft e.V., a German non-profit organization founded in 2020. The domain and registrant information are consistent and legitimate, indicating a small non-profit entity likely focused on food system change initiatives. However, the website content is currently inaccessible, returning a TYPO3 404 error page with no active site configuration. This prevents any meaningful analysis of business services, audience, or content. The technical infrastructure shows use of TYPO3 CMS hosted by Cronon GmbH in Germany, but lacks DNSSEC and security headers, indicating a basic security posture. No privacy, cookie, or terms of service policies are present, and no contact information or forms are available on the page. No analytics or marketing tools are detected, and no adult or questionable content is present. Overall, the site is non-functional and lacks essential compliance and security features.

F

FRS Travel

frs-travel.de

66

FRS Travel is a specialized maritime travel service provider focusing on package tours to the German North Sea islands of Sylt and Heligoland. The company offers combined hotel and ferry bookings, leveraging partnerships with local hotels and ferry operators such as FRS Syltfähre and the Halunder Jet catamaran. Their market position is niche but well-defined, targeting tourists seeking maritime vacation experiences in Germany. The website is professionally designed with clear navigation, good content quality, and consistent branding. Technically, the site is built on TYPO3 CMS, uses Cloudflare for DNS and CDN, and integrates Google Tag Manager and Analytics for marketing and performance tracking. Accessibility and SEO optimizations are well implemented.

Fahrgastschifffahrt Rügen operates as a regional passenger shipping service provider on Germany's largest island, Rügen. The company offers scenic tours along the coastline, including visits to national parks and the car-free island of Hiddensee, targeting tourists and visitors seeking nature and cultural experiences. The website is built on the Contao CMS platform, utilizing jQuery and GLightbox for interactive elements, and is hosted on servers associated with kasserver.com. The site demonstrates good mobile optimization and basic accessibility features, with a clear navigation structure and professional design. From a security perspective, the website enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks visible advanced security headers and explicit security or incident response policies. No forms or analytics scripts were detected, indicating minimal data collection and tracking. The WHOIS data shows partial consistency with the business, though registrant details are limited. Overall, the site presents a low-risk profile with a good security posture but could benefit from enhanced security headers and clearer compliance documentation. Strategically, the business is well-positioned in the regional tourism transportation sector with a clear service offering. The website supports this with relevant content and trust indicators such as an impressum and privacy policy. There is room for improvement in transparency regarding terms of service, incident response, and security certifications to further enhance trust and compliance.

F

FRS Systems GmbH

frs-systems.de

64

FRS Systems GmbH is a German company specializing in highly flexible ticketing software solutions tailored for the ferry and passenger vessel industry. Their flagship product, flexWays, offers comprehensive features including sales and distribution, booking management, inventory control, route planning, capacity management, and boarding administration. The company positions itself as an innovative and reliable software provider with a medium-sized workforce and a history dating back to 1992. The website is professionally designed, mobile-optimized, and provides clear contact information, enhancing its credibility. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies such as JavaScript, CSS, and SVG graphics. Hosting and DNS services are managed via Cloudflare, providing robust SSL encryption and potential security benefits. The site demonstrates good performance and accessibility standards, although no advanced analytics or tracking scripts were detected in the provided content. From a security perspective, the website enforces HTTPS and benefits from Cloudflare's DNS services, but lacks visible security headers and explicit security policies. There is no cookie consent mechanism or terms of service present, which are important for GDPR compliance and legal clarity. Incident response contacts and vulnerability disclosure information are also absent, representing areas for improvement. Overall, the website is trustworthy and professional, with a strong business focus and solid technical foundation. However, enhancements in privacy compliance, security policy transparency, and incident response readiness would further strengthen its security posture and regulatory adherence.

F

FRS Windcat Offshore Logistics

fwol.de

66

FRS Windcat Offshore Logistics is a joint venture specializing in offshore logistics services, primarily providing Crew Transfer Vessels (CTVs) in the North and Baltic Seas. The company holds a strong market position as a leading provider in this niche, supported by a fleet of over 40 vessels and patented technology such as the WindGrip system. Their target audience includes offshore wind energy companies and maritime logistics clients in Germany, Denmark, and Poland. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on TYPO3 CMS, uses Cloudflare for hosting and security, and integrates Google Tag Manager and Analytics for marketing and performance monitoring. Security posture is solid with HTTPS enforced and Cloudflare protection, though explicit security headers could be improved. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the site demonstrates a mature digital presence suitable for a medium-sized enterprise in the energy and transportation sectors.