Germany security reports

Belz & Rupp Internetmanagement Saarbrücken is a small digital agency based in Germany specializing in web design, TYPO3 CMS implementation, online marketing, logo development, and print services. The company targets businesses and organizations seeking affordable and professional digital and print solutions. Their market position appears local to Saarbrücken with a focus on quality service delivery. Technically, the website is built on the TYPO3 CMS platform, enhanced with jQuery and Lightbox for UI components, and uses Matomo for analytics alongside Usercentrics for GDPR-compliant consent management. The site is well-structured, mobile-optimized, and employs HTTPS with good privacy practices, although some security headers are missing. From a security perspective, the site demonstrates a moderate security posture with HTTPS and consent management but lacks explicit security policies and vulnerability disclosure mechanisms. The absence of WHOIS domain registration data is a notable anomaly that impacts trust and legitimacy assessments. Overall, the website is professional and functional with good privacy compliance but requires verification of domain registration and enhancement of security headers and policies to improve trustworthiness and security posture.

AERMEC Deutschland GmbH operates in the energy sector, likely focusing on HVAC solutions, serving customers and business partners primarily in Germany. The website is currently under construction and undergoing modernization, limiting available online services and content. The company provides direct contact channels via phone and email, indicating a traditional business communication approach. Technically, the website is simple, built with basic HTML and CSS without advanced frameworks or CMS. It is hosted on UI-DNS nameservers, suggesting a standard hosting environment. Mobile optimization and accessibility are basic, and SEO practices are minimal. No analytics or tracking technologies are detected, reflecting a low digital maturity level. From a security perspective, the site lacks visible security headers and cookie consent mechanisms. The email contact link is malformed, which could impact usability and security. HTTPS status is unknown but assumed necessary. WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the security posture is basic with room for improvement. The overall risk is moderate due to limited content and security features. Strategic recommendations include implementing HTTPS, fixing contact link issues, adding security headers, and introducing privacy and cookie policies to improve compliance and trust.

S

Siemens AG

c2comms.cloud

65

The website c2comms.cloud is a minimal placeholder or landing page associated with Siemens AG, a large multinational technology and industrial company headquartered in Germany. The domain is relatively new, registered in late 2022, and uses AWS infrastructure for DNS and real user monitoring. The site content is minimal with no visible business descriptions, contact information, or interactive elements. Footer links point to Siemens corporate legal and privacy pages, confirming corporate ownership. The technical infrastructure is modern but basic, with no CMS or advanced frameworks detected. Security posture is adequate with HTTPS and domain transfer protection but lacks DNSSEC and security headers. Privacy compliance is supported by links to comprehensive Siemens policies but lacks on-site consent mechanisms. Overall, the site appears legitimate but underdeveloped, likely serving as a technical or internal platform rather than a customer-facing portal.

N

NürnbergMesse GmbH

chillventa.de

70

Chillventa is a globally recognized exhibition specializing in refrigeration technology, organized by NürnbergMesse GmbH in Germany. The website serves as a comprehensive platform for industry experts, exhibitors, and visitors to connect, showcasing the latest innovations and providing detailed event information. The company holds a leading market position in the energy sector, particularly in refrigeration and related technologies. Technically, the website is built on modern frameworks such as Next.js and Sitecore CMS, hosted on Microsoft Azure infrastructure, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR regulations.

R

Rebelcreations AG

epeeglobal.org

45

EPEE is a European industry association representing the refrigeration, air conditioning, and heat pump sectors. The organization focuses on policy advocacy, sustainable heating and cooling solutions, and industry representation. The website reflects an established presence with a domain registered since 2000 and hosted by OVH in Germany. Technically, the site is built on WordPress with modern libraries such as Bootstrap and jQuery, providing a good user experience and mobile optimization. However, the site lacks explicit privacy and cookie policies, and no consent mechanisms are detected, which may pose compliance risks. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. Overall, the website is professional and credible but would benefit from enhanced privacy compliance and security best practices.

S

SYNLAB AG

synlab.ag

58

SYNLAB AG is a leading European medical diagnostics and specialty testing company providing a comprehensive range of innovative and reliable diagnostic services to patients, healthcare providers, governments, and corporates. The company positions itself as a partner of choice for routine and specialty diagnostics, emphasizing customer-centric medical excellence. The website reflects a mature corporate presence with detailed financial reporting, corporate governance disclosures, and investor relations information. Technically, the site is built on TYPO3 CMS, uses modern web technologies, and includes privacy and cookie consent mechanisms aligned with GDPR requirements. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the domain and website present a trustworthy and professional image consistent with a large healthcare enterprise.

I

International Paralympic Committee

paralympic.org

75

The International Paralympic Committee (IPC) operates the official website www.paralympic.org, serving as the global authority for Paralympic sports. The site provides comprehensive news, event results, and multimedia content targeted at athletes, fans, and stakeholders worldwide. The organization is positioned as a non-profit international sports governing body headquartered in Germany. Technically, the website is built on Drupal 8 CMS, integrating modern analytics and cookie consent tools such as Google Tag Manager and Cookiebot, ensuring GDPR compliance through explicit cookie consent mechanisms. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Security posture is strong with HTTPS enforced and anonymized IP tracking, although explicit security headers and incident response information are absent. The lack of WHOIS data limits domain registration transparency but is typical for such international organizations. Overall, the site is professional, trustworthy, and well-maintained, with minor gaps in privacy policy visibility and security disclosures.

S

SYNLAB International GmbH

synlab.com

64

SYNLAB International GmbH operates as a leading European provider of medical laboratory diagnostic services, offering a broad range of routine and specialty testing solutions. The company targets healthcare providers, clinics, doctors, and patients, emphasizing fast and reliable test results and innovative diagnostic technologies. Their market position is strong, supported by a large network across more than 20 countries and a significant employee base including medical experts. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to their audience. Technically, the site is built on TYPO3 CMS with Bootstrap and integrates Matomo analytics and conditional Google Maps functionality, indicating a modern and privacy-conscious infrastructure. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms in place, though explicit incident response and vulnerability disclosure policies are not publicly visible. The absence of WHOIS data for the domain is notable but does not detract from the overall legitimacy and professionalism of the site. Strategic recommendations include enhancing transparency around security incident response and publishing a security.txt file to facilitate vulnerability reporting.

T

The Hertz Corporation

thrifty.de

64

Thrifty.de is the German localized website of Thrifty Car Rental, a well-established car rental brand founded in 1958 and a subsidiary of The Hertz Corporation. The website offers comprehensive car rental services across Germany and Europe, targeting price-conscious business and leisure travelers. It provides a user-friendly booking interface, detailed fleet information, and multiple language and country options, reflecting a mature digital presence. The technical infrastructure leverages modern frontend technologies such as Bootstrap, jQuery, and slick-carousel, combined with a robust cookie consent mechanism powered by securiti.ai and Google Tag Manager for analytics and marketing. Security posture is strong with HTTPS enforcement and CSRF protections, though explicit security headers and a dedicated security policy page are absent. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR adherence. The domain registration aligns with the brand's legitimacy and history, reinforcing trust. Overall, the website demonstrates a professional, secure, and user-centric platform suitable for an enterprise-level transportation service provider.

V

Verband der Zoologischen Gärten (VdZ) e.V.

zoosciencelibrary.org

51

The Zoo Science Library is a specialized online platform documenting peer-reviewed scientific publications involving modern zoological gardens and aquaria. It serves as a knowledge transfer and networking tool for the zoological research community, supported by reputable organizations such as the Verband der Zoologischen Gärten (VdZ) e.V. and the European Association of Zoos and Aquaria (EAZA). The website is professionally designed, bilingual (German and English), and provides a searchable database of over 1400 publications from 2018 to 2022. Technically, the site is built on TYPO3 CMS with modern frontend frameworks like Bootstrap and jQuery, and it uses Matomo for privacy-conscious analytics. Security posture is strong with HTTPS enforced and cookie consent implemented, though some HTTP security headers are missing and no explicit security or incident response policies are published. WHOIS data is unavailable due to malformed query responses, which slightly reduces domain trust but is mitigated by the site's affiliations and content quality. Overall, the site is a credible, niche scientific resource with good technical and security standards.

O

Online Solution Int Ltd.

rabuser.info

54

The website rabuser.info represents a small German IT service provider, Online Solution Int Ltd., specializing in web development, programming, consulting, and related services. The business targets individuals and companies seeking affordable and comprehensive web solutions including design, SEO, server administration, and software development. The company has a long-standing domain registration since 2008, indicating established operations. Technically, the website employs standard web technologies such as HTML, CSS, JavaScript, and server-side languages including PHP, Perl, and ASP.net. Hosting is via Cloudflare, providing basic HTTPS security. The site is functional with moderate performance and basic mobile optimization but lacks advanced security headers and DNSSEC, which could improve its security posture. Security-wise, the site uses HTTPS but does not publish privacy, cookie, or terms of service policies, nor does it provide explicit contact emails or phone numbers, limiting transparency and compliance with GDPR. Google Analytics is used without visible consent mechanisms, indicating privacy compliance gaps. No incident response or vulnerability disclosure information is available. Overall, the website is moderately trustworthy and functional but requires improvements in privacy compliance, security best practices, and transparency to enhance user trust and regulatory adherence.

Online Solution, operated by OS Online Solution GmbH, is a small German IT services company specializing in customized server, software, mobile, app, and online solutions. The company also references CDN services through partner domains. The website is built on WordPress using a standard theme and provides content primarily in German and English. The technical infrastructure is moderate, leveraging WordPress and Cloudflare DNS, but lacks advanced performance and accessibility optimizations. Security posture is basic with no advanced security headers or policies implemented, and privacy compliance is minimal due to the absence of privacy and cookie policies. Contact and incident response information are not provided, limiting user trust and compliance. Overall, the site is functional but requires enhancements in security, privacy, and user engagement to improve trust and compliance.

O

Online Solution 360 GmbH

saveality.net

59

Saveality, operated by Online Solution 360 GmbH, is a specialized provider of cyber security and privacy solutions based in Germany. Founded in 2018, the company offers a range of services including secure remote desktop environments, multi-encryption data storage, end-to-end encrypted email and communication services, TOR/Onion web services, bulletproof hosting, penetration testing, secure mobile phone solutions, IoT protection, and cryptocurrency cold storage. The business targets clients requiring high confidentiality and privacy protection, positioning itself as a niche player in the cyber security market. The parent company is Online Solution Int Ltd. based in the UK. Technically, the website is built on WordPress and uses common web technologies such as jQuery, Google Analytics, and Google Tag Manager. Hosting and DNS services are managed via Cloudflare. The site implements HTTPS with a good SSL configuration but lacks DNSSEC and advanced security headers. Performance is moderate with good mobile optimization. Privacy compliance is basic with a cookie consent banner and a privacy policy hosted externally on adsafety.net. Security posture is adequate but could be improved by enabling DNSSEC, adding security headers, publishing a security policy, and providing a vulnerability disclosure mechanism. No critical vulnerabilities or exposed sensitive data were detected. Contact information is clearly presented, including phone numbers, emails, and physical addresses, enhancing business credibility. Overall, Saveality presents a professional and trustworthy front with room for improvement in security best practices and privacy transparency. Strategic recommendations include enhancing domain security, publishing detailed security and incident response policies, and improving privacy compliance disclosures.

O

Online Solution (supported by SAVEALITY)

ano-phone.de

59

ANO-PHONE is a German-based small technology business specializing in secure, encrypted Android smartphones with integrated private VPN services. The company targets privacy-conscious consumers seeking enhanced mobile security and anonymity. Their product offers hardware encryption, secure communication channels, and control without backdoors or remote access. The website is built on WordPress with WooCommerce, featuring good content quality and a professional design. Technical infrastructure includes Cloudflare DNS and common analytics and advertising tools. Security posture is solid with HTTPS and no exposed sensitive data, though explicit security headers and policies are lacking. Privacy compliance is partial, with cookie consent implemented but no dedicated privacy policy page found. Contact information is limited to an email address, with no phone or physical address provided. Overall, the domain and website appear legitimate and consistent with the business claims.

O

Online Solution 360 GmbH

ano-phone.com

55

ANO-PHONE is a specialized provider of secure encrypted smartphones integrated with private VPN services, targeting privacy-conscious users and security-focused consumers. The company operates an e-commerce platform selling purified Android-based smartphones with hardware encryption, secure communication tools, and cryptocurrency wallet support. The business is positioned as a niche player in the technology sector, emphasizing privacy and security. The website is professionally designed, mobile-optimized, and includes essential business and contact information, although phone numbers and physical addresses are not explicitly listed. Technically, the site uses WordPress with WooCommerce, Google Analytics, and Cloudflare DNS, delivering moderate performance and good SEO optimization. Security posture is solid with HTTPS and client transfer protection on the domain, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is supported by a cookie consent mechanism and a privacy policy indicating GDPR adherence. Overall, the website and domain registration data indicate a legitimate and trustworthy business presence.

O

Online Solution 360 GmbH

securecommerce.eu

64

SecureCommerce, operated by Online Solution 360 GmbH, is a specialized cybersecurity service provider focused on protecting online stores and e-commerce platforms. The company offers managed firewall, DDoS protection, malware scanning, and monitoring services tailored to popular e-commerce systems such as Magento, WooCommerce, and Shopware. Their market position is that of a niche provider delivering Security-as-a-Service solutions to online merchants primarily in Germany. The website is professionally designed using WordPress and modern web technologies, providing a good user experience and clear navigation. Contact information and cookie consent mechanisms are well implemented, though privacy and terms policies are missing. Technically, the site uses reputable hosting via OVH SAS and integrates Google Analytics and Tag Manager for tracking. Security posture is moderate with room for improvement in security headers and published policies. Overall, the domain registration and business information are consistent and legitimate, supporting a trustworthy online presence.

O

Online Solution 360 GmbH

cdn-solution.net

51

Online Solution 360 GmbH operates the website cdn-solution.net, providing full service hosting, cyber security, and content delivery network solutions with a focus on eco-friendly data centers. The company targets businesses requiring advanced hosting and CDN services, emphasizing sustainability and innovative technologies such as GeoDNS, load balancing, and AI-driven energy efficiency. The website is professionally designed using WordPress CMS, hosted on Linode infrastructure, and includes a cookie consent mechanism compliant with GDPR. Contact information and company registration details are clearly presented, enhancing business credibility. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though DNSSEC is not enabled and security headers are missing, representing areas for improvement. No WAF or blocking mechanisms were detected, allowing full content access and analysis.

Online Solution GmbH is a German-based technology company specializing in mobile, app, and online solutions, complemented by cybersecurity services such as CDN, e-commerce firewall, and DDoS protection. The company operates multiple related domains targeting different languages and specialized services, positioning itself as a niche provider in the technology and cybersecurity sectors. The website is built on WordPress with standard themes and plugins, including GDPR compliance tools, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced security headers and explicit incident response policies. Privacy compliance is supported by a cookie consent mechanism and a basic privacy policy. Overall, the site is functional but minimalistic, with limited direct contact information and no terms of service page. Strategic improvements in security practices and transparency could enhance trust and compliance.

H

HUUM

huum.de

48

HUUM is a medium-sized manufacturing company specializing in sauna stoves and innovative sauna control systems, combining traditional Estonian sauna knowledge with modern Nordic design and technology. The company maintains a strong international presence with multiple regional domains targeting different markets including Germany, Estonia, Europe, the US, and Japan. The website is built on WordPress with performance optimizations and includes structured data for SEO enhancement. Privacy compliance is well addressed through Cookiebot, providing a comprehensive cookie consent mechanism and linking to a detailed privacy policy. However, explicit contact information and terms of service are not readily found on the homepage, which could be improved for better user trust and compliance.

C

Chudovo

chudovo.de

56

Chudovo is a medium-sized German-based software development company with over 15 years of market presence, specializing in custom software solutions, dedicated development teams, and IT consulting services. The company targets businesses seeking scalable, high-quality software development and maintenance, leveraging modern technologies and AI tools to enhance delivery and performance. Their market position is supported by a professional website, client testimonials, and a presence on reputable platforms like Clutch. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and SEO optimization via Yoast. Hosting and DNS are managed through Cloudflare, providing CDN and security benefits. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and uses Cloudflare for protection but lacks explicit security headers and formal security policies or incident response disclosures. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent mechanism, and GDPR adherence. Overall, the website and business demonstrate a solid risk posture with minor areas for improvement in security policy transparency and accessibility. The domain WHOIS data aligns well with the business claims, supporting legitimacy and trustworthiness.

U

Uniklinik RWTH Aachen

ukaachen.de

54

The website www.ukaachen.de represents the Uniklinik RWTH Aachen, a large university hospital and medical research institution in Germany. The site provides extensive information about patient care, research, teaching, and various specialized clinics and institutes. It targets patients, visitors, medical professionals, and researchers. The website is built on TYPO3 CMS, uses modern UI elements like Font Awesome, and integrates Matomo analytics with cookies disabled, reflecting some privacy awareness. The site is well-structured with multilingual support and professional design, indicating a mature digital presence. Security posture is adequate with HTTPS enabled but lacks explicit security headers and published security policies. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, the domain registration and DNS data align with the official university infrastructure, supporting high legitimacy and trustworthiness.

J

Jülich Aachen Research Alliance

jara.org

46

JARA (Jülich Aachen Research Alliance) is a collaborative research initiative between RWTH Aachen University and Forschungszentrum Jülich, focusing on five key research areas including brain science, simulation and data sciences, energy, future information technology, and soft matter. The alliance aims to pool expertise to tackle grand societal challenges through joint research projects, training, and infrastructure sharing. The website reflects a mature and professional digital presence with clear navigation, multilingual support, and integration of partner logos and resources. Technically, the site uses modern JavaScript libraries and a CMS (Contao), with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers are not explicitly detected. The absence of WHOIS data limits domain trust verification, but the strong institutional affiliations and content quality support legitimacy. No direct contact emails or phone numbers are publicly visible, which may impact user engagement. Overall, the site is well-positioned as a reputable research alliance with room for improvement in transparency and security disclosures.

B

Baltresto Deutschland

baltresto.de

47

Baltresto Deutschland is a specialized retailer and manufacturer of garden wellness products, including high-quality hot tubs and saunas, primarily serving the German market. The company emphasizes durability, quality, and customer satisfaction, offering a broad product range with customization options. Their digital presence is built on a WordPress WooCommerce platform, enhanced with performance and SEO optimizations. The website is professionally designed, mobile-optimized, and integrates trust signals such as customer reviews and structured data. Security posture is good with HTTPS and some security best practices, though additional headers and explicit security policies could improve it further. Privacy compliance is addressed with visible privacy and cookie policies and consent mechanisms. Overall, the site reflects a credible and trustworthy business with a solid e-commerce infrastructure.

B

bonprix Handelsgesellschaft mbH

bonprix.com

57

bonprix Handelsgesellschaft mbH operates a professional e-commerce platform specializing in fashion, shoes, and furniture, targeting multiple European countries through localized domains. The website presents a consistent brand image with good content quality and user experience, leveraging the Astro framework for frontend delivery. Despite the absence of WHOIS registration data, the site maintains legal and privacy pages indicating GDPR compliance and business legitimacy. However, the lack of visible contact emails, phone numbers, and cookie consent mechanisms suggests areas for improvement in transparency and privacy compliance. Security posture is moderate with no detected security headers or incident response information, indicating potential risk areas. Overall, bonprix.com is a credible retail website with room to enhance security and privacy practices.

G

gestalten

gestalten.com

72

Gestalten.com is the online presence of an established international publishing house specializing in books and media related to architecture, design, fashion, travel, and food & beverages. Founded in 1998 and based in Germany, the company operates a professional e-commerce platform powered by Shopify, offering a curated selection of creative and cultural publications. The website demonstrates a mature digital infrastructure with integrations for multiple payment methods including Shopify Payments, Apple Pay, Google Pay, and PayPal, alongside marketing and analytics tools such as Google Tag Manager, Hotjar, and Mailchimp. Privacy and cookie policies are clearly presented with consent mechanisms, reflecting compliance with GDPR requirements. Security posture is solid with HTTPS enforced and domain registration consistent with business claims, though DNSSEC is not enabled and some security headers could be improved. Overall, the site is accessible, well-designed, and trustworthy, serving a niche market of creative professionals and enthusiasts.

P

Proact DE

proact.de

75

Proact Deutschland is a large, established IT service provider specializing in data and information management, cloud services, and data center solutions. Positioned as a leading European specialist, the company targets businesses seeking comprehensive IT strategy consulting, implementation, and operational support. The website reflects a professional digital presence with clear branding and consistent messaging aligned with its market position. Technically, the website is built on WordPress using modern plugins such as Yoast SEO Premium and Elementor, supported by SiteGround hosting inferred from optimization plugins. The site employs HTTPS with strong SSL configuration and integrates Cookiebot for GDPR-compliant cookie consent management. Google Tag Manager and reCAPTCHA are used for analytics and bot protection respectively, indicating a mature digital infrastructure. From a security perspective, the site demonstrates good practices including HTTPS enforcement and consent management. However, it lacks explicit security headers, published security policies, and incident response contacts, which are recommended for enhanced security posture. No vulnerabilities or suspicious activities were detected in the analysis. Overall, the website is trustworthy and professionally maintained, with moderate to good scores in content quality, technical implementation, security, privacy compliance, and business credibility. Strategic improvements include publishing privacy and security policies, adding security headers, and providing clear contact information for incident response to further strengthen trust and compliance.

I

Initiative „Schulen: Partner der Zukunft“ (PASCH)

pasch-net.de

67

The PASCH-Initiative website represents a well-established global educational network promoting German language learning through over 2,000 partner schools worldwide. The initiative offers diverse services including learning materials, competitions, school partnerships, youth courses, and alumni projects. The website is professionally designed with consistent branding and targets German language learners and educational institutions globally. Technically, the site uses modern web technologies such as jQuery, Bootstrap, Bitmovin Player, and a consent management platform (Usercentrics), hosted on Microsoft Azure DNS infrastructure. Performance and mobile optimization are good, with accessibility and SEO well addressed. Security posture is solid with HTTPS enforced and consent management implemented, though some security headers and explicit security policies are absent. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Contact is primarily via a contact form; no direct emails or phone numbers are published. Overall, the site is trustworthy, professional, and aligned with its educational mission.

L

Lappset GmbH

lappset.de

57

Lappset GmbH operates as a manufacturer and supplier of innovative playground and sports equipment, targeting organizations and communities interested in promoting active play and social interaction. The website presents a professional and consistent brand image with good content quality and user experience, primarily in German. Technically, the site is built on WordPress, leveraging modern tools such as Google Tag Manager, Google Analytics, and Cookiebot for consent management and analytics. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, though some security headers are missing and no explicit security policy or incident response information is provided. Privacy compliance is supported by a comprehensive cookie consent mechanism, but no explicit privacy policy or terms of service pages were detected in the provided content. Overall, the website is trustworthy and well-maintained, with room for improvement in transparency and security best practices.

I

Institute of National Anti-Doping Organisations

inado.org

46

The Institute of National Anti-Doping Organisations (iNADO) is a non-profit international membership organization dedicated to supporting National Anti-Doping Organisations (NADOs) and Regional Anti-Doping Organisations (RADOs). It promotes best practices, fosters community collaboration, and serves as a global voice advocating for clean sport. The website reflects a professional and well-structured platform that provides resources, news, and event information relevant to anti-doping experts and stakeholders. Technically, the website is built on the TYPO3 CMS platform, integrating modern tools such as Google Tag Manager for analytics and Usercentrics for consent management, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. However, some security headers are missing, and there is no publicly visible security policy or incident response information. From a security perspective, the site enforces HTTPS and employs consent mechanisms for privacy compliance, aligning with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is typical for organizations of this nature, and does not raise immediate concerns. Overall, the site demonstrates a solid security posture but could improve transparency around security policies and incident response. The overall risk assessment is low, with recommendations focusing on enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen trust and compliance.

T

TIBHAR

tibhar.info

52

TIBHAR is a well-established German company specializing in the design and production of high-quality table tennis equipment since 1969. The website serves as a retail and promotional platform targeting ambitious table tennis players worldwide. It features multilingual support and integrates modern web technologies such as WordPress, WooCommerce, and Elementor, reflecting a mature digital infrastructure. The site includes embedded video content and social media integration, enhancing user engagement and brand presence. From a security perspective, the website employs HTTPS and domain transfer protections but lacks DNSSEC and visible security headers, indicating room for improvement in hardening its security posture. Privacy compliance is well addressed with GDPR cookie consent mechanisms and a comprehensive privacy policy. Overall, the website demonstrates good professionalism, trustworthiness, and technical implementation, supporting the company's market position in the sports retail sector.

F

Fromi GmbH

fromi.com

58

Fromi GmbH is an established German company specializing in the wholesale and distribution of cheese specialities and fine foods, with over 50 years of experience and an international reputation. The company targets cheese retailers, food service professionals, and gourmet consumers, offering a wide range of products and services including cheese selections, fine food offerings, and customer support. The website reflects a professional and consistent brand image with multilingual support and comprehensive product information. Technically, the site is built on WordPress with modern plugins and libraries, optimized for mobile and SEO, and includes cookie consent mechanisms. Security posture is strong with HTTPS, obfuscated emails, and no visible vulnerabilities, though security headers could be improved. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trust. Strategic recommendations include enhancing security headers, publishing incident response policies, and clarifying domain registration details to improve trust and compliance.

F

fsk industries GmbH & Co. KG

fsk-industries.de

51

fsk industries GmbH & Co. KG is a German-based company specializing in innovative automation solutions, including Cobot Welding, SmartArc technology, mechanical engineering, and fixture construction. The company targets industrial clients seeking advanced automation and welding solutions, positioning itself as a niche provider in the manufacturing sector. The website reflects a professional and consistent brand image with good content quality and user experience, primarily in the German language. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies such as Bootstrap and jQuery, hosted by Alfahosting. Performance and mobile optimization are adequate, with room for improvement in accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented via Cookiebot, though additional security headers and a vulnerability disclosure mechanism are recommended. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the site demonstrates a good balance of business credibility, technical implementation, and privacy compliance, scoring 78 out of 100 in the AI assessment.

G

Getriebebau NORD GmbH & Co. KG

nord.com

73

Getriebebau NORD GmbH & Co. KG operates the website www.nord.com, presenting itself as a leading global supplier of mechanical and electronic drive technology solutions including gear motors, industrial gear units, electric motors, and frequency inverters. The company targets a broad industrial audience with a strong B2B focus, emphasizing product competitiveness and energy efficiency. The website supports multiple languages, indicating a global market presence. Technically, the site uses modern web technologies such as Bootstrap, Cookiebot for consent management, and Google Tag Manager for analytics, delivering a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are not explicitly detected and no dedicated security policy or incident response contacts are published. The absence of WHOIS data for the domain reduces transparency and business credibility, though the website content and branding are professional and consistent with a legitimate enterprise. Overall, the site scores well on content quality, technical implementation, and privacy compliance, but business credibility is slightly impacted by missing WHOIS information.

R

RODING Mobility GmbH

roding-mobility.de

50

RODING Mobility GmbH is a German-based company specializing in innovative mobility solutions, including powertrain and battery systems, advanced composites, mobility prototypes, and small-series electric vehicle platforms. The company targets automotive, aerospace, and maritime sectors, providing specialized engineering and manufacturing services. Their market position is that of a niche player with expertise in high-voltage systems and composite materials. The website is professionally designed, multilingual, and includes comprehensive privacy and cookie policies with user consent mechanisms. Technically, the site runs on WordPress with modern plugins and frameworks, ensuring good performance and mobile optimization. Security measures include HTTPS, Google reCAPTCHA on contact forms, and cookie consent management, although some security headers and incident response information are missing. Overall, the website is trustworthy and well-maintained, supporting the company's business credibility.

L

LMB - Gruppe

lmb-gruppe.de

45

LMB-Gruppe is a German manufacturing company specializing in welding, cutting, marking, and machine building services. Their website presents a professional image with clear navigation and relevant content targeting industrial clients. The company offers a range of services including manual welding, laser cutting, and special machinery construction, positioning themselves as a regional service provider in the manufacturing sector. The website is built on TYPO3 CMS and uses modern web technologies such as jQuery and Bootstrap, indicating a moderate level of digital maturity. While the site is mobile-optimized and accessible, there is room for improvement in accessibility and SEO. Security posture is moderate with no visible security headers or explicit security policies, and the site lacks a cookie consent mechanism despite GDPR compliance indications. Overall, the website is functional and credible but would benefit from enhanced security and privacy features.

Z

Zeppelin GmbH

zeppelin-systems.com

57

Zeppelin Systems, a division of Zeppelin GmbH, specializes in customized solutions for bulk material handling and plant engineering, serving industries such as food, chemicals, plastics, and recycling. The company offers a comprehensive portfolio including engineering, components, and services, positioning itself as a key player in the manufacturing sector with a strong B2B focus. The website reflects a mature digital presence with modern technologies like Next.js and AWS hosting, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in DNS security and security headers. Overall, the site demonstrates high professionalism and trustworthiness, supported by clear contact information and legal compliance.

P

PlastisolTransfer24.com

plastisoltransfer24.com

63

PlastisolTransfer24.com is a German-based company specializing in the production and distribution of high-quality textile transfers, serving primarily B2B customers such as textile printing companies and promotional firms across Germany, Austria, Switzerland, and the UK. The company emphasizes rapid delivery, offering express shipping within 24 hours, and holds OEKO-TEX certification, underscoring its commitment to environmental and social responsibility. Their product portfolio includes a wide range of transfer types including plastisol, blockout, water, neon, digital, DTF, and specialty transfers like glitter and holographic options. Technically, the website is built on the Magento 2 e-commerce platform, leveraging RequireJS, jQuery, and various Magento UI components. It integrates modern payment solutions such as Stripe and employs Google Tag Manager, Google Analytics, and Microsoft Clarity for analytics and marketing purposes. The site is mobile-optimized with good SEO practices and a comprehensive cookie consent mechanism supporting GDPR compliance. From a security perspective, the site enforces HTTPS, uses clientTransferProhibited domain status to prevent unauthorized transfers, and implements CAPTCHA on login forms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and no public security or incident response policies are found. The domain registration is consistent with the business claims, having been registered in 2012, aligning with the company's stated experience. Overall, the website presents a professional and trustworthy front with good content quality, technical implementation, and privacy compliance. Strategic improvements could include enhancing security headers, publishing a formal security policy, and enabling DNSSEC to further strengthen trust and security posture.

B

Bilendo

bilendo.de

76

Bilendo is a German-based SaaS company specializing in Accounts Receivable (AR) Automation and Credit Management software. Their platform integrates cloud-based tools to automate debtor management and order-to-cash processes, targeting finance executives, credit managers, accountants, sales, and IT professionals. The company positions itself as a modern, efficient solution provider with a strong client base including notable enterprises and industry references from BCG, PWC, and EOS. Their business model revolves around subscription-based cloud software with modular products such as Cloud Platform, Receivables, Risk, and Add-Ons. Technically, Bilendo leverages a modern tech stack including Ruby on Rails, Bootstrap 5, Font Awesome, and is hosted on AWS with Cloudflare providing firewall and CDN services. The website is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a high level of digital maturity.

O

OBO Bettermann Holding GmbH & Co. KG

obo-bettermann.com

59

OBO Bettermann Holding GmbH & Co. KG is a leading manufacturer specializing in installation systems for electrotechnical equipment in buildings and systems. The company maintains a strong market position with a broad international presence, supported by numerous regional partner websites tailored to local languages and markets. Their business model focuses on manufacturing and distributing high-quality electrotechnical installation products to professional and business customers worldwide. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including jQuery and Google Tag Manager for analytics, alongside Usercentrics for GDPR-compliant consent management. The site demonstrates good mobile optimization and a professional design, although there is room for improvement in SEO and accessibility features. From a security perspective, the website enforces HTTPS and employs consent management for cookies, reflecting a solid security posture. However, the absence of explicit security headers and vulnerability disclosure policies suggests opportunities for enhancing security best practices. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional digital presence, though the lack of WHOIS data for the domain raises concerns about domain registration legitimacy. It is recommended to verify domain registration details to ensure full trustworthiness. Strategic improvements in security headers, accessibility, and SEO would further strengthen the site’s compliance and user experience.

R

RWTH Aachen University

rwth-aachen.de

63

RWTH Aachen University is a leading technical university in Germany, offering comprehensive academic programs, cutting-edge research, and strong corporate partnerships. The website serves a diverse audience including prospective and current students, researchers, and corporate visitors. It provides extensive information on academics, research projects, corporate relations, and university services. The university maintains a strong market position as a center of excellence in education and research. Technically, the website uses a custom CMS with modern JavaScript libraries like jQuery and Chosen, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are lacking. Overall, the site is professional, trustworthy, and well-structured, reflecting the university's reputable standing.

U

Unterwegs Celle

unterwegs-celle.de

48

Unterwegs Celle is a small retail business specializing in outdoor equipment and apparel, targeting customers in the Celle region of Germany. The website serves as an online presence to complement their physical store, showcasing top outdoor brands and providing contact information for customer engagement. The business positions itself as a local specialist in outdoor retail, with a focus on quality brands and customer service. Technically, the website is built on WordPress CMS, utilizing popular plugins such as Smart Slider 3, Contact Form 7, and Cookiebot for cookie consent management. Hosting is provided by Timme Hosting, with multiple name servers indicating a stable infrastructure. The site demonstrates good SEO practices, mobile optimization, and basic accessibility features, though there is room for improvement in security headers and accessibility compliance. From a security perspective, the site enforces HTTPS and uses Cookiebot to manage user consent, including blocking of scripts until consent is given. Google Analytics is implemented with IP anonymization to enhance privacy compliance. However, explicit security policies, incident response contacts, and advanced security headers are not present, indicating a moderate security posture suitable for a small retail business but with opportunities for enhancement. Overall, the website is professional, functional, and compliant with GDPR requirements regarding privacy and cookie management. The risk level is moderate, with no critical vulnerabilities detected. Strategic recommendations include improving security headers, adding explicit security and incident response policies, and maintaining up-to-date software to mitigate potential risks.

K

KHS Gruppe

khs.com

68

KHS Gruppe is a well-established international manufacturer specializing in filling and packaging systems for the beverage, food, and non-food industries. With over 150 years of history and a leading market position, KHS offers comprehensive turnkey solutions, digital services, and extensive customer support. Their website reflects a mature digital presence with detailed product and service information, customer testimonials, and sustainability commitments. Technically, the site is built on TYPO3 CMS, uses modern frameworks like Bootstrap, and integrates Matomo analytics for privacy-conscious tracking. Security posture is solid with HTTPS and cookie consent mechanisms, though some improvements in security headers and explicit security policies are recommended. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements, supporting KHS's credibility as a global industry leader.

I

Inzmo Gmbh

inzmo.com

72

INZMO GmbH is a German-based innovative insurance provider specializing in digital insurance solutions for consumers. Their offerings include mobile phone insurance, rental deposit warranties, bicycle insurance, laptop/tablet insurance, and e-scooter insurance. The company positions itself as a revolutionary player in the insurance market, emphasizing ease of use, fast claims processing, and 24/7 customer support. Their market approach leverages a user-friendly app and digital-first experience to attract tech-savvy customers seeking hassle-free insurance products. Technically, the website is built on modern frameworks such as Next.js and React, hosted on AWS infrastructure, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is strong with HTTPS enforcement and bot protection via Google reCAPTCHA, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, supporting trust and regulatory adherence. Overall, INZMO demonstrates a mature digital presence with a solid business model and good security hygiene.

C

Chudovo

chudovo.com

60

Chudovo is a well-established software development company founded in 2004, offering a broad range of IT services including custom software development, dedicated development teams, application maintenance, and cloud development. The company targets businesses seeking scalable and innovative software solutions, leveraging AI and machine learning technologies to enhance delivery speed and quality. With multiple international offices and a strong portfolio of over 160 projects, Chudovo positions itself as a reliable partner in the technology sector. Technically, the website is built on WordPress with modern frameworks like Bootstrap and jQuery, optimized for mobile and SEO. Hosting and DNS are managed via Cloudflare, ensuring good performance and security. The site uses standard plugins for forms and code highlighting, and implements lazy loading for images to improve load times. From a security perspective, the site enforces HTTPS and employs clientTransferProhibited domain status, but lacks DNSSEC and advanced security headers. Contact forms include CAPTCHA and an NDA option, enhancing data protection. However, no explicit security policy or incident response contacts are published, and no vulnerability disclosure mechanism is present. Overall, the website demonstrates a solid business and technical foundation with good content quality and user experience. Security posture is adequate but could be improved with additional headers and policies. Privacy compliance is basic, with cookie consent present but no dedicated privacy policy page detected. The domain WHOIS data aligns well with the business claims, supporting legitimacy and trustworthiness.

E

experimenta gGmbH

experimenta.science

72

experimenta gGmbH operates Germany's largest science center located in Heilbronn, offering interactive science exhibitions, educational programs, and unique experiences such as the Science Dome and Maker Space. The organization targets a broad audience from children to adults interested in science and technology, positioning itself as a leading educational and experiential institution in the region. The website reflects a professional and modern digital presence built on WordPress with the Divi theme, integrating various JavaScript libraries and a consent management platform to comply with privacy regulations. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers and explicit privacy policies are lacking. The absence of WHOIS data limits domain trust analysis but the overall business credibility is supported by consistent branding and social media presence.

W

wissensstadt heilbronn

wissensstadt.hn

49

wissensstadt heilbronn is a German educational and community platform focused on fostering lifelong learning, research, and innovation in the Heilbronn region. The website serves as a hub for projects, events, and community engagement, targeting students, researchers, and local institutions. Technically, the site is built on WordPress with modern plugins such as Elementor and Yoast SEO, indicating a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The WHOIS data presents inconsistencies, showing a prohibited registration status despite the active website, which warrants caution. Overall, the site is professional and content-rich but lacks explicit privacy and terms of service pages, impacting privacy compliance scores.