Germany security reports

D

DMT GROUP

dmt-group.com

53

DMT GROUP is a well-established global engineering services and consulting company with a history dating back to 1737. It operates primarily in the energy, infrastructure, mining, and engineering sectors, offering a broad range of services including engineering, consulting, geotechnics, exploration, and critical infrastructure protection. The company is part of the TÜV NORD GROUP, which enhances its market credibility and access to resources. The website reflects a professional and comprehensive digital presence with clear business information, structured data, and rich content targeting industrial clients worldwide. Technically, the website is built on TYPO3 CMS and uses common web technologies such as Apache server, Google Analytics, and LinkedIn Insight Tag for analytics and marketing. However, the site lacks a valid SSL certificate and does not support HTTPS, which is a critical security shortfall. The absence of modern TLS protocols and security headers further weakens its security posture. Performance is rated slow due to missing SSL and possibly other optimizations. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Security-wise, the site has configured SPF and DMARC records for email security and shows no signs of common vulnerabilities like Heartbleed or POODLE. However, the lack of HTTPS and security headers significantly reduces the overall security score. There is no explicit incident response or vulnerability disclosure information available on the site. Overall, the website is professional and content-rich but requires urgent improvements in security infrastructure, especially SSL/TLS implementation, to protect user data and enhance trust. Privacy compliance could also be improved by adding cookie consent mechanisms. Strategic recommendations include implementing HTTPS, enhancing security headers, and improving privacy transparency.

The website medigate.de is currently a parked domain landing page primarily serving advertisements and indicating the domain is for sale. There is no substantive business content, contact information, or service offerings present. The technical infrastructure relies on parking nameservers and third-party ad networks, with no valid SSL certificate, resulting in an insecure HTTP-only site. Performance is poor with a very slow load time. Security posture is weak due to lack of HTTPS, security headers, and privacy compliance mechanisms. Overall, the site does not present a credible or professional business presence and lacks essential security and privacy features.

U

UKE-Stiftung

uke-stiftung.de

40

The UKE-Stiftung website represents a medium-sized non-profit foundation focused on advancing healthcare through funding medical research, education, and patient care. The organization holds a strong market position within the German healthcare and research sector, emphasizing innovation and excellence. Technically, the website is built on a modern WordPress CMS with Elementor and several supporting plugins, delivering a professional and responsive user experience. Security posture is adequate with HTTPS and valid SSL certificates but lacks advanced features such as HSTS, DNSSEC, and OCSP stapling, which could enhance protection. Privacy compliance is addressed with a privacy policy and cookie information, though no explicit consent mechanism is observed. Overall, the site is trustworthy and professionally maintained, but improvements in security hardening and incident response transparency are recommended.

freenet AG is a leading independent telecommunications provider in Germany, specializing in mobile voice and data services. The company maintains a strong market position with a large subscriber base and transparent investor relations. The website provides comprehensive corporate and investor information, career opportunities, and press releases, targeting investors, customers, and job seekers primarily in the German market. Technically, the website is hosted behind Cloudflare and uses modern web technologies including Vimeo for video content and Google Tag Manager for analytics. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the security posture. While security headers and content security policies are implemented, the lack of encryption exposes users to risks. Privacy compliance is partially addressed with a privacy policy but lacks cookie consent mechanisms. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

U

Unikontor

unikontor.de

40

Unikontor is the official online shop of Universität Hamburg, providing a diverse range of high-quality, sustainable merchandising products such as hoodies, T-shirts, bags, and conference materials. The website targets students, staff, tourists, and supporters of the university, positioning itself as a trusted provider of university-branded merchandise with a strong emphasis on sustainability and fair production practices. Technically, the site is built on the Shopware CMS platform, running on modern PHP and Apache servers, with good performance and mobile optimization. Security measures include HTTPS with strong TLS protocols, essential security headers, and OCSP stapling, though improvements like DNSSEC and CAA records could enhance security further. Privacy compliance is addressed with a visible cookie consent mechanism and a privacy policy, although some areas could be more comprehensive. Overall, the site demonstrates a good balance of business credibility, technical implementation, and security posture, making it a reliable and professional e-commerce platform for university merchandise.

D

Digital Assets AG

mydigibiz24.com

63

Digibiz24 is a German-based SaaS platform offering an all-in-one solution for building websites, sales funnels, and membership areas, primarily targeting online entrepreneurs and coaches. The platform integrates with Digistore24 for sales automation and affiliate marketing, providing a seamless experience for users to create and monetize their online businesses. The website demonstrates a high level of digital maturity with modern technologies, responsive design, and strong SEO practices. Security is well addressed with HTTPS, GDPR compliance, and secure hosting on reliable infrastructure. While some improvements in SSL configuration and security headers are recommended, the overall security posture is solid. The platform's business credibility is reinforced by testimonials, clear contact information, and transparent policies.

Universität Hamburg is a large, well-established public university in Germany, recognized as the largest research and education institution in Northern Germany with a strong excellence status. The website serves as a comprehensive portal for students, researchers, staff, and the public, offering extensive information on academic programs, research projects, career services, and international cooperation. Technically, the site uses modern JavaScript libraries and analytics tools but suffers from slow load times and lacks a valid SSL certificate, which is a critical security concern. Privacy policies and cookie consent mechanisms are well implemented, reflecting good GDPR compliance. However, the absence of HTTPS and security headers significantly weakens the security posture, exposing the site to potential risks. Strategic recommendations include immediate SSL deployment, enabling modern TLS protocols, and enhancing security headers to protect user data and improve trust.

C

cituro

cituro.com

58

cituro is a German-based technology company specializing in providing a comprehensive online appointment booking system tailored for businesses across various sectors. The company offers a SaaS platform that enables seamless online scheduling, customer management, and payment processing, positioning itself as a flexible and GDPR-compliant solution with a strong market presence in multiple countries. The website reflects a professional and consistent brand image with extensive content detailing features, customer testimonials, and integration capabilities.

G

Gemeinde Börnsen

boernsen-erleben.de

40

The website 'boernsen-erleben.de' serves as an official community information portal for the municipality of Börnsen, Germany. It provides residents and visitors with local news, event announcements, business listings, and social information. The site promotes a mobile app and offers structured navigation across various community topics. Technically, the site is built on the ProcessWire CMS, hosted by Strato, and uses common web libraries such as jQuery and Owl Carousel. Performance is moderate with a page load time of approximately 3.8 seconds. However, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical security deficiency. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. The site uses Matomo analytics, indicating moderate user tracking with some privacy considerations. Overall, the website is functional and informative but requires significant security improvements to protect user data and comply with modern web standards.

G

Gemeinde Büchen

buechen.de

40

Gemeinde Büchen operates as a local government entity serving approximately 6,700 residents in the Herzogtum Lauenburg district of Germany. The website provides comprehensive information about municipal services, including family and social services, education, culture, economy, and local infrastructure. It targets residents, families, businesses, and visitors, positioning itself as a community hub with a focus on quality of life and connectivity. Technically, the site is built on TYPO3 CMS with Bootstrap and jQuery, but suffers from slow load times and lacks modern security configurations such as HTTPS. The security posture is weak due to the absence of SSL/TLS encryption, security headers, and DNS security features. Privacy compliance is partially addressed with a cookie consent mechanism and a privacy policy, but no terms of service or incident response policies are evident. Overall, the site is functional and informative but requires urgent security improvements to protect user data and enhance trust.

D

Digital Assets AG

coachannel.com

58

Digibiz24.com is a German-based SaaS platform operated by Digital Assets AG, offering an all-in-one solution for building websites, sales funnels, and membership areas primarily targeting online entrepreneurs and coaches. The platform integrates with Digistore24 for sales automation and affiliate marketing, providing a comprehensive ecosystem for online business growth. The website features rich content including detailed product descriptions, FAQs, testimonials, and interactive elements, reflecting a mature digital presence. Technically, the site uses modern web technologies such as Express.js, jQuery, and Vimeo for video content, but lacks a valid SSL certificate, which is a significant security concern. Privacy compliance is well addressed with GDPR adherence and cookie consent mechanisms. Overall, the platform demonstrates strong business credibility and user engagement but must address critical security issues to improve trust and compliance.

F

Friedrich-Alexander-Universität Erlangen-Nürnberg

fau.de

40

Friedrich-Alexander-Universität Erlangen-Nürnberg (FAU) is a large, well-established public research university in Germany, founded in 1743. It offers a broad spectrum of over 280 study programs and is recognized as one of the leading research institutions in the country. The university serves a diverse audience including prospective students, current students, researchers, staff, alumni, companies, schools, and the press. Its business model centers on education, research, and outreach, with strong partnerships and international collaborations. The website reflects a mature digital presence with comprehensive content, structured navigation, and integration of multimedia and social media channels.

T

TÜV NORD GROUP

tuv-nord.com

62

TÜV NORD GROUP operates as a global service provider specializing in testing, certification, inspection, and training services across multiple sectors such as energy, transportation, real estate, and industry. The company maintains a strong market position as a large enterprise with a broad international presence and multiple subsidiaries. Their website reflects a professional and well-structured digital presence targeting both business and private customers. Technically, the site is built on TYPO3 CMS and integrates various marketing and analytics tools, including Pardot, HubSpot, and Google Analytics, with a good level of GDPR compliance and consent management. However, the security posture is weakened by the absence of a valid SSL certificate and lack of modern TLS protocol support, which poses a critical risk to secure communications. The site implements strong security headers and content security policies but requires urgent remediation of SSL/TLS issues to ensure data protection and user trust. Overall, the website is functional and professional but needs immediate security improvements to align with best practices and compliance standards.

T

TÜV NORD GROUP

tuev-nord-group.com

53

The TÜV NORD GROUP is a well-established enterprise headquartered in Germany, specializing in safety, certification, inspection, and consulting services across multiple sectors including energy and transportation. With over 150 years of experience and a global presence in more than 100 countries, the company positions itself as a trusted provider of quality and safety solutions. The website reflects a professional and comprehensive digital presence, targeting businesses and organizations seeking expert services in safety and compliance. Technically, the site is built on TYPO3 CMS and utilizes modern JavaScript libraries and consent management tools, although performance is hindered by slow load times and an invalid SSL certificate. Security posture is weakened by the lack of a valid SSL certificate and absence of security headers, which poses risks to user trust and data protection. Privacy compliance is strong, with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness but requires urgent security improvements to enhance user confidence and compliance.

Landitec GmbH is a specialized B2B technology company based in Germany, offering high-quality network hardware appliances and related services across Europe. Their business model combines e-commerce with consulting, testing, and support services, targeting enterprises and organizations requiring secure and flexible network infrastructure. The website is built on the Odoo CMS platform and hosted on Odoo.sh, featuring a professional design with clear navigation and multilingual support. However, the site lacks a valid SSL certificate, resulting in no HTTPS protection, which significantly impacts its security posture. While cookie consent mechanisms and privacy policies are present, explicit security policies and incident response information are missing. The company demonstrates trust through extended warranties, partner logos, and detailed product testing.

U

Universitätsklinikum Hamburg-Eppendorf

uke.de

40

The Universitätsklinikum Hamburg-Eppendorf (UKE) is a leading European university hospital specializing in healthcare, research, and education. The website reflects a comprehensive digital presence with extensive information about clinics, institutes, research programs, patient services, and educational offerings. The site targets patients, medical professionals, researchers, and students, positioning UKE as a major healthcare and research institution in Germany. Technically, the site uses established libraries like jQuery and Modernizr, and employs Matomo for privacy-conscious analytics. However, the absence of a valid SSL certificate and modern TLS protocols significantly impacts the security posture. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. The site demonstrates high professionalism and trustworthiness but requires urgent improvements in security infrastructure to protect user data and enhance trust.

The website hfmt-hamburg.de currently serves a 404 error page indicating that no site configuration is found, suggesting the site is either offline or not properly configured. The site is powered by TYPO3 CMS and hosted on infrastructure associated with Technische Universität Hamburg. There is no accessible business content, contact information, or policies available, which severely limits the ability to assess the business or its services. Technically, the site lacks a valid SSL certificate and does not support HTTPS, exposing it to security risks. The absence of security headers and modern TLS protocols further weakens its security posture. Overall, the site is not operational from a user or security perspective, resulting in a very low trust and quality rating.

H

Hochschule für bildende Künste Hamburg (HFBK Hamburg)

hfbk-hamburg.de

40

The website represents the Hochschule für bildende Künste Hamburg (HFBK Hamburg), a medium-sized public art university in Germany focused on fine arts education, exhibitions, and research. It targets prospective and current students, artists, and the art community with comprehensive content on academic programs, events, and projects. The site is professionally designed with consistent branding and rich content, supporting an excellent user experience and clear navigation. Technically, the site uses a modern JavaScript stack including jQuery, Masonry, and Klaro for cookie consent, but lacks a valid SSL certificate, resulting in insecure HTTP connections. Security headers are well configured but ineffective without HTTPS. Privacy compliance is partially addressed with a privacy policy and cookie consent mechanism, though GDPR compliance is not fully evident. The site uses Matomo analytics with user consent. Overall, the security posture is weak due to missing HTTPS, which is a critical issue. The site is accessible without WAF or blocking mechanisms.

V

vitrado

vitrado.de

40

vitrado.de operates as an inhouse affiliate marketing network primarily serving the freenet Group's portfolio of digital lifestyle and telecommunications products. The platform targets affiliate marketers and partners seeking to promote these products through various partner programs and marketing tools. The website presents a professional and consistent brand image aligned with its parent company, freenet Group, and offers a range of partner programs including waipu.tv, klarmobil, and freenet Mobile among others. Technically, the site leverages JavaScript, CSS, and SVG technologies with Cloudflare DNS and hosting, but suffers from slow load times and lacks modern security configurations such as a valid SSL certificate and HTTPS support. Security posture is weak due to missing HTTPS, absent security headers, and disabled DNSSEC, exposing the site to potential risks. Privacy compliance is minimal with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. Overall, the site is functional and content-rich but requires urgent security and privacy improvements to enhance trust and compliance.

F

freenet DLS GmbH

freenet-mobilfunk.de

40

Freenet DLS GmbH operates a comprehensive German telecommunications website offering mobile phone tariffs, devices, and related digital services. The company targets German consumers seeking flexible mobile plans and devices, positioning itself as a significant player in the German telecom market. The website features structured data with detailed company information and social media presence, supporting brand credibility and customer engagement. Technically, the site employs modern JavaScript frameworks, Cloudflare CDN, and personalization tools like Kameleoon, but suffers from critical SSL/TLS misconfigurations that undermine secure HTTPS access. Security headers are partially implemented, but the lack of a valid SSL certificate and disabled TLS protocols represent major vulnerabilities. Privacy and cookie policies are not detected, indicating compliance gaps. Overall, the site is functional and professionally designed but requires urgent security improvements to protect user data and comply with regulations.

F

Freie und Hansestadt Hamburg

karriere.hamburg

56

The website karriere.hamburg serves as the official career portal for the Freie und Hansestadt Hamburg, offering a wide range of job opportunities, training programs, and career entry options in the public sector. It targets job seekers, students, and professionals interested in working for the city government. The site is well-branded and professionally presented with clear navigation and relevant content in German. Technically, the site uses modern HTML5 and responsive design techniques but lacks a valid SSL certificate, which is a critical security flaw. Security headers are partially implemented but some settings reduce protection. Privacy compliance is limited, with no cookie consent mechanism despite the presence of tracking scripts. Overall, the site is functional and credible but requires urgent security improvements to protect user data and trust.

A

Arvato Systems

arvato-systems.de

40

Arvato Systems is a leading German IT service provider specializing in digital transformation across multiple industries including energy, manufacturing, healthcare, retail, government, and finance. The company offers a broad portfolio of services such as consulting, cloud and data center services, application development, security, and managed services. It holds multiple industry awards and certifications, including ISO 27001 and Top Employer Germany 2024, reflecting its strong market position and commitment to quality and security. Technically, the website is built on CoreMedia CMS and integrates various analytics and marketing technologies, but suffers from a critical lack of valid SSL/TLS certificates, impacting its security posture. Privacy compliance is well addressed with comprehensive cookie consent mechanisms and GDPR-aligned privacy policies. Overall, the company demonstrates a mature digital presence with strong business credibility but needs urgent improvements in SSL/TLS security to protect user data and maintain trust.

D

Digital Assets AG

digibiz24.com

52

Digibiz24 is a German-based SaaS platform offering an all-in-one solution for building websites, sales funnels, and membership areas, primarily targeting online coaches and entrepreneurs. The platform integrates deeply with Digistore24, a leading European sales automation and affiliate network, enabling seamless payment processing and sales management. The website demonstrates strong digital maturity with modern technologies, good SEO, and mobile optimization. However, a critical security issue is the absence of a valid SSL certificate, resulting in no HTTPS support, which significantly impacts the security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the platform presents a professional and trustworthy business offering but must urgently address its SSL/TLS configuration to ensure secure user interactions.

A

Arvato SE

open-xcellerator.com

63

The open-xcellerator.com website represents a community platform under Arvato SE focused on Advanced & Personalized Therapies, particularly addressing supply chain challenges in Cell & Gene Therapy. The site aims to foster collaboration among industry stakeholders to improve patient-centric and globally harmonized therapy supply chains. Technically, the site is built on TYPO3 CMS, served by Apache, and uses modern frontend tooling like Vite JS. It integrates Google Tag Manager and Cookiebot for analytics and cookie consent management. However, the site suffers from a critical security issue: the SSL certificate is invalid or missing, and no HTTPS protocols are enabled, severely impacting security posture. Privacy compliance is supported by a visible privacy and cookie policy with consent mechanisms. Contact is available via a contact page but lacks direct email or phone details on the main site. Overall, the site is professionally designed and content-rich but requires urgent security improvements to protect user data and trust.

B

Bertelsmann SE & Co. KGaA

bertelsmann.de

40

Bertelsmann SE & Co. KGaA is a leading international media conglomerate headquartered in Germany, operating across multiple sectors including broadcasting, book publishing, music, services, printing, education, and investments. The website reflects a mature corporate presence with comprehensive information targeting investors, journalists, job seekers, and the general public. The business model is diversified with strong subsidiaries such as RTL Group and Penguin Random House, positioning Bertelsmann as a major player in the global media industry. Technically, the website employs established web technologies like Bootstrap and jQuery, with content delivery via Amazon CloudFront CDN, ensuring good performance and mobile optimization. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the security posture. Security headers are partially implemented, but critical HTTPS and TLS configurations are missing, exposing the site to potential risks. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent managed by Cookiebot. Contact information and social media presence are clearly provided, enhancing business credibility. Overall, the site is professional and content-rich but requires urgent security improvements to meet modern standards.

C

Chatbot

linda-chatbot.de

40

The website linda-chatbot.de appears to be a chatbot service associated with the Sparkasse brand, indicating a financial services context in Germany. However, the site content is currently inaccessible beyond a simple error message indicating a domain or service issue, which severely limits the ability to assess the business comprehensively. The technical infrastructure shows use of React framework and external font resources from Sparkasse's webfonts domain, but the site suffers from very slow load times and minimal content. Security posture is weak due to the absence of a valid SSL certificate and HTTPS support, lack of security headers, and missing DNS security configurations. No privacy, cookie, or terms of service policies are present, and no contact or business information is available on the page. Overall, the site is not currently functional or trustworthy for end users.

The website sparkassen-mediacenter.de serves as a centralized media management platform primarily targeting the Sparkassen-Finanzgruppe, a major financial group in Germany. It offers a suite of services including video content management, podcasts, interactive videos, and playlist creation, aimed at enhancing digital content distribution within the group's online platforms. The platform is positioned as an internal tool to streamline media content handling and ensure secure access to both public and internal video assets. Technically, the site is built on a traditional Apache server with standard HTML, CSS, and JavaScript assets. However, it lacks modern security infrastructure, notably missing a valid SSL/TLS certificate and HTTPS support, which significantly undermines its security posture. The site includes multiple JavaScript libraries and CSS bundles but does not leverage modern frameworks or CMS platforms. Security headers are partially implemented, but critical HTTPS and TLS configurations are absent. Privacy compliance is minimal, with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. Contact information is limited to a phone number and support ticket instructions, with no email addresses or social media presence. Overall, the site demonstrates moderate business credibility and good content relevance but suffers from critical security shortcomings that must be addressed to protect user data and maintain trust.

L

Leibniz-Rechenzentrum der Bayerischen Akademie der Wissenschaften

lrz.de

40

The Leibniz-Rechenzentrum (LRZ) is a large, well-established IT service provider dedicated to supporting scientific research and education primarily in Bavaria, Germany. It offers a broad portfolio of advanced IT services including supercomputing, AI and Big Data infrastructure, networking via the Munich Science Network (MWN), IT security, cloud storage, and consulting. The LRZ is positioned as a key regional player with strong partnerships and a focus on cutting-edge technologies. Technically, the website is built on TYPO3 CMS and demonstrates good content quality, navigation, and accessibility, though performance is moderate. Security posture is weak due to the absence of a valid SSL certificate and lack of modern TLS protocols, which is a critical issue. Privacy compliance is adequate with a clear privacy policy but lacks cookie consent mechanisms. Overall, the site is professional and trustworthy but requires urgent improvements in security to protect user data and enhance trust.

D

Deka Investments

deka-investments.de

40

Deka Investments is a prominent German asset management company offering professional investment and retirement solutions primarily targeting private customers. The website reflects a strong market position with comprehensive services including funds, certificates, savings plans, and wealth management, supported by multiple industry awards and a close affiliation with the Sparkassen-Finanzgruppe. The digital infrastructure leverages modern JavaScript frameworks such as Vue.js and integrates analytics and marketing tools like Google Tag Manager and eGain Chat, providing a good user experience with clear navigation and mobile optimization. However, the security posture is weakened by the absence of a valid SSL certificate and lack of HTTPS support, which is a critical issue for a financial services website. Privacy and cookie policies are well implemented with GDPR compliance and consent mechanisms in place. Contact information is clearly presented with multiple channels including phone, contact forms, and chat. Overall, the website is professional and trustworthy but requires urgent remediation of SSL/TLS issues to ensure secure communications and maintain user trust.

L

L-Bank

l-bank.info

40

L-Bank is the state development bank of Baden-Württemberg, Germany, providing financial support and services to businesses, municipalities, and individuals within the region. The bank focuses on economic development, housing promotion, family support, education, and social initiatives. It holds a strong market position as a regional government-backed financial institution with a history dating back to 1924. The website reflects a mature digital presence with modern technologies such as Vue.js and Hippo CMS, delivering excellent user experience and accessibility. Security posture is robust with HTTPS, comprehensive security headers, and cookie consent mechanisms, although some improvements like OCSP stapling and HSTS preload could enhance security further. Privacy compliance is well addressed with clear policies and consent management. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.

S

Sparkasse Saarbrücken

sparkasse-saarbruecken.de

40

Sparkasse Saarbrücken operates as a regional financial institution providing a broad range of banking and financial services to private and business customers. The website offers comprehensive online banking, credit products, investment options, insurance, and real estate services, positioning itself as a trusted and award-winning bank in Germany. The digital presence is well-structured, targeting both private and corporate clients with clear navigation and service offerings. Technically, the site uses modern web technologies and likely a robust CMS platform, delivering a good user experience with mobile optimization and accessibility features. Security posture is strong with HTTPS, SPF, and DMARC policies in place, though improvements such as DNSSEC and HSTS could enhance protection. Privacy compliance is well addressed with explicit cookie consent and detailed privacy policies. Overall, the website reflects a mature digital infrastructure supporting a large financial institution with a high level of professionalism and trust.

K

Koongo

koongo.de

40

Koongo is a medium-sized e-commerce technology company specializing in product feed management and multi-channel marketplace integration. The company offers a SaaS platform that enables online sellers to synchronize product data, inventory, and orders across over 500 sales channels including Amazon, eBay, and Google Shopping. Koongo positions itself as a comprehensive solution provider with integrations to numerous e-commerce platforms such as Magento, Shopify, WooCommerce, and others. The website is professionally designed, content-rich, and targets e-commerce businesses seeking to expand their online sales footprint efficiently. Technically, the site is built on WordPress with a modern tech stack including jQuery, Google Analytics, and Intercom for customer engagement. However, the absence of a valid SSL certificate and HTTPS support is a critical security shortfall that undermines user trust and data protection. The site implements a detailed cookie consent mechanism and complies with GDPR requirements, reflecting a strong privacy posture. Overall, Koongo demonstrates a solid market presence with good business credibility but requires urgent improvements in its security infrastructure to meet industry standards.

B

Bildungswerk der Sächsischen Wirtschaft

bsw-sachsen.de

40

Bildungswerk der Sächsischen Wirtschaft is a well-established educational organization focused on vocational training and professional development in the Saxony region of Germany. With over 30 years of experience and multiple subsidiaries, it offers a broad portfolio of services including further education, training seminars, and integration courses. The organization targets companies, employees, job seekers, and schools, positioning itself as a key regional player in workforce qualification and development. Technically, the website is built on TYPO3 CMS with modern frontend frameworks like Bootstrap and includes SEO-friendly structured data and social media integration. However, the site suffers from a critical security weakness due to the absence of a valid SSL certificate, resulting in an insecure connection and lack of HTTPS enforcement. Other security best practices such as security headers, DNSSEC, and DMARC are also missing. Privacy compliance is addressed with a cookie consent mechanism and clear privacy and cookie policies. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

C

Calls for Transfer

callsfortransfer.de

31

Calls for Transfer (C4T) is a specialized funding program based in Hamburg, Germany, designed to support innovative projects emerging from the city's state universities and scientific research institutions. The program offers up to 35,000 Euro in funding for a 12-month project period, aiming to facilitate the transfer of knowledge and technology from academia to practical applications. The website presents a professional and well-structured portal with clear navigation, targeting researchers and innovators in Hamburg. Technically, the site is built on WordPress with popular plugins such as Elementor and LayerSlider, but it suffers from critical security shortcomings including the absence of a valid SSL certificate and disabled TLS protocols, which significantly impact its security posture. Privacy compliance is well addressed with a cookie consent mechanism and links to privacy and terms of service hosted on the parent organization's domain. Overall, while the business and content aspects are strong, the lack of HTTPS and modern security configurations pose a significant risk that should be urgently addressed.

O

Ost-Ausschuss der Deutschen Wirtschaft e.V.

ost-ausschuss.de

40

The Ost-Ausschuss der Deutschen Wirtschaft e.V. is a medium-sized non-profit association based in Germany that facilitates economic cooperation and business relations between German companies and Eastern European and Central Asian markets. The organization provides services such as policy advocacy, networking events, delegations, and publishes relevant economic updates and reports. The website is professionally designed using Drupal 10 and integrates modern web technologies and analytics tools, targeting business stakeholders and policymakers. However, the site lacks a valid SSL certificate and does not serve content over HTTPS, which significantly weakens its security posture. Privacy and cookie policies are present and include consent mechanisms, reflecting good compliance with GDPR requirements. Contact information is clearly provided, enhancing business credibility.

O

ODAV AG - Lehrinstitut für Informatik

odav-lehrinstitut.de

40

ODAV AG - Lehrinstitut für Informatik is a well-established educational institution based in Straubing, Germany, specializing in IT training and professional development. With over 40 years of experience, it offers a variety of courses, firm seminars, and funding options targeting IT professionals and companies seeking to enhance digital competencies. The website reflects a professional and content-rich platform with clear navigation, testimonials, and detailed course information. Technically, the site uses Apache server, jQuery, Bootstrap, and a proprietary ODAV CMS, with Matomo analytics integrated under cookie consent management. However, the absence of a valid SSL certificate and lack of HTTPS support significantly weaken its security posture. Security headers are partially implemented, but critical improvements are needed to ensure secure communications and compliance. Overall, the site is trustworthy and user-friendly but requires urgent security enhancements to protect user data and improve trust.

T

TÜV NORD

tuev-nord.de

40

TÜV NORD is a well-established enterprise-level company specializing in safety, certification, and training services across multiple sectors including energy, transportation, real estate, healthcare, and technology. The website presents a professional and consistent brand image with comprehensive content targeting both private and business customers. The technical infrastructure is based on TYPO3 CMS with integration of modern marketing and analytics tools, though performance metrics indicate room for improvement. Security posture is weakened by the absence of a valid SSL certificate and HTTPS, which is a critical issue. Privacy compliance is well addressed with consent management and GDPR-aligned policies. Overall, the site is trustworthy but requires urgent security enhancements to protect user data and improve trust.

S

Stahlinstitut VDEh

vdeh.de

40

Stahlinstitut VDEh is a German-based institute specializing in steel technology, offering services such as seminars, standardization, membership, and publications. The website targets industry professionals and members within the steel manufacturing sector. The business model revolves around providing educational and industry services to its members and stakeholders. Technically, the website is built on PHP 7.4.33 with nginx and uses common frontend libraries like Bootstrap and jQuery. However, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security shortfall. The site is moderately optimized for mobile and has a good design and navigation structure but suffers from slow DNS resolution and no caching headers that could improve performance. Security posture is weak due to missing HTTPS, lack of advanced security headers, and no cookie consent mechanism. Privacy compliance is minimal with a privacy policy present but no explicit GDPR compliance or cookie consent. Business credibility is moderate with clear branding and professional content but lacks direct contact information and certifications. Overall, the site scores low on security and privacy compliance, which should be prioritized to improve trust and user safety.

F

freenet Internet

freenet-internet.de

40

freenet Internet is a German telecommunications provider specializing in flexible internet tariffs that can be managed entirely via a mobile app. Their offerings include DSL and 5G internet services with monthly cancellable contracts, targeting customers who value freedom and simplicity. The website is built on modern JavaScript frameworks (Nuxt.js and Vue.js) and hosted on Amazon Web Services infrastructure, leveraging CloudFront CDN for content delivery. However, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a significant security concern. The presence of SPF and DMARC records indicates some email security awareness, but no advanced security headers or mechanisms are implemented. Privacy and terms of service documents are present and appear comprehensive, but no cookie consent mechanism is detected. Overall, the site provides good content quality and user experience but requires urgent improvements in security posture to protect users and enhance trust.

D

DIZ | Digitales Innovationszentrum GmbH

digitalhub-ai.de

40

Digital Hub Applied Artificial Intelligence Karlsruhe is a regional technology ecosystem hub focused on advancing artificial intelligence and cybersecurity in Karlsruhe, Germany. It serves as a network facilitator offering services such as events, workshops, startup programs, and expert access to foster innovation and collaboration. The website presents a professional and consistent brand image targeting businesses and individuals interested in AI and cybersecurity. Technically, the site is built on the Contao CMS platform, using Apache server and common web libraries like jQuery and Leaflet. However, the site lacks a valid SSL certificate and modern TLS support, which significantly impacts its security posture. Security headers are present but insufficient without proper HTTPS. Privacy compliance is partially addressed with a cookie consent mechanism and a privacy policy page, but GDPR compliance indicators and incident response information are missing. Overall, the site demonstrates moderate digital maturity with room for improvement in security and privacy practices.

B

Bertelsmann Education Group

bertelsmann-education-group.com

55

Bertelsmann Education Group is a medium-sized entity under the Bertelsmann parent company, focusing on investments and partnerships in healthcare training and education solutions. The company targets healthcare organizations and education sector stakeholders, aiming to address workforce and skills shortages through innovative learning and workforce management solutions. The website reflects a professional and consistent brand presence, highlighting key subsidiaries such as Afya Limited and Relias. Technically, the site is built on WordPress using Elementor and Astra theme, with moderate performance and good mobile optimization. However, the security posture is weakened by the absence of a valid SSL certificate and lack of modern TLS protocols, despite having some security headers and a strict DMARC policy. Privacy compliance is supported by a clear privacy policy and cookie consent mechanism via Cookiebot. Overall, the site is functional and credible but requires urgent improvements in SSL/TLS configuration to enhance security and trust.

B

Bertelsmann Marketing Services

bertelsmann-marketing-services.com

50

Bertelsmann Marketing Services is a large, Germany-based media and marketing services company, operating as a 100% subsidiary of Bertelsmann. The company specializes in direct marketing, printing services, and multi-channel campaign management, serving a broad range of clients including retail, industrial, and publishing sectors. The website is professionally designed, content-rich, and well-structured, supporting both German and English languages. Technically, the site uses TYPO3 CMS and is hosted on infrastructure managed by Arvato Systems. However, the site lacks a valid SSL certificate and does not support HTTPS, which is a critical security shortfall. Security headers are partially implemented but insufficient to mitigate risks fully. Privacy compliance is good, with a clear privacy policy and cookie consent mechanism in place. Business credibility is high, supported by certifications and active communication through press releases and social media.

A

Arvato SE

arvato.com

53

Arvato SE is a global enterprise specializing in third-party logistics (3PL), supply chain management, and digital logistics solutions. The company serves a diverse range of industries including e-commerce, B2B, and transportation, offering services such as warehousing, fulfillment, transport management, and digital customer experience solutions. Their market position is strong with a broad international footprint and multiple regional subsidiaries. The website reflects a professional and comprehensive digital presence with multilingual support and detailed service descriptions. Technically, the site is built on TYPO3 CMS with modern frontend tooling but suffers from slow load times and lacks a valid SSL certificate, impacting security posture. Security-wise, the absence of HTTPS and security headers are critical issues, though cookie consent and privacy compliance are well implemented. Overall, the site is trustworthy and professional but requires urgent security improvements to meet modern standards.

B

BMG Rights Management GmbH

bmg.com

50

BMG Rights Management GmbH operates as a global music publishing and record company, providing a broad range of services to music creators including publishing, recordings, and sync licensing. Positioned as a longtime home for artists and songwriters, BMG leverages a global network combined with innovative technology to empower its clients. The company is a division of the global media conglomerate Bertelsmann, indicating a strong market presence and enterprise scale. The website reflects a professional and consistent brand image targeting music industry professionals and creators. Technically, the site uses modern JavaScript libraries, Google Analytics for tracking, and a consent management platform to comply with privacy regulations. However, the hosting infrastructure appears to be Google Cloud Storage with DNS managed by Arvato Systems. Security posture is weak due to the absence of a valid SSL certificate and HTTPS support, which is a critical risk. Privacy compliance is well addressed with visible policies and consent mechanisms. Overall, the site is content-rich and professionally designed but requires urgent security improvements to protect user data and trust.

B

Bertelsmann SE & Co. KGaA

bertelsmann.com

52

Bertelsmann SE & Co. KGaA is a leading international media conglomerate headquartered in Germany, operating through multiple divisions such as RTL Group, Penguin Random House, BMG, and Arvato Group. The company provides a wide range of media, publishing, entertainment, and service offerings targeting journalists, investors, applicants, and the general public. The website reflects a mature digital presence with comprehensive corporate, investor, and media information, supported by strong branding and consistent content quality. Technically, the site uses established technologies like jQuery, Bootstrap, and Cookiebot for consent management, hosted on AWS CloudFront CDN. However, the absence of a valid SSL/TLS certificate and disabled HTTPS protocols represent critical security gaps. Security headers and content security policies are implemented but cannot compensate for the lack of HTTPS, which is essential for protecting user data and trust. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the site is professional and trustworthy but requires urgent security improvements to meet modern standards.

B

Bertelsmann

createyourowncareer.de

40

Bertelsmann's Create Your Own Career website serves as a comprehensive career portal targeting students, graduates, professionals, and school students interested in opportunities within the Bertelsmann group. The site highlights multiple divisions and offers detailed information on programs, events, and job listings, positioning Bertelsmann as a large multinational media and services conglomerate with a strong employer brand. Technically, the site is built on TYPO3 CMS, hosted likely by Arvato Systems, and integrates modern marketing and consent tools such as Google Analytics, Google Tag Manager, and CookieFirst. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate and HTTPS support, which significantly impacts the site's security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional and trustworthy but requires urgent security improvements.

L

Landitec GmbH

landitec.com

53

Landitec GmbH is a medium-sized German company specializing in high-quality, flexible, and high-performance appliance solutions and services for the B2B sector. They focus on customized IT security appliances and software solutions, including network hardware, edge AI, 5G, and industrial applications. The company holds a strong market position as an OPNsense Platinum Partner and collaborates with notable partners such as SECUDOS and Barracuda. Their offerings include both hardware and software appliances, tailored to customer needs from initial concept to final product delivery. Technically, the website is built on Joomla CMS with the Helix Ultimate framework, utilizing modern libraries like jQuery and Bootstrap. The site is well-structured, mobile-optimized, and includes SEO best practices. However, the absence of a valid SSL certificate and HTTPS significantly impacts their security posture. Security headers are partially implemented, and cookie consent mechanisms are in place, indicating good privacy compliance. Analytics usage is moderate, primarily via Google Analytics and Tag Manager. Security-wise, the lack of valid HTTPS is a critical issue that lowers the overall security score. Other security best practices such as HSTS, OCSP stapling, and session resumption are not implemented. No explicit security policy or incident response information is found. The company provides clear contact information and maintains a professional online presence, but should prioritize securing their website with valid SSL certificates to enhance trust and compliance. Overall, Landitec GmbH presents a professional and credible business with solid technical infrastructure but requires urgent improvements in security configuration to meet modern standards and ensure customer trust.

X

XING

prescreen.io

61

The website prescreen.io redirects or is represented by recruiting.xing.com, a platform operated by XING, a subsidiary of NEW WORK SE. The site offers the onlyfy Bewerbungsmanager, a comprehensive talent acquisition and applicant tracking solution designed for companies seeking to modernize and streamline their recruiting processes. The platform integrates active and passive sourcing, multiposting, social media campaigns, and detailed reporting to support holistic recruiting workflows. Technically, the site is built on WordPress with modern front-end frameworks like Bootstrap and jQuery, hosted on AWS infrastructure. While the site demonstrates good SEO, structured data usage, and user experience, it suffers from critical security shortcomings, notably the absence of a valid SSL certificate and disabled TLS protocols, which severely impact its security posture. Privacy compliance is well addressed with visible privacy and cookie policies and consent management via Usercentrics. Overall, the site is content-rich and professionally presented but requires urgent security improvements to protect user data and maintain trust.

C

Content Pass GmbH

contentpass.net

58

Content Pass GmbH operates contentpass.net, a subscription-based platform offering users ad-free and tracking-free access to over 500 digital publications. The company positions itself as a privacy-conscious alternative to traditional ad-supported content, distributing subscription revenues to publishers to compensate for lost advertising income. The service targets privacy-aware consumers in Europe, emphasizing GDPR compliance and user data protection. The platform integrates multiple payment providers and offers multi-device access with a user-friendly interface. Technically, the website is built on a modern React/Next.js stack with Apollo GraphQL and hosted on OVH and Google Cloud Platform, leveraging Bunny.net CDN for performance optimization. However, the site suffers from a critical security flaw due to the absence of a valid SSL certificate and HTTPS support, exposing users to potential risks. Privacy policies and terms of service are comprehensive and well-documented, reinforcing trust and compliance.