Germany security reports

L

Landesförderinstitut Mecklenburg-Vorpommern

lfi-mv.de

64

The Landesförderinstitut Mecklenburg-Vorpommern (LFI M-V) operates as the central funding service provider for the state of Mecklenburg-Vorpommern, Germany. It offers a variety of public funding programs targeting businesses, founders, municipalities, private individuals, and organizations. The website reflects a government-oriented institution with a clear focus on facilitating access to funding and providing comprehensive information about available programs and related statistics. The site is well-branded, consistent, and includes EU co-financing indicators, enhancing trust and legitimacy. Technically, the website employs standard web technologies such as HTML5, CSS3, JavaScript, and jQuery-based components like Owl Carousel. The site is mobile-optimized, accessible, and SEO-friendly, though no specific CMS or hosting provider details are evident. Performance is moderate, with no critical technical issues detected. From a security perspective, HTTPS is used, and a cookie consent mechanism is implemented, indicating GDPR compliance. However, explicit security headers and incident response policies are not published, and no vulnerability disclosure mechanisms are present. The site does not expose sensitive data or use vulnerable libraries based on the provided content. Overall, the security posture is adequate but could be improved with additional policies and headers. The risk assessment is low given the nature of the site as a government funding portal with no adult or questionable content. Strategic recommendations include enhancing security headers, publishing security policies, and providing clear contact information for security incidents to improve trust and compliance further.

E

Ehrenamtsstiftung Mecklenburg-Vorpommern

ehrenamtskarte-mv.de

10

The Ehrenamtskarte MV website serves as an informational platform for the Ehrenamtskarte Mecklenburg-Vorpommern, a regional government and non-profit initiative recognizing volunteer engagement. It provides detailed information about the card, application processes, benefits, and partner organizations. The site targets volunteers and community members in Mecklenburg-Vorpommern, offering a well-structured and professionally designed user experience with good mobile optimization and accessibility. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and integrates Google Analytics for visitor tracking with user consent. Security posture is moderate with HTTPS usage implied but lacks explicit security headers and incident response contacts. Privacy compliance is well addressed with a clear cookie consent mechanism and a linked privacy policy. Overall, the site is trustworthy and professional, supporting its mission to promote volunteerism in the region.

V

Verfassungsschutz Mecklenburg-Vorpommern

verfassungsschutz-mv.de

62

The website www.verfassungsschutz-mv.de serves as the official online presence of the Verfassungsschutz (Office for the Protection of the Constitution) of Mecklenburg-Vorpommern, Germany. It provides comprehensive information about the agency's mission to protect the democratic constitutional order against extremist threats. The site targets citizens, political stakeholders, and interested parties by offering detailed content on various extremist fields, legal frameworks, reports, and public service announcements. The business model is that of a government agency focused on transparency and public awareness. Technically, the website is built on standard web technologies including HTML5, CSS, and JavaScript, likely managed via a custom or proprietary CMS. The site is moderately performant, mobile-optimized, and accessible, with clear navigation and structured content. No advanced frameworks or third-party analytics/tracking tools were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS (assumed from domain and typical government standards), implements cookie consent mechanisms, and avoids exposing sensitive data. However, no explicit security headers or incident response policies are published, and forms use GET methods without sensitive data collection. No vulnerability disclosure or security.txt files are present, which could be improved. Overall, the website is trustworthy, professional, and compliant with GDPR requirements, providing valuable public service content. The domain and hosting align with regional government infrastructure, supporting legitimacy. Recommendations include enhancing security headers, publishing security policies, and adding incident response contacts to strengthen security posture and user trust.

S

Steuerportal Mecklenburg-Vorpommern

steuerportal-mv.de

10

Steuerportal Mecklenburg-Vorpommern is an official government portal dedicated to providing tax-related information and services for the Mecklenburg-Vorpommern region in Germany. It serves citizens, businesses, and tax professionals by offering access to local tax offices, tax law guidance, service brochures, appointment scheduling, and up-to-date tax news. The portal is positioned as an authoritative regional government resource with a clear focus on public service and compliance facilitation. Technically, the website employs standard web technologies such as HTML5, CSS, and JavaScript, with a likely custom content management system tailored for government use. The site demonstrates good mobile optimization, accessibility, and SEO practices, although no major modern frameworks or platforms are explicitly detected. Performance is moderate, and the site includes a cookie consent mechanism to comply with privacy regulations. From a security perspective, the portal uses HTTPS (implied by the domain and typical government standards), but explicit security headers and incident response policies are not visible. No vulnerabilities or exposed sensitive data were detected in the HTML content. The site lacks a published security.txt or vulnerability disclosure policy, which could enhance transparency and security posture. Overall, the website is trustworthy and professional, with high content relevance and clear navigation. The absence of direct contact emails or phone numbers on the homepage is typical for government portals that centralize contact through other channels. The WHOIS data is limited but consistent with regional government hosting, supporting legitimacy. No WAF or blocking mechanisms interfere with content access, enabling full analysis. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure information, and providing clearer contact channels for security issues to strengthen trust and compliance.

K

Kulturportal Mecklenburg-Vorpommern

kultur-mv.de

52

Kulturportal Mecklenburg-Vorpommern is a regional cultural information portal focused on arts, culture, and cultural politics in the German state of Mecklenburg-Vorpommern. It provides comprehensive news, event calendars, exhibition details, and cultural education resources targeting residents, visitors, artists, and cultural institutions. The portal is government-supported and serves as a central hub for cultural engagement in the region. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and demonstrates good mobile optimization and accessibility. However, it lacks visible privacy and cookie policies, which is a compliance gap. Security posture is moderate with HTTPS enabled but missing security headers and incident response contacts. Overall, the site is professional, trustworthy, and content-rich but should improve privacy compliance and security best practices.

M

Ministerium für Wirtschaft, Infrastruktur, Tourismus und Arbeit Mecklenburg-Vorpommern

investorenportal-mv.de

10

The website www.investorenportal-mv.de serves as the official government portal for economic development and investor support in Mecklenburg-Vorpommern, Germany. It provides comprehensive information on investment opportunities, regional advantages, sector strengths, and support services including funding and workforce availability. The portal targets investors and businesses interested in establishing or expanding operations in the region, positioning itself as a trusted government resource. Technically, the site is built on the OpenCms content management system and employs standard web technologies such as HTML5, CSS, and JavaScript. It features a responsive design with good accessibility and SEO practices. The cookie consent mechanism is robust, offering granular user control and compliance with GDPR requirements. Analytics usage is minimal and privacy-conscious, relying on server log analysis and optional third-party video embed tracking. From a security perspective, the site uses HTTPS and implements cookie consent but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or suspicious domains were detected. The WHOIS data is limited but consistent with a legitimate government domain. Overall, the site demonstrates a solid security posture with room for improvement in formal security documentation and header implementation. The overall risk is low given the official nature and content safety of the site. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining privacy best practices to further strengthen trust and compliance.

G

GeoPortal.MV

geodaten-mv.de

64

GeoPortal.MV is the official geospatial data platform for the German state of Mecklenburg-Vorpommern, providing citizens, authorities, and businesses with access to a wide range of geodata services including thematic maps, geodata viewers, and geospatial web services. The portal is well-positioned as a government service platform with a clear focus on geoinformation infrastructure and public sector data dissemination. Technically, the website employs standard web technologies such as HTML5, CSS, JavaScript, and jQuery, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and secure form handling, though it lacks advanced security headers and a public security policy or incident response contacts. Privacy compliance is good, with clear privacy and cookie policies and GDPR adherence. Overall, the site is professional, trustworthy, and serves its public sector mission effectively.

N

NOTUS energy

notus.de

53

NOTUS energy is a well-established company specializing in wind and solar energy project development, financing, and management. The company operates internationally across 18 countries, offering a broad range of services from project conception to operation and asset management. Their website reflects a professional and comprehensive presentation of their business, targeting investors, project developers, municipalities, and other stakeholders in the renewable energy sector. The company positions itself as a strong partner in the transition to climate-friendly energy solutions. Technically, the website is built on Drupal CMS with modern web technologies including HTML5, CSS3, JavaScript, and mapping via Leaflet.js. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Google Analytics is used with IP anonymization, and cookie consent mechanisms comply with GDPR requirements. From a security perspective, the site uses HTTPS and implements privacy-conscious analytics configurations. However, explicit security headers and incident response policies are not evident. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is consistent with the business claims, showing no privacy protection or suspicious registration patterns. Overall, the website demonstrates a high level of professionalism, compliance, and technical maturity, with room for improvement in explicit security policy disclosures and security header implementations.

M

MASLATON Rechtsanwaltsgesellschaft mbH

maslaton.de

42

MASLATON Rechtsanwaltsgesellschaft mbH is a German law firm specializing in renewable energy law, air traffic law, and other civil and public law areas. With headquarters in Leipzig and branches in Munich and Cologne, the firm serves businesses, municipalities, and aviation clients. It holds a strong market position as a top-ranked law firm in energy law, offering comprehensive legal services including wind energy, biomasse, photovoltaic, and electromobility. The website reflects a professional and trustworthy brand with clear contact channels and client testimonials. Technically, the website uses modern web technologies including Matomo analytics configured for privacy, SVG icons, and responsive design. Hosting is via kasserver.com, and the site is served over HTTPS with good SSL configuration. However, no explicit cookie consent mechanism or advanced security headers were detected, indicating room for improvement in privacy compliance and security hardening. Security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of a security policy or incident response contacts suggests limited transparency in security governance. The firm demonstrates GDPR compliance through a comprehensive privacy policy and cookie-less tracking setup. Overall, the website and domain registration data align well, indicating a legitimate and credible business presence. Strategic recommendations include implementing cookie consent, enhancing security headers, and publishing security and incident response policies to further strengthen trust and compliance.

L

LIFE e.V.

life-online.de

53

LIFE e.V. is a German non-profit organization based in Berlin, specializing in education, environmental issues, and equal opportunities. The website offers workshops, further education, and consulting services focused on anti-discrimination, equality, environmental and climate protection, and transformative education. The organization targets individuals and groups interested in these social and environmental topics within the Berlin region. Technically, the website is built on WordPress using the Divi theme, enhanced with plugins such as Real Cookie Banner Pro for GDPR compliance and Matomo for privacy-respecting analytics. Cloudflare services are used for security and performance optimization, including bot protection via Turnstile. The site demonstrates good privacy compliance with comprehensive cookie and privacy policies and uses HTTPS with appropriate security headers. However, there is no explicit security policy or incident response page published, and no vulnerability disclosure mechanism is present. Overall, the website is professionally designed, accessible, and trustworthy, reflecting a mature digital presence for a small non-profit entity.

I

ITAD e.V.

itad.de

45

ITAD e.V. is a well-established German industry association representing thermal waste treatment plants, holding a leading market position with over 90 member plants covering more than 95% of national treatment capacity. The organization focuses on promoting sustainable waste management, climate protection, and circular economy principles. Their website reflects a professional and consistent brand image, targeting industry stakeholders, members, and the press. Technically, the site is built on the Plone CMS platform, leveraging modern JavaScript libraries such as Swiper.js and Leaflet.js, and uses Matomo for privacy-conscious analytics. Hosting is provided by Hostsharing eG, a reputable provider. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is supported by a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, the website is trustworthy, well-maintained, and aligned with the organization's business goals.

I

ifeu gGmbH: Institut für Energie- und Umweltforschung Heidelberg gGmbH

ifeu.de

48

ifeu gGmbH is a well-established German non-profit research institute specializing in energy and environmental sustainability research and consulting. With over 45 years of experience and more than 120 employees across multiple locations, it serves a broad audience including national and international funding agencies, policymakers, and environmental stakeholders. The organization offers a range of services including environmental research, sustainability consulting, and development of analytical tools and models. The website reflects a professional and comprehensive digital presence with clear navigation and rich content focused on their research themes and projects. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and uses Matomo analytics configured for privacy compliance. Security posture is good with HTTPS and privacy-respecting analytics, though there is room for improvement in security headers and incident response disclosures. Overall, the website is trustworthy, well-branded, and serves as a credible platform for the institute's activities.

W

Wölfel-Gruppe

woelfel.de

54

Wölfel-Gruppe is a well-established German engineering company specializing in services and products related to vibrations, acoustics, structural mechanics, and environmental protection. With over five decades of experience since its founding in 1971, the company serves diverse industrial sectors including energy, manufacturing, and transportation. Their offerings include consulting, expert reports, and tailored measurement and monitoring systems. The website reflects a mature digital presence built on TYPO3 CMS, featuring comprehensive content, clear navigation, and multilingual support. Technically, the site employs modern frameworks and integrates Google Tag Manager for analytics, indicating a moderate to advanced digital maturity. Security posture is good with HTTPS enforced, though some recommended security headers are not explicitly detected. Privacy compliance is strong with clear policies and consent mechanisms in place. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

B

Berliner Wasserbetriebe

bwb.de

69

Berliner Wasserbetriebe is the primary water supplier and wastewater disposal service provider in Berlin, Germany. The company offers comprehensive water-related services including water quality information, installation of drinking water connections, and wastewater management. The website targets residents and businesses in Berlin, positioning itself as a trusted utility provider with a strong focus on environmental and social responsibility. The digital presence is supported by a professional and accessible website with good SEO and mobile optimization. Technically, the site uses modern web technologies such as jQuery, Cookiebot for consent management, and integrates third-party media and analytics services responsibly. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response contacts are not published. Privacy compliance is well addressed through Cookiebot and a comprehensive privacy policy. Overall, the domain registration data aligns with the business identity, indicating a legitimate and trustworthy operation.

B

Berliner Regenwasseragentur

regenwasseragentur.berlin

67

The Berliner Regenwasseragentur is a government-affiliated initiative focused on decentralized rainwater management in Berlin. It serves as a service point providing information, consultation, and educational events to citizens and businesses interested in sustainable water use. The website positions itself as a niche environmental service with strong ties to local government entities, including the Senatsverwaltung für Umwelt, Verkehr und Klimaschutz and Berliner Wasserbetriebe. The business model is primarily informational and supportive, targeting environmental sustainability and urban water management. Technically, the website is built on WordPress, leveraging Yoast SEO Premium for search optimization and Cookiebot for GDPR-compliant cookie consent management. Hosting is provided via Versatel, with a moderate performance profile and good mobile optimization. The site uses structured data (JSON-LD) to enhance SEO and provide clear organizational information. Analytics are conducted via Etracker, with moderate user tracking and transparent cookie policies. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious content were detected. Privacy compliance is strong, with detailed cookie information and opt-in consent. However, the absence of terms of service and security policies indicates room for improvement. Overall, the site is trustworthy, professional, and well-aligned with its public service mission. Strategic recommendations include enabling DNSSEC, publishing security and incident response policies, and adding a vulnerability disclosure mechanism to enhance transparency and security posture.

G

Green Planet Energy eG

green-planet-energy.de

63

Green Planet Energy eG operates as a cooperative energy provider in Germany, focusing on sustainable and green energy products including green electricity, gas, and related services such as autostrom and photovoltaic solutions. The website is professionally built using TYPO3 CMS and incorporates modern web technologies including Usercentrics for GDPR-compliant cookie consent management. The company positions itself as a contributor to the energy transition with a clear focus on environmentally friendly energy solutions. Technically, the website demonstrates good SEO practices and mobile optimization, though some performance and accessibility aspects could be improved. Security posture is moderate; while HTTPS is assumed, no explicit security headers or incident response information are present, and no privacy policy or terms of service were found in the provided content. Overall, the site is trustworthy and professional but would benefit from enhanced transparency and security documentation.

D

Deutsche Energie-Agentur GmbH (dena)

dena.de

66

Deutsche Energie-Agentur GmbH (dena) is a prominent German energy agency focused on promoting efficient, intelligent, and sustainable energy production and usage. It collaborates with public and private sector partners to advance the energy transition and climate protection efforts in Germany. The website reflects a professional and comprehensive digital presence, leveraging TYPO3 CMS and modern web technologies. It provides detailed information about its mission, projects, and services, targeting stakeholders in the energy sector and government entities. The site supports multiple languages, enhancing accessibility for international audiences. Technically, the website employs a mature infrastructure with strong privacy and consent management mechanisms, including Cookiebot for cookie consent and Matomo and Hotjar for analytics, ensuring GDPR compliance. The site is well-optimized for mobile devices and accessibility, with a clear navigation structure and professional design. Hosting is managed via secure providers, and HTTPS is enforced with appropriate security headers. From a security perspective, the site demonstrates good practices such as secure cookie handling, consent management, and absence of exposed sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. Overall, the domain registration and hosting details align with the organization's legitimacy, supporting a high trust level. The overall risk assessment is low, with no indications of malicious content or security vulnerabilities. Strategic recommendations include publishing formal security and incident response policies, adding vulnerability disclosure information, and providing direct security contact channels to enhance transparency and trust.

D

Deutsche Gesellschaft für Internationale Zusammenarbeit (GIZ) GmbH

collaborative-climate-action.org

47

The Partnership for Collaborative Climate Action website serves as a knowledge-sharing platform focused on fostering cooperation between national and subnational governments to address climate change effectively. It highlights the CHAMP initiative, providing resources, news, and events to support multilevel climate governance. The site is operated by Deutsche Gesellschaft für Internationale Zusammenarbeit (GIZ) GmbH, a reputable German development agency, positioning itself as a trusted source in the climate action domain. Technically, the website is built on WordPress with the Enfold theme and uses modern tools such as Smart Slider 3 and Matomo analytics. The infrastructure is stable, with HTTPS enabled and a moderate performance profile. Mobile optimization and SEO practices are good, though accessibility features are basic. The domain registration is consistent and appropriate, with no privacy protection, indicating transparency. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and explicit security headers. No security or incident response policies are published, and there is no cookie consent mechanism, which may impact GDPR compliance. The use of Matomo analytics suggests some privacy awareness, but overall privacy compliance is basic. Overall, the website is professional, trustworthy, and relevant to its target audience of government and climate stakeholders. However, improvements in security headers, privacy compliance, and explicit security policies would enhance its security posture and regulatory adherence.

C

Chiesi GmbH

chiesi.de

67

Chiesi GmbH is a well-established pharmaceutical company operating in Germany as part of the international Chiesi Group. The company focuses on developing and distributing pharmaceutical products in key therapeutic areas such as respiratory diseases, neonatology, rare diseases, and transplantation. The website targets healthcare professionals, patients, partners, and job seekers, providing comprehensive information about products, corporate responsibility, and career opportunities. The company holds a B Corp certification, indicating a commitment to sustainability and ethical business practices. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, and OneTrust for cookie consent, ensuring compliance with GDPR and providing a good user experience. The site is mobile optimized, has clear navigation, and integrates tracking and analytics responsibly. Security measures include HTTPS enforcement and standard security headers, with no visible vulnerabilities or exposed sensitive data. The security posture is strong, though the site could benefit from publishing explicit security policies and a vulnerability disclosure framework. Contact information is clearly provided, including phone numbers, physical address, and social media channels, enhancing business credibility. No WAF or blocking mechanisms interfere with content accessibility, and the WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, Chiesi GmbH's website reflects a professional, secure, and compliant digital presence aligned with its business objectives and regulatory requirements.

B

BWE-Service GmbH

bwe-seminare.de

46

BWE-Service GmbH operates as a subsidiary of the Bundesverband WindEnergie e.V., focusing on providing educational seminars, conferences, and networking events to support the renewable energy sector, particularly wind energy, in Germany. The website serves as a portal for these offerings and directs users to the partner platform ee-hub.de for a broader range of events. The company positions itself as a key facilitator in the energy transition by enabling knowledge sharing and industry collaboration. Technically, the website is built on Drupal 7 with standard web technologies and integrates Google Analytics and Google Tag Manager for tracking, alongside a cookie consent mechanism compliant with GDPR. Security posture is adequate with HTTPS enforced, though some security headers are missing. Contact information is clearly presented, enhancing business credibility. Overall, the site is professional, well-structured, and trustworthy.

B

BNW Bundesverband Nachhaltige Wirtschaft e.V.

bnw-bundesverband.de

61

BNW Bundesverband Nachhaltige Wirtschaft e.V. is a well-established German non-profit association founded in 1992, focused on promoting sustainable and socially responsible economic practices. It serves as a network and political voice for progressive companies committed to ecological and social transformation. The website is professionally designed using Drupal 10, optimized for mobile, and includes rich content such as member testimonials, news, and event information. The technical infrastructure is modern and hosted by Hetzner, with good performance and accessibility standards. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers and explicit incident response policies are not visible. The domain registration is consistent with the organization's history and location, indicating legitimacy and trustworthiness.

W

WTSH Wirtschaftsförderung und Technologietransfer Schleswig-Holstein GmbH

wtsh.de

52

WTSH Wirtschaftsförderung und Technologietransfer Schleswig-Holstein GmbH is a regional governmental agency focused on economic development and technology transfer in Schleswig-Holstein, Germany. The organization provides a broad range of services including innovation consulting, funding programs, foreign trade support, startup promotion, and engagement with future-oriented topics such as digitalization, artificial intelligence, climate-neutral economy, electromobility, and hydrogen economy. Their market position is strong as a key regional economic development entity, targeting businesses, startups, and investors in the region. Technically, the website is built on the gradwerk CMS 6 platform and uses modern web technologies including jQuery, Vimeo and YouTube embeds, and various JavaScript libraries for UI components. The site is mobile optimized, accessible, and SEO friendly with comprehensive metadata and Open Graph tags. Cookie consent and privacy compliance mechanisms are well implemented. From a security perspective, the site enforces HTTPS and uses OIDC for authentication. Cookie management is detailed and transparent. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not visibly configured in the HTML source and no published security policy or incident response contacts are found. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional, trustworthy, and well-maintained digital presence for a governmental economic development agency. Strategic recommendations include enhancing security header implementation, publishing a security policy and incident response contacts, and adding a vulnerability disclosure mechanism to further improve trust and security posture.

L

LIEPS GmbH

lieps.de

66

LIEPS GmbH is a well-established advertising agency based in Neubrandenburg, Germany, offering a comprehensive suite of marketing, design, web development, print, and video production services. With nearly two decades of experience, the agency serves a diverse clientele including startups and established businesses, positioning itself as a full-service creative partner. The website reflects a professional and consistent brand image, showcasing client references and a broad portfolio of services. Technically, the website leverages modern web technologies including Bootstrap, jQuery, and TYPO3 CMS, supported by Cloudflare for DNS and CDN services. The site is mobile-optimized and incorporates standard SEO and accessibility features, although some advanced security headers could be improved. Analytics and marketing tools such as Google Analytics and Metricool are used with appropriate cookie consent mechanisms in place, indicating good privacy compliance. From a security perspective, the site enforces HTTPS and shows no signs of vulnerabilities or exposed sensitive data. However, there is room for enhancement in security headers and incident response transparency. The WHOIS data aligns well with the business claims, showing consistent domain registration and no privacy protection that would obscure legitimacy. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements in security headers and formal security policies would further strengthen its posture.

W

Willkommen in MV

willkommeninmv.de

53

Willkommen in MV is a regional government and non-profit portal dedicated to providing comprehensive integration support services for migrants and refugees in Mecklenburg-Vorpommern, Germany. The website offers extensive categorized information on social services, language courses, job centers, medical and psychosocial help, and legal advice. It targets migrants, refugees, and residents seeking integration assistance, positioning itself as a key public service resource in the region. The business model is primarily public service funded, focusing on accessibility and community support.

L

Landesportal Mecklenburg-Vorpommern

mv-tut-gut.de

44

The website www.mv-tut-gut.de is the official Landesportal (state portal) for Mecklenburg-Vorpommern, Germany. It serves as a comprehensive information hub presenting the state's strengths in economy, education, culture, tourism, and government services. The portal targets a broad audience including residents, visitors, and businesses, providing access to various official partner portals and service platforms. The content is professionally curated with multimedia elements, event calendars, and regional news, reflecting a mature and well-established digital presence. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies such as jQuery, YouTube APIs, and Typekit fonts. It implements a cookie consent mechanism with opt-in for web analytics, indicating good privacy awareness. The site is mobile optimized and accessible, with clear navigation and consistent branding. Performance is moderate, suitable for a content-rich government portal. From a security perspective, the site uses HTTPS with strong SSL configuration and employs spam-protection techniques for email addresses. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not published, representing areas for improvement. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It is a reliable digital asset for the Mecklenburg-Vorpommern government, though enhancing transparency around security policies and incident handling would strengthen its security posture further.

3

3sat / Satellitenfernsehen des deutschen Sprachraums

3sat.de

61

3sat is a well-established public broadcasting media platform serving the German-speaking audience with a focus on cultural, scientific, and societal content. The website offers video streaming, live TV, documentaries, and magazines, positioning itself as a trusted source of quality media content. It operates under the umbrella of ZDF, a major German public broadcaster, ensuring strong market presence and credibility. The platform targets a general audience interested in educational and cultural programming.

W

WTSH GmbH

kuenstliche-intelligenz.sh

11

KI.SH is a regional open network initiative operated by WTSH GmbH, focused on promoting and facilitating the adoption of Artificial Intelligence technologies in Schleswig-Holstein, Germany. The platform offers tailored AI solutions, access to scientific research, workshops, funding opportunities, and networking for businesses and organizations in the region. The website is professionally designed, content-rich, and well-structured, targeting companies interested in leveraging AI for their challenges. Technically, the site uses the gradwerk CMS with standard web technologies and includes accessibility and SEO best practices. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and no explicit security policy or incident response information is published. Privacy compliance is strong with comprehensive cookie consent and privacy policies. Overall, the site reflects a credible, government-affiliated business support platform with a clear mission and professional execution.

K

KI Bundesverband

ki-verband.de

10

KI Bundesverband is Germany's largest network for Artificial Intelligence and Deep Tech companies, connecting over 500 members from various sectors including business, politics, research, and investment. The organization acts as a facilitator, advocate, and community builder to promote AI innovation and collaboration in Germany. Their website is built on a modern WordPress platform with professional design and SEO optimization, reflecting a mature digital presence. The technical infrastructure includes popular plugins such as Yoast SEO, Elementor, and Slider Revolution, hosted on Raidboxes, a reputable WordPress hosting provider. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and formal security policies. Overall, the site is trustworthy, professional, and well-positioned in the AI ecosystem.

C

CADMAP Consulting Ingenieurgesellschaft mbH

cadmap.de

49

CADMAP Consulting Ingenieurgesellschaft mbH is a well-established German company specializing in canal management and operational management systems. Founded in 1989, it holds a leading position in the German-speaking market, offering tailored software solutions, consulting, system support, and training services. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting municipal and engineering clients. Technically, the site is built on WordPress with modern plugins and integrates Google analytics and consent management, ensuring GDPR compliance. Security posture is strong with HTTPS, reCAPTCHA, and cookie consent, though some security headers could be improved. No critical vulnerabilities or suspicious indicators were found. Overall, the site demonstrates a trustworthy and professional business with solid technical and security foundations.

SC Networks GmbH operates a marketing automation platform branded as Evalanche, with the analyzed website serving as a secure login portal for existing users. The site is minimalistic, focusing solely on authentication without public-facing content such as privacy policies or contact information. The technical infrastructure leverages AWS DNS services and standard web technologies, but lacks advanced security headers and DNSSEC, indicating moderate digital maturity. Security posture is adequate but could be improved by implementing modern security best practices and visible compliance documentation. Overall, the domain registration is consistent and legitimate, supporting the business's credibility. The absence of public policies and contact details limits transparency and user trust.

S

Stiftung der deutschen Wirtschaft für die Nutzung und Erforschung der Windenergie auf See

offshore-stiftung.de

44

The Stiftung OFFHORE-WINDENERGIE is a well-established German foundation founded in 2005, dedicated to promoting offshore wind energy in Germany and Europe. It operates as a non-profit organization providing networking, political advisory, educational, and project-related services to stakeholders in the energy sector. The website reflects a professional and content-rich platform targeting policymakers, industry participants, and the general public interested in renewable energy. Technically, the site uses modern front-end libraries and is built on the webEdition CMS, hosted on agenturserver infrastructure. Security posture is adequate with HTTPS and secure forms, but lacks some advanced security headers and cookie consent mechanisms. Overall, the site is trustworthy and authoritative within its niche.

G

Green Planet Energy eG

greenplanetenergy.de

63

Green Planet Energy eG operates as a cooperative green energy provider in Germany, offering a range of sustainable energy products including green electricity, gas, heat electricity, and solutions for electric vehicles and heat pumps. The website is professionally designed using TYPO3 CMS and targets environmentally conscious consumers in the German market. The company positions itself as a key player in the energy transition with a focus on renewable energy sources. Technically, the website employs modern web technologies including Usercentrics for cookie consent management and FontAwesome for iconography. The site is mobile-optimized and SEO-friendly, though some accessibility features appear basic. Security posture is moderate with HTTPS assumed and cookie consent mechanisms in place, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is trustworthy and professional, though improvements in privacy policy visibility and security disclosures are recommended.

E

Evonik

evonik.com

68

Evonik is a leading global specialty chemicals company focused on innovative chemical solutions and sustainability. The website demonstrates a strong corporate presence with detailed information on markets, products, governance, and investor relations. The technical infrastructure is modern, leveraging Adobe Experience Manager CMS, Alpine.js, and a consent management platform, ensuring good performance and compliance with privacy regulations. Security posture is solid with HTTPS and basic security headers, though additional headers and CSP could enhance protection. The absence of WHOIS data is a notable anomaly but does not detract from the overall legitimacy given the professional website content and corporate information. Strategic recommendations include enhancing security headers, verifying WHOIS data, and maintaining privacy compliance.

E

ee-hub

ee-hub.de

54

ee-hub.de is a professional platform focused on the renewable energy sector, providing industry news, event management, and educational content primarily targeting energy professionals in Germany. The website leverages modern web technologies including Laravel and the Statamic CMS, hosted on DigitalOcean infrastructure, and integrates Google Tag Manager for analytics. Security posture is solid with HTTPS enforced, though improvements in security headers and explicit cookie consent mechanisms are recommended. Privacy policies and terms of service are present and comprehensive, supporting GDPR compliance. Overall, the site presents a trustworthy and professional digital presence with moderate technical maturity and good user experience.

T

Team Wloka

team-wloka.de

10

Team Wloka is a specialized environmental planning consultancy focused on renewable energy projects such as wind energy and photovoltaic installations, as well as waste management. Their website presents a professional image with clear service offerings and a focus on rapid and pragmatic project implementation. The company targets businesses and project developers in Germany requiring environmental permits and expert reports. Technically, the website is built on WordPress using modern plugins and themes, with SEO and cookie consent mechanisms in place. Security posture is adequate with HTTPS and cookie consent, but lacks explicit security headers and detailed security policies. No privacy policy or terms of service pages were found, which is a compliance gap. Overall, the website is trustworthy and professional, with moderate technical maturity and good business credibility.

R

Rosendahl Windtechnik GmbH

rfw-gmbh.de

10

Rosendahl Windtechnik GmbH is a specialized consulting firm focused on wind energy expertise, serving businesses and stakeholders in the renewable energy sector primarily in Germany. The company offers technical consulting and project assessment services related to wind energy. The website reflects a professional and consistent brand image with clear business focus and relevant content for its target audience. Technically, the site is built on WordPress CMS, leveraging standard plugins such as Real Cookie Banner for GDPR compliance, and is hosted on rzone.de infrastructure. The site demonstrates good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies could enhance protection. Overall, the domain registration data aligns well with the website's business claims, indicating legitimacy and consistency. No critical vulnerabilities or suspicious patterns were detected. The site is safe for general audiences with no adult or questionable content.

N

noxt! GmbH

noxt.de

41

noxt! GmbH is a family-run venture capital holding company investing in innovative enterprises within the agriculture, automation, renewable energy, and real estate sectors. The company positions itself as a sustainable and forward-looking investor aiming to develop solutions for current and future challenges. The website presents a professional image with clear branding and subsidiary company information, targeting investors and industry professionals. The technical infrastructure is based on WordPress with the Divi theme and includes modern JavaScript libraries such as GSAP for animations, indicating a mature digital presence. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though the absence of privacy and cookie policies and incident response information suggests room for improvement in compliance and transparency. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy and security disclosures.

N

neowa GmbH

neowa.de

10

neowa GmbH is a specialized service provider focused on the dismantling and maintenance of wind energy installations. The company offers comprehensive project planning, coordination, and execution services including HSE/QHSE compliance, component reuse, and secondary market logistics. As part of the Wind Service Gruppe since 2024, neowa leverages partnerships to provide an extended service portfolio. The website is built on Joomla CMS with modern UIkit framework, delivering a responsive and professional user experience. Security posture is solid with HTTPS and cookie consent implemented, though improvements can be made by adding security headers and formal security policies. Overall, the site is trustworthy, well-structured, and compliant with GDPR requirements.

D

dodenhof

dodenhof.de

62

dodenhof is a prominent retail and e-commerce business based in Germany, offering a wide range of fashion, lifestyle, furniture, and electronics products. Positioned as a leading shopping destination in Northern Germany, it provides customers with a comprehensive online shopping experience supported by a professional website built on the Magento platform. The company leverages modern web technologies and integrates marketing and tracking tools such as Google Tag Manager, Emarsys, and Trustpilot to enhance customer engagement and analytics. Technically, the website demonstrates a mature digital infrastructure with responsive design, good SEO practices, and a robust technology stack centered around Magento and various JavaScript libraries. Hosting is managed via DomainControl DNS services, and the site enforces HTTPS, ensuring secure communications. Cookie consent mechanisms are implemented, reflecting awareness of GDPR compliance requirements, although explicit privacy and terms of service pages were not detected in the provided content. From a security perspective, the site shows good practices such as HTTPS usage and secure script loading, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious patterns were detected, indicating a stable security posture. The domain WHOIS data is consistent with an active and legitimate registration, though registrant details are minimal. Overall, dodenhof presents a professional, trustworthy, and secure online presence suitable for its retail business model. Strategic improvements could focus on enhancing privacy documentation, publishing security policies, and reinforcing security headers to further strengthen compliance and trust.

S

SV Werder Bremen

werder-bremen.com

69

SV Werder Bremen's official website serves as a digital hub for the German football club, providing fans with news, match updates, and player information. The site targets football enthusiasts and club supporters, positioning itself as a reputable source for club-related content. The business model revolves around sports engagement and merchandising, with a medium-sized organizational footprint in Germany. Technically, the website employs modern frameworks such as Nuxt.js and Tailwind CSS, hosted on German infrastructure, and integrates Cookiebot for GDPR-compliant cookie management. The site demonstrates good mobile optimization and a professional design, although some accessibility features could be enhanced. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and published security policies, which are areas for improvement. Overall, the website is trustworthy and functional, with moderate analytics tracking via Google Tag Manager. Strategic recommendations include publishing privacy and terms of service pages, enhancing security headers, and providing clear contact and incident response information to bolster compliance and user trust.

G

GICON® Group

gicon.de

51

GICON® Group is an established international engineering service provider headquartered in Germany, specializing in sustainable engineering solutions across energy, water management, resources, and environmental planning sectors. With over 25 years of experience and multiple subsidiaries, the company emphasizes innovation, sustainability, and responsible resource management. Their market position is solidified by a broad service portfolio and a network of cooperative research partnerships. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries such as jQuery and Materialize CSS for responsive design and user experience. Hosting appears to be managed by ncluster, a reputable provider. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. From a security perspective, the site uses HTTPS with good SSL configuration and no visible vulnerabilities or exposed sensitive data. However, it lacks some advanced security headers and does not provide a visible security policy or incident response contacts. Privacy compliance is mostly met with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a notable gap. Overall, the website and business present a low-risk profile with strong credibility and professionalism. Strategic improvements in privacy compliance and security transparency would further enhance trust and compliance posture.

B

Bo-Tec

bo-tec.de

65

Bo-Tec is a specialized German company focused on the repair and refurbishment of various vehicle gearings and components, serving a niche market of agricultural and industrial vehicle owners. The website is professionally designed using the Jimdo CMS platform, featuring clear navigation, good mobile optimization, and relevant content in German. The company provides detailed contact information and maintains a cookie consent mechanism compliant with GDPR. Technically, the site uses modern web technologies and third-party widgets but lacks advanced security headers and explicit security policies. The security posture is adequate with HTTPS enforced and no visible vulnerabilities. Overall, the website presents a trustworthy and professional business presence with room for improvement in security and compliance documentation.

Activia.de is a professionally maintained website representing the Activia brand, a well-known product line under Danone, focused on yoghurts and healthy digestion. The site targets German-speaking consumers interested in nutrition, healthy lifestyle, and sustainability. It offers rich content including product details, recipes, and sustainability initiatives, supported by a modern technical infrastructure based on Adobe Experience Manager and AWS hosting. The website demonstrates strong GDPR compliance with a clear privacy and cookie policy and an active consent mechanism. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, well-branded, and professionally executed, suitable for its consumer audience.

D

Deutscher Verlag für Gesundheitsinformation GmbH

dvfgi.com

48

Deutscher Verlag für Gesundheitsinformation GmbH (DVFGI) is a specialized German company established in 1997, focusing on medical online marketing. Their core business involves operating medical thematic portals and providing online marketing platforms for doctors, clinics, and pharmaceutical companies to improve their online visibility. The website is professionally designed, targeting healthcare professionals and patients, with content primarily in German. The company positions itself as an experienced and trusted player in the healthcare marketing niche. Technically, the website is built on WordPress and utilizes popular plugins such as Yoast SEO, LayerSlider, Slider Revolution, and Borlabs Cookie for cookie consent management. The site is mobile-optimized with good SEO practices and moderate performance. The presence of Google Analytics and Google Tag Manager indicates moderate user tracking, balanced with GDPR-compliant cookie consent mechanisms. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent. However, no explicit security headers were detected, and there is no visible security policy or incident response information. The WHOIS data for the domain is missing, which raises concerns about domain registration transparency, although the website content and business information appear legitimate. Overall, the website presents a professional and trustworthy front for its business, but improvements in security transparency and WHOIS data clarity are recommended to enhance trust and compliance.

R

RE:Solut GmbH

re-solut.de

48

RE:Solut GmbH is a specialized service provider in the renewable energy sector, focusing on wind energy and real estate solutions. Founded in 2019, the company offers comprehensive services including permit management under BImSchG, technical and legal assessments, vendor due diligence, and investment structuring. Their strong network of partners enhances their market position and service quality. The website is professionally designed using WordPress with Elementor and OceanWP, featuring GDPR-compliant cookie consent and integrated CRM forms via Bitrix24. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and incident response policies could be improved. Overall, the company presents a credible and trustworthy digital presence aligned with its business focus.

von Tettau | Rechtsanwälte | PartG mbB is a specialized German law firm focusing on renewable energy legal services, particularly in wind energy and photovoltaics. With over two decades of experience, the firm serves a nationwide clientele including project developers, operators, manufacturers, financiers, and investors. Their market position is that of a leading medium-sized law firm in the renewable energy sector in Germany, offering comprehensive legal expertise in planning, environmental, energy, and transactional law. The website reflects a professional and consistent brand image with detailed service descriptions and transparent contact information. Technically, the website is built on the Contao Open Source CMS platform, utilizing modern JavaScript libraries such as jQuery and rocksolid-slider for interactive elements. The hosting is provided by kasserver.com, and the site is optimized for mobile devices with good accessibility and SEO practices. Performance is moderate, with no significant technical debt or vulnerabilities detected in the frontend code. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism limited to necessary cookies, indicating good privacy compliance. However, there is no explicit security policy or incident response contact information published, and security headers are not visibly configured, representing areas for improvement. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website is trustworthy, professional, and compliant with GDPR requirements. The risk profile is low, with recommendations focusing on enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen the security posture.

D

DOMBERT Rechtsanwälte

dombert.de

63

DOMBERT Rechtsanwälte is a specialized law firm based in Germany focusing on public law and legal conflicts involving the state, municipalities, and authorities. The firm positions itself as a competent advisor for all public law matters, targeting clients who require legal expertise in governmental and administrative law. The website reflects a professional and consistent brand image with clear messaging about their services and expertise. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, incorporating modern web technologies and SEO best practices. The presence of structured data and social media integration enhances its digital maturity. Security-wise, the site uses HTTPS and a cookie consent mechanism via Borlabs Cookie, but lacks explicit security headers and detailed security or incident response policies. Overall, the site is secure, professional, and trustworthy, though it could improve transparency by adding privacy policies, terms of service, and contact information for security incidents.

S

Steinbeis Beratungszentrum für Wirtschaftsmediation

steinbeis-mediation.com

56

Steinbeis Beratungszentrum für Wirtschaftsmediation is a leading German institution specializing in mediation, conflict management, organizational development, and citizen participation, particularly in infrastructure projects. The organization offers comprehensive training, consulting services, and publishes a prominent industry magazine. Their market position is strong within Germany, supported by professional branding, awards, and a clear focus on high-conflict resolution scenarios. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and integrates GDPR-compliant cookie management via Usercentrics. The site is well-structured, mobile-optimized, and includes essential SEO and accessibility features, although some improvements in security headers and incident response transparency are recommended. Security posture is solid with HTTPS enforced and privacy-conscious analytics configuration. However, the absence of WHOIS data raises concerns about domain registration legitimacy, which should be investigated further. No critical vulnerabilities or malicious content were detected. Overall, the website and business present a professional and trustworthy front with minor technical and compliance gaps. Strategic recommendations include enhancing security headers, publishing a security policy, and clarifying domain registration details to improve trust and compliance.

W

Internationaler Marktplatz der Windindustrie - wind-turbine.com

wind-turbine.com

55

Wind-turbine.com operates as an international marketplace dedicated to the wind energy industry, facilitating the buying, selling, and investment in wind parks, wind turbines, components, and related services. The platform targets wind park operators, investors, service providers, and equipment sellers, positioning itself as a specialized hub within the renewable energy sector. Founded in 2003, the website demonstrates a mature presence with a consistent brand and professional content tailored to its niche audience. Technically, the website employs a modern technology stack including Google Analytics, Google Tag Manager, Mouseflow for session recording, and eTracker for analytics, alongside advertising integrations via Google Ad Manager and DoubleClick. The site is mobile-optimized with responsive design elements and uses HTTPS for secure communications. However, no explicit CMS was detected, suggesting a custom or proprietary platform. Performance is moderate, with room for improvement in accessibility and SEO. From a security perspective, the site benefits from HTTPS and anonymized IP tracking but lacks visible security headers and published security policies or incident response contacts. The absence of privacy and cookie policies with consent mechanisms indicates partial GDPR compliance. The domain registration is consistent and long-standing, registered with IONOS SE since 2003, supporting the legitimacy of the business. Overall, wind-turbine.com presents a trustworthy and professional platform within the wind energy market, though it would benefit from enhanced privacy compliance and security best practices to strengthen user trust and regulatory adherence.