Germany security reports

The FC St. Pauli Museum website serves as a digital gateway promoting the museum's mobile app, targeting fans and visitors interested in the cultural heritage of the FC St. Pauli football club. The business operates as a non-profit cultural institution based in Germany, leveraging digital platforms such as Google Play and Apple App Store to distribute its app. The website content is well-structured, visually consistent, and provides clear calls to action for app downloads, supported by official social media channels and endorsements from reputable German cultural bodies. Technically, the website employs standard web technologies including HTML5, CSS, and JavaScript, with minimal external dependencies. It integrates Umami analytics for privacy-conscious user tracking. The site is mobile-optimized and offers a good user experience, although accessibility and SEO optimizations are basic. No advanced CMS or hosting details are evident from the content. From a security perspective, the website lacks visible security headers and does not provide explicit security or incident response policies. The absence of a cookie consent mechanism indicates partial GDPR compliance, though a privacy policy is present and accessible. No forms or direct contact information are provided, limiting data exposure risks but also reducing user engagement options. Overall, the website presents a trustworthy and professional front for the museum app, with low risk from a security and privacy standpoint. Strategic improvements in security headers, cookie consent, and published policies would enhance compliance and user trust. The domain WHOIS data was not provided, limiting the ability to assess domain registration legitimacy and history fully.

L

Landesmuseum Württemberg

landesmuseum-stuttgart.de

56

The Landesmuseum Württemberg website represents a well-established cultural institution focused on showcasing regional history and art in Stuttgart, Germany. The museum offers a variety of exhibitions, educational programs, and visitor services, positioning itself as a key cultural hub in the region. The website is professionally designed, content-rich, and targets a broad audience interested in history and culture. Technically, the site is built on the TYPO3 CMS platform, leveraging modern web technologies and integrating Matomo analytics for user insights. The site demonstrates good mobile optimization and accessibility features, enhancing user experience across devices. Security-wise, the website enforces HTTPS and implements a comprehensive cookie consent mechanism, aligning with GDPR requirements. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure information, which are areas for improvement. Overall, the domain and website content are consistent and legitimate, with no signs of malicious activity or suspicious patterns. Strategic recommendations include publishing security and incident response policies, enhancing security headers, and formalizing vulnerability disclosure processes to strengthen trust and compliance.

E

EDF power solutions Deutschland GmbH

edf-re.de

11

EDF power solutions Deutschland GmbH is a medium-sized company specializing in the development, construction, and operation of renewable energy projects in Germany, focusing on onshore and offshore wind, photovoltaic systems, and battery storage solutions. The company targets industrial and commercial customers, offering tailored energy storage and generation solutions to support the energy transition. The website reflects a professional and modern digital presence with clear navigation, comprehensive content, and multilingual support. Technically, the site uses Craft CMS, modern JavaScript modules, and lazy loading for performance optimization. Security measures include HTTPS, CSRF protection, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates a strong security posture with room for improvement in security headers and vulnerability disclosure. The WHOIS data aligns well with the business claims, confirming legitimacy and consistency. The company maintains active social media profiles and partners with relevant industry sites, enhancing credibility.

H

HRworks GmbH

hrworks.de

74

HRworks GmbH operates the website www.hrworks.de, providing comprehensive HR software solutions tailored for small and medium-sized enterprises in Germany. Their offerings include personnel management, time tracking, travel expense management, payroll integration, and personnel development tools. The company positions itself as a trusted and established player with over 25 years of experience and more than 350,000 users, supported by multiple industry awards and recognitions. The website is professionally designed, mobile-optimized, and rich in content, targeting HR professionals and SMEs seeking efficient digital HR transformation.

N

Nintendo

nintendo.com

81

Nintendo is a globally recognized leader in the video game industry, offering a wide range of gaming consoles, software, and digital services. The official German website serves as a localized portal providing product information, account management, and customer support tailored for German-speaking users. The site reflects Nintendo's strong market position and commitment to user engagement through a professional and well-branded online presence. Technically, the website employs modern web technologies, including CDN delivery, asynchronous JavaScript loading, and cookie consent frameworks, ensuring fast performance and compliance with privacy regulations such as GDPR. Security measures are robust, with HTTPS enforced and multiple security headers implemented, contributing to a high security posture. No critical vulnerabilities or suspicious activities were detected. The absence of WHOIS data is noted but likely due to privacy or registry policies rather than malicious intent. Overall, the website demonstrates a mature digital infrastructure aligned with Nintendo's enterprise status and global brand reputation.

S

Solar Solutions GmbH

aeg-industrialsolar.de

59

AEG Solar, operated by Solar Solutions GmbH, is a medium-sized company specializing in solar energy products including solar modules, inverters, and energy storage systems. The company positions itself as a trusted brand with widespread recognition among installers and customers, targeting homeowners, businesses, and project developers seeking sustainable energy solutions. Their business model focuses on manufacturing and distributing holistic photovoltaic solutions to empower energy independence and environmental responsibility. Technically, the website is built on WordPress using Elementor and Yoast SEO, hosted by One.com A/S. The site demonstrates good digital maturity with responsive design, SEO optimization, and cookie consent mechanisms compliant with GDPR. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and some recommended security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies and user consent mechanisms. However, the absence of a published security policy or incident response contact is noted. Overall, the website is professional, trustworthy, and well-aligned with its business goals. Strategic improvements in DNS security, security headers, and incident response transparency would enhance its security posture and trustworthiness.

E

Exit Games GmbH

photonengine.com

74

Photon Engine, operated by Exit Games GmbH, is a leading provider of multiplayer game backend services, offering a comprehensive suite of products including Photon Fusion, Quantum, Realtime, Chat, and Voice. The company targets game developers and studios worldwide, supporting over 1.4 billion monthly players and more than 1 million developers. Their business model is SaaS-based, providing scalable cloud infrastructure and communication tools for multiplayer games across multiple platforms including mobile, PC, consoles, and VR/AR. Technically, the website demonstrates a mature digital infrastructure with modern web technologies, fast performance, and excellent mobile optimization. The use of Google Tag Manager and Cloudflare Insights indicates active analytics and performance monitoring. The site is well-structured with comprehensive documentation and multilingual support, enhancing accessibility and user experience. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers and a public security policy or incident response contacts are not evident, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given the strong market presence and trust indicators. Overall, Photon Engine presents a professional, trustworthy, and technically sound platform with strong compliance and privacy practices. Strategic enhancements in security transparency and contact availability would further strengthen their security posture and user trust.

U

Umweltinstitut München

umweltinstitut.org

50

Umweltinstitut München e.V. is a well-established non-profit organization focused on environmental protection, sustainable agriculture, and renewable energy advocacy in Germany. The website reflects a mature digital presence with comprehensive content targeting environmentally conscious individuals and stakeholders. Their market position is that of a reputable environmental advocacy group with a medium-sized organizational footprint, founded in 1999. Technically, the website is built on WordPress with modern web technologies including jQuery, lazy loading, and cookie consent management via Borlabs Cookie. Hosting is provided by Hetzner, a reputable German hosting provider. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate rather than fast. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and security headers, which are recommended for enhanced protection. No exposed sensitive data or vulnerable libraries were detected. Privacy compliance is partial; while cookie consent is implemented, no explicit privacy policy page was found, which is a compliance gap. Overall, the website is trustworthy and professional, with strong branding and social media integration. The main risks relate to privacy policy absence and missing security headers. Strategic improvements in these areas would enhance compliance and security posture.

A

Aurelia Stiftung

aurelia-stiftung.de

64

Aurelia Stiftung is a German non-profit foundation dedicated to the protection of bees and biodiversity. The organization advocates for sustainable agricultural practices, educates the public, and supports targeted projects to prevent ecosystem collapse. Their website reflects a professional and consistent brand image, targeting environmentally conscious individuals and stakeholders interested in biodiversity conservation. The foundation operates primarily through donations and public engagement. Technically, the website is built on WordPress with modern SEO and cookie management plugins, ensuring good performance and mobile responsiveness. The use of HTTPS and a cookie consent mechanism demonstrates a commitment to security and privacy compliance. However, some security headers are missing, and no explicit security or incident response policies are published. The security posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy policies are comprehensive and GDPR compliant, with clear cookie consent management. Contact is primarily via web forms, with no direct email or phone contacts publicly listed. WHOIS data is minimal but consistent with the foundation's profile and domain age. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy regulations. Strategic improvements could include adding explicit security policies, incident response contacts, and enhancing security headers to further strengthen the security posture.

G

Gaming Aid e.V.

gaming-aid.de

57

Gaming Aid e.V. is a small German non-profit organization dedicated to charitable activities within the gaming community. The website serves as the official online presence, providing information about the organization and its mission. The site targets gamers and supporters interested in contributing to charitable causes related to gaming. The business model is non-profit, focusing on community engagement and aid rather than commercial revenue. The organization appears to be relatively young, founded around 2020, and maintains a consistent brand image across its digital assets. Technically, the website is built on WordPress using the Divi theme, enhanced with Yoast SEO for search engine optimization. It employs common web technologies such as jQuery and integrates hCaptcha for form security. Hosting is provided by hostpress.de, a reputable German hosting provider. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices are well implemented, including structured data and meta tags. From a security perspective, the website enforces HTTPS and uses hCaptcha to protect forms, which are positive indicators. However, it lacks several important security headers that could enhance protection against common web threats. No explicit security or incident response policies are published, and no vulnerability disclosure or data protection officer information is available. The absence of a privacy policy and terms of service pages represents a compliance gap, especially under GDPR regulations. Overall, the website is safe and appropriate for general audiences, with no adult or explicit content detected. The domain registration data aligns well with the organization's stated founding date and hosting provider, supporting legitimacy. Strategic recommendations include publishing comprehensive privacy and terms policies, implementing additional security headers, and enhancing transparency around data protection and incident response to improve trust and compliance.

B

BKK Dachverband

bkk-pflegefinder.de

70

The BKK PflegeFinder website is a well-structured, professional service platform operated by the BKK Dachverband to assist insured persons in Germany with finding suitable care services including nursing homes, ambulatory care, day and night care, and support offers. The platform provides comprehensive information including quality reports and payment details, targeting BKK insured individuals and their families. Technically, the site uses modern frontend technologies such as Bootstrap 5, jQuery, and FontAwesome, with a self-hosted Matomo analytics setup that is currently disabled, reflecting a privacy-conscious approach. The presence of a cookie consent mechanism and chatbot enhances user experience and compliance. Security posture is adequate with HTTPS enforced and session management in place, but lacks explicit security headers and published security policies. Overall, the site is trustworthy, with consistent branding and clear navigation, though it could improve by publishing terms of service and incident response information.

B

BKK Dachverband

bkk-klinikfinder.de

70

The BKK Klinikfinder website is a professionally designed and well-structured healthcare information platform operated by the BKK Dachverband. It provides BKK insured persons in Germany with a comprehensive hospital search tool based on official quality reports. The site offers multiple search filters and additional resources such as checklists and related service finders for care, doctors, and midwives. Technically, the site uses modern web technologies including Bootstrap, jQuery, and self-hosted Matomo analytics, ensuring good performance, mobile optimization, and privacy compliance. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks published security policies or incident response contacts. Overall, the site is trustworthy, privacy-conscious, and well-aligned with its target audience.

B

BKK Dachverband

bkk-arztfinder.de

70

The BKK ArztFinder website is a professional service platform operated by the BKK Dachverband, aimed at assisting statutory health insurance members in Germany to find doctors, dentists, and other healthcare providers. The site offers a user-friendly search interface with multiple filtering options and links to related healthcare services such as hospital, care, and midwife finders. The platform is well-branded and consistent with the parent organization's identity. Technically, the website uses a modern frontend stack including jQuery, Bootstrap, and FontAwesome, with responsive design and accessibility features. The site implements a cookie consent mechanism compliant with GDPR, using Matomo analytics in a privacy-conscious manner (disabled by default until consent). No major technical or security flaws are evident, though security headers and explicit security policies are absent. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks a published security policy, incident response contacts, and vulnerability disclosure mechanisms. The WHOIS data is consistent with a legitimate organization, with no privacy protection or suspicious patterns, supporting the site's trustworthiness. Overall, the site is a trustworthy, well-maintained healthcare service platform with good privacy compliance and moderate security posture. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure would enhance its security maturity and user trust.

B

BKK Dachverband e.V.

bkk-meindv.de

61

BKK Dachverband e.V. operates the BKK MeinDV portal, a centralized web platform for members to manage their profiles and access various information portals related to the BKK healthcare association. The website is professionally designed, primarily targeting German-speaking members of the BKK Dachverband. It provides essential services such as login authentication, user registration, and feedback submission, positioning itself as a key digital touchpoint for the organization’s members. Technically, the website employs a modern tech stack including jQuery, Bootstrap 5, and Popper.js, ensuring responsive design and moderate performance. The site uses HTTPS with CSRF protection on forms, indicating a good baseline security posture. However, some security headers are missing, and no explicit cookie consent mechanism is present, suggesting room for improvement in compliance and security hardening. From a security perspective, the site demonstrates good practices such as encrypted connections and secure form handling but lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms. No suspicious or malicious content was detected, and the site is free from adult or questionable content, making it safe for general audiences. Overall, the website is a credible and professional portal for the BKK Dachverband community, with a solid technical foundation and good privacy compliance. Strategic enhancements in security headers, cookie consent, and transparency around security policies would further strengthen its trustworthiness and compliance posture.

G

Generation Digitale GmbH & Co. KG

generationdigitale.net

53

Generation Digitale GmbH & Co. KG is a Hamburg-based digital agency specializing in web, video on demand, digital signage, and emerging technologies such as AR and VR. Established since 2002, the company offers comprehensive digital solutions including enterprise technology integration, UX/UI design, and online video platform development. Their market position is that of an experienced innovator serving businesses, brands, and public institutions with a focus on user-centered and technology-driven products. Technically, the website leverages modern Microsoft .NET technologies, Umbraco CMS, and cloud services like Azure, indicating a mature digital infrastructure. Privacy compliance is robust, with detailed GDPR-aligned policies and an opt-in cookie consent mechanism using Matomo analytics. Security posture is moderate, with room for improvement in security headers and explicit incident response disclosures. Overall, the website is professional, content-rich, and trustworthy, though the absence of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy.

A

AlsterCloud GmbH

alstercloud.de

53

AlsterCloud GmbH is a small, Hamburg-based online marketing agency specializing in web design, Google Adwords, SEO, and social media marketing. Founded in 2017, the company targets local businesses seeking to enhance their digital presence. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on WordPress with modern plugins for SEO and caching, supported by Google Analytics and Tag Manager for analytics, and Usercentrics for cookie consent management. Security posture is solid with HTTPS and reCAPTCHA integration, though explicit security headers and policies are absent. Overall, the site is trustworthy and well-optimized for its market segment.

Z

zone35 GmbH & Co. KG

bkk-ernaehrungscoach.de

50

The website www.bkk-ernaehrungscoach.de is an established German-language online nutrition coaching platform operated by zone35 GmbH & Co. KG. It offers interactive tools such as an online check for calorie needs, motivational training, and weekly newsletters to support users in achieving healthier eating habits. The platform targets health-conscious consumers seeking guidance on nutrition and lifestyle improvements. Technically, the site is built on the TYPO3 CMS framework with a modern tech stack including jQuery and Bootstrap, delivering a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and formal security policies. Overall, the site demonstrates good business credibility with clear contact information and trust signals such as user testimonials. No critical vulnerabilities or compliance gaps were detected, making it a trustworthy resource for its audience.

Z

zone35 GmbH & Co. KG

zone35.de

61

zone35 GmbH & Co. KG is a medium-sized, owner-managed digital agency based in Berlin, specializing in healthcare and welfare sectors. Established in 1999, the company offers strategic planning, crossmedia design, and tailored digital solutions including online consulting platforms such as beranet.de. Their market position is solid within their niche, supported by a portfolio of projects and partnerships with health-focused digital products. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and integrates Piwik/Matomo analytics, reflecting a mature digital infrastructure with good mobile optimization and SEO practices. Security posture is good with HTTPS enforcement and cookie consent mechanisms, though formal security policies and incident response details are absent. Overall, the website is professional, trustworthy, and compliant with GDPR, supporting a positive business credibility profile.

L

Leafworks

leafworks.de

49

Leafworks is a small consulting firm specializing in customer experience and CX management, targeting businesses seeking to improve their customer interactions. The website is built on a modern WordPress infrastructure using popular plugins and themes such as Yoast SEO, Astra, Elementor, and WP Rocket, indicating a moderate level of digital maturity. The site is well-designed, mobile-optimized, and provides relevant content aligned with its consulting services. However, the security posture is limited, with no visible security headers, privacy or cookie policies, or incident response information, which could expose the business to compliance and security risks. The absence of explicit contact information reduces transparency and trust. Overall, the website is functional and professional but requires improvements in privacy compliance and security practices to enhance trustworthiness and regulatory adherence.

The website 'Zeit für Mich' is a German health promotion initiative operated by BKV - Interessengemeinschaft Betriebliche Krankenversicherung e. V., focusing on strengthening personal resources and promoting a healthy work-life balance. It offers information, online self-assessment tests, and access to quality-approved prevention courses such as relaxation techniques and yoga. The target audience primarily includes working adults interested in health and stress management. The business model is non-profit, supported by statutory health insurance entities in Germany, aiming to provide accessible health resources and course subsidies. Technically, the site is built on WordPress using the Understrap child theme, incorporating jQuery and Google Fonts. The infrastructure appears standard for a small non-profit website, with moderate performance and good mobile optimization. SEO and accessibility are basic but functional. No advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS as indicated by resource URLs, but no explicit security headers were detected in the provided data. There is no evidence of vulnerability disclosure mechanisms or security policies. Contact information is clearly provided, but privacy and cookie policies are absent, which is a compliance gap. No forms or data collection points were found on the homepage, reducing immediate risk exposure. Overall, the website is professional, trustworthy, and safe for general audiences. However, improvements in privacy compliance and security hardening are recommended to enhance trust and regulatory adherence.

The website 'Ich hab's gecheckt!' is a German health awareness campaign focused on educating the public about metabolic syndrome and promoting a healthy lifestyle to prevent cardiovascular diseases. It is operated by the BKV – Interessengemeinschaft Betriebliche Krankenversicherung e. V., a non-profit health insurance interest group based in Berlin. The site provides educational content and an online health check tool to engage users in monitoring their health. The target audience is the general German-speaking public interested in health and wellness. Technically, the website is built on WordPress using the Understrap theme framework with a child theme. It employs common web technologies such as jQuery and Popper.js. The site is served over HTTPS with a moderate performance profile and good mobile optimization. However, it lacks advanced security headers and structured data markup, which could improve SEO and security posture. From a security perspective, the site uses HTTPS and a cookie consent mechanism, but it does not provide a privacy policy or incident response information. No security.txt file or vulnerability disclosure policy is present. The absence of security headers like CSP and HSTS reduces the overall security score. No tracking or advertising scripts were detected, indicating minimal user tracking. Overall, the website is trustworthy and professional with clear contact information and a consistent brand presence. The main risks relate to incomplete privacy compliance and security best practices. Strategic recommendations include publishing a privacy policy, implementing security headers, and providing incident response contacts to enhance user trust and regulatory compliance.

B

BKV – Interessengemeinschaft Betriebliche Krankenversicherung e. V.

bkk-bettgefluester.de

42

Bettgeflüster is a German health campaign operated by the BKV association, focusing on promoting healthy sleep habits through educational content, multimedia resources, and downloadable materials. The campaign targets the general public interested in improving sleep quality and overall health. The website is built on WordPress, leveraging modern web technologies such as Breeze caching and Google Fonts, and is hosted with domain control services consistent with the domain registration. The site is well-structured, mobile-optimized, and provides clear navigation and relevant content. Security posture is solid with HTTPS enforced, though it lacks some security headers and cookie consent mechanisms, which are recommended for GDPR compliance. Contact information is clearly provided with official email and physical address, enhancing business credibility.

I

Interessengemeinschaft Betriebliche Krankenversicherung e.V. (BKV)

bkv-verein.de

53

The Interessengemeinschaft Betriebliche Krankenversicherung e.V. (BKV) operates as a coalition of company-related health insurance funds in Germany, representing approximately one million insured individuals. The organization engages with political, administrative, and association stakeholders to advocate for its members' interests. The website serves as an information hub, providing news, campaigns, and resources related to corporate health insurance and prevention initiatives. The target audience includes companies with company health insurance funds, insured persons, and relevant policy makers. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and employs modern web technologies including jQuery and Matomo for analytics. The site is hosted on DomainControl nameservers and demonstrates good mobile optimization and SEO practices. Cookie consent is implemented with clear user options and detailed cookie information, reflecting compliance with GDPR requirements. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism to manage user privacy preferences. However, explicit security headers and published security policies or incident response contacts are absent, representing areas for improvement. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website presents a professional and trustworthy digital presence aligned with its business purpose. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and adding a vulnerability disclosure mechanism to strengthen the security posture and user trust.

S

Schuelbe Promotion Service GmbH

krones-merchandising.com

50

The KRONES Merchandise Shop is an e-commerce platform operated by Schuelbe Promotion Service GmbH, specializing in branded promotional and fan merchandise for the KRONES brand. The website targets customers and fans interested in purchasing official KRONES products. The business operates in the e-commerce sector with a focused niche market. The website is professionally designed with consistent branding and provides a user-friendly shopping experience. Technically, the site uses the Cosmoshop platform with jQuery and related libraries, delivering moderate performance and good mobile optimization. Security-wise, the site enforces HTTPS and implements a cookie consent mechanism via Cookiebot, but lacks advanced security headers and visible contact or security policy information, which could be improved. The absence of WHOIS data for the domain raises some concerns about domain legitimacy, although the website content and compliance features suggest a legitimate business presence. Overall, the site is functional and trustworthy but would benefit from enhanced transparency and security practices.

I

Internationale Bodenseekonferenz IBK

ibk-gesundheit.org

54

The website ibk-gesundheit.org represents the International Bodenseekonferenz (IBK) initiative focused on awarding the IBK-Preis for health promotion and prevention projects in the Bodensee region. It serves as an informational platform presenting project details, award winners, and upcoming events, targeting regional stakeholders in healthcare and social sectors. The site is built on TYPO3 CMS and integrates modern privacy and analytics tools such as Cookiebot and Matomo, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and some HTTP security headers are missing. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and a detailed privacy policy. However, explicit contact information and security policies are not prominently provided. Overall, the site is professional, trustworthy, and well-aligned with its non-profit mission.

The Zentrum Allergie und Umwelt (ZAUM) is a reputable academic research institute jointly funded by the Technical University of Munich and Helmholtz Zentrum München. It specializes in allergy and environmental health research, aiming to advance scientific understanding and therapeutic development. The website reflects a mature digital presence with clear navigation, professional design, and comprehensive content targeted at researchers, students, and the public. Technically, the site uses TYPO3 CMS and integrates privacy-respecting analytics (Matomo), with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site is trustworthy, compliant with GDPR, and well-aligned with its academic mission.

H

Helmholtz Munich

helmholtz-muenchen.de

60

Helmholtz Munich is a leading German research center specializing in health and environmental sciences. The organization focuses on biomedical research areas such as diabetes, obesity, environmental health, stem cells, bioengineering, and artificial intelligence. It serves a broad audience including researchers, healthcare professionals, and scientific partners, offering cutting-edge research, technology transfer, and scientific career development. The website reflects a strong market position as a reputable and well-established institution in the healthcare research sector. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and Matomo for analytics, indicating a mature digital infrastructure. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with a professional design and clear navigation. Security measures include HTTPS enforcement, security headers, and script nonce usage, contributing to a robust security posture. Security-wise, the site demonstrates good practices with no visible vulnerabilities or exposed sensitive data. However, it lacks a visible cookie consent mechanism and a dedicated vulnerability disclosure policy, which are recommended for full GDPR compliance and security transparency. Incident response contact details are also not explicitly provided. Overall, the website is professional, trustworthy, and secure, with minor areas for improvement in privacy compliance and security transparency. The domain registration data aligns well with the organization's identity, reinforcing legitimacy and trustworthiness.

S

Ströer Connections GmbH

stayfriends.de

60

StayFriends.de is a well-established German social networking platform focused on reconnecting former school friends, viewing class photos, and organizing reunions. Operated by Ströer Connections GmbH, it serves a large user base with over 15 million members and extensive class photo archives. The platform targets German-speaking alumni and offers freemium services with paid subscription options. Technically, the website employs a modern JavaScript stack including jQuery, Bootstrap, and Google Tag Manager, with custom CMS elements. The site is moderately optimized for performance and mobile use, with good SEO and basic accessibility features. Security posture is solid with HTTPS enforced and privacy consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates high professionalism and trustworthiness with consistent branding and comprehensive privacy compliance.

E

etracker GmbH

speisekarte.de

56

speisekarte.de is a well-established German online platform specializing in digital restaurant menus and restaurant search, operating since 2008. It serves a large user base with over 150,000 restaurants listed and millions of monthly visitors. The platform offers searchable menus, user accounts, and community features to enhance the dining experience. Technically, the website employs modern web technologies including JavaScript, CSS, and integrates third-party services such as Hotjar and eTracker for analytics, as well as a Consent Management Platform to ensure GDPR compliance. Hosting and DNS are managed via Cloudflare, providing robust performance and security. Security posture is strong with HTTPS enforced and consent mechanisms in place, though some security headers and explicit security policies are absent. Overall, the site is professional, user-friendly, and trustworthy with good privacy compliance and advertising transparency.

C

C4all Gesellschaft mbH & Co. KG

c4all.de

48

C4all Gesellschaft mbH & Co. KG is a German-based digital marketing service provider specializing in telephony, SMS, video, and image services to help businesses analyze campaigns, track customer touchpoints, and acquire new clients. With over 10 years of experience and a client base of 175 companies, C4all positions itself as a reliable partner in the digital marketing ecosystem. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content tailored to business customers seeking marketing measurement and communication solutions. Technically, the site is built on Umbraco CMS with modern HTML5, CSS3, and JavaScript technologies, leveraging the uSkinned sitebuilder framework. While performance and SEO are adequate, there is room for improvement in accessibility and security headers. Security posture is moderate, with secure form handling and CAPTCHA but lacking visible security policies and headers. Privacy compliance is partially met with a privacy policy and GDPR consent checkbox but missing a cookie consent mechanism. Overall, the domain registration data aligns with the business claims, indicating legitimacy and consistency.

D

dialo.de Startseite

dialo.de

9

The website dialo.de presents a German-language homepage with a basic description and branding consistent with a small business or service provider. The site uses Bootstrap 3.3.7 and FontAwesome for styling and includes eTracker analytics and OneTrust cookie consent mechanisms, indicating some level of digital maturity. However, the absence of a privacy policy, terms of service, and contact information limits its compliance and trustworthiness. Security posture is moderate with HTTPS implied but no visible security headers or incident response contacts. Overall, the site is accessible and safe for general audiences but would benefit from enhanced transparency and security practices.

B

BundesTelefonbuch

bundes-telefonbuch.de

9

BundesTelefonbuch operates as an online telephone directory service targeting the German market, providing users with quick access to telephone numbers and business contact information. The website is professionally designed using Bootstrap and includes standard web technologies, with a focus on usability and mobile responsiveness. It integrates advertising via Google Adsense and analytics through eTracker, indicating a moderate level of digital maturity. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published privacy or terms of service policies, which are important for compliance and trust. Overall, the site appears legitimate and functional but would benefit from enhanced transparency and security practices to improve user trust and regulatory compliance.

F

Felix Burda Stiftung

felixburda.de

56

The Felix Burda Stiftung is a well-established German non-profit organization dedicated to the prevention and early detection of colorectal cancer. Founded in 2001 by Dr. Christa Maar and Prof. Dr. Hubert Burda, it honors their son Felix Burda who died of colorectal cancer. The foundation is a recognized leader in health awareness campaigns, digital health tools, and advocacy within Germany. Their website reflects a mature digital presence built on Drupal 10, featuring comprehensive content, multimedia, and strong privacy compliance mechanisms including GDPR-aligned cookie consent. Contact information and social media presence are transparent and professional. Security posture is good with HTTPS and consent-based tracking, though some security headers could be improved. Overall, the site is trustworthy, user-friendly, and serves a broad audience interested in health prevention.

B

BKK Dachverband e.V.

bkk-dachverband.de

54

BKK Dachverband e.V. is a German healthcare interest association representing 68 company health insurance funds and four regional associations, collectively covering 9 million insured persons. The website serves as a comprehensive platform for political advocacy, innovation promotion, prevention, and healthcare service information. Technically, the site is built on TYPO3 CMS, employs jQuery, and uses self-hosted Matomo analytics, reflecting a mature and privacy-conscious digital infrastructure. The site is well-structured, mobile-optimized, and accessible, with a strong emphasis on sustainability through green hosting. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the website projects professionalism and trustworthiness appropriate for a healthcare non-profit organization.

B

BKV – Interessengemeinschaft Betriebliche Krankenversicherung e. V.

bkk-like-dich-selbst.de

41

The website 'BKK-Kampagne: Like Dich selbst!' is a health promotion platform operated by the non-profit association BKV – Interessengemeinschaft Betriebliche Krankenversicherung e. V. It focuses on educating the German public about nutrition, exercise, stress management, and addiction prevention through webinars and podcasts. The site targets a general audience interested in improving personal health and wellness. Technically, the site is built on WordPress with modern web technologies such as jQuery and Google Fonts, hosted with domain control via GoDaddy DNS. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional but could improve in security and privacy transparency.

B

BKV – Interessengemeinschaft Betriebliche Krankenversicherung e. V.

bkk-fokussiert.de

42

BKK fokussiert is a German health prevention campaign operated by the BKV – Interessengemeinschaft Betriebliche Krankenversicherung e. V., focusing on promoting healthy work environments and stress prevention for employees. The website serves as an informational platform offering videos, podcasts, and educational content targeting employees and companies interested in workplace health. The campaign positions itself as a niche player within the healthcare and non-profit sectors in Germany. Technically, the website is built on WordPress 6.8.3 with standard plugins including WPML for multilingual support. It uses Google Fonts and embeds media from Mixcloud. The site is hosted with domain control via GoDaddy name servers and employs HTTPS with good SSL configuration. The site is mobile optimized and provides a good user experience with clear navigation and consistent branding. From a security perspective, the website enforces HTTPS but lacks visible security headers and cookie consent mechanisms, which are recommended for GDPR compliance. No forms or data collection fields are present on the homepage, reducing attack surface. No vulnerability disclosure or incident response information is published. The WHOIS data is minimal but consistent with a legitimate domain registration. Overall, the website is professional, secure, and trustworthy with minor improvements recommended in privacy compliance and security headers to enhance protection and user trust.

B

BKV – Interessengemeinschaft Betriebliche Krankenversicherung e. V.

bkk-care-life.de

48

BKK Care & Life is a healthcare-focused website dedicated to raising awareness about testicular cancer and promoting early detection through self-examination. The platform is supported by the BKV – Interessengemeinschaft Betriebliche Krankenversicherung e. V., a German statutory health insurance association. The website provides detailed educational content, including anatomy, function, and practical guides for self-checking testicles, targeting men primarily between 25 and 45 years old. The site is professionally designed, multilingual, and well-structured to serve its niche audience effectively. Technically, the website is built on WordPress 6.8.3 with WPML for multilingual support and uses standard web technologies including jQuery and custom JavaScript. Hosting is managed via domaincontrol.com name servers, indicating a stable and reputable hosting environment. Performance and mobile optimization are good, with accessibility and SEO features well implemented. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks some advanced security headers and a cookie consent mechanism. No forms collecting personal data were detected on the main page, reducing immediate privacy risks. The WHOIS data is consistent and legitimate, with no suspicious patterns. However, the site could improve by publishing a security policy, incident response contacts, and vulnerability disclosure information. Overall, BKK Care & Life presents a trustworthy, professional, and secure platform for health education with minor areas for improvement in privacy compliance and security best practices.

L

Leafworks

helpdeskapi.com

51

Leafworks is a small technology company specializing in providing middleware solutions that integrate Zendesk with CRM, ERP, and eCommerce systems. Their website focuses on promoting their Zendesk API middleware product, which automates workflows and enhances support capabilities for businesses using Zendesk. The company targets business clients seeking seamless integration and automation of their customer service platforms. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The presence of Google Tag Manager and CookieFirst consent scripts shows a moderate level of digital maturity and compliance awareness. Security-wise, the site enforces HTTPS and uses best practices like cookie consent, but lacks explicit security policies, incident response contacts, and security headers, which are areas for improvement. Overall, the website is professional, well-structured, and trustworthy, but could enhance privacy and security transparency to further strengthen its posture.

K

Krones

krones.com

11

Krones is a globally recognized manufacturer specializing in complete production lines and individual machines for the beverage and food industries. Their offerings include process technology, filling and packaging machines, digital services, and recycling solutions. The company maintains a strong market position with a comprehensive portfolio and a focus on sustainability and innovation. The website reflects a mature digital presence with extensive corporate, investor, and compliance information, indicating a well-established enterprise. Technically, the site employs modern web technologies, including Google Tag Manager and a consent management platform, ensuring privacy compliance and user tracking minimization. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.

B

BKK Landesverband Bayern

bkk-gesundheit.de

55

BKK Landesverband Bayern operates the Gesundheitsportal website, providing comprehensive health-related information and tools such as BMI calculators and resilience tests. The portal targets the general public interested in health and wellness, positioning itself as a trusted regional health information provider linked to statutory health insurance. Technically, the site is built on TYPO3 CMS, uses Matomo for analytics, and is hosted on Schlundtech infrastructure. The website demonstrates good digital maturity with modern technologies, responsive design, and accessibility features. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though it lacks publicly visible security policies and incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable resource for health information.

V

Vispato GmbH

vispato.com

54

Vispato GmbH is a German-based technology company specializing in providing a secure, anonymous whistleblowing system designed to help organizations comply with the EU Whistleblower Directive and other global data protection laws. The company operates a SaaS model, offering a modern, user-friendly platform with strong security features such as end-to-end encryption and ISO 27001 certified hosting. Vispato serves a broad range of enterprises, particularly in the DACH region, and is part of the HR WORKS family, enhancing its market credibility. Technically, the website is built on WordPress with a modern theme and integrates multiple marketing and analytics tools including Google Tag Manager, Usercentrics CMP for cookie consent, Microsoft Clarity, and Pipedrive for lead management. Hosting is provided by the ISO 27001 certified DATEV data center, ensuring a high security standard. The site is well-optimized for SEO, mobile-friendly, and accessible, with comprehensive multilingual support. From a security perspective, Vispato demonstrates strong practices including HTTPS enforcement, penetration testing, access controls, and activity logging. However, the site could improve by adding security headers and publishing a security.txt file to facilitate vulnerability disclosures. No critical vulnerabilities or exposed sensitive data were detected. Overall, Vispato presents a professional, trustworthy, and compliant digital presence with clear business information, transparent pricing, and strong customer testimonials. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing legal documentation with Terms of Service and incident response details to further strengthen compliance and trust.

Z

zone35 GmbH & Co. KG

e-coaches.de

53

The website www.e-coaches.de is a specialized health coaching portal operated by zone35 GmbH & Co. KG, targeting German statutory health insurance members with a variety of free online coaching programs focused on fitness, nutrition, stress management, and more. The platform leverages TYPO3 CMS and integrates multiple JavaScript libraries to provide an interactive user experience. The site is well-structured, mobile-optimized, and includes clear contact information and cookie consent mechanisms, reflecting good privacy compliance. Security posture is moderate with HTTPS usage but lacks visible security headers and anti-CSRF protections in forms. No critical vulnerabilities or suspicious content were detected. Overall, the site presents a trustworthy and professional digital presence in the healthcare coaching niche.

A

Austausch e.V.

austausch.org

64

Austausch e.V. is a well-established non-profit organization based in Germany, focused on fostering active civil society and closer relations between East and West through international cooperation. With over 32 years of experience, the organization collaborates with more than 250 partners across 15+ countries, delivering projects and knowledge transfer initiatives. The website reflects a professional and consistent brand presence, targeting NGOs, activists, and civil society actors. Technically, the site is built on WordPress with Elementor, hosted under a reputable registrar and using Cloudflare DNS for performance and security. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie management. No critical vulnerabilities or suspicious elements were detected, and the domain registration data aligns well with the organization's claims, supporting legitimacy.

S

SKD BKK

skd-bkk.de

57

SKD BKK is a German health insurance provider positioning itself as a premium 'S-Kasse' with unlimited health service benefits. The website presents a professional and consistent brand image, targeting general healthcare customers in Germany. The business model focuses on comprehensive health insurance services including family health, telemedicine, electronic patient records, and health courses. The company leverages TYPO3 CMS for its website platform, with custom theming by DSG1 GmbH, and employs privacy-conscious analytics via Matomo. Cookie consent is managed through Cookiebot, ensuring GDPR compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and incident response policies are not explicitly published. Overall, the website is well-structured, mobile-optimized, and trustworthy, with no signs of malicious or adult content.

S

Salus Betriebskrankenkasse

salus-bkk.de

58

Salus Betriebskrankenkasse is a well-established statutory health insurance provider in Germany, offering a broad range of health-related services including insurance coverage, bonus programs, prevention, and digital health tools. The website reflects a strong market position with multiple certifications and a focus on customer service and accessibility. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes accessibility enhancements such as Eye-Able. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

B

BKK ProVita

bkk-provita.de

56

BKK ProVita is a German health insurance provider specializing in services for families, pregnant women, students, and self-employed individuals. The company positions itself as a reliable partner for lifelong health coverage, offering a range of benefits including alternative medicine reimbursements and preventive health travel programs. The website reflects a strong market position with positive certifications and a clear focus on customer segments. Technically, the site is built on WordPress with Elementor, uses Matomo for analytics, and implements cookie consent mechanisms, indicating a mature digital infrastructure. Security posture is good with HTTPS and CAPTCHA protections, though explicit security headers and incident response policies are not evident. Overall, the site is professional, trustworthy, and compliant with privacy norms, though it could improve transparency by publishing privacy and security policies.

M

mhplus Krankenkasse

mhplus-krankenkasse.de

53

mhplus Krankenkasse operates as a health insurance provider in Germany, targeting private customers with a focus on excellent services and consultation. The website is built on TYPO3 CMS and hosted on plusserver.com infrastructure, indicating a stable and professional technical foundation. The site is well-designed, mobile-optimized, and provides relevant content for its audience. However, the absence of explicit privacy and cookie policies, security headers, and contact information reduces the overall security and compliance posture. The WHOIS data aligns with the business claims, showing legitimacy and consistent domain registration. Strategic improvements in privacy compliance and security practices are recommended to enhance trust and regulatory adherence.

K

Krones BKK

krones-bkk.de

52

Krones BKK is a specialized German company health insurance provider (Betriebskrankenkasse) dedicated to serving employees of the Krones Group and their families. The website emphasizes personalized service, exclusive health benefits, and digital health solutions such as online psychotherapy and digital pain therapy. The company positions itself as a trusted partner with strong local presence and tailored offerings. Technically, the website is built on WordPress with modern SEO and performance optimizations, including Yoast SEO, WP Rocket, and Borlabs Cookie for privacy compliance. Security posture is solid with HTTPS, CAPTCHA protections on forms, and cookie consent mechanisms, though no explicit security policy or incident response contacts are publicly disclosed. Overall, the site is professional, accessible, and trustworthy, with a clear focus on its niche audience.

E

Ernst & Young BKK

ey-bkk.de

66

Ernst & Young BKK operates as a specialized company health insurance fund (Betriebskrankenkasse) exclusively serving employees of Ernst & Young GmbH and their families in Germany. The website presents a professional and well-structured digital presence, emphasizing personalized health insurance services, bonus programs, and additional health benefits. The company positions itself as a reliable and attractive insurer with exclusive offerings tailored to its target audience. Technically, the site leverages TYPO3 CMS, modern JavaScript libraries, and integrates translation and analytics services, reflecting a mature digital infrastructure. Security practices include HTTPS enforcement, anonymized analytics tracking, and GDPR-compliant cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the website is trustworthy, compliant, and user-friendly, supporting the company's market position as a dedicated health insurer for Ernst & Young employees.

B

BKK VerbundPlus

bkk-verbundplus.de

55

BKK VerbundPlus is a German statutory health insurance provider offering a range of health-related services including family support, pregnancy care, alternative healing, dental, and nursing services. The website is built on TYPO3 CMS and integrates modern technologies such as jQuery, Google Tag Manager, and Cookiebot for consent management. The site demonstrates good digital maturity with a responsive design, clear navigation, and GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no obvious vulnerabilities detected, though some security headers could be improved. Overall, the website reflects a professional and trustworthy health insurance entity serving the German market.