Germany security reports

ZF Friedrichshafen AG is a global technology leader specializing in advanced mobility products and systems for passenger cars, commercial vehicles, and industrial technology. The company serves vehicle manufacturers, mobility providers, and startups, focusing on electrification and sustainable mobility solutions. Their extensive product portfolio and global presence position them strongly in the transportation and technology sectors. The website reflects a mature digital presence with comprehensive corporate, sustainability, and investor information, supporting their market leadership. Technically, the website employs modern web technologies including JavaScript frameworks, Piwik PRO analytics, and responsive design optimized for mobile devices. The site demonstrates good SEO and accessibility practices, with structured data enhancing search engine understanding. Performance is moderate, with opportunities for further optimization. From a security perspective, the site enforces HTTPS and includes a Content Security Policy header, though additional security headers could enhance protection. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR adherence. Contact and compliance information is readily available, supporting transparency. Overall, the website presents a low-risk profile with strong business credibility and professional digital infrastructure. The absence of WHOIS data reduces transparency but does not detract from the site's legitimacy given the extensive corporate content and recent press activity.

W

WindEnergy Hamburg

windenergyhamburg.com

54

WindEnergy Hamburg operates as a premier global event platform dedicated to the wind energy sector, facilitating networking, knowledge exchange, and business development for onshore and offshore wind industries. The website reflects a mature digital presence with comprehensive event information, exhibitor directories, and conference programs, positioning it as a key player in the renewable energy event market. Technically, the site leverages TYPO3 CMS and integrates modern tools such as Google Tag Manager and Usercentrics for analytics and consent management, indicating a commitment to user experience and privacy compliance. Security posture is solid with HTTPS and consent mechanisms, though some security headers could be enhanced. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional site and active social media channels. Strategic recommendations include improving explicit security headers, enhancing accessibility, and publishing clear security policies to bolster trust and compliance.

W

WEB Windenergie Deutschland GmbH

web.energy

56

WEB Windenergie Deutschland GmbH is a medium-sized renewable energy company based in Germany, specializing in wind, solar, and hydropower energy production. The company has a strong market presence with over 25 years of experience and operates numerous energy plants. Their website reflects a professional and modern digital presence built on TYPO3 CMS, featuring comprehensive content, clear navigation, and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS registrant data slightly reduces trust but does not detract significantly from the company's legitimacy given the professional presentation and business information available. Overall, the website is well-designed, compliant with GDPR, and supports business credibility through clear contact details and social media integration.

H

hansgrohe

hansgrohe.de

10

Hansgrohe is a premium manufacturer specializing in bathroom and kitchen fixtures, offering high-quality faucets, showers, and related products. The website serves as a brand showcase and e-commerce platform targeting quality-conscious consumers primarily in Germany and other international markets. The site demonstrates a mature digital infrastructure with advanced consent management and multiple analytics integrations, reflecting a strong commitment to GDPR compliance and user privacy. Security posture is robust with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly visible. Overall, the website is professional, trustworthy, and well-positioned in its market segment.

H

hansgrohe

hansgrohe.com

11

hansgrohe is a premium international brand specializing in manufacturing and retailing high-quality bathroom and kitchen fixtures such as faucets, showers, and kitchen sinks. The company targets quality-conscious consumers and professionals seeking modern and durable products. The website reflects a mature digital presence with localized versions for multiple countries, indicating a broad market reach. Technically, the site employs a modern tech stack including SAP Hybris, Google Tag Manager, Piwik PRO, and New Relic monitoring, supporting a robust and scalable infrastructure. Security practices are strong with HTTPS enforcement, cookie consent management, and CSRF protections, though explicit security policy disclosures are absent. Overall, the site is professional, secure, and compliant with privacy regulations, supporting hansgrohe's market position as a trusted premium brand.

N

Novalnet AG

novalnet.de

74

Novalnet AG is a German-based payment service provider offering comprehensive payment solutions tailored for various business models. The company provides a broad range of payment options through a single integration, targeting businesses that require efficient and secure payment processing. With ISO 27001 certification and GDPR compliance, Novalnet positions itself as a trustworthy and secure partner in the finance and technology sectors. The website reflects a professional and consistent brand image, supporting its market position as a reliable PSP in Europe. Technically, the website is built on WordPress and incorporates modern JavaScript libraries and marketing tools such as LinkedIn Insight and Writesonic's Botsonic widget. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility enhancements could be beneficial. Security measures include HTTPS enforcement, security headers, and cookie consent mechanisms, contributing to a strong security posture. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration data aligns well with the company's claims, supporting legitimacy. However, the absence of a public vulnerability disclosure or security.txt file and explicit incident response contacts suggests areas for improvement in transparency and incident readiness. Overall, Novalnet AG's digital presence is robust, secure, and professional, with room for enhancements in security communication and accessibility.

K

Kombiverkehr GmbH & Co. KG

kombiverkehr.de

55

Kombiverkehr GmbH & Co. KG operates as a leading intermodal transport network provider in Germany and Europe, specializing in flexible terminal-to-terminal rail connections and offering over 170 trains per night. The company targets logistics businesses seeking sustainable and efficient rail freight solutions, positioning itself as a key player in environmentally friendly logistics. Their website reflects a mature digital presence with comprehensive service descriptions and customer engagement portals. Technically, the site is built on the Neos CMS platform using the Flow PHP framework, integrating modern JavaScript libraries and Matomo analytics for privacy-conscious tracking. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response contacts are not publicly disclosed. Overall, Kombiverkehr demonstrates a professional and trustworthy online presence aligned with its business operations.

B

Bundesinstitut für Arzneimittel und Medizinprodukte (BfArM)

drks.de

62

The Bundesinstitut für Arzneimittel und Medizinprodukte (BfArM) is a German federal government agency responsible for the regulation and oversight of pharmaceuticals and medical devices. The website serves as an authoritative source for clinical trial registration (DRKS), pharmacovigilance, medical device regulation, and related regulatory information. It targets healthcare professionals, researchers, regulatory bodies, and the general public seeking official information on clinical studies and medical product safety. The site is built on the Government Site Builder CMS, featuring a professional, accessible, and mobile-optimized design with comprehensive navigation and content relevant to its regulatory mission. Technically, the website employs modern web standards including responsive CSS, SVG graphics, and a manifest for progressive web app capabilities. It uses HTTPS with good SSL configuration and implements cookie consent mechanisms compliant with GDPR, including opt-in for statistical cookies via Matomo analytics. No advertising or third-party marketing tools are detected, reflecting its government nature. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent. However, explicit security headers and a public security or incident response policy are not evident. No vulnerabilities or exposed sensitive data were found. WHOIS data is minimal but consistent with a government domain managed by German federal IT infrastructure. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It provides a secure and user-friendly platform for disseminating critical regulatory information. Strategic recommendations include enhancing security header implementation, publishing a vulnerability disclosure policy, and providing clearer direct contact information for security incidents.

R

Robert Koch-Institut

rki.de

65

The Robert Koch-Institut (RKI) is the central federal institution in Germany responsible for disease surveillance and prevention. The website serves as an authoritative public health portal providing comprehensive information, research data, and guidance on infectious and non-infectious diseases. It targets public health professionals, government agencies, researchers, and the general public. The RKI holds a strong market position as Germany's leading public health authority. Technically, the website is built on the Government Site Builder CMS, featuring modern HTML5, CSS3, and JavaScript technologies. It is hosted by ITZBund, a government IT service provider, and demonstrates good mobile optimization, accessibility, and SEO practices. The site employs Matomo analytics with anonymized data collection and a robust cookie consent mechanism, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses secure forms, but lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or suspicious activities were detected. Privacy compliance is strong, with GDPR-aligned policies and transparent cookie management. Overall, the RKI website is a professional, trustworthy, and well-maintained government resource with excellent content quality and privacy practices. Strategic improvements could include adding security headers and publishing a formal security policy to enhance trust and compliance further.

D

DZG – Deutsche Zentren der Gesundheitsforschung

deutschezentren.de

10

The Deutsche Zentren der Gesundheitsforschung (DZG) is a government-funded consortium focused on advancing health research in Germany. It operates through eight specialized research centers targeting major diseases such as diabetes, cancer, infections, and neurodegenerative disorders. The organization is positioned as a leading national health research network with strong institutional backing from the German Federal Ministry of Education and Research (BMBF). The website reflects a professional and comprehensive digital presence, offering detailed information about research areas, news, and collaboration opportunities. Technically, the site is built on WordPress using Oxygen Builder, with modern JavaScript libraries and a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and privacy-conscious analytics implementation, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, well-maintained, and serves its target audience effectively.

M

medXmedia Consulting KG

medxmedia.de

40

medXmedia Consulting KG is a specialized full-service agency focusing on medical communication, serving a niche market of medical societies, associations, NGOs, clinics, and practices primarily in Germany. The company has been operating since 2010 and offers services including press and public relations, marketing, and consulting. Their website reflects a professional and consistent brand image with clear service offerings and client logos, indicating a stable market position within the healthcare communication sector. Technically, the website is built on WordPress with Elementor and Yoast SEO, showing a modern and maintainable infrastructure. Mobile optimization and SEO practices are well implemented, although performance is moderate. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response disclosures. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from enhanced compliance and security transparency.

A

AKTIN

aktin.org

47

AKTIN is a German healthcare infrastructure platform specializing in the collection and utilization of digital routine data from acute and emergency care settings. It supports healthcare research, surveillance, quality management, and benchmarking, collaborating notably with the Robert Koch Institute and being part of the Network University Medicine (NUM). The platform targets healthcare providers, research institutions, and emergency care professionals, offering data infrastructure and analytical services to improve emergency care quality and public health surveillance. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Elementor, hosted by Netcup. While the site is generally well-structured and optimized for SEO and mobile use, minor issues like missing DNSSEC and a Google Maps API error were identified. The site uses WP Statistics for analytics with minimal user tracking. From a security perspective, HTTPS is properly implemented, and no critical vulnerabilities were detected. However, the absence of DNSSEC and security headers, along with missing explicit security policies and incident response information, suggests room for improvement. Privacy compliance is good, with a comprehensive privacy policy present, though no cookie consent mechanism was found. Overall, AKTIN presents a professional, trustworthy, and well-established platform in the healthcare sector with a solid technical foundation and good business credibility. Strategic improvements in security and privacy mechanisms would enhance its posture further.

D

Deutsches Institut für Medizinische Dokumentation und Information (DIMDI) / Robert Koch-Institut (RKI) / DIVI

intensivregister.de

48

The DIVI-Intensivregister website serves as an authoritative German government-backed platform that collects and disseminates daily data on intensive care capacities and COVID-19 patient statistics across approximately 1,100 acute hospitals. It plays a critical role in monitoring healthcare capacity and supporting pandemic response efforts. The site is technically built on a modern Angular framework with Material Design, offering a responsive and user-friendly interface with comprehensive content including data visualizations, downloadable reports, and regular blog updates. Security posture is moderate with HTTPS presumably enabled but lacking explicit security headers and formal privacy or cookie policies, which are areas for improvement. The domain registration and hosting align well with the official nature of the site, reinforcing its legitimacy. Overall, the site is a trusted resource for healthcare professionals, government officials, and the public, though enhancements in privacy compliance and security best practices are recommended.

D

Deutscher Rat für Wiederbelebung – German Resuscitation Council (GRC) e.V.

grc-org.de

11

The Deutscher Rat für Wiederbelebung (German Resuscitation Council, GRC) is a reputable non-profit organization founded in 2007, dedicated to improving resuscitation awareness and training in Germany. The website serves as a comprehensive platform for public education, professional training, scientific publications, and event organization related to resuscitation. It targets both laypersons and medical professionals, emphasizing increasing lay resuscitation rates and public health impact. Technically, the website employs a modern but custom technology stack including jQuery, bxSlider, and Google Analytics with IP anonymization, hosted on rzone.de infrastructure. The site is mobile-optimized and well-structured, providing a good user experience and SEO presence. However, it lacks some advanced security headers and formal security policies. From a security perspective, the site uses HTTPS and basic privacy compliance mechanisms such as cookie consent and a detailed privacy policy. There is no visible incident response or vulnerability disclosure information, which could be improved. The WHOIS data aligns well with the organization's public information, indicating legitimacy and consistency. Overall, the website is professional, trustworthy, and well-maintained, with minor recommendations to enhance security posture and transparency. The risk level is low, but improvements in security headers and incident response disclosures would strengthen trust and compliance.

M

Medizinisch Wissenschaftliche Verlagsgesellschaft mbH & Co. KG

mwv-berlin.de

10

Medizinisch Wissenschaftliche Verlagsgesellschaft mbH & Co. KG is a specialized German publishing company focusing on healthcare, medicine, psychiatry, and psychology. The company offers a broad range of publishing products including books, e-books, apps, open access content, and organizes healthcare-related events and congresses. Their target audience includes healthcare professionals, researchers, and academic institutions. The website is professionally designed with consistent branding and clear navigation, supporting a medium-sized business presence in the healthcare publishing sector. Technically, the website employs a mature technology stack including AngularJS, Bootstrap, Magento for e-commerce, and a Content Builder CMS. It uses Matomo analytics for privacy-conscious visitor tracking and implements a comprehensive cookie consent mechanism compliant with GDPR. The site is mobile optimized and performs moderately well, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses cookie consent best practices. However, it lacks visible security headers and does not publish a dedicated security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. WHOIS data confirms domain registration consistency and legitimacy, supporting trustworthiness. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements in security headers, incident response transparency, and accessibility would further strengthen its posture.

D

Deutsche Interdisziplinäre Vereinigung für Intensiv- und Notfallmedizin e.V. (DIVI)

divi25.de

44

The website www.divi25.de represents the 25th Congress of the Deutsche Interdisziplinäre Vereinigung für Intensiv- und Notfallmedizin e.V. (DIVI), a leading German professional association in intensive and emergency medicine. The site serves as an information and registration portal for the congress scheduled for December 2025 in Hamburg. It targets medical professionals including physicians and nurses, providing detailed program information, registration options, and educational resources. The business model is non-profit, focusing on professional development and scientific exchange within the healthcare sector. Technically, the website is built on Joomla CMS with the Yootheme template and leverages modern web technologies such as jQuery and UIkit for responsive design and user experience. The site is mobile-optimized, accessible, and SEO-friendly, with embedded consent mechanisms for third-party content like YouTube videos. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and includes user consent for tracking embedded content, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were found in the HTML content. Privacy compliance is strong with visible privacy and cookie policies and GDPR considerations. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. Recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen security posture and user trust.

A

AG Lungensport in Deutschland e.V.

lungensport.org

10

AG Lungensport in Deutschland e.V. is a well-established non-profit organization dedicated to promoting lung sports and physical therapy for patients with respiratory and lung diseases in Germany. With over 25 years of history, it operates a nationwide network of lung sports groups, provides training and certification for exercise instructors, and offers online programs and educational resources. The organization collaborates with academic institutions and has received notable awards, reinforcing its credibility and impact in the healthcare sector. Technically, the website is built on the Contao Open Source CMS platform, utilizing common web technologies such as jQuery and Colorbox. The site is moderately optimized for performance and mobile devices, with a clear navigation structure and professional design. Analytics are implemented via Piwik (Matomo), indicating a moderate level of user tracking. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks certain security headers and a cookie consent mechanism, which are recommended for enhanced security and GDPR compliance. The WHOIS data is privacy protected, which is typical for non-profit entities, and no suspicious patterns were detected. Overall, the site demonstrates a solid security posture but could benefit from improvements in privacy compliance and security best practices. The overall risk assessment is low, with the site appearing trustworthy and professionally managed. Strategic recommendations include implementing security headers, adding a cookie consent banner, publishing security policies, and enhancing accessibility features to further strengthen the site's security and compliance posture.

D

Deutsche Atemwegsliga e.V.

lungentag.de

10

Deutscher Lungentag is a German non-profit initiative operated by Deutsche Atemwegsliga e.V., focused on lung health awareness, prevention, and education. The website serves as a platform for disseminating information about respiratory diseases, organizing events, and providing educational materials to patients, healthcare professionals, and the general public. The organization positions itself as a reputable source within the German healthcare sector, leveraging expert contributions and up-to-date event information to engage its audience. Technically, the website is built on the Contao CMS platform and employs modern web technologies such as jQuery, Materialize CSS, and Matomo analytics for user tracking. The site is mobile-optimized with a clear navigation structure and professional design, although some SEO and accessibility features could be enhanced. The presence of HTTPS ensures secure communication, but the absence of security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. From a security perspective, the website demonstrates a moderate security posture with no visible vulnerabilities or exposed sensitive data. However, the lack of explicit security policies, incident response contacts, and cookie consent banners suggests gaps in compliance with GDPR and best practices. The WHOIS data is minimal but consistent with the website's German healthcare focus, supporting the legitimacy of the domain. Overall, Deutscher Lungentag presents a trustworthy and professional online presence with solid business credibility. Strategic improvements in security headers, privacy compliance, and incident response readiness would further strengthen its security posture and regulatory adherence.

The Alpha-1-Center website serves as a specialized non-profit platform dedicated to the rare disease Alpha-1-Antitrypsinmangel, primarily targeting medical professionals, patients, and researchers in German-speaking countries. It offers educational resources, online seminars, research awards, and patient registries, positioning itself as a key knowledge hub in this niche healthcare sector. The site is well-structured, content-rich, and professionally presented, reflecting a focused mission on disease awareness and support. Technically, the website is built on the Contao Open Source CMS platform, utilizing common web technologies such as jQuery, Modernizr, and embedded Vimeo videos. The site demonstrates good mobile optimization and accessibility but lacks advanced SEO and security headers. Analytics are implemented via Matomo, indicating moderate user tracking with some privacy considerations. From a security perspective, the site uses HTTPS but does not exhibit comprehensive security headers or a cookie consent mechanism, which are important for GDPR compliance. The WHOIS data is unavailable or malformed, limiting domain trust verification and slightly reducing overall credibility. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is a credible and valuable resource within its healthcare niche but would benefit from improved privacy compliance, enhanced security practices, and better WHOIS transparency to strengthen trust and regulatory adherence.

Georg Thieme Verlag operates Thieme Connect, a comprehensive online platform offering electronic medical and scientific products including e-books, e-journals, and e-learning solutions. The website targets healthcare professionals, researchers, and librarians, positioning itself as a trusted provider of specialized medical knowledge and educational resources. The platform is well-branded and professionally maintained, reflecting a mature digital presence in the healthcare publishing sector. Technically, the site employs modern web technologies including JavaScript frameworks, Google Tag Manager for analytics, and OneTrust for cookie consent, ensuring compliance with privacy regulations. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are absent. Overall, the site is safe, professional, and trustworthy with no adult or questionable content detected.

H

HENKELHIEDL GmbH & Co. KG

henkelhiedl.com

65

HENKELHIEDL GmbH & Co. KG is a Berlin-based creative and digital agency specializing in supporting brands and institutions through change with services including content creation, design, development, concept, and strategy consulting. The company serves a diverse clientele including public institutions, cultural organizations, and commercial brands, positioning itself as a trusted partner in the media and creative sectors. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service descriptions. Technically, the site is built on Webflow and integrates modern tools such as Google Tag Manager, Google Analytics, Klaro for cookie consent, and Weglot for multilingual support, indicating a solid digital infrastructure. Security posture is good with HTTPS enforced and consent management implemented, though the absence of explicit security headers and lack of visible incident response or security policy information suggest areas for improvement. The WHOIS data is missing or inaccessible, which raises some concerns about domain registration transparency, but the professional website and clear contact information mitigate immediate trust issues. Overall, the site demonstrates a high level of professionalism and compliance with privacy regulations, making it a credible digital asset for the company.

D

Deutsche Gesellschaft für Pneumologie und Beatmungsmedizin e.V.

pneumologie-kongress.de

51

The website pneumologie.de/kongress is the official portal for the 66th Congress of the German Society for Pneumology and Respiratory Medicine (DGP). It serves as an information hub for healthcare professionals specializing in pneumology, providing details about the congress program, registration, practical information, and press resources. The site is professionally designed, consistent in branding, and targets a specialized medical audience primarily in Germany. The business model is that of a non-profit professional society organizing educational and networking events in healthcare. Technically, the site uses the Snowboard CMS framework, Bootstrap icons, and Matomo analytics, indicating a modern and privacy-conscious infrastructure. The site is mobile optimized and performs moderately well with good SEO and accessibility basics. Security posture is solid with HTTPS and cookie consent implemented, though it lacks explicit security headers and published security policies. WHOIS data confirms domain legitimacy and consistency with the organization's profile. Overall, the site is trustworthy, professional, and well-maintained with no detected vulnerabilities or suspicious content.

A

Aktionsbündnis Nichtrauchen e.V. (ABNR)

abnr.de

39

Aktionsbündnis Nichtrauchen e.V. (ABNR) is a German non-profit coalition of 22 nationwide health organizations focused on tobacco and nicotine prevention advocacy. The website serves as an information hub for political lobbying, public awareness, and dissemination of publications and newsletters related to tobacco control. The organization targets health professionals, policymakers, and the general public in Germany. Technically, the website is built on the REDAXO CMS platform, uses jQuery and skrollr for UI effects, and integrates Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized with a clear navigation structure and consistent branding. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and published security policies. No contact emails or phone numbers are directly exposed, relying on a contact form instead. WHOIS data shows the domain is active with domaincontrol.com nameservers, typical for GoDaddy hosting, with no privacy protection but limited registrant info. Overall, the site is professional, trustworthy, and safe, with room for improvement in security policy transparency and technical security headers.

D

Deutsche Gesellschaft für Thoraxchirurgie

dgt-online.de

51

The Deutsche Gesellschaft für Thoraxchirurgie (DGT) is a well-established German non-profit medical society specializing in thoracic surgery. Founded in 1991, it focuses on advancing the field through education, research, certification, and collaboration among professionals. The website serves as a comprehensive portal for members, patients, and medical professionals, offering event information, certification details, and organizational insights. Technically, the site is built on WordPress with a modern plugin ecosystem supporting events and membership management. The site is accessible, mobile-optimized, and SEO-friendly, though it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is good with HTTPS enforced but could be improved by adding security headers and incident response information.

G

Gesellschaft für Pädiatrische Pneumologie e.V.

paediatrische-pneumologie.eu

64

The Gesellschaft für Pädiatrische Pneumologie e.V. (GPP) is a scientific society dedicated to pediatric pulmonology in the German-speaking region. The website serves as an information hub for medical professionals and researchers, providing educational resources and facilitating professional networking. The organization positions itself as a reputable and established entity within the healthcare sector focused on children's lung health. Technically, the website is built on WordPress with Elementor and employs Matomo for analytics, complemented by a robust cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and standard security headers present, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

D

Deutsche Interdisziplinäre Vereinigung für Intensiv- und Notfallmedizin e.V. (DIVI)

divi.de

43

The Deutsche Interdisziplinäre Vereinigung für Intensiv- und Notfallmedizin e.V. (DIVI) is a well-established German non-profit professional association dedicated to intensive care and emergency medicine. Their website serves as a comprehensive portal offering educational courses, congress information, publications, and member services targeted at healthcare professionals in the intensive and emergency medicine fields. The organization maintains a strong market position within the German healthcare sector, supported by consistent branding and a professional online presence. The site is primarily in German and targets medical professionals and researchers.

D

Deutsche Gesellschaft für Innere Medizin e.V.

dgim.de

55

The Deutsche Gesellschaft für Innere Medizin e.V. (DGIM) is a well-established professional medical society in Germany focused on internal medicine. It serves a large membership base of over 30,000 professionals, providing education, networking, publications, and congress organization. The website reflects a mature digital presence with comprehensive content tailored to medical professionals and students. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and is mobile optimized with good accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and vulnerability disclosure information. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

D

Deutsches Zentrum für Lungenforschung e. V.

dzl.de

59

The Deutsches Zentrum für Lungenforschung (DZL) is a prominent German non-profit consortium comprising 29 leading academic and non-academic institutions dedicated to lung and respiratory disease research. The organization focuses on translational research, bridging laboratory findings to clinical applications, and supports career development through its DZL Academy. The website reflects a strong market position in healthcare research with a clear mission and comprehensive services including clinical studies, data management, and patient information. The target audience includes medical researchers, healthcare professionals, and patients interested in lung health. Technically, the website is built on WordPress with the Oxygen Builder framework, leveraging modern JavaScript libraries like jQuery and AOS for animations. Hosting is managed via EuroDNS nameservers. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Analytics are implemented using Google Analytics with user consent mechanisms in place, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and implements cookie consent, but lacks explicit security policy pages, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's professional nature, indicating a trustworthy domain registration. Overall, the DZL website is a well-maintained, professional platform supporting a reputable healthcare research entity. Strategic improvements include publishing security policies, enhancing accessibility, and adding vulnerability disclosure information to strengthen trust and compliance.

T

Thüringer Theaterverband e.V.

thueringer-theaterverband.de

50

Thüringer Theaterverband e.V. is a regional non-profit organization focused on supporting and promoting theater and cultural activities in the German state of Thuringia. The website serves as a portal for information about events, membership, festivals, and theater-related services. It targets theater enthusiasts, artists, and cultural institutions within the region. The organization maintains a moderate digital presence with integration of social media and a dedicated theater portal partner site. Technically, the website is built on the Contao Open Source CMS platform, utilizing several LMF modules for UI components and sliders. The site employs modern JavaScript libraries such as jQuery and Slick Slider, and it is served over HTTPS with a valid SSL certificate. The site includes a cookie consent mechanism compliant with GDPR, using Matomo for analytics with moderate user tracking. From a security perspective, the website demonstrates good practices including HTTPS enforcement and CSRF protection cookies. However, it lacks advanced security headers and explicit security or incident response policies. No vulnerabilities or suspicious content were detected. Privacy compliance is supported by a DSGVO & Impressum page, but no dedicated privacy officer or vulnerability disclosure information is provided. Overall, the website is professionally designed with good content quality and user experience. It is trustworthy and safe for general audiences. Strategic improvements could focus on enhancing security headers, publishing clear security policies, and providing direct contact information for incident response and data protection inquiries.

F

Förderverein des Theaters die SCHOTTE e.V.

fv-dieschotte.de

43

The Förderverein des Theaters die SCHOTTE e.V. is a small non-profit organization founded in 2024 to support the youth and amateur theater "Die Schotte" in Erfurt, Germany. The association focuses on funding projects that the theater cannot finance itself, including inclusion initiatives, youth engagement, and logistical support. The website is built on WordPress and presents a professional, well-structured digital presence with clear navigation and relevant content for its target audience. Technically, the site uses modern web technologies and is mobile-optimized, though there is room for improvement in security headers and privacy compliance. Security posture is solid with HTTPS enabled and no visible vulnerabilities, but lacks advanced security policies or incident response information. Overall, the site is trustworthy and serves its community purpose effectively.

F

Formula Student Germany

formulastudent.de

54

Formula Student Germany (FSG) is a well-established international engineering competition focused on university students designing and building formula-style race cars. The organization operates primarily as a non-profit educational event organizer, supported by a strong network of reputable automotive and technology partners such as Audi, BMW, Bosch, Mercedes, Porsche, Tesla, and Siemens. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding consistent with its 20-year history. Technically, the site is built on TYPO3 CMS with a modern tech stack including jQuery and various UI libraries, hosted behind Cloudflare for performance and security. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in cookie consent and explicit security policies. Overall, the site is trustworthy, professional, and well-aligned with its educational mission.

Open Air Kino Regensburg operates a seasonal open-air cinema located in the Armin-Wolf-Arena, Regensburg, Germany. The website serves as an information and ticketing portal for cinema events, targeting local residents and cinema enthusiasts. The business model revolves around event-based ticket sales and partnerships with ticketing platforms. The site content is primarily in German and focuses on promoting upcoming film screenings and related services such as catering and partnerships. Technically, the website is built on WordPress with common plugins for maps, GDPR compliance, and analytics. The site is moderately optimized for performance and mobile devices, with basic SEO and accessibility features. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, but lacks advanced security headers and explicit security policies. No contact emails or phone numbers are directly provided on the homepage, which may affect user trust and support accessibility. Overall, the website is professional and trustworthy for its purpose but could improve in security and contact transparency.

B

Beach House

beachhouse-regensburg.de

9

Beach House Regensburg is a small hospitality business operating a restaurant specializing in Californian Riviera cuisine and offering event location services in Regensburg, Germany. The website is built on the Wix platform, indicating a moderate level of digital maturity with standard Wix technologies and moderate performance. The site is mobile optimized and provides a good user experience with clear content relevant to its target audience. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies. No contact or incident response information is provided, which limits trust and compliance. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security practices.

D

Deutscher Baseball und Softball Verband e. V.

baseball.de

10

The website www.baseball.de serves as the official platform for the Deutsche Baseball Liga (DBL), the premier baseball league in Germany. It provides comprehensive league information, news, live scores, player statistics, and fan engagement features. The site targets baseball enthusiasts, players, and fans within Germany, positioning itself as the central hub for German baseball. The business model revolves around sports league management, media content distribution, and partnership facilitation. Technically, the site is built on TYPO3 CMS, hosted by Infomaniak, and integrates modern web technologies including Sentry for error tracking and social media embedding. The website demonstrates good performance, mobile optimization, and accessibility.

G

Guggenberger GmbH

guggenberger-bau.de

10

Guggenberger GmbH is a well-established, family-owned construction company based in Mintraching, Germany, with over 70 years of experience. The company specializes in building construction, civil engineering, and turnkey construction projects, serving a diverse clientele including industrial, public sector, and private customers. They maintain their own production facilities for asphalt, gravel, and concrete, ensuring quality and supply chain independence. The website is professionally designed using WordPress with modern page builders and includes comprehensive information about services, certifications, and contact details. Technically, the site uses HTTPS, cookie consent mechanisms, and integrates Google Analytics for tracking. Security posture is good but could be improved by adding explicit security policies and headers. Overall, the site reflects a credible and trustworthy business with a strong regional presence.

D

Diagnose-Funk e.V.

diagnose-ehs.org

38

Diagnose-Funk e.V. operates a specialized website focused on educating and supporting individuals affected by Electrohypersensitivity (EHS). The organization provides comprehensive information on the condition, including symptoms, biological mechanisms, environmental stressors, treatment options, and networking opportunities. The website targets affected individuals, healthcare professionals, and consumer protection advocates, positioning itself as a niche non-profit entity within the healthcare and environmental protection sectors. The content is well-structured, professionally presented, and consistent with the organization's mission. Technically, the website is built on WordPress using the Avada theme, leveraging common web technologies such as jQuery and Google Analytics for visitor insights. Hosting is provided by Hostpoint AG in Switzerland. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices are present but could be enhanced. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and explicit security headers, which are recommended for improved protection. The cookie consent mechanism is implemented effectively, blocking analytics scripts until user consent is given, supporting GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional front for a small non-profit organization. It effectively balances user education, privacy compliance, and technical soundness. Strategic improvements in security headers and DNS security would further enhance its posture.

D

diagnose:media

diagnose-media.org

9

diagnose:media is a German non-profit initiative focused on promoting competent and self-determined use of digital media by children and adolescents. The organization supports parents, schools, and affected individuals while networking experts and specialized institutions. Their core mission is to highlight the negative side effects of digital media and recommend measures to avoid or mitigate risks, especially concerning psychosocial aspects, communication behavior, addiction potential, privacy protection, and health impacts from mobile radiation. The website offers educational articles, publications, events, and expert lectures targeted primarily at families and educational institutions. Technically, the website employs a range of JavaScript libraries including jQuery, Slick Slider, Fancybox, and Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized with a responsive design and clear navigation. However, some technologies like jQuery are outdated, and no explicit CMS or hosting provider information is available. Performance is moderate, and SEO and accessibility are basic but functional. From a security perspective, the site uses HTTPS (assumed but not explicitly confirmed), but lacks visible security headers and cookie consent mechanisms despite using tracking scripts. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is unavailable or protected, which limits domain trust verification and reduces the overall legitimacy score. The site does not publish security policies or incident response information. Overall, diagnose:media presents a professional and trustworthy educational resource with good content quality and user experience. The main risks relate to incomplete WHOIS transparency and minor security best practice gaps. Strategic improvements in security headers, updated libraries, and privacy compliance would enhance trust and resilience.

D

Deutscher Berufsverband der Hals-Nasen-Ohrenärzte

hno-wartezimmer.de

48

The website www.hno-wartezimmer.de serves as an informational portal focused on ear, nose, and throat (ENT) health topics, primarily targeting patients and the general public interested in medical education. It is affiliated with the Deutscher Berufsverband der Hals-Nasen-Ohrenärzte, a professional medical association in Germany, which lends credibility and trust to the content. The site offers a range of articles, news updates, and patient education materials related to ENT health. Technically, the site is built on TYPO3 CMS, hosted by agenturserver, and uses Matomo for analytics with a GDPR-compliant cookie consent mechanism. The site is mobile-optimized and demonstrates good SEO and accessibility practices, though some improvements in accessibility could be made. Security-wise, the site enforces HTTPS and uses cookie consent for tracking but lacks explicit security headers and published security policies or incident response contacts. Overall, the site is professional, trustworthy, and compliant with privacy regulations, with a moderate to good security posture.

S

Spitzenverband Fachärztinnen und Fachärzte Deutschlands e.V. (SpiFa)

spifa.de

62

SpiFa e.V. is the leading umbrella organization representing specialist physicians in Germany, providing a unified voice for medical professionals in clinics and practices. The organization focuses on advocacy, organizing events such as the SpiFa-Fachärztetag, and publishing position papers to influence healthcare policy. Their website reflects a professional and consistent brand presence targeted at healthcare professionals and stakeholders in the German medical sector. Technically, the site is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The integration of Google Analytics and Tag Manager shows a moderate level of digital maturity in tracking and analytics. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and explicit incident response policies suggests room for improvement. Overall, the site is trustworthy, well-structured, and compliant with GDPR in terms of privacy policy, but lacks a cookie consent mechanism. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing security policies to strengthen compliance and trust.

F

FRAUENARZT

frauenarzt.de

41

FRAUENARZT is a leading German-language professional medical journal targeting gynecologists in Germany. It serves as the official publication for major professional societies in gynecology and obstetrics, providing monthly updates on clinical and practice-relevant topics. The website offers access to current and archival issues for members, along with news, event information, and newsletters. The business model revolves around subscriptions and memberships, supported by a reputable publishing house, mgo fachverlage. The site demonstrates strong branding consistency and trust signals through partnerships and certifications.

G

GoDaddy Operating Company, LLC

gray-line.com

70

This website is a domain sales landing page hosted by GoDaddy, offering the domain gray-line.com for purchase or lease. It targets individuals or businesses interested in acquiring premium domains. The platform leverages GoDaddy's and Afternic's domain marketplace infrastructure, providing verified domain badges and customer trust signals such as a high Trustpilot rating. The technical infrastructure is modern, built on Next.js with React, and hosted on GoDaddy's platform, ensuring reliable performance and mobile optimization. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks explicit security headers and visible privacy policies, which are areas for improvement. Overall, the site is legitimate and professional, but could enhance privacy compliance and security transparency.

M

MAXXmarketing GmbH

webdesigner-profi.de

37

MAXXmarketing GmbH operates the website www.webdesigner-profi.de, offering comprehensive web design, programming, SEO, and online marketing services primarily targeting businesses in Germany, Austria, and Switzerland. The company positions itself as a mid-sized agency with over 15 years of experience and a strong portfolio of more than 2000 projects, supported by trust signals such as Google Partner certification and notable client references. The website is professionally designed, mobile-optimized, and structured to provide clear navigation and service information. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, PHP, and MySQL, with asynchronous loading of analytics and marketing scripts such as Google Tag Manager and Yandex Metrika. Hosting appears to be provided by Your-Server.de based on nameserver data. Performance and SEO optimization are good, though accessibility features are basic. Security posture is adequate with HTTPS enabled but lacks explicit security headers and incident response disclosures. From a security and compliance perspective, the site lacks visible privacy and cookie policies, consent mechanisms, and vulnerability disclosure information, which are areas for improvement. Contact information is clearly presented, enhancing business credibility. No WAF or blocking mechanisms were detected, allowing full content access and analysis. Overall, the website demonstrates a solid business and technical foundation with room to enhance privacy compliance and security best practices to further strengthen trust and regulatory adherence.

The FortbildungsAkademie-im-Netz website is a professional platform offering free certified online continuing education modules primarily targeting healthcare professionals such as doctors, pharmacists, and pharmaceutical technical assistants. The platform emphasizes specialized modules for pediatricians, gynecologists, and occupational medicine practitioners, with a structured system for awarding and tracking continuing education points. The business is positioned as a niche educational provider in the German healthcare sector, supported by reputable partners and sponsors, and operated by Monks Vertriebsgesellschaft mbH. Technically, the website employs a modern tech stack including Ruby on Rails, Foundation CSS framework, and Matomo analytics configured with privacy-conscious settings. The site is mobile-optimized and features interactive elements such as carousels and login forms. While performance is moderate, the technical implementation is solid with room for enhancements in accessibility and security headers. From a security perspective, the site uses HTTPS with good SSL configuration and includes CSRF tokens in forms. However, it lacks explicit security headers and a public security policy or incident response contact information. Privacy compliance is generally good, with a clear privacy policy and terms of service, but no visible cookie consent mechanism. No vulnerabilities or suspicious patterns were detected. Overall, the website presents a trustworthy, professional, and secure platform for medical continuing education with a strong business credibility score. Strategic improvements in security headers, cookie consent, and incident response transparency would further enhance its security posture and compliance.

P

PädExpert

paedexpert.de

57

PädExpert operates as a pioneering telemedicine platform in Germany, specializing in pediatric ambulatory care by connecting general pediatricians with specialized pediatric experts to improve diagnosis and treatment of chronic and rare diseases. The platform is recognized with notable healthcare awards, indicating strong market positioning and innovation leadership. The website is professionally designed using TYPO3 CMS and modern frontend technologies, providing a good user experience with mobile optimization and clear navigation. Privacy and cookie policies are implemented with GDPR compliance, and the site uses Piwik analytics for user tracking with moderate privacy adherence. Security posture is solid with HTTPS and cookie consent but lacks explicit security headers and incident response information. No contact emails or phone numbers are directly available on the main page, which could be improved for better user support. Overall, the site is safe, trustworthy, and well-aligned with its healthcare audience.

B

Bayerische Architektenkammer

bayerische-architektenkammer.de

51

The Bayerische Architektenkammer website serves as the official online presence of the Bavarian Chamber of Architects, providing extensive resources and services for architects, planners, and the public in Bavaria, Germany. The site offers comprehensive information on membership, professional development, events, publications, and architectural projects, positioning itself as a key regional authority in the architecture and planning sector. The website is built on TYPO3 CMS, leveraging modern web technologies and accessibility tools such as ReadSpeaker and text zoom features, ensuring a user-friendly and inclusive experience. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance including GDPR-aligned policies and cookie consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected, indicating a mature and well-maintained digital infrastructure. Overall, the site reflects a professional, trustworthy, and authoritative organization with a clear focus on serving its professional community and stakeholders.

Deutsche Atemwegsliga e.V. is a German non-profit organization dedicated to providing comprehensive information, education, and support related to respiratory diseases such as COPD, asthma, and chronic bronchitis. The website serves primarily healthcare professionals and patients by offering patient training, lung sports, seminars, and extensive informational materials. The organization maintains a strong market position within the German healthcare non-profit sector, supported by partnerships with recognized entities like Alpha-1-Center and Deutscher Lungentag e.V. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries such as jQuery and Matomo for analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some improvements in security headers and explicit security policies could enhance its posture. The presence of a cookie consent banner and a detailed privacy policy indicates good privacy compliance aligned with GDPR. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks published incident response contacts or vulnerability disclosure mechanisms. No WAF or blocking mechanisms were detected, and no vulnerabilities or suspicious patterns were found in the WHOIS data, which aligns well with the organization's identity. Overall, the website is professional, trustworthy, and content-rich, with a strong focus on medical education and patient support. Strategic improvements in security policy transparency and technical security headers would further strengthen its security posture and trustworthiness.

D

Deutsche Lungenstiftung e.V.

lungenstiftung.de

39

The Deutsche Lungenstiftung e.V. is a German non-profit organization dedicated to lung health, disease prevention, and patient support. The website serves as an informational platform offering publications, event announcements, and membership opportunities. It targets patients, healthcare professionals, and the general public interested in lung health. The foundation holds a recognized position within the German healthcare non-profit sector, focusing on education and advocacy. Technically, the website is built on Joomla CMS with Yootheme and UIkit frameworks, integrating modern web technologies and consent management tools. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Security posture is solid with HTTPS enforced and consent mechanisms in place, though formal security policies and incident response contacts are absent. Overall, the site is trustworthy, professional, and compliant with GDPR requirements, with no signs of malicious activity or content safety concerns.

G

German Central Committee against Tuberculosis (DZK)

dzk-tuberkulose.de

65

The German Central Committee against Tuberculosis (DZK) operates a professional, well-structured website dedicated to tuberculosis education, research, and prevention. With over 100 years of history, the organization serves patients, relatives, doctors, and health authorities primarily in Germany. The website offers comprehensive resources including guidelines, case reporting, dosage calculators, and an interactive MDR-TB coverage map. The content is high quality, relevant, and presented with clear navigation and consistent branding. Technically, the site leverages modern web technologies such as Webflow CMS, Google Fonts, Matomo Analytics with privacy-conscious configurations, Weglot for multilingual support, and Klaro for cookie consent management. The site is hosted on Webflow’s CDN, ensuring fast performance and excellent mobile optimization. Accessibility and SEO practices are well implemented. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms. While explicit security headers are not visible in the HTML, they may be set at the server level. No vulnerabilities or exposed sensitive data were detected. However, the site lacks a publicly visible security policy or incident response contact information, which could enhance trust. Overall, the website is trustworthy, professional, and compliant with GDPR requirements. It effectively supports its mission to combat tuberculosis through education and collaboration. Strategic recommendations include adding explicit security headers, publishing a security policy, and considering incident response contact details to further strengthen security posture and user trust.

B

Bundesverband der Pneumologen, Schlaf- und Beatmungsmediziner e. V.

pneumologenverband.de

42

The Bundesverband der Pneumologen website serves as the official online presence of the German professional association for pulmonologists, sleep, and ventilation medicine specialists. It provides information relevant to healthcare professionals in the respiratory medicine field and acts as a hub for professional networking and representation. The website is positioned as a national-level association with a medium organizational size and a clear focus on the healthcare sector in Germany. Technically, the site employs privacy-conscious analytics (Matomo) and a consent management platform (Usercentrics), indicating a moderate level of digital maturity. However, the absence of explicit privacy policies and terms of service pages suggests room for improvement in compliance and transparency. Security posture is moderate, with no visible security headers or incident response information, but no critical vulnerabilities or blocking mechanisms detected. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security documentation to strengthen user trust and regulatory compliance.

D

Deutsche Gesellschaft für Pneumologie und Beatmungsmedizin e.V. (DGP)

pneumologie.de

51

The Deutsche Gesellschaft für Pneumologie und Beatmungsmedizin e.V. (DGP) operates pneumologie.de as a professional society website focused on respiratory medicine in Germany. It provides comprehensive resources including medical guidelines, research funding opportunities, educational programs, and membership services targeting healthcare professionals and patients. The site is well-branded, professionally designed, and offers clear navigation and relevant content in German. Technically, the site uses modern web technologies such as Bootstrap, Popper.js, Tippy.js, and Matomo analytics, hosted on a CMS platform named Snowboard. The website is mobile-optimized and implements GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS enforced and secure form validation, though it lacks explicit security headers and published security policies. WHOIS data indicates a consistent and legitimate domain registration aligned with the organization's identity. Overall, the site is trustworthy, professional, and compliant with privacy regulations.